Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 113 stories in 24 hours
Global Cyber Attacks
The incidents, breaches and state campaigns making headlines.
183stories this week
28today
the last seven days
Most fromBleepingComputer, The Record, CyberScoop, SecurityWeek
In the news hereMicrosoft17ConnectWise13Google13OpenAI8SafePay2APT28 (Fancy Bear)2Qilin1RansomHub1
MyCyberWay trainingEvery story here started as an alert. Learn to triage them.See Blue Team Analyst
-
Cisco released security updates to address a critical zero-day in the Catalyst SD-WAN Manager (tracked as CVE-2026-76504) that attackers are actively exploiting to escalate to admin privileges.
BleepingComputer
-
Persistent AI coworkers may operate continuously with standing access, creating identity risks that existing security models were not designed to handle. Token Security explains why these agents need their own identities, owners, scoped permissions, and lifecycle controls.
BleepingComputer
-
Microsoft has reminded customers that the Entra ID authentication system will get better protection against external script injection attacks starting next month.
BleepingComputer
-
DOJ charges against Oxygen Forensics reveal the Russian-linked firm also sold forensic software to EU projects and European police forces for years. Last week’s Justice Department indictment of Oxygen Forensics looked, at first, like an American procurement scandal. CEO Lee Reiber and Russian co-founder Oleg Davydov stand accused of hiding that the company was Russian-owned…
Security Affairs
-
Several security firms have confirmed seeing exploitation of the NetScaler vulnerabilities CVE-2026-88771 and CVE-2026-88772.
SecurityWeek
-
Remote access software company TeamViewer warned customers on Tuesday to immediately patch a set of high-severity vulnerabilities affecting its client and host software.
BleepingComputer
-
Given that the browser is where business apps are accessed and used, it makes sense that attacks are happening there too. Most breaches today begin in a browser session. Often, they never leave it, with the entire attack chain from initial access to exfiltration playing out in the browser. Here are the six most dangerous…
The Hacker News
-
424K accounts
Medela – 423,947 breached accounts
In September 2026, Swiss medical device company Medela was the target of a ShinyHunters “pay or leak” extortion campaign. The data allegedly obtained in the breach was later published publicly and included 424k unique email addresses belonging predominantly to healthcare professionals, Medela staff and leads. The exposed data consisted primarily of corporate contact information, including…
Have I Been Pwned
-
AI coding agents asked to share screenshots of code changes for review have put internal company images in public GitHub repositories, security company Glow said. Its researchers found more than 13,000 internal images from developers at over 300 organizations, including customer billing records and screens of features not yet released. In most cases, they sat…
The Hacker News
-
Attacks by autonomous AI agents are moving out of the lab and into the courtroom, raising unsettled questions about who is liable for what agents do.
SecurityWeek
-
The move will be part of a major overhaul of the ecosystem for website authentication.
Ars Technica
-
Cryptocurrency exchange Bitget revealed today that attackers who stole $387.5 million last week breached its systems after exploiting a zero-day flaw in third-party security products.
BleepingComputer
