San Francisco International Airport was hacked, Pentagon networks are at risk, and a TikTok hack circulates Coronavirus consipiracy theories. Catch up on the news of the week with the Friday Five!

Here’s the short version: Google just issued a Chrome update with a note that says, “This update includes 1 critical security fix.”

Linksys Smart Wi-Fi users were forced to reset their passwords after researchers discovered a router hack.

The vCenter vulnerability, patched on April 9, could give an intruder access to administrative credentials in three steps.

In the past week, Google says it identified more than 18 million daily phishing messages featuring coronavirus themes.

The DHS urged organizations to update their passwords and make sure that a critical Pulse Secure VPN flaw has been patched, as attackers continue to exploit the flaw.

Zoom is now a household name for work-from-home employees. Here is your guide to Zoom basics, including its security vulnerabilities and video conferencing alternatives such as Microsoft Teams.

Though many problems remain, organizations are making attackers work harder.

From the critical bug in Google Chrome to Signal’s fears over the EARN Act, get yourself up to date with everything we’ve written in the last week.

The massive ICEBUCKET scheme has, so far, impersonated more than 2m people in 30+ countries, defrauding more than 300 brands of ad dollars.

Since January, more than 4,000 domains related to coronavirus stimulus packages have been registered, many of them malicious or suspicious, according to Check Point Research.

The latest sextortion emails try to fool you with technical terms they hope you won’t understand.

Scientists known for finding ways to transmit software from non-networked computers have figured out a way to do it with computer fan vibrations.

As companies continue to support increasing numbers of work-from-home employees, the pressure to secure access and reduce risk has never been greater.

The latest company to fall victim to a ransomware attack is Cognizant, a large US IT services company which admitted at the weekend that it had fallen victim to Maze.

Cybercriminals uploaded typosquatted malicious libraries to RubyGems, which contains open-source components that are used as basic application building blocks by software developers.