Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 115 stories in 24 hours
Data Breaches
The incidents, breaches and state campaigns making headlines.
39stories this week
2today
the last seven days
Most fromDataBreaches.net, The Hacker News, BleepingComputer, The Record
In the news hereOpenAI2Microsoft2GitHub1npm and PyPI1APT28 (Fancy Bear)1RansomHub1
MyCyberWay trainingBreaches like this get investigated, not just reported.See Blue Team Specialist
-
A High-severity OpenSSL flaw can leak heap memory to the other side of a DTLS connection or crash the program, OpenSSL said on September 29 as it released fixes. DTLS, the TLS variant used for UDP traffic, resends a handshake message if no reply arrives before the timer expires. The leak or crash can happen…
The Hacker News
-
Roughly a dozen vulnerabilities have been patched in each of the open source cryptographic libraries.
SecurityWeek
-
The US Department of Defense has confirmed a breach at one of its main repositories of personnel information, the Defense Manpower Data Center (DMDC), that has exposed the sensitive details of just over three million people. According to media reports, some 2.76 million people are impacted by the breach, as well as a further 294,000…
Bitdefender
-
The accord opened the door to future regulation but focused on four voluntary steps for the companies to take.
SecurityWeek
-
Hadley Barndollar of masslive.com reports: A “cybersecurity incident” has occurred involving the electronic health record system for Suffolk County’s two jails, the system provider confirmed Thursday. Computer Systems Integrated Inc., which runs the EHRs-C platform containing prisoner health data and medical records, said it is aware of and investigating an incident involving the Suffolk County……
DataBreaches.net
-
Keio, a major Japanese railway operator, was hit by ransomware, disrupting business systems and forcing the company to shut down its network. Keio Corporation, one of Japan’s major private railway operators, was hit by a ransomware attack over the weekend, disrupting some of its business systems. The company detected a system failure early Saturday and…
Security Affairs
-
Altman made a slew of product announcements and updates, including the company’s new agents, called Dots.
SecurityWeek
-
Roman Zaharov reports: Cyberattacks may start to be insured according to the principle already in effect for hazardous facilities. The Russian Ministry of Finance is discussing the possibility of making cyber risk insurance mandatory for businesses associated with critical infrastructure. This was stated by Deputy Finance Minister Ivan Chebeskov on the sidelines of the Moscow……
DataBreaches.net
-
Anyone following the recent arrest of Pepijn van der Stap, the previously convicted hacker known as “Umbreon,” was likely shocked today when the prosecution announced that he was being charged with two counts of attempted incitement to murder. Here’s what we know so far. A 24-year-old Dutch national who previously served time for hacking-related crimes……
DataBreaches.net
-
The AIxCC competition winner will analyze messaging app code and compiled binaries for vulnerabilities, with technology that could also help commercial customers secure their software.
SecurityWeek
-
A group of academics from VUSec and Scuola Superiore Sant’Anna have disclosed details of a new Spectre CPU vulnerability variant that affects Just-In-Time (JIT) engines present in web browsers, language runtimes, and the operating system kernel, across multiple CPU vendors. The new Spectre-v2 variant has been codenamed Branch Target Reuse (BTR). “The key insight is…
The Hacker News
-
A new Branch Target Reuse (BTR) attack has been devised that can recover root password hashes on Intel computers running Linux in 3-5 minutes on average.
BleepingComputer
