Your iPhone Is Vulnerable to a Malware Attack Even When It’s Off

Researchers found a way to exploit the tech that enables Apple’s Find My feature, which could allow attackers to track location when a device is powered down...

US Courts Are Coming After Crypto Exchanges That Skirt Sanctions

A newly unsealed opinion is likely the first decision from a US federal court to find that cryptocurrencies can't be used to evade sanctions...

The NSA Swears It Has ‘No Backdoors’ in Next-Gen Encryption

Plus: New details of ICE’s dragnet surveillance in the US, Clearview AI agrees to limit sales of its faceprint database, and more...

How One Company Helps Keep Russia’s TV Propaganda Machine Online

Russia is using satellites controlled by French operator Eutelsat to broadcast state-run programming. A grassroots group is pushing for that to stop...

The Hidden Race to Protect the US Bioeconomy From Hacker Threats

A biotech threat intelligence group is gaining supporters as urgency mounts around an overlooked vulnerable sector...

The Case for War Crimes Charges Against Russia’s Sandworm Hackers

A group of human rights lawyers and investigators has called on the Hague to bring the first-ever “cyber war crimes” charges against Russia’s most dangerous hackers...

Android 13 Tries to Make Privacy and Security a No-Brainer

With its latest mobile OS update, Google aims to simplify the adoption of Android’s protective features for users and developers alike...

The EU Wants Big Tech to Scan Your Private Chats for Child Abuse

Europe’s proposed child protection laws could undermine end-to-end encryption for billions of people...

Thousands of Top Websites See What You Type—Before You Hit Submit

A surprising number of the top 100,000 websites effectively include keyloggers that covertly snag everything you type into a form...

AMD Gave Google Cloud Rare Access to Its Tech to Hunt Chip Flaws

By working together, the companies say they’re better able to find security flaws in Google Cloud’s Confidential Computing infrastructure...

What to Do If You Can’t Log In to Your Google Account

Locked out of your calendar or Gmail? Here’s how to get unstuck—and prevent it from happening in the first place...

Data Brokers Track Abortion Clinic Visits for Anyone to Buy

Plus: Russia rerouted internet in occupied Ukraine, Grindr sold its users' location data to ad networks, and more...

Apple Mail Now Blocks Email Tracking. Here’s What That Means

If you don’t like marketers or anyone else knowing when and where you read your email, Apple’s feature will help you reclaim some privacy...

Small Drones Are Giving Ukraine an Unprecedented Edge

From surveillance to search-and-rescue, consumer drones are having an unprecedented impact on Ukraine’s defense against Russia...

How to Protect Your Digital Privacy if Roe v. Wade Falls

Reproductive rights are still largely guaranteed in the United States. Here are some key privacy concepts to adopt in the event that they're not...

VPN Providers Threaten to Quit India Over New Data Law

The country has ordered companies operating VPNs to collect user data and hand it over to officials—but they’re refusing to do so...

Every ISP in the US Must Block These 3 Pirate Streaming Services

The 96 internet service providers were told to enforce the orders “by any technological means available.”...

India’s New Super App Has a Privacy Problem

Tata Neu is the country’s latest do-everything app. When users signed up, their personal information was already there...

Is Leaking a SCOTUS Opinion a Crime? The Law Is Far From Clear

The leak of a draft opinion overturning Roe v. Wade quickly sparked a court investigation. Which laws may have been violated, if any, remains uncertain...

How to Use Windows Security to Keep Your PC Protected

Your Microsoft computer comes with built-in safety software that shields you from the worst threats. Here's how to navigate your toolkit...

FBI Conducted 3.4 Million Warrantless Searches of Americans' Data

Plus: Trump backers breach election systems, Microsoft tracks Russia's war prep, a new Facebook leak reveals a mess, and Bored Ape Yacht Club gets hacked...

One of the Most Powerful DDoS Attacks Ever Hits a Crypto Platform

The onslaught was delivered through HTTPS, which puts more strain on a target, and it suggests that attackers are getting more powerful...

Ukraine’s Digital Battle With Russia Isn’t Going as Expected

Even the head of the country's online offensive is surprised by the successes—although they’re not without controversy...

You Need to Update iOS, Android, and Chrome Right Now

Plus: Microsoft patched some 100 flaws, while Oracle issued more than 500 security fixes...

Hollywood’s Fight Against VPNs Turns Ugly

Beyond accusations of rampant user copyright infringement, film companies have begun accusing VPNs of enabling a slew of more serious illegal activity...

North Koreans Are Jailbreaking Phones to Access Forbidden Media

A new report suggests that a small but vibrant group of smartphones hackers may be challenging the world's most digitally restrictive regime...

Russia Is Being Hacked at an Unprecedented Scale

From “IT Army” DDoS attacks to custom malware, the country has become a target like never before...

Elon Musk’s Twitter Buy Exposes a Privacy Minefield

The social network’s user data and more will soon be at the whims of the world’s richest man. Who’s worried?...

The US Saw a Spike in Child Sexual Abuse URLs in 2021

CSAM hosting in the United States rose 64 percent last year, putting the country second in the world, a new report found...

A $3 Billion Silk Road Seizure Will Erase Ross Ulbricht's Debt

In a twist, a massive trove of stolen bitcoins will repay the dark web market creator's $183 million restitution...

Hackers Are Getting Caught Exploiting New Bugs More Than Ever

A pair of reports from Mandiant and Google found a spike in zero-day vulnerabilities in 2021. The question is, why?...

Netflix Can Cut Off Moochers Without a Password-Sharing Crackdown

There's a simple way to limit Netflix freeloaders—give users the ability to easily boot unknown devices linked to their accounts...

It Was a Good Month for Fighting Cybercrime—Don’t Get Comfortable

Even as police and tech companies get better at shutting down illicit operations, cybercrime is worse than ever...

The Fake Federal Agents Case Baffling US Intelligence Experts

Guns. Luxury apartments. Duped Secret Service personnel. Did the FBI uncover a foreign plot, or something more ridiculous?...

How to Limit Who Can Contact You on Instagram

It’s your account—you decide who’s allowed to see your vacation photos or slide into your DMs...

North Korea's Lazarus Group Was Behind $540 Million Ronin Theft

Plus: Spyware maker NSO Group deemed “valueless,” T-Mobile fails to buy its stolen data, and malware spreads on Telegram...

Elon Musk Is Right About Twitter

It really is the closest thing we have to an online public square—and that's terrible for democracy. Let his takeover bid be a wakeup call...

WhatsApp Doubles Down With End-to-End Encrypted ‘Communities’

More than just group DMs, WhatsApp's new feature is a major expansion of its comprehensive encrypted messaging...

Feds Uncover a ‘Swiss Army Knife’ for Hacking Industrial Systems

The malware toolkit, known as Pipedream, is perhaps the most versatile tool ever made to target critical infrastructure like power grids and oil refineries...

Russia Is Leaking Data Like a Sieve

Ukraine claims to have doxed Russian troops and spies, while hacktivists are regularly leaking private information from Russian organizations...

Russia's Sandworm Hackers Attempted a Third Blackout in Ukraine

The attack was the first in five years to use Sandworm's Industroyer malware, which is designed to automatically trigger power disruptions...

DuckDuckGo’s Privacy Browser Finally Lands on Desktop

DuckDuckGo started out as a private search engine. Now its web browser is debuting on Macs to rival Chrome, Safari, Edge, and Brave...

The Tricky Aftermath of Source Code Leaks

Lapsus$ hackers leaked Microsoft’s Bing and Cortana source code. How bad is that, really?...

TSA’s Terrorist Watch List Comes for Amtrak Passengers

Plus: Microsoft seizes Russian GRU domains, Cash App’s data breach, and Obama’s disinfo admission...

How Russia's Invasion Triggered a US Crackdown on Its Hackers

The Biden White House is using “all of the levers of national power” to counter—or preempt—cyberattacks by Russia’s most dangerous hacker groups...

WatchGuard Didn't Explicitly Disclose a Flaw Exploited by Hackers

The security vendor kept a critical vulnerability in its firewall appliances quiet even as it was under attack from a Russian hacking group...

The Senate Bill That Has Big Tech Scared

The proposal would stop the biggest platforms from giving themselves an advantage over the little guys. Who's afraid of a little competition?...

The Bitcoin Bust That Took Down the Web’s Biggest Child Abuse Site

They thought their payments were untraceable. They couldn’t have been more wrong. The untold story of the case that shredded the myth of Bitcoin’s anonymity...

Europe Is Building a Huge International Facial Recognition System

Lawmakers advance proposals to let police forces across the EU link their photo databases—which include millions of pictures of people’s faces...

Meta Tries to Break the End-to-End Encryption Deadlock

A new report commissioned by Meta aims to redefine comprehensive encryption as essential to protecting human rights...