Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 107 stories in 24 hours
Global Cyber Security
👉 Worldwide incidents, breaches, malware
196stories this week
30today
the last seven days
Most fromBleepingComputer, The Record, SecurityWeek, The Hacker News
In the news hereMicrosoft20ConnectWise15Google14OpenAI8SafePay2Qilin2Lazarus2APT28 (Fancy Bear)2
MyCyberWay trainingBreaches like this get investigated, not just reported.See Blue Team Specialist
-
Some of the flaws could allow remote attackers to execute arbitrary code or escape the browser sandbox.
SecurityWeek
-
Given that the browser is where business apps are accessed and used, it makes sense that attacks are happening there too. Most breaches today begin in a browser session. Often, they never leave it, with the entire attack chain from initial access to exfiltration playing out in the browser. Here are the six most dangerous…
The Hacker News
-
424K accounts
Medela – 423,947 breached accounts
In September 2026, Swiss medical device company Medela was the target of a ShinyHunters “pay or leak” extortion campaign. The data allegedly obtained in the breach was later published publicly and included 424k unique email addresses belonging predominantly to healthcare professionals, Medela staff and leads. The exposed data consisted primarily of corporate contact information, including…
Have I Been Pwned
-
AI coding agents asked to share screenshots of code changes for review have put internal company images in public GitHub repositories, security company Glow said. Its researchers found more than 13,000 internal images from developers at over 300 organizations, including customer billing records and screens of features not yet released. In most cases, they sat…
The Hacker News
-
Attacks by autonomous AI agents are moving out of the lab and into the courtroom, raising unsettled questions about who is liable for what agents do.
SecurityWeek
-
The move will be part of a major overhaul of the ecosystem for website authentication.
Ars Technica
-
Cryptocurrency exchange Bitget revealed today that attackers who stole $387.5 million last week breached its systems after exploiting a zero-day flaw in third-party security products.
BleepingComputer
-
The state-sponsored group has launched larger-scale phishing campaigns to deploy the CosmicPulse backdoor.
SecurityWeek
-
ANY.RUN researchers traced a US-focused CSuite phishing campaign across 351 sandbox analyses, with 51% of submissions coming from the United States. Technology, manufacturing, government, and consulting organizations showed the highest exposure. By combining Microsoft 365 session theft with remote-access tool deployment, CSuite can turn a phishing incident into broader account compromise, fraud…
The Hacker News
-
In the wake of a suspected leader’s arrest, ShinyHunters says it never intended to publish data stolen from the FBI.
SecurityWeek
-
Cisco Talos uncovered a cluster of activity we track as UAT-11587 targeting government and policy organizations across Asia, including in Taiwan, India, the Philippines, and Cambodia, to deliver a previously undocumented backdoor referred to as “Antino” in developer artifacts.
Cisco Talos
-
Internet-exposed tech, PLCs, outside integrators and inside protections are all factors the water sector’s information sharing and analysis center is watching.
CyberScoop
