Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 103 stories in 24 hours
Global Cyber Attacks
The incidents, breaches and state campaigns making headlines.
176stories this week
19today
the last seven days
Most fromThe Record, BleepingComputer, CyberScoop, SecurityWeek
In the news hereMicrosoft15Google13ConnectWise10OpenAI8SafePay2APT28 (Fancy Bear)2Qilin1RansomHub1
MyCyberWay trainingEvery story here started as an alert. Learn to triage them.See Blue Team Analyst
-
Pentagon personnel agency breach exposed data of 3 million people after attackers accessed a file-sharing server for about nine months. The U.S. Defense Manpower Data Center (DMDC), which maintains personnel records for the Department of Defense, is notifying people that their personal information was exposed in a data breach. According to the agency, unauthorized users…
Security Affairs
-
Identity governance helps control who should have access, but periodic reviews alone may not reveal attacks as they happen. tenfold Software explains how real-time identity telemetry can help security teams investigate suspicious activity before it escalates.
BleepingComputer
-
Cybersecurity researchers have identified a cluster of 101 npm packages that are used to trap developers into a WhatsApp group subscriber campaign dubbed PhantomSub. “The malicious packages abuse the ‘Baileys’ WhatsApp open source project to add the victims to groups without their consent,” OX Security researchers Nir Zadok, Moshe Siman Tov Bustan, and Vitalii Chepurko…
The Hacker News
-
Apple patched zero-day CVE-2026-86950 in CoreGraphics, exploited in sophisticated targeted attacks against specific iOS users. Apple has released security updates for iOS, iPadOS and macOS to fix a zero-day vulnerability, tracked as CVE-2026-86950, in CoreGraphics that may have been exploited in attacks against specific individuals. The flaw is an out-of-bounds write that can lead to…
Security Affairs
-
Apple says the bug was used to attack “specific targeted individuals” running iOS 26, which the majority of Apple customers are still using.
TechCrunch
-
The personalized versions of ChatGPT were used to impersonate legitimate products and trick users into executing PowerShell commands.
SecurityWeek
-
Joseph Cox reports: The hackers behind the massive FBI breach told 404 Media on Monday they do not intend to publish the data. The breach, in which the hackers stole personal information on “all FBI employees and applicants” including physical addresses, job roles, names of spouses, and medical records, represents a significant national security and……
DataBreaches.net
-
The company also detailed how some of those breaches had happened, and outlined additional measures it is taking to assess the impact of the events.
TechCrunch
-
68M users
Russian pizza restaurant chain confirms cyberattack: Hackers claim 68 million users exposed
Andrey Mihayloff reports: Dodo Pizza has confirmed a cyberattack on its IT systems, admitting that attackers may have accessed personal data of a portion of its customer base. The company reported the breach to Roskomnadzor and stated that access to the system has since been blocked. According to the company, the exposed data may include:……
DataBreaches.net
-
The round builds on a $30 million fundraise in February, taking the company’s total funding to $140 million.
TechCrunch
-
The data breach affects the Defense Manpower Data Center (DMDC), which maintains personnel records for the Department of Defense.
SecurityWeek
