Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 96 stories in 24 hours
Enterprise & Cloud Security
👉 Microsoft, Azure, AWS, Google, SOC
65stories this week
8today
the last seven days
Most fromBleepingComputer, Help Net Security, Huntress, The Hacker News
In the news hereMicrosoft34ConnectWise11Google5Nvidia3Lumma Stealer2NetSupport RAT1Qilin1
MyCyberWay trainingMost attacks start with an identity. Learn to defend it.SC-300 course details
-
Microsoft has reminded customers that systems running Windows 11 23H2 Enterprise, Education, and IoT Enterprise editions will stop receiving security updates next month.
BleepingComputer
-
Microsoft-Decision-1 is a small decision-scoring model. Given a situation, a question and a fixed set of answer options, it returns a calibrated probability for each option. “This model is designed for routing, classification, prioritization, verification, and workflow control, making it easier to incorporate decision intelligence into existing applications, agents, and workflows in a secure, trusted…
Help Net Security
-
Microsoft is advising users and businesses to update Windows devices before digital certificates used to verify Windows Update servers expire in May and June 2027. The certificates expire on May 17 or June 19, depending on the Windows version. Devices without replacement certificates will lose access to Windows Update, including security fixes delivered through the…
Help Net Security
-
Online & Mobile tracking In 2020, noyb (in cooperation with the Norwegian Consumer Council) has filed a complaint against the online advertising company Xandr (now part of Microsoft) for processing personal data from the dating app Grindr. Now, the Norwegian Data Protection Authority has issued its decision – and fined Xandr € 8.5 million (NOK…
noyb
-
REF8801 exposes how Apex Accelerator combines convincing Web3 services with malicious npm packages, attacker-controlled AI infrastructure, and cross-platform malware delivery.
Elastic Security Labs
-
Research conducted in collaboration with Jazz finds that, among respondents experiencing data loss, only 16% said DLP blocked their most significant incidents before data left the organization SEATTLE – Oct. 13, 2026 — Data loss prevention (DLP) tools are often functioning as after-the-fact forensic systems rather than prevention controls, according to DLP in the AI…
Cloud Security Alliance
-
The attack on the British retailer shows that compromising a single identity can lead to much deeper penetration of the corporate network.
Dark Reading
-
Tokens transmitted in metadata, weak VM isolation, and expansive permissions make hacking a lot easier…
The Register
-
The US State Department is offering up to US $10 million for information about the whereabouts of Zhang Yu, a 44-year-old Chinese national who is accused of being a key figure in China’s state-sponsored hacking group, Hafnium. Hafnium (also known as Silk Typhoon) is widely believed to be the group that exploited zero day vulnerabilities…
Bitdefender
-
Threat actors have been observed exploiting two recently disclosed flaws in the AhsayCBS backup utility to seize control of affected devices and deploy web shells and XMRig cryptocurrency miners. Details of the flaws are below – CVE-2026-105133 (CVSS v4 score: 5.5) – An improper authentication vulnerability in the checkSysPwd() function in the “com/ahsay/obs/api/ApiStructsAction.java”
The Hacker News
-
When an AI agent calls a payment API, deploys code, or hands work to another agent, a valid access token answers only part of the security question. The harder question is what …
Palo Alto Networks (CyberArk)
-
Microsoft says devices running unsupported versions of Windows will stop receiving security updates after next year’s Windows Update certificate rotation.
BleepingComputer
