Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 125 stories in 24 hours
Nation-State Threats
The incidents, breaches and state campaigns making headlines.
15stories this week
2today
the last seven days
Most fromThe Hacker News, Securelist (Kaspersky), Cybersecurity Dive, CyberScoop
In the news hereConnectWise2Lazarus2APT28 (Fancy Bear)2Microsoft1Ivanti1Citrix1APT411
MyCyberWay trainingBreaches like this get investigated, not just reported.See Blue Team Specialist
-
Introduction In late September 2026, Mandiant Consulting and Google Threat Intelligence Group (GTIG) identified active, in-the-wild exploitation of a zero-day vulnerability (CVE-2026-88772) affecting Citrix NetScaler ADC and NetScaler Gateway appliances. We have observed evidence that organizations in North America and Europe in the government, financial services, technology, education, and legal and professional services sectors were…
Google Threat Intelligence
-
A high-severity zero-day vulnerability affects the TDengine time-series database used across industrial, IoT, energy, and automotive environments.
Dark Reading
-
The botnet uses the open source Hermes Agent AI framework to execute commands via Telegram and steal AI API keys from exposed Docker hosts.
Dark Reading
-
Enterprises regularly rigorously monitor human employees, while autonomous AI agents quietly operate with broad privileges that could turn them into the next generation of insider threats.
Dark Reading
-
A purported ad-blocker exfiltrates reams of sensitive information and benefits from having Google’s stamp of approval despite researcher warnings.
Dark Reading
-
The “agentic threat actor” may have used exposed credentials to access resources and delete cloud-based storage, applications, and databases.
Dark Reading
-
CISA added CVE-2026-65660 to its KEV catalog, giving federal agencies a patching deadline of September 28.
SecurityWeek
-
The US and China agreed to set up a communication mechanism for artificial intelligence-related incidents.
SecurityWeek
-
The Windows botnet relies on AI to maintain persistence, using xAI Grok to choose from predefined actions.
SecurityWeek
-
OpenAI’s CEO said there is an “extensive and ongoing review related to our agents’ use of internet access during training and evaluation.”
SecurityWeek
-
Organizations where CISOs and CFOs align on cybersecurity strategy to protect assets, manage risk, and enable business growth are better prepared to face today’s threat landscape.
Dark Reading
-
Bitget says suspected North Korea-linked actors stole $351.6M from hot and warm wallets. Withdrawals were suspended while Mandiant investigates. Cryptocurrency exchange Bitget says suspected North Korea-linked threat actors stole $351.6 million from a limited number of hot and warm wallets. The company detected unauthorized transfers on September 24 and temporarily suspended withdrawals. Bitget said customer…
Security Affairs
