Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 133 stories in 24 hours
Global Cyber Attacks
The incidents, breaches and state campaigns making headlines.
163stories this week
7today
the last seven days
Most fromThe Record, BleepingComputer, The Hacker News, SecurityWeek
In the news hereMicrosoft14Google13ConnectWise11OpenAI8SafePay2APT28 (Fancy Bear)2Qilin1RansomHub1
MyCyberWay trainingEvery story here started as an alert. Learn to triage them.See Blue Team Analyst
-
The Cambridge Analytica data privacy scandal from a decade ago is still weighing on Meta’s finances.
The Record+1 source
-
Researchers at Fortra are tracking a surge in phishing attacks targeting bank accounts via remote monitoring and management (RMM) tools.
KnowBe4
-
Up to 500 under-resourced utilities will receive support in order to bolster their cybersecurity through a private sector initiative launched this week.
The Record
-
From AI-discovered PHP vulnerabilities to flaws in Node.js and popular AI tool LiteLLM, cybersecurity teams have plenty to worry about this week.
TechCrunch
-
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that attackers are actively exploiting four vulnerabilities in Plex Media Server.
BleepingComputer+2 sources
-
The pair stressed the latest update showed no country is pursuing the technically challenging effort to interfere with or hack into the country’s election infrastructure or tamper directly with votes.
The Record
-
Storm-0940 used ARTEX agentic AI to accelerate a ConnectWise supply chain compromise, enabling application credential abuse across Microsoft 365 environments.
Microsoft Threat Intelligence
-
Plus a RAT for good measure – get threat hunting now…
The Register+2 sources
-
The popular LiteLLM Python package has been compromised as part of a software supply chain attack that delivered a credential stealer and a backdoor, according to reports from SafeDep, Socket, StepSecurity, and Upwind. The compromise affects LiteLLM 1.107.0, distributed through PyPI wheels and Docker images. The Python package has since been quarantined on Python Package…
The Hacker News+2 sources
-
This is the kind of security issue that was found and prevented by AI, but is also a high risk because of AI.
TechCrunch
-
Major web browsers blocked the eMudhra TLS certificates to prevent them from being weaponized.
Cybersecurity Dive
-
In a lengthy statement about two critical vulnerabilities, the PHP Foundation explained how one dated to 2024, how a recent third-party review by AI companies heightened attention on both, why it scrambled to post information earlier than planned.
The Record
