Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 80 stories in 24 hours
Cyber Security News
Parent Category for MyCyberWay Blog
MyCyberWay trainingEvery story here started as an alert. Learn to triage them.See Blue Team Analyst
-
On October 5th, Atlassian published patches&#;x26;#;xc2;&#;x26;#;xa0;for multiple products to fix an “Arbitrary File Access” vulnerability &#;x26;#;x5b;CVE-2026-21589&#;x26;#;x5d;. An attacker can read arbitrary files in the web application&#;x26;#;39;s directory, potentially exposing sensitive information such as configuration files.
SANS Internet Storm Center
-
An initial access broker is working with various ransomware groups in a global campaign.
Cybersecurity Dive
-
There’s another TikTok trend making the rounds called the bathroom swearing trend, where parents send their children into the bathroom, give them permission to swear freely and film their reactions. Rather than deciding whether parents should or shouldn’t do it, we wanted to look at what these videos bring to the surface: Why are kids…
Bitdefender
-
One day after Atlassian released patches fixing a critical arbitrary file access vulnerability (CVE-2026-21589) in its self-managed Data Center products, and a few hours after watchTowr researchers published a technical rundown of the flaw, attackers have been spotted attempting to exploit it. CVE-2026-21589 PoC in action (Source: watchTowr) “Exploitation attempts have now started to hit…
Help Net Security
-
Southern Company is notifying customers that their utility account information was accessed by hackers.
SecurityWeek
-
The Operational Technology Cybersecurity Coalition released a white paper urging the CISA to create a new directive centered around operational technology, which is used to monitor and control critical infrastructure.
The Record
-
Ransomware groups are increasingly targeting backup infrastructure to eliminate recovery options and increase pressure on victims to pay. Kaseya explains why organizations need isolated, immutable, and regularly tested backups that attackers cannot easily reach.
BleepingComputer
-
FBI and Secret Service warn FortiBleed, a credential-harvesting campaign against Fortinet firewalls, has compromised 86,644 devices and is locking out admins. The FBI and the U.S. Secret Service issued a joint advisory about FortiBleed, and the headline number alone is worth sitting with: more than 86,644 compromised Fortinet FortiGate devices across 194 countries, according to…
Security Affairs
-
A teenager from Amman, Jordan suspected of leading the prolific data theft and extortion group ShinyHunters has been detained and is reportedly cooperating with the FBI to identify other members of the hacking gang. KrebsOnSecurity has learned that the suspect, who uses the hacker handle “Rey,” was detained as ShinyHunters was in the process of…
Krebs on Security
-
The individual was detained in May and has been extradited to Germany to face hacking charges.
SecurityWeek
-
Some organizations hit by the FortiBleed campaign have been locked out of their own Fortinet firewalls, according to a joint FBI and U.S. Secret Service advisory. FortiBleed targets internet-facing Fortinet FortiGate firewalls and SSL VPN gateways. The advisory cites SOCRadar, which has verified more than 86,644 compromised devices in 194 countries. “Based on initial responses,…
Help Net Security
-
An infrastructure engineer used his knowledge of his employer’s network to lock administrators out, disrupt servers and demand $750,000 in Bitcoin. He will now spend almost three years behind bars. A former infrastructure engineer who turned his privileged access against his employer, sabotaging its computer network before demanding ransom, has been sentenced to 32 months…
Bitdefender
