Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 131 stories in 24 hours
Microsoft Security
Microsoft, identity, cloud and the security operations centre.
38stories this week
4today
the last seven days
Most fromBleepingComputer, Help Net Security, CSO Online UK, The Hacker News
In the news hereMicrosoft33ConnectWise10Google2Nvidia2Lumma Stealer1
MyCyberWay trainingDefender and Sentinel in the headlines? That's the SC-200 toolkit.SC-200 course details
-
September 2026 Patch Tuesday set an all-time record with 973 CVEs addressed across the Microsoft portfolio. We’re only four months into the Patch Apocalypse and everyone seems to be numb with respect to the insane number of CVEs reported. Despite this massive number, only two, CVE-2026-85880 and CVE-2026-81963, were reported Known Exploited and none were…
Help Net Security
-
Prepare for post-quantum authentication by testing certificate ecosystems now. Learn how Microsoft’s PQC TLS Pilot Program helps advance future readiness.
Microsoft
-
Microsoft will soon introduce support for third-party deepfake detection solutions and impersonation protection in Teams meetings.
BleepingComputer
-
Email remains one of the most common entry points for security threats. Yet email products often describe the same activity with different table names, fields, and values. This makes it harder to build detections and investigations that work consistently across data sources. The Microsoft Sentinel Advanced Security Information Model, or ASIM, EmailEvent schema is now…
Microsoft Sentinel Blog
-
Cisco Talos’ Vulnerability Discovery & Research team recently disclosed vulnerabilities in Adobe, Apple, Foxit Reader, and Microsoft. The vulnerabilities mentioned in this blog post have been patched by their respective vendors, in adherence to Cisco’s third-party vulnerability disclosure policy. For Snort coverage that can detect…
Cisco Talos
-
Read how How Microsoft Security’s FORGE Lab is scaling vulnerability research from Windows to the Linux kernel.
Microsoft
-
Microsoft announced that it will add .msix and .msixbundle attachments to the list of blocked attachments in Outlook Web and the new Outlook Windows client starting next month.
BleepingComputer
-
A recent phishing campaign abused Microsoft Power BI links to deliver multiple rogue ScreenConnect clients.
Huntress
-
GitHub Copilot CLI can be made to read sensitive files from a developer’s machine and send their contents to an attacker from a single web page. Security researchers at Adversa AI said the new attack technique, dubbed Cryptographic Context Injection (CCI), hides malicious instructions inside encrypted content. These instructions are treated as trusted context when…
CSO Online UK
-
Microsoft has made remote PC connections generally available in Windows App on Windows. Users can access physical or virtual Windows PCs alongside Windows 365, Azure Virtual Desktop, and Microsoft Dev Box resources. Windows App brings remote Windows devices and applications into a single interface. It replaces the Remote Desktop app distributed through the Microsoft Store…
Help Net Security
-
Active Directory defenses must combine identity fundamentals, telemetry, and rapid response as attackers reach the environment’s first breach attempt within a median of 11 hours.
Sophos
-
Not quite an EDR-killer, but the proof-of-concept cyber technique creates a silent virus detection gap while service runs normally, no exploit required.
Dark Reading
