Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 107 stories in 24 hours
Parent Category for MyCyberWay Blog
Researchers at Northeastern University, in collaboration with Consumer Reports, evaluated how much modern cars spy in their drivers: The new Northeastern study shows, for the first time, data flowing among the vehicles, the vehicle apps you download when you buy your car, and third-party companies, documenting exactly what kind of data gets siphoned from our…
Schneier on Security
Apple is urging users to update after patching a CoreGraphics vulnerability that attackers have already exploited against specific individuals. The flaw could let malicious files run code on vulnerable iPhones, iPads and Macs. Key takeaways * Apple has patched a CoreGraphics zero-day tracked as CVE-2026-86950 * Processing a maliciously crafted file could let attackers execute…
Bitdefender
Three independent labs, three standout results: a perfect score, top certification, and every threat stopped before it ran.
Malwarebytes
The US government continues its crackdown on Tren de Aragua over its ATM jackpotting scheme.
SecurityWeek
Social Security numbers and other personal details of military personnel and their families were exposed in a months-long Pentagon breach.
Malwarebytes
The flaws were chained to hijack sessions, achieve remote code execution, and elevate privileges to root.
SecurityWeek
OpenAI on Wednesday said it identified and disrupted a coordinated distillation campaign that was designed to illicitly extract protected reasoning from its artificial intelligence (AI) models. A “core cluster of the activity,” going back to the first week of July, has been attributed to individuals associated with Moonshot AI, a Chinese AI company based in…
The Hacker News
The Information Commission replaces the Information Commissioner, putting statutory powers under collective control…
The Register
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a critical authentication bypass flaw impacting Cisco Catalyst SD-WAN Manager to its Known Exploited Vulnerabilities (KEV), following reports of active exploitation. The vulnerability, tracked as CVE-2026-76504 (CVSS score: 9.8), could allow an unauthenticated, remote attacker to access an affected system with…
The Hacker News
For the fifth time this year, Cisco revealed attackers have exploited a vulnerability (CVE-2026-76504) in its SD-WAN solution in zero-day attacks. The vendor’s incident responders became aware of active exploitation of this vulnerability in September 2026, after getting pinged and resolving a Cisco Technical Assistance Center (TAC) support case. Cisco has yet to share any…
Help Net Security
Most now say they can recover immediately, and that they’re taking proactive measures to protect themselves…
ITPro
What really frustrates an adversary? Eight Cisco Talos researchers share practical ways to make their next move slower and riskier. From deception and behavioral detection to breaking attack dependencies and resisting manufactured urgency.
Cisco Talos