Researchers at Socket say a network of 319 chrome extensions has been quietly redirecting people’s web searches. According to a report from Cyber Security News on Socket’s investigation, published October 29, the extensions are linked to search hijacking affecting roughly 13.4 million users over a decade. One caution applies. The headline figure combines findings across years,…
A critical flaw nicknamed Node2Shell is now under active attack. The US Cybersecurity and Infrastructure Security Agency (CISA) added it to its Known Exploited Vulnerabilities catalog on October 27, according to Help Net Security. The flaw is tracked as CVE-2026-111497, and it is in Google’s widely used Brotli compression library. If you run Node.js servers, update…
Most of us have tapped “remind me later” on an update alert. The US Cybersecurity and Infrastructure Security Agency (CISA) says that is worth a second thought. Many software updates are created to fix security risks, and keeping software up to date is an easy way to stay safer online. This guide explains why software…
Data breaches are now a routine part of online life. Companies you have never thought about may hold your email address, your password or more, and any of them can be hacked. You cannot undo a breach, but you can limit the damage. This guide shows how to check if your data was breached, and…
Mobile data costs money, and a plan can disappear faster than you expect. Apps refresh in the background, videos stream in high quality, and cloud services sync without asking. The good news is that both Apple and Google built tools to help. Here is how to save mobile data on iPhone and Android in eight…
iFixit has published its teardown of the iPhone Duo, Apple’s first foldable, and it may have found a clue to the screen cracks some owners are reporting. In its teardown, the repair specialists give the phone a provisional 5 out of 10 for repairability, the highest score they have given a foldable. The key word is…
Ramp, the expense management company, announced on October 15 that it had raised $1.85 billion in a funding round that values it at $60 billion. TechCrunch reports that this comes just four months after Ramp raised $750 million at a $44 billion valuation. The round is still one of the biggest startup stories of the month. It…
Apple has announced the first iPad mini with an OLED display, and calls it the tablet’s biggest update ever. MacRumors reports that pre-orders open on Wednesday, October 28, at 10:10 a.m. Pacific Time, and the first units arrive on Friday, November 6. In the US, it starts at $699. It is the first of a series of…
Passwords are hard to remember, easy to reuse and easy to steal. Passkeys offer a safer alternative. At CYBERUK 2026, the UK’s National Cyber Security Centre (NCSC) announced that it will begin recommending passkeys wherever a service supports them, and two-step verification where it does not. This guide explains what passkeys are and how to use them,…
Companies from Microsoft to Barclays have announced layoffs this year that they link to AI, according to a Reuters factbox. In its latest update on October 22, Reuters lists AI-linked layoffs announced since October 2025, with job losses emerging in the sectors most exposed to automation.Reuters does not print a total. Adding the 31 entries that…
Phishing is when criminals try to get you to open harmful links, emails or attachments that ask for your personal information or infect your device. The US Cybersecurity and Infrastructure Security Agency (CISA) explains in its phishing guide that these messages can arrive by email, text, social media message or phone call. They are usually designed…
PHP released emergency security updates on Wednesday, October 21, fixing two critical flaws that can let an attacker run code on a web server without logging in. Wiz Research, which helped find them, says every PHP version released in the past decade is affected by at least one flaw, going back to PHP 5.4. Researchers have…
Researchers at the University of Toronto’s Citizen Lab say they have found the first public technical proof of zero-click spyware delivered through online ads. In a report published October 15, they say devices at Al Jazeera were infected with spyware from Candiru, an Israeli vendor, after targeted ads loaded. Al Jazeera condemned the attack as an…