Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 131 stories in 24 hours
Data Breaches
The incidents, breaches and state campaigns making headlines.
40stories this week
3today
the last seven days
Most fromDataBreaches.net, The Hacker News, BleepingComputer, The Record
In the news hereMicrosoft3ConnectWise2OpenAI2GitHub1APT28 (Fancy Bear)1RansomHub1
MyCyberWay trainingBreaches like this get investigated, not just reported.See Blue Team Specialist
-
An FTC spokesperson confirmed the investigation but declined further comment.
SecurityWeek
-
The Dutch Institute for Vulnerability Disclosure (DIVD) says that the breach of its network was possible by exploiting a chain of two zero-day vulnerabilities in the open-source Zammad ticketing system.
BleepingComputer
-
The Department of Defense notified millions of current and former U.S. military personnel that their personal information had been stolen in a months-long breach.
TechCrunch
-
WFXR in Virginia reports: The City of Radford announced tonight (9/29) the city is currently dealing with an internet outage due to a potential data breach. City leadership says it reached out to cybersecurity professionals and legal counsel upon becoming aware of the incident. Both state and federal law enforcement have also been notified, and……
DataBreaches.net
-
Google’s analysis found that AI-discovered vulnerabilities are more likely to enable remote code execution.
SecurityWeek
-
WatchGuard has rolled out patches for 15 code execution, DoS, authorization, and path traversal bugs in Fireware OS.
SecurityWeek
-
Several security firms have confirmed seeing exploitation of the NetScaler vulnerabilities CVE-2026-88771 and CVE-2026-88772.
SecurityWeek
-
Some of the flaws could allow remote attackers to execute arbitrary code or escape the browser sandbox.
SecurityWeek
-
424K accounts
Medela – 423,947 breached accounts
In September 2026, Swiss medical device company Medela was the target of a ShinyHunters “pay or leak” extortion campaign. The data allegedly obtained in the breach was later published publicly and included 424k unique email addresses belonging predominantly to healthcare professionals, Medela staff and leads. The exposed data consisted primarily of corporate contact information, including…
Have I Been Pwned
-
Attacks by autonomous AI agents are moving out of the lab and into the courtroom, raising unsettled questions about who is liable for what agents do.
SecurityWeek
-
The state-sponsored group has launched larger-scale phishing campaigns to deploy the CosmicPulse backdoor.
SecurityWeek
-
In the wake of a suspected leader’s arrest, ShinyHunters says it never intended to publish data stolen from the FBI.
SecurityWeek
