Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 125 stories in 24 hours
Data Breaches
The incidents, breaches and state campaigns making headlines.
38stories this week
1today
the last seven days
Most fromDataBreaches.net, BleepingComputer, The Record, The Hacker News
In the news hereOpenAI2Microsoft2Meta1Google1APT28 (Fancy Bear)1RansomHub1
MyCyberWay trainingBreaches like this get investigated, not just reported.See Blue Team Specialist
-
LiteLLM on Wednesday disclosed that threat actors compromised “multiple independent security controls” to push a malicious version of the Python package containing a credential stealer and a backdoor. On October 21, 2026, LiteLLM’s release pipeline was compromised to push 1.107.0 to the Docker Hub registry and the Python Package Index (PyPI) repository. The incident took…
The Hacker News
-
Cloud providers may be storing sensitive customer data, without either party knowing it. But when a provider is breached, the data comes home to roost.
Dark Reading
-
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that attackers are actively exploiting four vulnerabilities in Plex Media Server.
BleepingComputer+1 source
-
Nikkei has revealed that more than a million records have been stolen, but said most can’t be used to identify an individual…
ITPro+1 source
-
State Bank of India has identified 3,897 customer records containing personal information in a set of about 375,000 records available on the dark web, and it does not yet know where the data came from. The state-owned bank, India’s largest, said in a stock-exchange filing dated October 21 that it “has experienced an incident involving…
The Hacker News
-
Tracked as CVE-2026-109618 and CVE-2026-109619, the bugs could potentially lead to unauthenticated remote code execution.
SecurityWeek+11 sources
-
Two critical PHP RCEs, CVE-2026-109618 and CVE-2026-109619, leaked before the patch. Learn what’s known, who’s exposed, and how to prepare now.
Huntress+11 sources
-
Development platform Zeabur has disclosed details of a cybersecurity incident in which an attacker used leaked internal credentials stored in plaintext to compromise its infrastructure and steal over 3.2 million environment variable records and information for 321,810 accounts.
BleepingComputer
-
The CDE released multiple statements over the last week warning the state’s students that assessment contractor Educational Testing Service (ETS) suffered a months-long data breach.
The Record
-
Nikkei disclosed a data breach affecting over 1.8 million records after hackers used stolen credentials to access a cloud service for system development. Japanese media company Nikkei has disclosed a data breach affecting more than 1.8 million records. The company, known for its financial news publications, including The Nikkei and the Financial Times, said attackers…
Security Affairs+1 source
-
The Russia-linked state-sponsored threat actor tracked as APT28 (aka BlueDelta, Fancy Bear, and Forest Blizzard) has been attributed to attacks targeting two member states of the North Atlantic Treaty Organization (NATO). The Symantec Threat Hunter Team, which is tracking the activity cluster under the moniker Swallowtail, involved the use of a backdoor called HOOKEDGE and…
The Hacker News
-
How AI helps collect data, deanonymize users, and link their accounts — and what to do to protect yourself from doxing and harassment.
Kaspersky
