Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 96 stories in 24 hours
👉 Worldwide incidents, breaches, malware
180stories this week
13today
the last seven days
Most fromBleepingComputer, The Record, SecurityWeek, CyberScoop
In the news hereMicrosoft17Google14ConnectWise12OpenAI8SafePay2Qilin2Lazarus2APT28 (Fancy Bear)2
Sunday NetScaler patch dump fixes trio of critical vulns and five more serious messes…
The Register
The Cybersecurity and Infrastructure Security Agency (CISA) has ordered U.S. government agencies over the weekend to secure their systems against attacks exploiting two critical Citrix NetScaler vulnerabilities.
BleepingComputer
Roundcube SQL injection CVE-2026-48842 is now being exploited in the wild, putting unpatched webmail servers at risk of database compromise. A Roundcube Webmail vulnerability, tracked as CVE-2026-48842 (CVSS score of 8.1) and patched four months ago, is now being exploited in the wild. The Canadian Centre for Cyber Security added the warning to its advisory…
Security Affairs
OpenAI is testing a new always-on assistant called “o”, and references to the unannounced feature briefly showed up on the company’s website.
BleepingComputer
Citrix has confirmed that two critical NetScaler remote code execution vulnerabilities, tracked as CVE-2026-88771 and CVE-2026-88772, are being exploited in attacks and that it has released security updates to fix the flaws.
BleepingComputer
Cloudflare has fixed a vulnerability in Containers and Sandboxes that allowed customers with a Workers Paid account to recover residual data from other customers’ containers on the same physical host.
BleepingComputer
Anthropic has just announced a new Claude Marketplace, and it brings all AI-related tools into one place, including plugins, connectors, agents, and more.
BleepingComputer
Kosovo national Ardit Kutleshi pleaded guilty to running Rydox, a cybercrime marketplace that sold stolen identities and credentials for years. Ardit Kutleshi, 28 years old and a citizen of Kosovo, pleaded guilty last week to building and running the cybercrime marketplace Rydox. The Rydox marketplace has been active since February 2016; it facilitated over 7,600…
Security Affairs
CISA added CVE-2026-65660 to its KEV catalog, giving federal agencies a patching deadline of September 28.
SecurityWeek
CISA added CVE-2026-65660 to its KEV catalog, giving federal agencies a patching deadline of September 28.
SecurityWeek
CISA added CVE-2026-65660 to its KEV catalog, giving federal agencies a patching deadline of September 28.
SecurityWeek
CISA added CVE-2026-65660 to its KEV catalog, giving federal agencies a patching deadline of September 28.
SecurityWeek