Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 115 stories in 24 hours
Global Cyber Attacks
The incidents, breaches and state campaigns making headlines.
163stories this week
7today
the last seven days
Most fromThe Record, BleepingComputer, The Hacker News, SecurityWeek
In the news hereMicrosoft14Google13ConnectWise11OpenAI8SafePay2APT28 (Fancy Bear)2Qilin1RansomHub1
MyCyberWay trainingEvery story here started as an alert. Learn to triage them.See Blue Team Analyst
-
A OnePlus 15 running the latest OxygenOS can be rooted by a malicious app the owner installs, one that asks for no special permissions. A researcher, Rasmus Moorats, chained two flaws in OnePlus’s own software to gain root access, the highest level of control over an Android phone. OnePlus told him the same flaws affect…
The Hacker News
-
Storm-2570 is a ransomware affiliate that uses consistent post-compromise tools and techniques across deployments involving Qilin, DragonForce, Anubis, and BERT ransomware, and provides guidance to help defenders detect and disrupt this activity before ransomware deployment.
Microsoft
-
The “third-party[.]com” domain, commonly used as a documentation placeholder, has been observed serving a ClickFix lure to Windows browsers while displaying a harmless decoy to other users. “third-party[.]com has been a generic documentation placeholder for years, the same role example.com plays,” Manifold Security’s Head of Research, Ax Sharma, said. “Unlike ‘example[.]com,’ third-party[.]com…
The Hacker News
-
An active ClickFix campaign has been observed compromising legitimate Ukrainian business websites to inject bogus Cloudflare verification pages and trick victims into downloading a previously undocumented information stealer called Psychedelic. “When a visitor interacts with the page, the lure copies a Windows Installer command to the clipboard and instructs the visitor to paste it into…
The Hacker News
-
News that an automated AI agent hacked a government IT system raises big questions about regulating the tech.
BBC News
-
Esther Taylor has just been told that her daughter’s medical records were stolen in a cyber attack in 2025.
BBC News
-
Even if the organization locks down employee accounts, forgotten and lost service accounts can still undo the organization’s entire M365 environment.
Dark Reading
-
The hackers claim they have every agent’s name, role, badge number and personal details including home address, phone numbers and spouse information.
BBC News
-
The logistics sector has become the target of a new malicious cyber campaign that distributes an Android spyware codenamed Corp MDM. According to Have I Been Squatted, the campaign uses fake Google Play pages branded as CEVA and TKW Logistics to distribute an Android Package Kit (APK) file that’s dressed up as a system service.…
The Hacker News
-
Until now, cryptographers thought factoring was the only way to break RSA. Not anymore.
Ars Technica
-
AI coding agents are changing how quickly developers can build and ship software as well as how quickly credentials can become exposed. According to GitGuardian’s 2026 State of Secrets Sprawl Report, commits identified as AI-assisted are leaking secrets at approximately twice the rate of human-written ones. Most of the fastest-growing categories of leaked credentials are…
The Hacker News
-
The country’s prime minister expressed disappointment at being informed of the hack only via email. Now Australia is investigating whether OpenAI broke the law.
WIRED
