Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 107 stories in 24 hours
👉 Worldwide incidents, breaches, malware
196stories this week
30today
the last seven days
Most fromBleepingComputer, The Record, SecurityWeek, The Hacker News
In the news hereMicrosoft20ConnectWise15Google14OpenAI8SafePay2Qilin2Lazarus2APT28 (Fancy Bear)2
The threat actor known as Silent Lynx has been attributed to a fresh set of attacks targeting government organizations across the Commonwealth of Independent States (CIS). The activity, observed from June 2025 through August 2026, involves four different infection chains that make use of macro-enabled documents, PS2EXE downloaders, GitHub-hosted PowerShell, and crafted WinRAR archives…
The Hacker News
The investigation points to a much wider risk for industrial systems across the globe.
Cybersecurity Dive
Vulnerability disclosures and hacking campaigns haven’t made much of a dent in the amount of important infrastructure left online, a new report found.
Cybersecurity Dive
A cyberattack on Britain’s Legal Aid Agency (LAA) stole far older and broader records than the government previously disclosed.
The Record
Exploited
Written by: Jayson Frost, Bryce Greathouse, Brian Meyer, John Palmisano, Rajesh Rajeshirke, Steve Rasch, John Wolfram Introduction On October 15, BeyondTrust disclosed a vulnerability, CVE-2026-102764, impacting BeyondTrust Remote Support (formerly Bomgar) appliances. BeyondTrust Remote Support is an enterprise secure remote access solution that enables IT teams to securely access and troubleshoot remote endpoints. The successful…
Google Threat Intelligence
The UK’s data protection watchdog warns of an “ongoing failure” by the Metropolitan Police Service to restrict staff from using unauthorised IT services…
Computer Weekly
A roughly 2-year-old cyber-espionage campaign against Central Asian states appears to originate in Kazakhstan, researchers said.
The Record
Roughly 700 French supermarkets were hit by the cyberattacks, for which no group has claimed responsibility.
SecurityWeek
Guru Baran reports: Ransomware gangs are moving beyond locked files and stolen data. Criminals now threaten employees, executives, and their families to force companies to pay. According to the Semperis 2026 Ransomware Risk Report, 37% of successful attacks included threats against workers’ friends or relatives. The findings show that ransomware is no longer only a……
DataBreaches.net
Tevye Markson has an update on the April 2025 breach of the UK’s Legal Aid Agency, previously reported on this site: A new update on the Legal Aid Agency data breach has revealed that the data which was compromised in a cyberattack in 2025 goes back as far as 1978. The LAA on Wednesday announced……
DataBreaches.net
Attackers are impersonating popular AI products to distribute malware, steal browser sessions, and compromise business accounts. ANY.RUN linked 1,258 public sandbox analyses to fake AI campaigns between April and October of 2026. The campaigns also increase operational pressure on MSSPs serving US businesses, which accounted for 16% of country-attributed targets. Similar attacks…
The Hacker News
US authorities have arrested two suspects and seized nearly 190 devices in a crackdown on North Korea’s fake remote IT workers. The FBI warns that the scheme is expanding to include identity theft, extortion and even threats of physical violence. North Korean operatives have been posing as US-based workers to quietly land remote IT jobs…
Bitdefender