Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 125 stories in 24 hours
Identity & Access Management
Microsoft, identity, cloud and the security operations centre.
10stories this week
0today
the last seven days
Most fromAWS Security Blog, Help Net Security, Dark Reading, The Hacker News
In the news hereMicrosoft2Palo Alto Networks1Qilin1
MyCyberWay trainingMost attacks start with an identity. Learn to defend it.SC-300 course details
-
Bitget’s security systems caught the unauthorized transfers on September 24, and some wallet addresses linked to the attacker have been frozen.
SecurityWeek
-
Homeland Security Secretary Markwayne Mullin tasked CISA with developing the plan in July.
SecurityWeek
-
Ardit Kutleshi created and operated Rydox, which allowed miscreants to trade PII and cybercrime tools and services.
SecurityWeek
-
Researchers show that file-change notification systems can leak keystroke timing, browsing activity, and WhatsApp media events.
SecurityWeek
-
AI coding agents are changing how quickly developers can build and ship software as well as how quickly credentials can become exposed. According to GitGuardian’s 2026 State of Secrets Sprawl Report, commits identified as AI-assisted are leaking secrets at approximately twice the rate of human-written ones. Most of the fastest-growing categories of leaked credentials are…
The Hacker News
-
The core principle of Idira is this: Every identity is privileged. Every privilege must be controlled. Privilege used to be reserved for engineering teams and system admins. Now, a login token, service …
Palo Alto Networks (CyberArk)
-
The Australian Signals Directorate (ASD) has this month issued a clear call to action through its Multi-factor authentication: Switch it on campaign, urging businesses, organisations, and individuals to enable multi-factor authentication (MFA) across their online accounts. At AWS, we strongly support this message. As threat actors continue to target credentials through phishing, credential stuffing, and…
AWS Security Blog
-
A sideloaded package turns a Microsoft-signed binary into an OAuth token theft tool. No phishing domain, no spoofed UI, no browser. Here’s how to detect it.
Huntress
-
Attackers are exploiting a critical flaw in F5 BIG-IP Access Policy Manager (APM) that lets them run code on a BIG-IP system without logging in, F5 says. The flaw, CVE-2026-94127, affects only systems in which APM serves as an OAuth authorization server, issuing access tokens to applications. F5 disclosed it in an advisory on September…
The Hacker News
