Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 103 stories in 24 hours
Enterprise & Cloud Security
👉 Microsoft, Azure, AWS, Google, SOC
72stories this week
13today
the last seven days
Most fromHuntress, BleepingComputer, Help Net Security, The Hacker News
In the news hereMicrosoft35ConnectWise11Google5Nvidia3Lumma Stealer2NetSupport RAT1Qilin1
MyCyberWay trainingMost attacks start with an identity. Learn to defend it.SC-300 course details
-
The successful completion of Build 2 marks another significant milestone for the NIST National Cybersecurity Center of Excellence (NCCoE) Secure Software Development, Security, and Operations (DevSecOps) Practices project. Palo Alto Networks, now …
Palo Alto Networks (CyberArk)
-
ClickFix attacks leave no file to scan or block, which is why most endpoint tools miss it. See how Huntress Attack Disruption kills the chain in under a second.
Huntress
-
tenfold has added shared content governance and real-time event auditing to its free Community Edition for organizations with under 150 users. The new features help teams manage Microsoft 365 sharing and investigate suspicious identity activity.
BleepingComputer
-
Microsoft has pushed out an out-of-band security update for Exchange Server that fixes a high-severity vulnerability (CVE-2026-96940) that may allow authenticated attackers to read emails and attachments of other users in the same organization, but “does not allow access across tenant boundaries.” CVE-2026-96940 was discovered internally and, according to the Exchange Server Team, they “are…
Help Net Security
-
Microsoft confirmed over the weekend that some games and applications using AC-3 (Dolby Digital) audio decoding will crash after installing the September 2026 KB5124010 Windows 11 preview update.
BleepingComputer
-
Authentication isn’t enough. Monitor access across humans, machines and AI agents.
Cybersecurity Dive
-
Known as Rey, the suspect is reportedly helping the FBI identify and locate other members of the extortion group.
SecurityWeek
-
Known as Rey, the suspect is reportedly helping the FBI identify and locate other members of the extortion group.
SecurityWeek
-
Citrix has confirmed that a new zero-day vulnerability, CVE-2026-88779, emerged just days after two other exploited flaws were patched.
SecurityWeek
-
This article explains how Elastic SIEM uses a monthly automated telemetry pipeline to score prebuilt detection rules across noise, performance, threat, and profile dimensions, helping security teams decide which rules to enable first.
Elastic Security Labs
-
Warlock ransomware continues to exploit unpatched SharePoint flaws to breach water utilities, telecoms, governments, and universities worldwide. Warlock ransomware made headlines back in mid-2025 for exploiting a chain of SharePoint zero-days collectively dubbed ToolShell. More than a year later, the same group is still using that door, and it’s still getting in. Symantec tracks the…
Security Affairs
-
A new China-nexus cyber espionage group known as TA419 has been attributed to multiple credential phishing campaigns targeting artificial intelligence (AI) experts working for U.S. think tanks, universities, and legal sector organizations. The campaigns have impersonated prominent economists and AI policymakers, as well as a prominent Anthropic employee, to single out an AI policy expert…
The Hacker News
