Hackers have been exploiting a remote code execution vulnerability in the Everest Forms Pro plugin to take over WordPress ...

Gong and other scholars have been issuing warnings about the security vulnerabilities of AI agents for a while. They publish papers and blog posts detailing exploits such as indir ...

You can minimize the degree to which your browser spies on you, but potential hackers can use your own SSD against you and ...

Over the decades, there has been no shortage of sites using clever techniques to covertly track visitors’ browsing histories, device fingerprints, and keystrokes and mouse movements in real time. Even ...

Spyware attacks on journalists, human rights defenders, and political dissidents are no longer rare or exotic. In early 2025, WhatsApp notified roughly 90 users — many of them journalists and civil ...

Three popular plugins served malicious JavaScript through a compromised CDN.

Hackers may be mass-reporting Instagram accounts and charging users thousands to restore them. Dozens of people have claimed ...

Security researchers from GoDaddy found a cheeky new malware campaign that used comments made by Steam Community accounts as command-and-control (C2) infrastructure. Here is how the attack plays out: ...

Mr. Cottle, who appeared in court in Newmarket, Ont., on Thursday, pleaded guilty to fraudulently obtaining a computer ...

A popular WordPress plugin is once again being leveraged in website takeover attacks.

Jake Peterson is Lifehacker’s Tech Editor, and has been covering tech news and how-tos for nearly a decade. His team covers all things technology, including AI, smartphones, computers, game consoles, ...