Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 103 stories in 24 hours
The incidents, breaches and state campaigns making headlines.
176stories this week
19today
the last seven days
Most fromThe Record, BleepingComputer, CyberScoop, SecurityWeek
In the news hereMicrosoft15Google13ConnectWise10OpenAI8SafePay2APT28 (Fancy Bear)2Qilin1RansomHub1
Can traditional firewalls keep up with today’s distributed enterprise? Discover how hybrid mesh firewalls close security gaps without slowing networks.
Cybersecurity Dive
Ransomware attackers threatened employees’ family members or friends at 37% of organizations surveyed for Semperis’ 2026 Ransomware Risk Report. The survey covered 1,200 IT and security professionals at organizations that had experienced at least one successful ransomware attack. “Ransomware has proven to be a great cash-generating activity for criminal syndicates, which have no hesitation about…
Help Net Security
Party like it’s CVE-2026-99999 – a 9.3-rated nasty called PwnEscape…
The Register+1 source
No novelty required to be effective Categories: Threat Research, X-ops, Sophos SecOps Tags: incident response…
Sophos
Attackers are targeting an OS command injection vulnerability in SiteGuard Server Edition that lets them execute commands as root or SYSTEM on affected servers.
BleepingComputer
ConnectWise on Saturday said it has disabled seven ConnectWise application identities as it continues its investigation into an incident in which unknown threat actors obtained unauthorized access to the application identities and compromised Microsoft 365 tenants. The disabled identities are listed below – ConnectWise Cloud Backup – 506e08f9-6e9a-4da4-942b-a099a03644ae ConnectWise…
The Hacker News
118K accounts
In May 2026, the French holiday rental network Gîtes de France suffered a data breach affecting some of its departmental branches. The incident exposed hundreds of thousands of customer records, including 118k unique email addresses alongside names, phone numbers, postal addresses and booking details.
Have I Been Pwned
NY’s Attorney General and CT’s Attorney General held both a provider and its IT company liable for a data breach. The settlement also includes a corrective action plan to improve data security. New York Attorney General Letitia James and Connecticut Attorney General William Tong today secured $2.7 million from Boston Children’s Health Physicians (BCHP), a……
DataBreaches.net
The FBI raided 40 Texas homes over a North Korean scheme that used fake IT workers to target 70 US companies and generate $3 million. The Justice Department (DoJ) announced coordinated enforcement actions this week targeting North Korea’s long-running scheme to place fake IT workers inside American companies. Two US nationals were arrested, 14 people…
Security Affairs
Eric He and Tyler Katzenberger report: Personal information about millions of California students was stolen in a hack of a non-profit organization that contracts with the state’s Department of Education, officials announced Friday. The names, addresses, demographic information and disability status of all 7 million students enrolled in California public schools over the past three……
DataBreaches.net
ConnectWise has shut down customer access to its Cloud Backup service (formerly SkyKick Cloud Backup) after hackers accessed application identities and compromised Microsoft 365 tenants.
BleepingComputer
Canada’s planned surveillance law is the latest grim step in a series of threats to encryption that are spreading around the world.
WIRED