Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 100 stories in 24 hours
Cyber Security News
Parent Category for MyCyberWay Blog
MyCyberWay trainingEvery story here started as an alert. Learn to triage them.See Blue Team Analyst
-
Plus a RAT for good measure – get threat hunting now…
The Register
-
The popular LiteLLM Python package has been compromised as part of a software supply chain attack that delivered a credential stealer and a backdoor, according to reports from SafeDep, Socket, StepSecurity, and Upwind. The compromise affects LiteLLM 1.107.0, distributed through PyPI wheels and Docker images. The Python package has since been quarantined on Python Package…
The Hacker News+2 sources
-
This is the kind of security issue that was found and prevented by AI, but is also a high risk because of AI.
TechCrunch
-
Police agencies across the U.S. have deployed Automated License Plate Readers (ALPRs) to capture images of passing vehicles along with time, date, and GPS coordinates. While the technology itself isn’t new (ALPRs have existed in various forms for more than 50 years, and in the U.S. since 1998), the surveillance landscape has shifted dramatically. Rapid…
EFF
-
Major web browsers blocked the eMudhra TLS certificates to prevent them from being weaponized.
Cybersecurity Dive
-
In a lengthy statement about two critical vulnerabilities, the PHP Foundation explained how one dated to 2024, how a recent third-party review by AI companies heightened attention on both, why it scrambled to post information earlier than planned.
The Record
-
Using temporary credentials is a security best practice to reduce the risk from credentials getting compromised. With AWS IAM Roles Anywhere, now your workloads outside of Amazon Web Services (AWS) will be able to access AWS resources by obtaining temporary security credentials in AWS Identity and Access Management (IAM). IAM Roles Anywhere relies on public…
AWS Security Blog
-
Careful what you say after goodbye, or better yet, update your messaging app…
The Register
-
Protections have been added against scams and social engineering, including new site warnings and server-side Gemini analysis.
SecurityWeek
-
Several cybersecurity companies saw exploitation attempts of CVE-2026-109618 and CVE-2026-109619 before PHP released the patches.
SecurityWeek+11 sources
-
A developer’s GitHub account that was compromised several months earlier was used to push malicious code to unsuspecting users.
Dark Reading
-
Every identity can carry privilege. Idira is built to discover, control, and govern it. We began this series by showing you how discovery maps the identity estate, and how control applies zero …
Palo Alto Networks (CyberArk)
