Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 125 stories in 24 hours
The incidents, breaches and state campaigns making headlines.
12stories this week
0today
the last seven days
Most fromCybersecurity Dive, Help Net Security, The Record, KnowBe4
In the news hereSafePay2Qilin2Palo Alto Networks1ShinyHunters1
SafePay ransomware has hit 600+ organizations since 2024, using stolen credentials, VPN access and double extortion to pressure victims into paying. CISA, the FBI, the US Secret Service, Germany’s Landeskriminalamt Rheinland-Pfalz, and two UK law enforcement agencies jointly published an advisory this week on SafePay, a ransomware group they describe as one of the most…
Security Affairs
The third quarter of 2026 saw the highest number of ransomware attacks to date, with 2,627 total attacks, according to a new report from Comparitech.
KnowBe4
Rapid7’s Q3 analysis finds high-severity flaws exploited within three days on average, while AI appeared in just 8% of tracked incidents.
SecurityWeek
The group has been linked to a 2025 attack targeting technology firm Ingram Micro.
Cybersecurity Dive+1 source
Several ransomware groups are exploiting CVE-2026-0257, an authentication bypass in Palo Alto Networks’ PAN-OS GlobalProtect patched in May, to break into organizations in sectors ranging from healthcare and education to government and energy. CVE-2026-0257 stems from the firewalls relying on cookies without performing detailed validation and integrity checking, which allows remote, unauthenticated attackers to bypass…
Help Net Security+4 sources
The ICO has slammed security failings by the Welsh local government data unit and IT service provider following the 2024 incident…
Infosecurity Magazine+1 source
The Cybersecurity and Infrastructure Security Agency (CISA) says the SafePay ransomware gang has breached over 600 critical infrastructure organizations worldwide since 2024.
BleepingComputer+1 source
The FBI and cyber agencies in the UK and Germany said SafePay is targeting businesses and critical infrastructure by guessing passwords, exploiting vulnerabilities and using phishing attacks.
The Record
Unit 42 investigates network compromises across numerous industries…
The Register+4 sources
Palo Alto Networks has disclosed that it’s continuing to observe exploitation of a now-patched security flaw impacting PAN-OS and Prisma Access by ransomware actors. The activity relates to CVE-2026-0257 (CVSS score: 7.8), an authentication bypass flaw that could be exploited by bad actors to set up unauthorized VPN connections. It was patched by Palo Alto…
The Hacker News+4 sources
Multiple threat actors have exploited a high-severity flaw in the company’s GlobalProtect portal.
Cybersecurity Dive+4 sources
We asked researchers which five RaaS groups businesses should be concerned about, along with some steps firms should take to mitigate the threat…
ITPro