Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 96 stories in 24 hours
Global Cyber Attacks
The incidents, breaches and state campaigns making headlines.
167stories this week
11today
the last seven days
Most fromBleepingComputer, The Record, SecurityWeek, CyberScoop
In the news hereMicrosoft14Google13ConnectWise10OpenAI8SafePay2APT28 (Fancy Bear)2Qilin1RansomHub1
MyCyberWay trainingEvery story here started as an alert. Learn to triage them.See Blue Team Analyst
-
Nikkei Inc. disclosed a new data breach, the third in about a month, that exposed 1.83 million personal information records.
BleepingComputer+1 source
-
Some downloads of the Rank Math PRO WordPress plugin from the vendor’s official website carried malware that planted hidden backdoors in a supply-chain attack last week.
BleepingComputer+2 sources
-
Threat actors have begun to exploit a chain of vulnerabilities in Plex Media Server to deploy cryptocurrency miners and reverse proxy software, a day after a proof-of-concept (PoC) went public. According to a researcher who goes by the online alias boredhackerblog, the exploitation activity involves chaining four different vulnerabilities, collectively called Plex2Shell. The vulnerabilities…
The Hacker News
-
Second security snafu in two years…
The Register+3 sources
-
A judge ordered Abdulrahman Alfozan to remain in custody, likening the Saudi government’s offer to secure the former OpenAI engineer’s release to a “blank check.”
WIRED
-
WhatsApp argued that NSO Group violated a 2025 injunction against using the messaging app to spread spyware. A federal judge said WhatsApp hurt its case by not revealing enough information.
The Record
-
ConnectWise initially said on Friday that it was investigating “attempts of unauthorized access associated with the ConnectWise Cloud Backup environment,” and confirmed such access on Saturday.
The Record+2 sources
-
Hackers reportedly compromised AOMEI’s servers to distribute malware through a built-in promotional feature in its backup software, briefly tampering with configuration files before restoring them to their original state to hide the attacks.a…
BleepingComputer
-
A researcher says attacks chaining 4 vulnerabilities is hacking unpatched boxes.
Ars Technica
-
Staffing software company Bullhorn has disabled access to its platform to contain a cyberattack that caused a system-wide outage.
BleepingComputer+1 source
-
A phone belonging to the rector of the University of Belgrade was discovered to have been infected with Pegasus spyware, the latest in a series of such discoveries in the lead-up to Serbia’s national elections.
The Record
-
Attackers exploit Plex2Shell flaws to install crypto miners and proxy software. Admins should update their Plex Media Server. Plex Media Server is designed to make movies, music, and other media available across devices. But when a server is exposed to the internet and runs vulnerable software, it can become an entry point for attackers who…
Security Affairs+2 sources
