Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 114 stories in 24 hours
Global Cyber Security
👉 Worldwide incidents, breaches, malware
189stories this week
21today
the last seven days
Most fromBleepingComputer, The Record, SecurityWeek, CyberScoop
In the news hereMicrosoft18Google14ConnectWise12OpenAI8SafePay2Qilin2Lazarus2APT28 (Fancy Bear)2
MyCyberWay trainingBreaches like this get investigated, not just reported.See Blue Team Specialist
-
The open-source AI coding project OpenCode has notified a small number of users that API keys they used with external providers were exposed in a security breach.
BleepingComputer+1 source
-
Ahold Delhaize, the Dutch multinational grocery retailer, said Monday that a cyberattack forced it to take systems offline across most of its U.S. and European brands, impacting shoppers on both sides of the Atlantic.
The Record+3 sources
-
We break down a real-world breach of a cloud ERP system, and explain how to avoid the key mistakes.
Kaspersky
-
Around 80 pages on WhatsApp’s website exposed instructions that were designed for its chatbot, including “WHAT NOT TO SAY.” Meta says a bug caused the issue.
WIRED+2 sources
-
The disruptions began Sunday, when users complained of difficulties loading news feeds, playing music and accessing other features of VK’s platforms.
The Record
-
The order cites national security concerns, including sending data to servers in China, the potential for malware and the overall risk to federal IT systems.
CyberScoop+6 sources
-
Hackers injected malware into Rank Math PRO version 3.0.123 packages distributed between October 15 and October 16.
SecurityWeek+2 sources
-
Nearly half of corporate directors think board members need cybersecurity expertise, a new survey found.
Cybersecurity Dive
-
Copyright takedown requests tied to OnlyFans and other adult content creators are revealing how attackers exploit vulnerable university and government websites to manipulate search results. UpGuard’s Greg Pollock explains what universities, government websites, and security teams need to think about next.
Dark Reading
-
U.S. federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have identified executives at two different ransomware negotiation firms who maintained unusually close relations with the extortion group, KrebsOnSecurity has learned. Sources close to the investigation say one of the executives in the United States even helped ShinyHunters…
Krebs on Security
-
The services remain unavailable as the company continues remediation and security validation.
SecurityWeek+2 sources
-
ConnectWise has disabled key cloud services and is investigating unauthorized access to customers’ Microsoft 365 environments after a credential tied to its Cloud Backup platform was compromised and used to authenticate into customer tenants, prompting Huntress to identify suspicious sign-ins across 162 organizations. The activity involved the Cloud Backup application obtaining Microsoft Graph access tokens…
CSO Online UK
