Ahold Delhaize confirms hack and takes online grocery shopping offline across chains
Malicious activity took down systems at brands such as Food Lion, Stop & Shop and Albert Heijn. Physical stores stayed open, and no data theft is evident for now.
News
What happened in cybersecurity, explained in plain language.
BlackX: bootkit bypasses Windows Secure Boot even on updated PCs
A new firmware-level malware exploits an old flaw that the update alone does not close. Why the manual revocation matters.
Google policy change: Gmail and Photos data may personalize ads
If you connect Gmail or Google Photos to Google's AI, that content can help pick the ads you see. Here is what changed and how to switch it off.
Heartbreaker ransomware recompiles itself to dodge antivirus on Mac
A sample analyzed by a researcher encrypts the Downloads folder and changes its own signature. The risk is low for now, and files can be recovered.
Hacker exploits firewalls and VPNs, gathering over 70,000 credentials; Latin America is 32% of victims
Researchers link the actor k0t to ransomware groups. Nearly a third of victims are in Latin America, and the way in is exposed devices.
Meta fined $25 billion over Cambridge Analytica case; company will appeal
A New Mexico judge ordered Meta to pay $25 billion for misleading users about their data. The company says it will appeal.
Two critical PHP flaws threaten millions of sites, including WordPress; update now
The flaws let attackers run code on servers running PHP and are already being exploited. Who is at risk and which versions carry the fix.
Abandoned Popcorn Time put millions of PCs at risk; researchers switched it off
A forgotten Popcorn Time updater would accept code from anyone. A security firm disabled it on millions of computers. Here is what to do.
Ransomware crew used AI to hit 62 companies, then left its tools exposed online
Researchers found the control panel of a group using AI agents in attacks. The most common way in was the usual one: reused passwords.
FBI probes ransom negotiator tied to ShinyHunters extortion site
Arrests in the Netherlands and the US raise suspicions about firms that negotiate ransomware payments. Much of it is still allegation, not conviction.
Signal flaw could keep your microphone on after you hung up a call
A serious bug in Signal's calling library let an attacker stop a call from ending. The fix is out; here is how to update.
A tenth of Tor's exit capacity was hijacked to steal SSH passwords
A researcher showed that 333 exit relays redirected SSH connections to criminal servers. The Tor Project removed the relays within three days.
Microsoft fixes a record number of Windows flaws, one already used by criminals
Microsoft's October update fixes more than 1,400 flaws, including one already exploited in attacks. Here is how to check that your PC is protected.