Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 109 stories in 24 hours
Parent Category for MyCyberWay Blog
State Bank of India has identified 3,897 customer records containing personal information in a set of about 375,000 records available on the dark web, and it does not yet know where the data came from. The state-owned bank, India’s largest, said in a stock-exchange filing dated October 21 that it “has experienced an incident involving…
The Hacker News
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including four vulnerabilities impacting Plex Media Server that’s collectively called Plex2Shell. The vulnerabilities are listed below – CVE-2026-96652 (CVSS score: 5.3) – Plex Media Server Server-Side Request Forgery (SSRF)
The Hacker News
Tracked as CVE-2026-109618 and CVE-2026-109619, the bugs could potentially lead to unauthenticated remote code execution.
SecurityWeek+12 sources
Researchers say the developer’s account was compromised in March with a GlassWorm-linked loader.
SecurityWeek
A heart monitor used to be a box beside a hospital bed. Electrodes fed a cable, the cable fed a screen, and a nurse watched the screen. The threat model fit on a sticky note. Cardiac care doesn’t work like that anymore. A patch or smartwatch records the electrocardiogram (ECG). A phone or gateway relays…
Help Net Security
Citizen Lab confirmed Pegasus on a Serbian rector’s iPhone 6 days before elections, raising the known civil society spyware target count to 16. The Citizen Lab published a research note confirming that the iPhone of Vladan Đokić, Rector of the University of Belgrade, was infected with NSO Group’s Pegasus spyware sometime in 2026. The infection…
Security Affairs+2 sources
DevGuard is a free, open source vulnerability management platform that collects a software project’s security findings in one place, ranks them by risk, and tracks them. It’s an OWASP Incubating Project, and anyone can self-host it. One command line, six scans DevGuard runs secret scanning, static code analysis, dependency checks against known CVEs, infrastructure-as-code checks,…
Help Net Security
Imagine clicking into one of your social media accounts and realizing you’re no longer in control. Your profile information has changed, you see unfamiliar content, and the recovery email is no longer yours. Meanwhile, followers receive messages that look like they came directly from you. For a content creator, this is more than an annoying…
Bitdefender
Observers have noted a surge in so-called ClickFix scams targeting the UK’s higher education sector as threat actors seek valuable personal and research data…
Computer Weekly
Security teams have tools for code, endpoints, cloud infrastructure, identity, and secrets management. Credentials cut across all of them. A developer finds an AWS key in a repository. The first step is obvious: remove it. But that does not answer the questions the security team now has: Is the key still active? Who owns it?…
Help Net Security
Political Microtargeting, Manipulation & Tracking Over three years ago, noyb filed complaints against several German political parties for unlawfully using political microtargeting during the 2021 federal election. Now, the Berlin Data Protection Authority has finally issued decisions concerning the Social Democrats (SPD), the Greens, the Left (Die LINKE), and the CDU. The conclusion: all of…
noyb
Recently, threat actors have been increasingly delivering malware or credential phishing attacks at the end of long email threads designed to exploit a potential victim’s trust in an email contact. In this tactic, threat actors deliver malicious payloads at the end of seemingly normal email conversations after gaining the potential victim’s trust. These kinds of…
Cofense