Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 121 stories in 24 hours
Microsoft, identity, cloud and the security operations centre.
10stories this week
0today
the last seven days
Most fromAWS Security Blog, Help Net Security, Dark Reading, The Hacker News
In the news hereMicrosoft2Palo Alto Networks1Qilin1
Known as Rey, the suspect is reportedly helping the FBI identify and locate other members of the extortion group.
SecurityWeek
The company’s latest report previews how AI is changing threat activity, including by automating ransomware attacks.
Cybersecurity Dive
The dropper “carries a complete universal Mach-O inside itself, roughly 756 KB in the development build, and extracts it at runtime.
SecurityWeek
Hackers used the account, which has 13 million followers, to amplify a Clippy-themed cryptocurrency account.
SecurityWeek
Amir Barati, an alleged member of the Mabna Institute, was indicted for targeting universities, private organizations, and government entities in the US and abroad.
SecurityWeek
Child identity theft can stay hidden for years. Because a child cannot apply for credit, the fraud tends to surface only when they reach adulthood and apply for a first student loan, credit card, or apartment, then find accounts already opened in their name. The Federal Trade Commission reported that child identity theft rose 40%…
Bitdefender
The China-based hacking group has been exploiting SharePoint vulnerabilities since July 2025.
SecurityWeek
The attacks targeted the US Department of Education and Library and Archives Canada, and researchers linked some agents to OpenAI.
SecurityWeek
CVE-2026-104286 is a critical-severity path traversal vulnerability that could allow attackers to write arbitrary files to the system.
SecurityWeek
A lot ships across the identity platform every month, and most of it lands in the release notes and then quietly disappears. That’s a shame, because some of those changes genuinely move …
Palo Alto Networks (CyberArk)
Microsoft has reminded customers that the Entra ID authentication system will get better protection against external script injection attacks starting next month.
BleepingComputer
For nearly a decade, multi-factor authentication has been the control every security leader points to when asked how they’ve reduced account takeover risk. It sits on almost every compliance checklist and nearly every cyber insurance questionnaire, and for good reason — adding a second factor to a password login closed off an enormous share of…
CSO Online UK