Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 111 stories in 24 hours
👉 Worldwide incidents, breaches, malware
202stories this week
35today
the last seven days
Most fromThe Record, BleepingComputer, The Hacker News, SecurityWeek
In the news hereMicrosoft21ConnectWise16Google14OpenAI8SafePay2Qilin2Lazarus2APT28 (Fancy Bear)2
Free Mobile customers received very convincing phishing emails after major data breach.
Malwarebytes
Apple is urging users to update after patching a CoreGraphics vulnerability that attackers have already exploited against specific individuals. The flaw could let malicious files run code on vulnerable iPhones, iPads and Macs. Key takeaways * Apple has patched a CoreGraphics zero-day tracked as CVE-2026-86950 * Processing a maliciously crafted file could let attackers execute…
Bitdefender
Social Security numbers and other personal details of military personnel and their families were exposed in a months-long Pentagon breach.
Malwarebytes
The flaws were chained to hijack sessions, achieve remote code execution, and elevate privileges to root.
SecurityWeek
OpenAI on Wednesday said it identified and disrupted a coordinated distillation campaign that was designed to illicitly extract protected reasoning from its artificial intelligence (AI) models. A “core cluster of the activity,” going back to the first week of July, has been attributed to individuals associated with Moonshot AI, a Chinese AI company based in…
The Hacker News
The Pentagon’s Defense Manpower Data Center (DMDC) is notifying millions of military service members that hackers stole their data after breaching the Pentagon’s human resources management system in October 2025.
BleepingComputer
In an exclusive interview with WIRED, Paragon Solutions CEO Andrew Boyd reveals the limits of the company’s promise to keep bad actors from abusing its powerful espionage tool.
WIRED
Exploited
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Cisco Catalyst SD-WAN Manager flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Cisco Catalyst SD-WAN Manager flaw, tracked as CVE-2026-76504 (CVSS score of 9.8), to its Known Exploited Vulnerabilities (KEV) catalog. The vulnerability resides in Cisco Catalyst SD-WAN…
Security Affairs
DIVD was breached through two Zammad zero-days that let an AI agent reach root in seconds, steal data and pivot to other services before being stopped. The Dutch Institute for Vulnerability Disclosure, a nonprofit organization of volunteer security researchers whose whole job is finding and responsibly disclosing vulnerabilities in other people’s software, just disclosed that…
Security Affairs
MI5 has issued a rare warning to UK academics contributing to the China General Technology Research Institute…
Infosecurity Magazine
The FBI has a very simple message for the ShinyHunters gang: give yourselves up. On Tuesday, FBI cyber division assistant director Brett Leatherman released a video, thanking the Dutch police for arresting a 24-year-old man they believe to be a member of the group, and and who is separately suspected of attempting to arrange two…
Bitdefender
An alleged key figure in the ShinyHunters cybercrime group has been arrested in the Netherlands, and – in a grotesque turn – the 24-year-old suspect is also being investigated for attempting to arrange two murders. The 24-year-old from Amsterdam, whom Dutch police have not named, was arrested on September 15 on suspicion of playing a…
Bitdefender