Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 131 stories in 24 hours
👉 Worldwide incidents, breaches, malware
180stories this week
13today
the last seven days
Most fromThe Record, BleepingComputer, The Hacker News, SecurityWeek
In the news hereMicrosoft17Google14ConnectWise12OpenAI8SafePay2Qilin2Lazarus2APT28 (Fancy Bear)2
Researchers show that file-change notification systems can leak keystroke timing, browsing activity, and WhatsApp media events.
SecurityWeek
Researchers show that file-change notification systems can leak keystroke timing, browsing activity, and WhatsApp media events.
SecurityWeek
Researchers show that file-change notification systems can leak keystroke timing, browsing activity, and WhatsApp media events.
SecurityWeek
Researchers show that file-change notification systems can leak keystroke timing, browsing activity, and WhatsApp media events.
SecurityWeek
Researchers show that file-change notification systems can leak keystroke timing, browsing activity, and WhatsApp media events.
SecurityWeek
Cryptocurrency exchange Bitget said suspected North Korean threat actors have stolen $351.6 million from its hot and warm wallets. “At 18:31 UTC on September 24, 2026, Bitget’s security systems identified unauthorized transfers involving a limited number of hot wallets,” BitGet said in a post shared on X. “Bitget’s cold wallets and the overwhelming majority of…
The Hacker News
The Canadian Centre for Cyber Security has warned that a now-patched Roundcube Webmail vulnerability is being actively exploited in the wild. The vulnerability in question is CVE-2026-48842 (CVSS score: 8.1), a pre-authentication SQL injection in the virtuser_query plugin of Roundcube Webmail versions 1.6.x before 1.6.16 and 1.7.x before 1.7.1. The issue stems from a preg_replace()…
The Hacker News
Three vulnerabilities in Salesforce Agentforce allowed hackers to hijack trusted agents, steal data, and launch phishing attacks.
SecurityWeek
A flaw in Cloudflare Containers let a paying customer read data that other customers’ containers had left behind on the same server, Cloudflare and the researchers who found it said on Thursday. The data came from disk space that earlier containers had used and given up, not from any live workload, and an attacker could…
The Hacker News
The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added two critical security flaws impacting WSO2 and Adobe Commerce and Magento to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation. The vulnerabilities are listed below – CVE-2026-5430 (CVS score: 9.8) – A path traversal vulnerability in WSO2 API Control Plane,…
The Hacker News
‘SalesBleed’ security flaws ‘lead to very unexpected consequences’
The Register