Cybersecurity news

Plain summaries of cybersecurity news, newest first. Each one is added here when it is ready.

Latest

Cybersecurity news, Thursday, November 12, 2026 Added Thursday, November 12, 2026.

Zoom fixes two flaws in its Windows app, one rated critical, The Hacker News and SecurityWeek report

Notion says some customers' AI chat data was exposed in a breach at Fireworks AI, SecurityWeek reports Cybersecurity news, Wednesday, November 11, 2026 Added Wednesday, November 11, 2026.

Microsoft's November updates fix an Outlook flaw already used in attacks, The Hacker News and SecurityWeek report

Scammers use details on social media to target veterans, the Federal Trade Commission reports Cybersecurity news, Tuesday, November 10, 2026 Added Tuesday, November 10, 2026.

Google reportedly updates Chrome to fix an exploited flaw, The Hacker News and SecurityWeek report

Apple reportedly fixes iMessage group chat and Bluetooth pairing flaws, The Hacker News reports

Revolve reports a data breach affecting about 1.5 million people, SecurityWeek reports Cybersecurity news, Monday, November 9, 2026 Added Monday, November 9, 2026.

Attackers reportedly use Plex2Shell flaws against Plex media servers, SecurityWeek and Cyber Security News report

Researchers reportedly used a default password to unlock and start test cars, The Hacker News and Cyber Security News report

Amplifon Americas reports a data breach affecting more than 1.3 million people, SecurityWeek reports Cybersecurity news, Sunday, November 8, 2026 Added Sunday, November 8, 2026.

Criminals reportedly use an AI testing tool to steal gaming logins, Cyber Security News reports

Researchers report residential proxy services used White House network addresses, SecurityWeek reports Cybersecurity news, Saturday, November 7, 2026 Added Saturday, November 7, 2026.

A Windows Paint flaw has a fix that comes through the Microsoft Store, not Windows Update, The Hacker News reports

Mirax Android malware reportedly spread through streaming-app ads, Cyber Security News reports

Fake game downloads and cracked software installers turn Windows PCs into money-makers, Cyber Security News reports Cybersecurity news, Friday, October 30, 2026 Added Friday, October 30, 2026.

Work details of more than 40,000 DHS staff were taken and posted online, reports say

Hackers stole about $6.3 billion in cryptocurrency from Binance, reports say Cybersecurity news, Wednesday, October 28, 2026 Added Wednesday, October 28, 2026.

Microsoft says it updated Windows to stop trusting certificates tied to compromised eMudhra keys

Contact details of some Coinbase customers exposed, one report says

DreamHost resets some passwords, one report says News roundup, week ending Tuesday, October 27, 2026 Added Tuesday, October 27, 2026.

Apple released iPhone and iPad updates on October 26, 2026, three reports say

An Australian government agency cut a criminal's access to 180,000 infected computers, one report says Cybersecurity news Added Thursday, October 22, 2026.

PHP has updates that fix two flaws

Looking for news about scams? It is on our Scam news page.

If a scam has already happened

To report a scam, go to ReportFraud.ftc.gov. To report identity theft (someone using your personal information), go to IdentityTheft.gov. The Federal Trade Commission, a US government agency, names both in its own advice. Type the address into your browser yourself.

First steps if you already paid or gave details

If you let someone connect to your computer or phone: if they may still be connected, switch it off or disconnect it from the internet until you can deal with it. Get help only from a person or a company you chose yourself and knew before this happened. Do not take help from anyone who phoned you, wrote to you or popped up on your screen to offer it. Change your passwords and turn on two-step login, using a different device. If you have no other device, ask the person you chose before you sign in to anything. On the one they connected to, update the security software it already has, run a scan and delete anything it finds. Do not sign in or bank on it until the person you chose has checked it.

If you paid by card or from your bank account, or gave a card or bank detail: contact your bank or card company straight away. Use the number on the back of your card or on a statement, or their own app or website. Type the website address yourself. Never use a number that a caller or a message gave you. Ask them to refund your money.

If you gave a password or a login code: make a new, strong password for that account, and change it anywhere else you used the same one. Sign out of all other devices, if the account offers it. Turn on two-step login. Check that the recovery email and phone number on the account are your own. If you can no longer get in, use the company's own recovery steps, in its own app or at a website address you type yourself. Never call a support number you find in a search.

Two things never to do: move or transfer your money to "protect it", or pay anyone up front to get your money back.

These steps are based on the Federal Trade Commission's advice. Some parts are our own advice, such as typing a website address yourself and never calling a support number you find in a search.

The newsletter. Free.

Our newsletter is free and comes by email most weeks. Each issue has plain news about the scams going around and one step you can take that day.

How to get it