Latest Security News
SEE SECURITY STORIES BY CATEGORY
News
Framework Laptop hacked, customer names and emails stolen
The maker of upgradeable, modular laptops has fallen prey to a social engineering attack.
News
Change your LastPass password before you get locked out
LastPass’s new 12-character account password requirement is now going into effect. If you don’t meet it, you’ll get shut out.
News
Comcast Xfinity hack steals personal data of 36 million customers
While corporate data breaches have almost become commonplace, Comcast is in hot water for letting a critical security flaw go unpatched for weeks.
News
Avira is fixing a bug that locks up Windows PCs
Avira, known for its free antivirus programs, is rolling out a fix for a major bug that locked up PCs entirely.
News
FTC sounds alarm over dangerous QR codes used by scammers
The ubiquitous URL shortcuts are the latest tool for stealing personal info.
Feature
How to protect yourself from email tracking
Email is the world's most common digital means of communication, but the almost ancient technology does not make it easy for those who care about their privacy.
News
Update Chrome right now or your computer will explode (again)
For the sixth time this year, Chrome needs an emergency update to keep users safe.
Feature
How much antivirus protection is right for you? Here’s how to tell
You don't have to pay for antivirus software to be adequately protected online, but that largely depends on your habits and how much energy you have to devote to PC security.
Deal
Get the Surfshark VPN deal that won me over for less than $2 per month
Surfshark VPN is offering two great deals for Cyber Monday, allowing you to install VPNs on all of your PCs and phones for 80 percent off for a two-year subscription.
Deal
One of the best VPNs is 83% off for Cyber Monday
Private Internet Access is one of our favorite VPNs and it's currently on sale for next to nothing with this Cyber Monday super deal.
Deal
Our favorite antivirus, Norton 360 Deluxe, is just $20 for Black Friday
Among the best Black Friday deals is a sizable discount on our top pick for antivirus software—and other top-notch security suites, too.
News
40 countries pledge not to pay ransomware
An alliance of the US, EU, and dozens of partner countries hope to cripple the growing market for cryptocurrency ransomware payments.
News
The FCC fears an AI-powered spam call apocalypse
The Federal Communications Commission will evaluate whether it has the authority and the tools necessary to crack down on AI-infused spam
News
Microsoft, Amazon, and India join forces to take down tech support scammers
Raids at dozens of locations shut down call centers masquerading as tech support.
News
Windows 11's original version reaches end of life
The original version of Windows 11 will no longer receive updates, including critical security patches. Here's what you need to know.
Deal
Norton 360, our favorite antivirus, is a ludicrous 75% off for Prime Day
Get a year of Norton 360 Premium's top-rated protection for a fraction of the usual price during Amazon Prime Big Deal Days.
Updated
Update now! Firefox plugs critical vulnerability that's already being attacked
Mozilla has provided an update to Firefox version 118.0.1 to close a vulnerability that is already being used to attack Chrome users. An update is also available for Firefox ESR 115.3.
News
Update now! Chrome, other software hit by 0-day exploit – and it's being attacked
A new media encoder exploit could affect everything from Chrome to Skype to Nvidia drivers.
News
Risk level 10: Critical security hole affects widespread software
A security vulnerability originally classified as a Chrome bug is much more serious than thought. Numerous applications are probably affected, many of which have not yet received a security update.
News
Patch Tuesday: Microsoft fixes critical Windows bugs, Word exploit
On Patch Tuesday in September, Microsoft eliminated a total of 59 security vulnerabilities. Among them are five vulnerabilities that Microsoft classifies as critical.
News
Adobe PDFs under attack: Update Acrobat and Reader now
Adobe provides security updates for three product groups in September that eliminate a total of five vulnerabilities, some of which are critical. Attackers are already exploiting a vulnerability in the PDF tools.
News
Chrome turns on real-time phishing protection (and monitoring)
Chrome's upgraded Safe Browsing feature has nearly instant alerts for dangerous sites, But Google is downplaying the privacy issues.
Feature
Why you should avoid free VPN services
Free VPN services are tempting, but often turn out to be an airline act. Seven good reasons why you should keep your hands off free VPNs.
News
FBI erases infamous Qakbot botnet using its own servers
The FBI's 'Operation Duck Hunt' took over the Qakbot botnet and used it to deliver a tool that uninstalled it from hundreds of thousands of PCs.
News
If you ever used Duolingo, watch out for phishing emails
Not only was personal information for 2.6 million accounts scraped from Duolingo’s servers, but the API that allowed it is still publicly accessible.
News
Chrome will warn you about malware-infested extensions
The newest security checks in the popular browser will scan for extensions that have been abandoned or flagged.
Updated
Intel 'Downfall': Severe flaw in billions of CPUs leaks passwords and much more
There is a serious security flaw in billions of Intel CPUs that can let attackers steal confidential data like passwords and encryption keys. Firmware updates can fix it, but at a potential significant performance loss.
Feature
I finally ditched LastPass—and switching was a nightmare
Sick of LastPass' frequent security breaches and product changes? The act of taking your LastPass-stored passwords elsewhere is a mega-headache.
News
Norton’s free AI-powered Genie tool helps you spot online scams
Not sure if the message, email, link or social media post you’ve received is a scam? The AI-powered Norton Genie is designed to help.
News
Researchers steal passwords using only keyboard sounds
A new system trains itself on the sound of individual keystrokes, and can record your typing even over Zoom.
News
Phishing scams love mimicking Microsoft
Check Point has published a recent list of the brands that are exploited for phishing.
Deal
Get 15 months of Norton 360 Deluxe, the best antivirus, for just $30
Norton 360 Deluxe is the best AV we've tested, and you can get it for dirt cheap with this special offer from the PCWorld Software Store.
News
Public companies now have a deadline to report cyberattacks
New SEC rules require companies to be much faster in sharing when hacks are discovered—and clearer about cybersecurity practices overall.
News
133 Windows drivers with valid Microsoft signatures found crawling with malware
Malware is found in over 100 drivers for Windows, despite valid signatures. Microsoft reacts and suspends the licences of many developers.
News
US Navy researchers expose Microsoft Teams security flaws
"TeamsPhisher" can be used to slip messages and attachments past basic Teams security.
News
Hackers compete to take over a satellite… in space
The competition has previously focussed on satellites that were still down on Earth.
News
LastPass 2FA reset prompts are locking users out of accounts
Some customers can't access passwords after resyncing their two-factor authentication apps. If you're one of them, here's how to get it fixed.
News
U.S. Army warns against unsolicited smartwatches sent to service members
Watches sent out may be filled with malware, but more likely are just a brushing scam.
News
Update your Asus Wi-Fi router right now
Asus says its high-end ROG, RT, TUF, and ZenWiFi routers have critical security vulnerabilities.
News
Outlook, OneDrive outages caused by DDoS attack, Microsoft says
Microsoft says 'Anonymous Sudan' launched massive DDoS attacks on Outlook, OneDrive, and other Microsoft 365 services, bringing them to their knees.
News
Windows 10 pirate downloads hide money-stealing malware
Hackers are exploiting the huge popularity of Windows 10 to spread malware.
News
Chrome adds Windows biometric logins to its password powers
Google wants you to store your passwords inside its browser, and its added powerful security features to lure you in: biometric logins within Windows, password notes, and import features.
News
Dozens of popular Minecraft mods are infected with malware
CurseForge and Bukkit accounts were compromised, loading up mods with millions of downloads with spyware.
News
Blackmailers are using AI to generate nudes from social media photos
The FBI warns of new extortion methods enabled by deepfake software, used against both adults and children.
News
Update Chrome now—yet another nasty exploit is out in the wild
Another zero-day flaw has been discovered in Chrome, and like the other two discovered earlier this year, it’s apparently a doozy.
Updated
An exploit can reveal your KeePass master password in plaintext
This vulnerability in KeePass edition 2.x allows retrieval of the password safeguarding the database—and administrator rights on the PC aren’t needed. But a fix is on the way.
Updated
Tons of Gigabyte motherboards come with a hidden firmware backdoor (Update: Patched)
Gigabyte's motherboard backdoor installs software updates from unsecured web servers.
Feature
The problem with built-in password managers
Built-in password managers from Apple, Google, and Microsoft: Worth using?
Feature
What is encryption? The backbone of computer security, explained
Encryption keeps your private data secure from prying eyes. Here's a basic explainer on how it works.
Updated