Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 125 stories in 24 hours
Enterprise & Cloud Security
👉 Microsoft, Azure, AWS, Google, SOC
65stories this week
8today
the last seven days
Most fromBleepingComputer, Help Net Security, Huntress, SecurityWeek
In the news hereMicrosoft34ConnectWise11Google5Nvidia3Lumma Stealer2NetSupport RAT1Qilin1
MyCyberWay trainingMost attacks start with an identity. Learn to defend it.SC-300 course details
-
The “agentic threat actor” may have used exposed credentials to access resources and delete cloud-based storage, applications, and databases.
Dark Reading
-
Microsoft Threat Intelligence identified NeedyMantis, a modular post-compromise malware framework used in targeted intrusions that combines custom loaders, encrypted archives, and extensible components to maintain long-term access and support follow-on operations.
Microsoft
-
A flaw in Titan, an internal Microsoft analytics service, could have let an attacker read employee records and Bing search analytics, a 16-year-old security researcher has disclosed. The researcher, who goes by Faav, found that Titan did not verify the signature on login tokens. That let him pose as the service’s administrator and run SQL…
Help Net Security
-
Microsoft details Storm-3168, the JADEPUFFER-linked actor that used stolen service principals to delete Azure storage in minutes and harvest keys. Microsoft just published the first detailed look at what JADEPUFFER does inside Azure. Sysdig first spotted the group’s activity in July 2026 and called it the first documented agentic ransomware operation. Microsoft tracks the same…
Security Affairs
-
The threat actor known as JADEPUFFER has been observed orchestrating destructive actions within a Microsoft Azure environment using compromised service principals. Microsoft, which is tracking the activity under the name Storm-3168, has called it an evolution of the threat actor’s tradecraft. The attack took place in early June 2026 over a period of about 18…
The Hacker News
-
The native Sublime Security integration sends email detections into Elastic Security, where phishing incident response can tie a quarantined email to what happens next on the endpoint and pull the threat from every mailbox it reached.
Elastic Security Labs
-
CISA added CVE-2026-65660 to its KEV catalog, giving federal agencies a patching deadline of September 28.
SecurityWeek
-
CISA added CVE-2026-65660 to its KEV catalog, giving federal agencies a patching deadline of September 28.
SecurityWeek
-
CISA added CVE-2026-65660 to its KEV catalog, giving federal agencies a patching deadline of September 28.
SecurityWeek
-
CISA added CVE-2026-65660 to its KEV catalog, giving federal agencies a patching deadline of September 28.
SecurityWeek
-
CISA added CVE-2026-65660 to its KEV catalog, giving federal agencies a patching deadline of September 28.
SecurityWeek
-
CISA added CVE-2026-65660 to its KEV catalog, giving federal agencies a patching deadline of September 28.
SecurityWeek
