Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 106 stories in 24 hours
Global Cyber Security
👉 Worldwide incidents, breaches, malware
167stories this week
0today
the last seven days
Most fromThe Record, BleepingComputer, The Hacker News, SecurityWeek
In the news hereMicrosoft21ConnectWise16Google14OpenAI8SafePay2Qilin2Lazarus2APT28 (Fancy Bear)2
MyCyberWay trainingBreaches like this get investigated, not just reported.See Blue Team Specialist
-
Chatbot prompts reveal the engineer’s alleged efforts to set up a covert listening device days before one was found in a meeting room used by high-level executives.
WIRED
-
Abdulrahman Alfozan, 35, a Saudi national working as an engineer for OpenAI, was charged Tuesday with secretly bugging an executive conference room at one of the company’s buildings in San Francisco.
The Record
-
Exploited
Ivanti misses opportunity to fix vulnerability before attackers got to work and made it a zero-day
The security vendor said it initially discovered a portion of the defect during internal security checks in June, but the company said it didn’t meet the threshold for an out-of-band release.
CyberScoop
-
Unit 42 dissects a cyberattack targeting a European bank’s IT infrastructure, delivering concrete defense strategies to help organizations detect and counter comparable threats.
Unit 42
-
Operation Lonestar Roundup uncovered an operation that used stolen identities to secretly funnel $3 million from 70 U.S. employers back to Pyongyang.
CyberScoop
-
A critical heap buffer overflow vulnerability (CVE-2026-39919) in the Ghostscript interpreter and rendering engine could allow remote code execution through specially crafted PDF files.
BleepingComputer
-
The Democratic People’s Republic of Korea (DPRK) is trying to get insight into its own war effort in Ukraine, through simple reply-baiting phishing attacks.
Dark Reading
-
It’s not clear exactly for what purpose the recording device was used, but FBI director Kash Patel said the scheme was to “capture sensitive communications about the company’s super intelligence technology.”
TechCrunch
-
More than 40 residences in Texas were the target of a federal operation in September to clamp down on remote worker scams that feed money back to the North Korean regime.
The Record
-
Luis Monzon reports: Ampath Laboratories, one of South Africa’s largest pathology service providers, has been hit by a cyberattack, with the attacker claiming that more than 80 million patient records have been exfiltrated. Threat actor ByteToBreach, which has attacked other major entities across Africa, including major targets in Nigeria, claimed responsibility for the breach. The……
DataBreaches.net
-
An Ohio-based company charged individuals thousands of dollars to fight sextortion scams, but the operation itself was fraudulent, according to a Federal Trade Commission complaint.
The Record
-
Researchers at ReliaQuest have observed a surge in voice phishing (vishing) and Microsoft Teams phishing over the past several months, particularly from extortion groups like ShinyHunters.
KnowBe4
