Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 125 stories in 24 hours
Enterprise & Cloud Security
👉 Microsoft, Azure, AWS, Google, SOC
60stories this week
3today
the last seven days
Most fromBleepingComputer, Huntress, Help Net Security, Dark Reading
In the news hereMicrosoft32ConnectWise9Google5Nvidia3Lumma Stealer2NetSupport RAT1Qilin1
MyCyberWay trainingMost attacks start with an identity. Learn to defend it.SC-300 course details
-
Microsoft has confirmed that this month’s Windows Server security updates are causing OWA sign-in and mail delivery issues on some Exchange Server systems.
BleepingComputer
-
Huntress alleges takeover of M365 accounts…
The Register
-
No novelty required to be effective Categories: Threat Research, X-ops, Sophos SecOps Tags: incident response…
Sophos
-
Here is the YARA rule I used to detect “Orphaned VBA Projects Inside DWG Files”.
SANS Internet Storm Center
-
ConnectWise on Saturday said it has disabled seven ConnectWise application identities as it continues its investigation into an incident in which unknown threat actors obtained unauthorized access to the application identities and compromised Microsoft 365 tenants. The disabled identities are listed below – ConnectWise Cloud Backup – 506e08f9-6e9a-4da4-942b-a099a03644ae ConnectWise…
The Hacker News
-
The FBI raided 40 Texas homes over a North Korean scheme that used fake IT workers to target 70 US companies and generate $3 million. The Justice Department (DoJ) announced coordinated enforcement actions this week targeting North Korea’s long-running scheme to place fake IT workers inside American companies. Two US nationals were arrested, 14 people…
Security Affairs
-
ConnectWise has shut down customer access to its Cloud Backup service (formerly SkyKick Cloud Backup) after hackers accessed application identities and compromised Microsoft 365 tenants.
BleepingComputer
-
Cybersecurity researchers have discovered a malicious npm package that’s part of a recently disclosed software supply chain attack campaign dubbed MALFEX. The package, named “imgdecode,” was uploaded to the package registry on September 30, 2026, by a user named “malfexteste8.” It has been downloaded 979 times as of writing and is still available on npm…
The Hacker News
-
Cybersecurity researchers are sounding the alarm related to an active campaign in which unknown threat actors are abusing a compromised Microsoft 365 (M365) credential belonging to ConnectWise Cloud Backup (formerly SkyKick) to gain unauthorized access to customers’ M365 environments. ConnectWise Cloud Backup is a cloud-based backup and recovery service built for managed service providers (MSPs…
The Hacker News
-
ConnectWise (SkyKick) vendor credentials are being abused to access Microsoft 365 tenants. Disable the apps now and check your logs here.
Huntress
-
New whitepaper from Microsoft and NVIDIA helps enterprises manage open-weight AI model risks with a shared taxonomy, evaluations, and controls.
Microsoft Security Blog
-
Everything is moving faster in the age of AI, and that includes security threats. What used to take attackers weeks to exploit can now happen in just a few minutes. Standard vulnerability scans that run on artifacts at rest can catch basic setup issues, but to detect an attack that’s actively happening you need real-time…
Google Cloud
