Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 107 stories in 24 hours
👉 Worldwide incidents, breaches, malware
196stories this week
30today
the last seven days
Most fromBleepingComputer, The Record, SecurityWeek, The Hacker News
In the news hereMicrosoft20ConnectWise15Google14OpenAI8SafePay2Qilin2Lazarus2APT28 (Fancy Bear)2
Our analysis an AI-powered espionage campaign targeting government Linux infrastructure with custom malware, web shells, and advanced credential theft.
Unit 42
The deal pairs the email security giant’s massive threat intelligence with Varonis’ visibility into corporate data, as both companies race to secure the AI agents now roaming enterprise networks.
CyberScoop
The incident, which involved a government contractor, has halted all production of bankruptcy notices.
The Record
Don’t buy the hype! AI has been dumbing down cyberattacks, and serious threat actors are barely touching it.
Dark Reading
The incident is likely 1st confirmation of mercenary spyware delivered by targeted ads.
Ars Technica
Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online – Built-in CODE Server app (richdocumentscode) for Nextcloud.
BleepingComputer
Someone is seeding the internet with hyperlocal content about political races. Researchers say it’s designed to train AI chatbots to favor candidates across a broad range of issues.
CyberScoop
Powerful zero-click spyware is infected devices worldwide through targeted ads, new research shows — an alarming development in the spread of surveillance technology.
The Record
Silent Lynx, a group likely based in Kazakhstan, targets Russian energy and government entities in espionage campaigns across Central Asia. Researchers from Cisco Talos and Recorded Future published a detailed paper on a threat actor they call Silent Lynx (aka UAT-6275, TAG-193), a Kazakhstan nexus group conducting espionage across Central Asia. The targets include the…
Security Affairs
A proxyjacking campaign has impacted devices in 34 countries, monetizing victims’ internet connections through a commercial residential proxy network.
BleepingComputer
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
SecurityWeek
Debra Ahmed reports: An unprotected database linked to India-based AI software development and IT services company Vibetech exposed 13.7 million records containing credentials and other sensitive information from previous data breaches. The repository was accessible online without security authentication or a password, according to cybersecurity researcher Jeremiah Fowler, whose findings were published by ExpressVPN and……
DataBreaches.net