This week, Saks Fifth Avenue, Saks Off 5th, and Lord & Taylor department stores—all owned by The Hudson’s Bay Company—acknowledged a data breach impacting more than five million credit and debit card numbers. The culprits? The same group that's spent the last few years pulling off data heists from Omni Hotels & Resorts, Trump Hotels, Jason’s Deli, Whole Foods, Chipotle: A mysterious group known as Fin7.

Learn more about your ad choices. Visit podcastchoices.com/adchoices

It's been about six months since cryptojacking exploded, and in that short time the approach has evolved and adapted to initiate illicit cryptocurrency mining in all different ways. Now, Google's taking a stand, announcing Monday that it would begin blocking any Chrome extension submitted to the Web Store that mines cryptocurrency. In July, it will remove existing extensions that currently contain mining functionality.

Learn more about your ad choices. Visit podcastchoices.com/adchoices

After sailing through two friendly Senate hearings—one so uncontroversial that only six senators tops bothered to even show up at any given point in the hour—Lieutenant General Paul Nakasone seems set to for confirmation as the next director of the National Security Agency. That means he'll soon lead not just one agency, but two: the world's most powerful spying operation, the NSA, and the world's most powerful military hacker force, US Cyber Command.

Learn more about your ad choices. Visit podcastchoices.com/adchoices

When Under Armour announced that its nutrition app MyFitnessPal had suffered a data breach impacting the information of roughly 150 million users, things actually didn't seem so bad. Of course, it's never good when personal data ends up online, much less that of so many people, but it seemed like Under Armour had at least taken reasonable precautions. But it turns out Under Armour only sort of got things right.

Learn more about your ad choices. Visit podcastchoices.com/adchoices

Most of the traffic on the web is encrypted. And more websites are adopting basic encryption measures every day. That means that, in theory, eavesdroppers have a hard time seeing whom you're writing to on Gmail or what you're looking up on Wikipedia. But there's a catch. Big sites like Google and Facebook can see what links you click from their services, and use tracking cookies to follow you around the web.

Learn more about your ad choices. Visit podcastchoices.com/adchoices

After weeks of unrelenting chaos, the cybersecurity world took a little bit of a breather. Well, relatively, anyway. There was still one of the bigger data breaches in recent memory, compliments of UnderArmour. The sportswear company's MyFitnessPal apps suffered a breach of 150 million users' data, including names and passwords.

Learn more about your ad choices. Visit podcastchoices.com/adchoices

For over a week, the City of Atlanta has battled a ransomware attack that has caused serious digital disruptions in five of the city's 13 local government departments. The attack has had far-reaching impacts—crippling the court system, keeping residents from paying their water bills, limiting vital communications like sewer infrastructure requests, and pushing the Atlanta Police Department to file paper reports for days.

Learn more about your ad choices. Visit podcastchoices.com/adchoices

Nearly three years after a Russian propaganda group infiltrated Facebook and other tech platforms in hopes of seeding chaos in the 2016 US election, Facebook has more fully detailed its plan to protect elections around the world. In a call with reporters Thursday, Facebook executives elaborated on their use of human moderators, third-party fact checkers, and automation to catch fake accounts, foreign interference, fake news, and to increase transparency in political ads.

Learn more about your ad choices. Visit podcastchoices.com/adchoices

ISIS has long taken full advantage of secure communication tools, and utilized mainstream communication platforms in unexpected ways. Extremist groups even develop their own software at times to tailor things like encrypted messaging to their specific needs. One such project is the clandestine, unfortunately named communication tool MuslimCrypt, which uses an encryption technique called steganography to spread secret messages.

Learn more about your ad choices. Visit podcastchoices.com/adchoices

In its latest drumbeat against the cyber activities of Iran, the US government Friday charged nine Iranian hackers with a massive three-year campaign to penetrate and steal more than 31 terabytes of information—totaling more than $3 billion in intellectual property—from more than 300 American and foreign universities.

Learn more about your ad choices. Visit podcastchoices.com/adchoices