Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 133 stories in 24 hours
Global Cyber Attacks
The incidents, breaches and state campaigns making headlines.
163stories this week
7today
the last seven days
Most fromThe Record, BleepingComputer, The Hacker News, SecurityWeek
In the news hereMicrosoft14Google13ConnectWise11OpenAI8SafePay2APT28 (Fancy Bear)2Qilin1RansomHub1
MyCyberWay trainingEvery story here started as an alert. Learn to triage them.See Blue Team Analyst
-
Protections have been added against scams and social engineering, including new site warnings and server-side Gemini analysis.
SecurityWeek
-
A developer’s GitHub account that was compromised several months earlier was used to push malicious code to unsuspecting users.
Dark Reading
-
The third quarter of 2026 saw the highest number of ransomware attacks to date, with 2,627 total attacks, according to a new report from Comparitech.
KnowBe4
-
Expect to see quite a few websites serving “404” or “Page Not Found” errors today: Nearly 70 percent of websites need to update their core software to fix a pair of vulnerabilities that allow an attacker to seize full control over affected servers. Experts say there are working exploits for the flaws, and that these…
Krebs on Security
-
Nikkei has revealed that more than a million records have been stolen, but said most can’t be used to identify an individual…
ITPro+1 source
-
Deceptive prompts lure AI agents into decoys and dead ends, cutting attack success by up to 91% in tests and raising the cost of a successful attack 23-fold.
SecurityWeek
-
Rapid7’s Q3 analysis finds high-severity flaws exploited within three days on average, while AI appeared in just 8% of tracked incidents.
SecurityWeek
-
The PHP Foundation has revealed two serious vulnerabilities that could impact millions of websites. Security experts warn that failure to quickly patch the flaws could have dire consequences.
WIRED
-
The group has been linked to a 2025 attack targeting technology firm Ingram Micro.
Cybersecurity Dive+2 sources
-
The maintainers of the globally used PHP scripting language released patches for two vulnerabilities after alerting users that the bugs were severe.
The Record
-
The serious flaws in popular website software prompted government agencies to urge organizations to take their sites offline until they could be fixed.
Cybersecurity Dive
-
Eight intermediate certificates issued by Indian certificate authority eMudhra were secured with private keys so weak that anyone could recover them from the public certificates in under a second. On its website, the company highlights that it has issued more than 60 million digital certificates. A security researcher known as Wayne discovered the flaw on…
Help Net Security
