Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 125 stories in 24 hours
Guidance and explainers for staying safe.
26stories this week
0today
the last seven days
Most fromMalwarebytes, KnowBe4, Kaspersky
In the news hereGoogle4Meta2AWS1OpenAI1
Android users report that Google automatically added their phone number to accounts they wanted to keep separate. Here’s how to check yours.
Malwarebytes
Owners reported unexpected recordings of private conversations, but Meta hasn’t explained what went wrong or what happened to the audio.
Malwarebytes
An influencer’s invitation to join her on a farm shows how public videos can feel dangerously personal.
Malwarebytes
We break down a real-world breach of a cloud ERP system, and explain how to avoid the key mistakes.
Kaspersky
I want to start with a confession that most security leaders will recognize but few will say out loud: almost everyone reuses passwords. Not the reckless or the untrained. Everyone including, if we are honest, a fair number of people in our own profession.
KnowBe4
Attackers tampered with AOMEI Backupper’s update system to deliver malware that could give them remote access to users’ PCs.
Malwarebytes+1 source
This week on the Lock and Code podcast, we speak with John DeMay about a sextortion plot that targeted his son on the night of his suicide.
Malwarebytes
The California Department of Education notified students about a data breach at contractor Educational Testing Service.
Malwarebytes+1 source
For years, we described phishing as an email problem: an attacker writes a convincing message, sends it to thousands of people and waits for someone to click. That model is now outdated.
KnowBe4
A phishing campaign is targeting YouTubers with phony sponsorship offers, according to researchers at ESET. The emails are personalized to each target, making specific references to their channels, and are designed to trick users into granting access to their Google accounts.
KnowBe4
In part one of this NIS2 series, we examined why vendor questionnaires fall short and how third-party breaches impact downstream organizations across Europe. But what happens after a supplier containment phase ends? The long-term danger lies in how attackers leverage exfiltrated supplier data to launch hyper-targeted social engineering attacks against an organization’s employees.
KnowBe4
A researcher found serious flaws in Eiliko’s security, exposing private conversations and allowing remote changes to what the robot says.
Malwarebytes