Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 107 stories in 24 hours
Cyber Security News
Parent Category for MyCyberWay Blog
MyCyberWay trainingEvery story here started as an alert. Learn to triage them.See Blue Team Analyst
-
CVE-2026-109618 and CVE-2026-109619 are Critical vulnerabilities in PHP, a scripting language used globally for web servers and CMS systems.
Unit 42+11 sources
-
The project overseeing the programming language is releasing patches Wednesday, with the internet racing to patch the 9.2 rated flaw.
CyberScoop+1 source
-
Organisations unable to apply key fixes to widely used software should consider taking their websites down, UK and international cybersecurity officials have warned.
Sky News
-
Asymptote Labs raises $5.5M seed led by Tower Research Ventures to commercialize its Beacon AI agent runtime security platform.
SecurityWeek
-
Google on Tuesday said it’s rolling out improved safeguards in its Chrome browser to secure users against ClickFix attacks when Enhanced Protection is enabled. ClickFix is a popular social engineering technique in which bad actors trick users into copying and pasting malicious code directly into their computer’s operating system, thereby bypassing conventional security controls. As…
The Hacker News+2 sources
-
The attack uses malicious Google search results related to Amazon and leverages the ‘finger’ utility to launch a CAPTCHA that installs malware, including the Lumma stealer.
Dark Reading
-
ClickFix tricks users into pasting malicious commands into the Windows Run dialog. See how Attack Reduction in Huntress ESPM helps prevent that from happening.
Huntress
-
A Google search for Amazon business led to a ClickFix lure that dropped multiple malicious payloads onto the victim machine, including versions of Lumma Stealer and NetSupport Client RMM.
Huntress
-
The update fixes 353 flaws, including 163 memory corruption and 125 use-after-free vulnerabilities.
SecurityWeek
-
A convincing “creator portal” uses your own YouTube videos and viewing figures to steal your Google login.
Malwarebytes
-
The company is suspending the feature after security researchers discovered how easy it was to access sensitive information shared with the AI assistant.
WIRED+1 source
-
In two internal incidents, agents read routine coding instructions as permission to weaken monitoring, and one gave a false answer about it.
SecurityWeek
