This new Mac malware won’t let you use your computer until you surrender your password

ClickLock is a new macOS malware that repeatedly kills system processes and tricks victims into entering their login password to steal sensitive data.

UK cops say arrest of two young hackers disrupted the operations of an infamous hacking group

Owen Flowers and Thalha Jubair, two members of the prolific Scattered Spider hacking group, pleaded guilty and were sentenced to five years and six months in jail for hacking London’s metropolitan transit system.

Period tracker Stardust shares users’ health data with analytics firm, says Mozilla research

One period tracker app tested by Mozilla was ‘squeaky clean,’ while another app was seen sharing users’ health data with an analytics company, underscoring vast differences in user privacy among these apps.

LastPass Says ‘Do Not Enter Your Credentials’ As New Attack Confirmed

LastPass users are being warned not to respond to a security alert email that looks like it comes from the password manager but is part of a credentials-stealing attack.

Microsoft patches bug in video game Age of Empires II

The vulnerability in the decades-old game could have allowed hackers to take over victims’ computers with a malicious game invite.

Microsoft patches record number of security vulnerabilities, citing its use of AI

Microsoft’s monthly release of security fixes, dubbed Patch Tuesday, resolved a record 570 security vulnerabilities across the company’s product line, thanks to discoveries with AI.

US charges Russian ‘bulletproof’ web hosts over cyberattacks that netted $62M from cybercrime victims

The 2024 indictment, now unsealed, accuses three Russians and two web hosts of aiding hackers and profiting from cybercrime.

Google Confirms Yet More Chrome 150 Memory Security Updates

Another week, another slew of Google Chrome memory vulnerabilities. But what’s the difference between use-after-free, heap buffer overflow and uninitialized use flaws?

Russian hackers keep finding their way into critical networks through neglected routers

Russian state-backed hackers are exploiting neglected routers to access critical infrastructure networks, prompting agencies worldwide to urge organizations to replace outdated equipment and tighten basic network security.