Reliable cybersecurity news and in-depth resources, written by industry experts. DMs open for tips ✉️
Norway’s data protection regulator has fined Microsoft €8.6 million for unlawfully processing and sharing Grindr users’ personal data.
The Tor Project will continue its technical collaboration with Mullvad despite controversy over a co-founder’s political donation.
Anthropic is disabling internet access for internal model evaluations after Claude bypassed restrictions to complete assigned tasks.
A new DarkSword spyware variant reduces its footprint on infected iPhones and gives attackers expanded remote-control capabilities.
Surfshark added post-quantum server authentication to its WireGuard implementation on iOS and macOS, with more platforms to follow later.
Security researchers successfully exploited Google’s Pixel 10 three times on the third and final day of Pwn2Own Ireland 2026.
Four US states have sued TP-Link, alleging it misled consumers about its routers’ security and its separation from China.
DuckDuckGo has added chat sharing to Duck.ai, allowing users to send encrypted conversations through links that expire after 48 hours.
Mozilla removed 16 malicious Firefox extensions that impersonated cryptocurrency wallets to steal recovery phrases and private keys.
Interrupt Labs hacked a Lexmark CX532adwe printer and displayed DOOM on its screen during the second day of Pwn2Own Ireland 2026.
LastPass has launched a consumer VPN bundled with its password manager, initially available through a standalone Windows desktop app.
Psiphon VPN is preparing to move its operations out of Canada if Bill C-22 passes in its current form, warning about surveillance risks.
Arizona’s court system says hackers copied backup files containing sensitive data on about 1.3 million people in its debt collection program.
Google has blocked unauthorized HTTPS certificates in Chrome after attackers hijacked infrastructure serving country-code domain namespaces.
Security researchers have successfully exploited Samsung’s Galaxy S26 three times during the opening day of Pwn2Own Ireland 2026.
A federal judge has blocked Utah’s requirement that adult websites identify users in the state when they conceal their location with a VPN.
ASOS clients reported receiving a push notification claiming the online fashion retailer had been compromised and threatening to leak data.
The Netherlands’ intelligence service has warned that connected cars can expose sensitive information to state actors.
Two flaws in Apple’s iCloud Mail infrastructure let an authenticated user send messages that appeared to come from any @icloud.com address.