Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 100 stories in 24 hours
👉 Worldwide incidents, breaches, malware
169stories this week
2today
the last seven days
Most fromThe Record, BleepingComputer, The Hacker News, SecurityWeek
In the news hereMicrosoft22ConnectWise17Google13OpenAI7SafePay2Qilin2Lazarus2APT28 (Fancy Bear)2
Here’s another case where the folks who were supposed to be the good guys helping you may be harming you. Zohar Pinhasi, 50, also known as “Zack Silver” and “Zack Green,” a U.S. and Israeli national, was arraigned today in the Eastern District of New York on wire fraud charges relating to Pinhasi’s false representations……
DataBreaches.net
373K accounts
In August 2026, data centre operator CyrusOne was the target of a ShinyHunters “pay or leak” extortion attempt. The group subsequently published data allegedly obtained from the company, which included 373k unique email addresses across records relating to users, sales leads and CyrusOne employees. The data largely consisted of corporate contact information, including names, physical…
Have I Been Pwned
The owner of ransomware remediation company MonsterCloud has been charged with allegedly defrauding ransomware victims by secretly paying their attackers for decryptors while claiming to use proprietary technology to recover encrypted data.
BleepingComputer
Unit 42 details how threat actors leverage Web3 infrastructure and open-source supply chain attacks to breach enterprise cloud environments…
Unit 42
DataBreaches has reported extensively on Silent Ransom Group in 2026, often including material provided exclusively to this site by the group. Now, what appears to be a leak of their internal chats may shed additional light on their success. DataBreaches has reported on Silent Ransom Group (SRG) since 2022, with particular interest in their numerous……
DataBreaches.net
At a recent event for security firm NordVPN, NBA superstar Shaquille O’Neal revealed that he got hacked—and warned the public about the need to “have control of their own information.”
WIRED
The FBI is warning that FortiBleed attacks are still ongoing, targeting exposed Fortinet FortiGate firewalls and SSL VPN gateways and locking out legitimate administrators.
BleepingComputer
Hackers obtained unauthorized HTTPS certificates for several Google domains and hijacked domains in the country-code top-level domains (ccTLDs) for Ghana, American Samoa, and Sierra Leone after compromising third-party operators and modifying authoritative DNS records.
BleepingComputer
U.S. officials say Zhang Yu was a prominent figure in the Hafnium campaign, which saw hackers breach thousands of computers and steal troves of documents.
The Record
The regulations on “controlled unclassified information” include security rules and requirements for reporting when they’re breached, including by cyberattacks.
CyberScoop
Autonomous agents also tried to abuse other websites and services hosted by the foundation, using them as proxies for unauthorized activities.
Dark Reading
How to prevent budget overruns in the information security department, and what cyber risks the cost of AI tokens poses to the SOC.
Kaspersky