Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 121 stories in 24 hours
👉 Microsoft, Azure, AWS, Google, SOC
60stories this week
3today
the last seven days
Most fromBleepingComputer, Huntress, Help Net Security, Dark Reading
In the news hereMicrosoft32ConnectWise9Google5Nvidia3Lumma Stealer2NetSupport RAT1Qilin1
Security leaders keep debating whether AI will produce an entirely new class of cyberattack. The nearer change is quieter and already visible: AI has made a failed attack cheap to retry. The routine version looks like this. An attacker lands on a low-privilege cloud account, and the first try at privilege escalation goes nowhere. That…
The Hacker News
Researchers show that file-change notification systems can leak keystroke timing, browsing activity, and WhatsApp media events.
SecurityWeek
Researchers show that file-change notification systems can leak keystroke timing, browsing activity, and WhatsApp media events.
SecurityWeek
Researchers show that file-change notification systems can leak keystroke timing, browsing activity, and WhatsApp media events.
SecurityWeek
Researchers show that file-change notification systems can leak keystroke timing, browsing activity, and WhatsApp media events.
SecurityWeek
Researchers show that file-change notification systems can leak keystroke timing, browsing activity, and WhatsApp media events.
SecurityWeek
Researchers show that file-change notification systems can leak keystroke timing, browsing activity, and WhatsApp media events.
SecurityWeek
Three vulnerabilities in Salesforce Agentforce allowed hackers to hijack trusted agents, steal data, and launch phishing attacks.
SecurityWeek
Three vulnerabilities in Salesforce Agentforce allowed hackers to hijack trusted agents, steal data, and launch phishing attacks.
SecurityWeek
Three vulnerabilities in Salesforce Agentforce allowed hackers to hijack trusted agents, steal data, and launch phishing attacks.
SecurityWeek
An enterprise can approve an AI model, authenticate its users, and restrict access to internal systems, yet still expose sensitive data through the components surrounding that model. In September 2025, an MCP server distributed through npm demonstrated how quickly trust can become a liability. The package, postmark-mcp, allowed AI assistants to send email through Postmark.…
Cloud Security Alliance
Agentic AI can smuggle arbitrary instructions from the Web, across multiple apps, into trusted internal communications channels.
Dark Reading