How your data stays yours
Encryption, passwords, passkeys and the attacks they defend against. Security concepts made concrete.
Short visual breakdowns of how cybersecurity works. Open one to watch it right here.
The newest Cybersecurity stories from the daily feed, explained in plain language.
ipinfo.io
Networks tell each other where to send traffic using the Border Gateway Protocol, a system built on trust, so one wrong announcement can hijack a site, as when Pakistan briefly redirected YouTube in 2008. RPKI fixes that by having address owners publish signed records naming which networks may announce their addresses. The share of protected routes rose from 54 to 70 percent in a year.
Ars Technica
Zero-click attacks infect a phone without the owner tapping anything. Citizen Lab found that mercenary hackers bought targeted ads carrying code that reached control servers, which then delivered spyware to selected devices, including 45 phones at the Al Jazeera media network in 2024 and 2025. Google and ad platforms have since removed the vendor involved.
The Verge
Google Messages checks texts on-device for scam signs; a new opt-in mode sends chats with unknown senders to cloud Gemini models that look for slow manipulation, with data encrypted and handled in a space Google says it cannot see. Gemini Nano also vets links before you open them, and Google is adding call-forwarding blocks and screen-sharing privacy, plus scam alerts on more Android brands.
BleepingComputer
Cisco fixed a zero-day, CVE-2026-76519, in its Secure Email Gateway, an appliance organizations use to scan mail. A crafted email attachment triggers a path traversal bug in its attachment scanning, letting an unauthenticated attacker write files and run commands as root. Cisco says it saw exploitation this month and advises rotating credentials and limiting access.
The Verge
A hidden listening device is a small recorder that stores encrypted audio. Prosecutors say one was found plugged into a conference room TV's USB port at OpenAI, wrapped in toilet paper, and OpenAI says its models helped trace it to an employee who was fired and arrested. OpenAI says no model weights or customer data appear to have been taken.
BleepingComputer
A zero-day is a flaw attackers find before the maker can fix it. Attackers are chaining three such flaws in Ivanti's Connect Secure, a gateway that lets remote workers into corporate networks, reaching full control of fully patched appliances while leaving no malware behind, just tampered logs. Ivanti has patched two of the flaws, and customers are urged to update now.
Tom's Hardware
Attackers hijacked Danfoss refrigeration controllers at supermarkets in France and elsewhere in Europe, forcing fridges into continuous defrosting at 50 degrees Celsius. That overheated units and spoiled food, with early losses close to 300,000 euros. In the Netherlands, separate incidents took down store websites and disrupted deliveries.
The Verge
Flock's cameras scan license plates as cars pass and share the data with police. Elgin Community College in Illinois asked Flock to remove its six cameras after learning that data was shared with Customs and Border Protection and that access was abused, but Flock refused. Staff covered the lenses with black bags, but workers in an unmarked vehicle removed the covers until the contract expired.
