securitySecurityMillions of WordPress Sites Got a Forced Update for a Serious BugBy Dan Goodin, Ars TechnicaSecurityRussia Was Behind DDoS Attacks Against Ukraine, US Officials SayBy Lily Hay NewmanSecurityUS Agencies Say Russian Hackers Compromised Defense ContractorsBy Dan Goodin, Ars TechnicaSecurityThe CIA Has Secretly Run a ‘Bulk Collection’ ProgramBy Lily Hay NewmanBusinessFace Recognition Is Out. So How Will the IRS Verify Identity?By Tom SimoniteSecurityMicrosoft Disabling Macros Is a Huge Win for Security By Lily Hay NewmanBusinessWhy OpenSea’s NFT Marketplace Can't WinBy Gian M. VolpicelliSecurityThe DOJ’s $3.6B Seizure Shows How Hard It Is to Launder CryptoBy Andy GreenbergBusinessMyanmar’s Fight for Democracy Is Now a Scrap Over Phone RecordsBy Morgan MeakerBusinessIt's Not Just the IRS—the US Government Wants Your SelfiesBy Tom SimoniteSecuritySafari Flaws Exposed Webcams, Online Accounts, and MoreBy Lily Hay NewmanSecurityNow Is a Good Time to Update Your Recovery Email AddressesBy David NieldSecurityCrypto.com Finally Admits It Lost $30 Million in a HackBy Lily Hay NewmanSecurityHow Apple's iCloud Private Relay Can Keep You SafeBy David NieldSecurityNSO Group Spyware Targeted Dozens of Reporters in El SalvadorBy Lily Hay NewmanSecurityThe Worst Hacks of 2021By Lily Hay NewmanSecurityBuckle Up for More Log4j MadnessBy Lily Hay NewmanSecurityThe Log4J Vulnerability Will Haunt the Internet for YearsBy Lily Hay NewmanSecurityHow to Guard Against Smishing Attacks on Your PhoneBy David NieldSecurityUS Wins Appeal to Extradite Julian AssangeBy Brian Barrett and Lily Hay NewmanSecurityA Planned Parenthood LA Hack Affects 400,000 PatientsBy Brian BarrettSecurityNSO Group Spyware Hits at Least 9 US State Department PhonesBy Lily Hay NewmanSecurityFacebook Will Force More At-Risk Accounts to Use Two-FactorBy Lily Hay NewmanSecurityA Bunch of Malicious Google Play Apps Stole User Banking InfoBy Dan Goodin, Ars TechnicaMore Stories