This week on Cyber for Humans:

• The 6-Second Infection: How the stealthy "Miasma" malware hijacked developer accounts to compromise core software building blocks and steal cloud infrastructure keys.

• The Hospitality Bait: Inside a sophisticated phishing campaign targeting hotels that uses Google and Calendly to bypass spam filters and drop a blockchain-powered implant.

• The Ghost Forensic Weapon: How Russian authorities used offline Cellebrite software to crack a jailed activist's iPhone months after the company cut off sales to the country.

Join Alex and Sonia as they break down the week's biggest cybersecurity threats, translating complex hacks into plain English so you can stay safe.

This week on Cyber for Humans:

• The Silent Alarm Backlog: Why traditional security teams are missing up to 60% of alerts, and how hackers are using AI to hide in the "low-priority" pile—plus the rise of superhuman AI detectives to catch them.

• The Phishing Factory Takedown: Inside "Operation Ramz," the massive international bust that dismantled Sniper Dz, a decade-long platform that allowed low-skilled criminals to impersonate tech giants for free.

• The Digital Crypto Car Wash: How Europol unplugged "AudiA6," a massive industrial money laundering pipeline that washed over €336 million for ransomware gangs using thousands of fake identities.

Join Alex and Sonia as they break down the week's biggest cybersecurity threats, translating complex hacks into plain English so you can stay safe.

This week on Cyber for Humans:

• The Ghost Stadium Traps: How cybercriminals registered over 4,300 fake FIFA domains to hijack real fan accounts, and why shady streaming apps are using Android's "accessibility tools" to drain your bank accounts.

• The Trusted Mailbox Scam: Inside the massive "GorgonAgora" network of 5,700 fake online stores abusing Stripe and Google infrastructure to steal credit cards and bypass bank security codes.

• The Unlocked Cloud Briefcase: How a hacker group's clumsy mistake exposed a massive operation that was silently hijacking AWS and Azure servers to build a global spam factory.

Join Alex and Sonia as they break down the week's biggest cybersecurity threats, translating complex hacks into plain English so you can stay safe.

This week on Cyber for Humans:

• The AI Spy Sidekick: Meet GREYVIBE, the threat actor using ChatGPT and Gemini to supercharge attacks against Ukraine. We explore how AI is helping "clumsy" spies build malware like PhantomRelay and LegionRelay, blurring the lines between statecraft and cybercrime.

• Vibe-Coding Nightmares: The rise of "Shadow AI." How well-meaning employees are using AI to build functional apps that accidentally leave sensitive corporate data wide open to the internet—without the IT department ever knowing.

• The Poisoned Building Block: A deep dive into the Sicoob.Sdk attack. How a malicious software package managed to trick Google’s AI Search into recommending it, putting the digital keys to corporate bank accounts in the hands of hackers.

Join Alex and Sonia as they break down the week's biggest cybersecurity threats, translating complex hacks into plain English so you can stay safe.

This week on Cyber for Humans:

• The Megalodon Strike: How "TeamPCP" unleashed an automated shark into GitHub, pushing 5,000 malicious commits in just six hours to snatch the master keys to the cloud.

• The 30-Second Crypto Trap: A deep dive into the "polymarketdev" scam, where fake trading tools used a sneaky "postinstall hook" to trick users into handing over their private keys in plaintext.

• Ghost Drivers in the Machine: New research reveals how hackers can trick Windows into "faking" hardware just to load vulnerable drivers and kill your antivirus from the inside out.

Join Alex and Sonia as they break down the week's biggest cybersecurity threats, translating complex hacks into plain English so you can stay safe.

This week on Cyber for Humans:

• The Shai-Hulud Worm: How a supply chain attack reached OpenAI, leading to a $1,000 "hacking contest" and a bizarre "wiper" malware that plays loud audio before deleting your files.

• The Post Office Imposter: A critical "spoofing" flaw in Microsoft Exchange that lets attackers hijack your browser and send emails as you without ever needing your password.

• Cisco's 10/10 Nightmare: Why a "perfect" severity score for a flaw in Cisco traffic controllers is letting hackers waltz past security without an ID to plant "ghost" remote controls.

Join Alex and Sonia as they break down the week's biggest cybersecurity threats, translating complex hacks into plain English so you can stay safe.

This week on Cyber for Humans:

• The Ultimate Insider Revenge: How two former government contractors wiped 96 federal databases in a single afternoon—and then asked an AI assistant how to cover their tracks.

• The Developer's Ghost: A deep dive into QLNX, a super-stealthy "fileless" malware that hides in the shadows of Linux systems to steal the master keys of the software supply chain.

• Cloud Gang Warfare: Meet PCPJack, the new cloud-based worm that isn't just stealing your data—it’s actively kicking rival hacker groups out of "its" territory.

Join Alex and Sonia as they break down the week's biggest cybersecurity stories, translating complex hacks into plain English so you can stay safe.

This week on Cyber for Humans:

• The PyTorch Poison: How a trusted AI tool was compromised to steal GitHub keys and impersonate "Claude Code" in a sophisticated supply chain attack.

• Blockchain's Dark Side: Inside the EtherRAT campaign, where hackers are using Ethereum smart contracts as unblockable "bulletin boards" to control infected computers.

• Ghost Towers in Your Pocket: The rise of physical "SMS blasters" that mimic cell towers to bypass filters, and the next-gen phishing kits making scams more personal than ever.

Join Alex and Sonia as they break down the week's biggest cybersecurity threats, translating complex hacks into plain English so you can stay safe.

This week on Cyber for Humans:

• The Global DDoS Takedown: 21 countries, 53 domains, and 75,000 warnings. How "Operation PowerOFF" is draining the swamp of booter services and using the blockchain to flag criminals.

• AI vs. The 13-Year Bug: An AI tool helps uncover a critical backdoor in Apache ActiveMQ that humans missed for over a decade—and why 7,500 "digital post offices" are still in the crosshairs.

• Microsoft’s Blue Screen Blues: From servers trapped in infinite reboot purgatory to "protest" zero-days that trick Windows Defender into helping hackers hijack your system.

Join Alex and Sonia as they break down the week's biggest cybersecurity threats, translating complex hacks into plain English so you can stay safe.

This week on Cyber for Humans:

• The 3-Million Zombie Army: How international authorities unplugged a massive network of hijacked smart TVs and routers run by a 23-year-old—and the record-breaking 31.4 Tbps attack that followed.

• The DarkSword Trap: Why your iPhone isn't as bulletproof as you think, and how sophisticated "watering hole" attacks are being used to drain crypto wallets and read private messages.

• AI: The Ultimate Hacking Assistant: From AI-generated malware to "digital butlers" gone rogue—we explore how artificial intelligence is lowering the barrier for criminals and changing the rules of the game.

Join Alex and Sonia as they break down the week's biggest cybersecurity threats, translating complex hacks into plain English so you can stay safe.