Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 116 stories in 24 hours
Global Cyber Security
👉 Worldwide incidents, breaches, malware
196stories this week
30today
the last seven days
Most fromBleepingComputer, The Record, CyberScoop, SecurityWeek
In the news hereMicrosoft20ConnectWise15Google14OpenAI8SafePay2Qilin2Lazarus2APT28 (Fancy Bear)2
MyCyberWay trainingBreaches like this get investigated, not just reported.See Blue Team Specialist
-
ConnectWise (SkyKick) vendor credentials are being abused to access Microsoft 365 tenants. Disable the apps now and check your logs here.
Huntress
-
The actions could have resulted in criminal charges had humans been behind the keyboard.
Ars Technica
-
Researchers warn that hackers could soon exploit a maximum-severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce, potentially allowing them to execute arbitrary PHP code on store servers.
BleepingComputer
-
A phishing campaign is targeting YouTubers with phony sponsorship offers, according to researchers at ESET. The emails are personalized to each target, making specific references to their channels, and are designed to trick users into granting access to their Google accounts.
KnowBe4
-
Campaigns that impersonate popular AI brands are on the rise, and they typically use ClickFix-like tactics to target unsuspecting enterprise employees.
Dark Reading
-
Despite Illinois’ sanctuary laws, local police in and around Chicago helped ICE investigative agents track activists engaged in First Amendment–protected activities.
WIRED
-
Joe Tidy reports: German police have detained a Russian man accused of being part of a cyber-crime gang which caused chaos at London hospitals and contributed to a patient’s death. The hack of blood testing company Synnovis in 2024 led to disrupted pathology services across several London hospitals and was the first cyber attack in……
DataBreaches.net
-
Candiru spyware was delivered to devices at Al Jazeera Media Network via targeted online advertisements in a zero-click attack that required only rendering the malicious ads on the victim’s device.
BleepingComputer
-
Researchers said the first known attack by Armory Castle, also known as UNC5221, occurred almost seven weeks ago. The threat group previously compromised Ivanti and Citrix customers.
CyberScoop
-
The outage has stopped official bankruptcy notices nationwide since Oct. 9, with no cause or restoration date announced.
CyberScoop
-
Researchers say the hacker is harvesting credentials and stealing sensitive information.
Cybersecurity Dive
-
In part one of this NIS2 series, we examined why vendor questionnaires fall short and how third-party breaches impact downstream organizations across Europe. But what happens after a supplier containment phase ends? The long-term danger lies in how attackers leverage exfiltrated supplier data to launch hyper-targeted social engineering attacks against an organization’s employees.
KnowBe4
