Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 114 stories in 24 hours
Global Cyber Security
👉 Worldwide incidents, breaches, malware
189stories this week
21today
the last seven days
Most fromBleepingComputer, The Record, SecurityWeek, CyberScoop
In the news hereMicrosoft18Google14ConnectWise12OpenAI8SafePay2Qilin2Lazarus2APT28 (Fancy Bear)2
MyCyberWay trainingBreaches like this get investigated, not just reported.See Blue Team Specialist
-
Enterprises regularly rigorously monitor human employees, while autonomous AI agents quietly operate with broad privileges that could turn them into the next generation of insider threats.
Dark Reading
-
Hackers have used a malware family called NeedyMantis to maintain long-term access to networks they had already breached, Microsoft said in a technical analysis. The malware has been seen in a small number of targeted intrusions at telecommunications organizations, universities, medical nonprofits, intergovernmental organizations, and government contractors. Its use goes back to at least…
The Hacker News
-
What is IAM for AI agents? AI agents authenticate, invoke tools, and act across enterprise systems with delegated authority. IAM for AI Agents is the identity-control architecture that governs those actors. This guide covers the limits of conventional provisioning, the components that matter, how to evaluate framework choices, and what runtime evidence proves an agent…
The Hacker News
-
The attacker who stole about $388 million from the cryptocurrency exchange Bitget gained access through a vulnerability in a third-party security product the exchange used, Bitget said on Monday. The attacker exploited the flaw to obtain high-level internal credentials and then, on September 24, used them to send fraudulent withdrawal commands to Bitget’s wallet system.…
The Hacker News
-
RatHat’s operators build and publish the Android banking trojan and control infected phones from a web console, according to security company Cleafy. Cleafy has traced nearly 100 deployments of that console since April 2026. It said this fits a malware-as-a-service model, in which each customer runs a separate copy. The console stores what the malware…
The Hacker News
-
Numerous major law firms have fallen prey to the Silent Ransom Group this year. Now DataBreaches provides exclusive details on SRG’s recent attacks on Hogan Lovells Cadwalader. Yes, that’s “attacks,” plural. When New York City’s oldest law firm, Cadwalader, Wickersham & Taft, merged with Hogan Lovells in 2022, it combined two powerhouse firms. Yet despite……
DataBreaches.net
-
A purported ad-blocker exfiltrates reams of sensitive information and benefits from having Google’s stamp of approval despite researcher warnings.
Dark Reading
-
The JadePuffer ransomware operator is targeting Azure tenants with agent-driven attacks that conduct reconnaissance, steal credentials, and destroy core components.
BleepingComputer
-
The firm had received information from law enforcement of a possible attack.
Cybersecurity Dive
-
The “agentic threat actor” may have used exposed credentials to access resources and delete cloud-based storage, applications, and databases.
Dark Reading
-
Security teams received urgent calls to disconnect servers before authorities confirmed critical zero-day flaws.
Cybersecurity Dive
-
Security vetting tools and processes weren’t designed with obscure AI services in mind, according to TrendAI.
Cybersecurity Dive
