Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 103 stories in 24 hours
👉 Worldwide incidents, breaches, malware
189stories this week
21today
the last seven days
Most fromThe Record, BleepingComputer, CyberScoop, SecurityWeek
In the news hereMicrosoft18Google14ConnectWise12OpenAI8SafePay2Qilin2Lazarus2APT28 (Fancy Bear)2
Intruders used compromised credentials to access an ETS SFTP server, copying records of California students back to 2006.
SecurityWeek+1 source
Hackers have stolen passwords, access credentials and other sensitive data belonging to customers of Russian hosting provider FirstVDS after exploiting a vulnerability in software used to manage its servers.
The Record
The persistent, stealthy FortiGate implant was deployed against a telecommunications organization.
SecurityWeek
The California Department of Education notified students about a data breach at contractor Educational Testing Service.
Malwarebytes+1 source
The confirmed and suspected targets include a university rector backing Serbia’s protests and a prosecutor who investigated a Trump-linked Belgrade development, weeks before parliamentary elections.
CyberScoop
Microsoft accounted for 33% of brand impersonation attempts tracked by Check Point Research in the third quarter of 2026, up from 23% in the previous quarter and roughly four times the share of any other brand. Top 10 most impersonated brands in phishing attacks (Source: Check Point) Apple and Google followed with 8% each. Dropbox…
Help Net Security
Defenders get 15 new detection strategies, six for Enterprise and nine for ICS, backed by 38 analytics.
SecurityWeek
Attackers stole ConnectWise application credentials to access Microsoft 365 tenants, prompting the company to suspend cloud services. ConnectWise suspended its Cloud Backup service and took both SaaS Security and Cloud Management offline over the weekend after discovering that unknown attackers had obtained unauthorized access to seven of its application identities. The company discovered the incident…
Security Affairs
An intruder reached a legacy system at OpenCode on the night of October 16 and may have exposed the third-party AI provider keys that users had saved in OpenCode Console, the company said. Console is OpenCode’s optional hosted service: a workspace saves its own OpenAI, Anthropic, or Google key there, and Console uses that key…
The Hacker News+1 source
Q-day is coming. Discover how to prepare your IT infrastructure for post-quantum security challenges.
Cybersecurity Dive
Can traditional firewalls keep up with today’s distributed enterprise? Discover how hybrid mesh firewalls close security gaps without slowing networks.
Cybersecurity Dive
Ransomware attackers threatened employees’ family members or friends at 37% of organizations surveyed for Semperis’ 2026 Ransomware Risk Report. The survey covered 1,200 IT and security professionals at organizations that had experienced at least one successful ransomware attack. “Ransomware has proven to be a great cash-generating activity for criminal syndicates, which have no hesitation about…
Help Net Security