New details connect police in India to a plot to plant evidence on victims' computers that led to their arrest.

Disappointed with the lack of US response to the Hermit Kingdom's attacks against US security researchers, one hacker took matters into his own hands.

Crippled ports. Paralyzed corporations. Frozen government agencies. How a single piece of code crashed the world.

In 2011, Chinese spies stole the crown jewels of cybersecurity—stripping protections from firms and government agencies worldwide. Here’s how it happened.

The Department of Justice has named and charged six men for allegedly carrying out many of the most costly cyberattacks in history.

The so-called BlueLeaks collection includes internal memos, financial records, and more from over 200 state, local, and federal agencies.

The transparency group DDoSecrets says it will make the 70 GB of passwords, private posts, and more available to researchers, journalists, and social scientists.

Blackouts in Ukraine were just a trial run. Russian hackers are learning to sabotage infrastructure—and the US could be next.

When two men were hired to break into an Iowa judicial buildings, they thought it was just another physical security audit—until they were charged with burglary.

Cody Wilson makes digital files that let anyone 3-D print untraceable guns. The government tried to stop him. He sued—and won.

Welcome to Video’s customers thought their payments were untraceable. They couldn’t have been more wrong. The untold story of the case that shredded the myth of Bitcoin’s anonymity.

The malware toolkit, known as Pipedream, is perhaps the most versatile tool ever made to target critical infrastructure like power grids and oil refineries.

Sandworm: A New Era of Cyberwar and the Hunt for the Kremlin's Most Dangerous Hackers

Secret codes. Legal threats. Betrayal. How one couple built a device to fix McDonald’s notoriously broken soft-serve machines—and how the fast-food giant froze them out.

Animal rights activists have captured the first hidden-camera video from inside a carbon dioxide “stunning chamber” in a US meatpacking plant.

A single group appears to have infiltrated tens of thousands of Microsoft Exchange servers in an ongoing onslaught.

Sandworm: A New Era of Cyberwar and the Hunt for the Kremlin's Most Dangerous Hackers

A previously unreported Fancy Bear campaign persisted for well over a year—and indicates that the notorious group has broadened its focus.

The attacker upped sodium hydroxide levels in the Oldsmar, Florida, water supply to extremely dangerous levels.

At the Defcon hacking conference next year, the Air Force will bring a satellite for fun and glory.

By sending laser-powered “light commands” to a smart assistant, researchers could force it to unlock cars, open garage doors, and more.

How a program called Mimikatz became one of the world's most widespread and powerful password stealers.

IBM’s X-Force security team obtained five hours of APT35 hacking operations, showing exactly how the group steals data from email accounts—and who it’s targeting.

A vulnerability in hotel keycard locks was a security disaster—and the opportunity of a lifetime for one burglar.

The uncanny coincidences among the Meltdown and Spectre discoveries raise questions about "bug collisions"—and the safety of the NSA's hidden vulnerability collection.

Weak encryption in Tesla Model S key fobs allowed all-too-easy theft, but you can set a PIN code on your Tesla to protect it.

The thwarted XZ Utils supply chain attack was years in the making. Now, clues suggest nation-state hackers were behind the persona that inserted the malicious code.

The social network’s new privacy feature is technically flawed, opt-in, and limited in its functionality. All this for just $8 a month.

The encryption app is putting a $50 million infusion from WhatsApp cofounder Brian Acton to good use, building out features to help it go mainstream.

The “free speech” social network also allowed unlimited access to every public post, image, and video.

Eavesdropping, reprogramming, talking to strangers: Welcome to the harmless and not-so-harmless fun of hacking elevator call boxes.

Two months ago, the FBI “disrupted” the BlackCat ransomware group. They're already back—and their latest attack is causing delays at pharmacies across the US.

A Sandworm-adjacent group has successfully breached US critical infrastructure a handful of times, according to new findings from the security firm Dragos.

Hidden code in hundreds of models of Gigabyte motherboards invisibly and insecurely downloads programs—a feature ripe for abuse, researchers say.

The larger lesson of an ongoing Ethereum crime spree: Be careful about who's generating your cryptocurrency keys.

The TajMahal spyware includes more than 80 distinct spy tools, and went undetected for five years.

From USB worms to satellite-based hacking, Russia’s FSB hackers, known as Turla, have spent 25 years distinguishing themselves as “adversary number one.”

Dutch police detail for the first time how they secretly hijacked Hansa, Europe's most popular dark web market.

PunkSpider is back, and crawling hundreds of millions of sites for vulnerabilities.

Binance’s settlement requires it to offer years of transaction data to US regulators and cops, exposing the company—and its customers—to a “24/7, 365-days-a-year financial colonoscopy.”

The hackers used the agency’s EpMe exploit to attack Windows devices years before the Shadow Brokers leaked the agency’s zero-day arsenal online.

Signal’s president reveals the cost of running the privacy-preserving platform—not just to drum up donations, but to call out the for-profit surveillance business models it competes against.

The alleged administrator of Bitcoin Fog kept the dark web service running for 10 years before the IRS caught up with him.

The so-called Thunderspy attack takes less than five minutes to pull off with physical access to a device, and it affects any PC manufactured before 2019.

We tested the end-to-end encrypted messenger’s new feature aimed at addressing critics’ most persistent complaint. Here’s how it works.

A study finds that Android phones aren't just slow to get patched; sometimes they lie about being patched when they're not.

Magazine staff have laid the groundwork to unionize for more than a year, but as the coronavirus shut down parts of the economy, organizers realized they had to make a decision.

The sabotage of more than 20 trains in Poland by apparent supporters of Russia was carried out with a simple “radio-stop” command anyone could broadcast with $30 in equipment.

Alex Stamos' Stanford-based project will try to persuade tech firms to offer academics access to massive troves of user data.

The backdooring of security software CCleaner now appears to have been more of a targeted spying operation than a mere cybercrime scheme.

German researchers say that a flaw in the app's group-chat feature undermines its end-to-end encryption promises.

South Korea is a prime suspect for exploiting the secret software vulnerabilities in a sophisticated espionage campaign.

A secret experiment in 2007 proved that hackers could devastate power grid equipment beyond repair—with a file no bigger than a GIF.

A couple allegedly used a “laundry list” of technical measures to cover their tracks. They didn’t work.

Tracers in the Dark: The Global Hunt for the Crime Lords of Cryptocurrency

The sweeping campaign took advantage of the collaborative spirit among researchers, with an unknown number of victims.

The Surveillance Detection Scout can track license plates and faces near your Tesla—with all the privacy concerns that implies.

As “P4x,” Alejandro Caceres single-handedly disrupted the internet of an entire country. Then he tried to show the US military how it can—and should—adopt his methods.

Evgenii Serebriakov now runs the most aggressive hacking team of Russia’s GRU military spy agency. To Western intelligence, he’s a familiar face.

The untold story of how digital detectives unraveled the mystery of Olympic Destroyer—and why the next big cyberattack will be even harder to crack.

The same researchers who figured out how to clone a Tesla Model S key fob have done it again, cracking the replacement that was meant to fix the problem.

“Phone spear phishing” attacks have been on the rise since a bitcoin scam took over the social media platform in July.

The untold story of how digital detectives unraveled the mystery of Olympic Destroyer—and why the next big cyberattack will be even harder to crack.

A data wiper posing as ransomware bears a discomfiting resemblance to the earlier wave of Russian cyberattacks that ended with NotPetya.

The lax security of supply chain firmware has been a known concern for years—with precious little progress being made.

Crippled ports. Paralyzed corporations. Frozen government agencies. How a single piece of code crashed the world.

In 2008, Boston’s transit authority sued to stop MIT hackers from presenting at the Defcon hacker conference on how to get free subway rides. Today, four teens picked up where they left off.