Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 106 stories in 24 hours
Parent Category for MyCyberWay Blog
Cybersecurity researchers have disclosed technical details of a recently patched critical security flaw in Citrix NetScaler ADC and Gateway that has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-88772 (CVSS score: 9.5), has been described as a memory overflow bug in the Datagram Transport Layer Security (DTLS) protocol handling that’s rooted…
The Hacker News
An Everpure survey of 2,100 C-suite and IT leaders across eight countries finds 90% recognise the risk, yet 64% lack a formal strategy to close ‘the sovereignty gap’
Computer Weekly
Huntress SOC found a threat actor exploiting a file upload flaw in recreation management to breach 3 municipal servers and steal payment data.
Huntress
Microsoft made WSL containers generally available and shipped the feature with controls that let administrators switch it off or limit where it pulls images from. WSL containers run Linux containers on Windows through the Windows Subsystem for Linux. They install with wsl –update or from Microsoft’s GitHub releases page. Source: Microsoft If your developers work…
Help Net Security
The accord opened the door to future regulation but focused on four voluntary steps for the companies to take.
SecurityWeek
Hadley Barndollar of masslive.com reports: A “cybersecurity incident” has occurred involving the electronic health record system for Suffolk County’s two jails, the system provider confirmed Thursday. Computer Systems Integrated Inc., which runs the EHRs-C platform containing prisoner health data and medical records, said it is aware of and investigating an incident involving the Suffolk County……
DataBreaches.net
Microsoft is taking Windows Subsystem for Linux beyond just running Linux distributions, as WSL Containers is now generally available.
BleepingComputer
AI agents select tools, invoke APIs, retrieve data, act under delegated user context, and create outbound connections at runtime. That autonomy can make them useful. It also means you need to know which agents can reach which tools, models, APIs, and data sources, and in what context. Zero Trust microsegmentation can help. By enforcing explicit,…
Cloud Security Alliance
As organizations prepare for post quantum cryptography, I am seeing confusion in two areas. The first is around the algorithms themselves. ML KEM, ML DSA, SLH DSA, FIPS 203, 204 and 205 are often discussed as if they are interchangeable. The second is more important. Teams are starting to talk about migration before they understand…
Cloud Security Alliance
The Reality of Securing AI in Motion Traditional security tools were built for environments defined by fixed rules and predictable workflows. But AI behavior is non-deterministic. The same prompt can produce different outcomes, and risk often emerges gradually as AI behavior adapts, and permissions drift over time. This creates a constantly shifting environment where security…
Cloud Security Alliance
Delivering over 30 of your top-requested features…
Sophos
The activity is linked to a broader campaign that previously used a different delivery mechanism…
Sophos