Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 108 stories in 24 hours
Global Cyber Security
👉 Worldwide incidents, breaches, malware
169stories this week
1today
the last seven days
Most fromBleepingComputer, The Record, The Hacker News, SecurityWeek
In the news hereMicrosoft22ConnectWise17Google14OpenAI8SafePay2Qilin2Lazarus2APT28 (Fancy Bear)2
MyCyberWay trainingBreaches like this get investigated, not just reported.See Blue Team Specialist
-
DHS agents not only tracked and intimidated people observing ICE activity in Maine, but stored information about them in a Palantir-built database, newly unsealed court filings say.
WIRED
-
Republican Sen. Josh Hawley has new legislation on limiting automated license plate readers (ALPRs), while Democratic Sens. Bernie Sanders and Jeff Merkley, with Rep. Alexandria Ocasio-Cortez, have teed up a broader bill.
The Record
-
Frontline Education is notifying school districts of a data breach after attackers exploited a vulnerability in third-party software to gain unauthorized access to its systems and steal employee information, including Social Security numbers.
BleepingComputer
-
The China-linked ransomware group Warlock targeted a water utility, a telecom provider, a regional government body, and a university by exploiting SharePoint vulnerabilities to gain initial access.
BleepingComputer
-
Apple says it will add new controls around macOS’s Full Disk Access permission, warning that increasingly capable AI agents make broad access to users’ files, messages, mail, and browsing history riskier.
TechCrunch
-
An attack on the cyber crime gang could prove dangerous for previous victims of data leaks, experts have warned…
ITPro
-
Police have taken control of KillSec’s leak site, securing at least 110 terabytes of data against further unauthorized access…
ITPro
-
The hacking of internet-exposed, vulnerable Citrix NetScaler ADC and Gateway deployments has escalated. What started as stealthy targeting via zero-day exploits has now become widespread “spray and pray” exploitation, fueled by the publication of a root-cause analysis and a proof-of-concept exploit for CVE-2026-88771, which is remotely exploitable on unpatched devices with the default configuration. From…
Help Net Security
-
A Linux privilege escalation vulnerability (CVE-2026-87886) affecting Acronis’ backup extensions for cPanel, WebHost Manager (WHM), and Plesk, is being leveraged by attackers, the backup and recovery company warns. “Exploitation of this vulnerability has been detected in the wild in limited, targeted attacks against Acronis Backup plugin for cPanel & WHM deployments,” Acronis said in the…
Help Net Security
-
On September 9, 2026, the FTC withdrew its 2021 Policy Statement on Breaches by Health Apps and Other Connected Devices.
Hunton Andrews Kurth
-
Experts and policymakers want AI companies to face consequences for agentic hacks. There may not be a clear-cut answer under existing laws and regulations.
CyberScoop
-
A critical flaw in GitLab’s AI Gateway could let a logged-in user with Duo Agent Platform access run commands on the gateway under certain conditions, GitLab said in an advisory. The gateway is the service that connects a GitLab instance to AI models, and only organizations that host their own gateway need to act. The…
The Hacker News
