Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 108 stories in 24 hours
Global Cyber Attacks
The incidents, breaches and state campaigns making headlines.
160stories this week
1today
the last seven days
Most fromBleepingComputer, The Record, The Hacker News, SecurityWeek
In the news hereMicrosoft19ConnectWise15Google13OpenAI8SafePay2APT28 (Fancy Bear)2Qilin1RansomHub1
MyCyberWay trainingBreaches like this get investigated, not just reported.See Blue Team Specialist
-
More than 3,400 servers have been compromised by malware that hides its infrastructure coordinates in a poem.
CyberScoop
-
An initial access broker is working with various ransomware groups in a global campaign.
Cybersecurity Dive
-
Southern Company is notifying customers that their utility account information was accessed by hackers.
SecurityWeek
-
The Operational Technology Cybersecurity Coalition released a white paper urging the CISA to create a new directive centered around operational technology, which is used to monitor and control critical infrastructure.
The Record
-
Ransomware groups are increasingly targeting backup infrastructure to eliminate recovery options and increase pressure on victims to pay. Kaseya explains why organizations need isolated, immutable, and regularly tested backups that attackers cannot easily reach.
BleepingComputer
-
FBI and Secret Service warn FortiBleed, a credential-harvesting campaign against Fortinet firewalls, has compromised 86,644 devices and is locking out admins. The FBI and the U.S. Secret Service issued a joint advisory about FortiBleed, and the headline number alone is worth sitting with: more than 86,644 compromised Fortinet FortiGate devices across 194 countries, according to…
Security Affairs
-
The individual was detained in May and has been extradited to Germany to face hacking charges.
SecurityWeek
-
Over 100 hacked websites used fake Cloudflare checks to trick visitors into installing LunexStealer through ClickFix commands. The lure is the now-familiar ClickFix technique, dressed up as Cloudflare’s standard bot check. The fake page asks you to run a command, supposedly to confirm you’re not a bot, and that command quietly downloads and installs an…
Security Affairs
-
A critical vulnerability (CVE-2026-21589) affecting multiple Atlassian product families, including Jira, Confluence, and Bitbucket, is being exploited in attacks that do not require authentication.
BleepingComputer
-
The Japanese chip testing giant said hackers stole personal information from its servers in the February 2026 cyberattack.
SecurityWeek
-
Denmark is reviewing security controls around its national citizen registry after unauthorized parties exploited a company’s access credentials to harvest records on approximately 8.8 million people over a 10-day period. The breach covers people living in Denmark as well as individuals who have died or moved abroad, while people with protected names and addresses were…
CSO Online UK
-
Attackers who took control of three country-code top-level domains (ccTLDs) used that access to obtain HTTPS certificates for several Google domains and for domains run by other large organizations, Google disclosed on Tuesday. Attackers compromised the third-party operators of the .gh (Ghana), .sl (Sierra Leone) and .as (American Samoa) ccTLDs, putting every domain under those…
Help Net Security
