Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 107 stories in 24 hours
Parent Category for MyCyberWay Blog
Under certain conditions, CVE-2026-73570 can be exploited via specially crafted emails without user interaction.
SecurityWeek
AI coding agents published internal screenshots from over 300 organizations, exposing billing records and unreleased features.
Bitdefender
One of Poland’s major online invoicing platforms suffered a data breach that may have exposed information belonging to its users, their customers and business partners.
The Record
I can’t believe it’s already October. The start of this month means we are kicking off Cybersecurity Awareness Month—a time to slow down, look at the risks we face online, and talk about the small things that can help protect us and the people we love. But Oct. 1 also marks the International Day of…
Bitdefender
The Pentagon’s Defense Manpower Data Center (DMDC) is notifying millions of people that hackers gained access to their personal data. The breach affects 2.76 million living individuals, a group that can include current and former defense personnel and their dependents, along with 294,000 deceased individuals, a Defense Department official told CNN. Established in 1974, DMDC…
Help Net Security
Apple patched a CoreGraphics zero-day that may have been exploited in targeted attacks. A public PoC for the flaw is now available. Apple patched a zero-day vulnerability, tracked as CVE-2026-86950, in CoreGraphics that attackers may have exploited to target specific individuals. The flaw is an out-of-bounds write that can lead to arbitrary code execution when…
Security Affairs
Exploited
Datawater reports: Two critical NetScaler zero-days, CVE-2026-88771 and CVE-2026-88772, were used against organizations worldwide before a patch existed. CISA’s deadline is today. Patching alone will not tell you whether you were already breached. Threat level: Critical What: Two unauthenticated remote-code-execution flaws in Citrix NetScaler ADC and NetScaler Gateway, both CVSS 9.5. Status: Exploited as zero-days….…
DataBreaches.net
Every security leader at a bank, insurer, or asset manager has had a version of this conversation: Security wants to eliminate a class of vulnerabilities. Engineering explains what it would take to upgrade the platform where they live. Somebody prices out the regression testing. Somebody else raises the change-freeze calendar. The finding gets an exception,…
The Hacker News
The Series B brings the AI-powered offensive security startup’s total funding to roughly $445 million only seven months after its public launch.
SecurityWeek
Two-thirds report immediate recovery, although teachers remain divided over whose job security is…
The Register
Free Mobile customers received very convincing phishing emails after major data breach.
Malwarebytes
Microsoft announced that Windows settings backup and restore is now enabled by default on all Microsoft Entra-joined or Microsoft Entra hybrid-joined enterprise systems upgraded to Windows 11 26H2.
BleepingComputer