The elusive hacking group Careto was never publicly linked to a specific government, but TechCrunch has learned researchers concluded privately that the Spanish government was behind the group.

Sen. Ron Wyden said in a letter that one U.S. phone carrier turned over Senate data to law enforcement without notifying the target.

The Department of Justice announced Eric Council Jr. was sentenced to 14 months in prison for the hack.

The landmark trial between WhatsApp and NSO Group unearthed several new revelations. We recap some of them here.

U.S. authorities indicted three Russians and one Kazakhstan national for hacking and selling access to a botnet made of vulnerable internet-connected devices.

The cybersecurity company said it will lay off 5% of its global workforce.

The five-year legal battle between the Meta-owned company and the most notorious spyware maker in the world ends with a huge win for WhatsApp.

Hackers claiming to be part of the hacktivist group Anonymous claimed the data breach.

Riot’s “anti-cheat artisan” Phillip Koskinas explains how he and his team go after cheaters and cheat developers to protect the integrity of games, such as Valorant and League of Legends.

Two alleged victims came forward claiming they received a spyware notification from Apple.

Governments like China and North Korea, along with spyware makers, used the most recorded zero-days in 2024.

The researchers said the attackers behind the campaign had "deep understanding of the target community."

This is the first time representatives for the spyware maker have publicly named its government customers.

The update comes months after Apple pushed its own “inactivity reboot” feature.

The infamous website was taken down and working intermittently, while hackers leaked alleged data like moderators email addresses, and source code.

The list of 1,223 victims in 51 countries hints at the “true scale of the spyware problem,” per one researcher.

The advisories say the spyware apps are used to target members of civil society who may oppose China’s state interests.

The most severe security bug can be exploited without user interaction, per Google.

An obscure wannabe hacker's tantalizing (and clearly sketchy) job offer has some security researchers asking, why?

Oracle has denied at least one breach, despite evidence to the contrary, as it begins notifying healthcare customers of a separate patient data breach.