Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 108 stories in 24 hours
Cyber Security News
Parent Category for MyCyberWay Blog
MyCyberWay trainingEvery story here started as an alert. Learn to triage them.See Blue Team Analyst
-
70K accounts
Assurance Retraite – 70,372 breached accounts
In September 2024, the French national pension fund Assurance Retraite suffered a data breach affecting approximately 370k assistance beneficiaries. The data included 70k unique email addresses along with names, dates of birth, physical addresses, phone numbers, income levels, marital statuses, French social security numbers (NIR) and contact details of relatives or other nominated contacts. In…
Have I Been Pwned
-
Single sign-on to help address imminent threats to life, critical infrastructure, or kids…
The Register
-
A large-scale scam operation impersonating Microsoft uses a malicious traffic distribution system (TDS) run by a Russian organization and abuses thousands of Cloudflare links.
Dark Reading
-
Order disallowing use of Chinese AI service is unhelpfully vague and broad…
The Register+6 sources
-
The China-based threat group uses DLL sideloading in these attacks Categories: Threat Research Tags: BRONZE SANDCASTLE, Meterpreter, Sandboxie…
Sophos+1 source
-
A perspective on AI-enabled attacker scale, defender capacity, and the growing need for experienced responders.
Sophos
-
This post was co-written by Andi Cao, an EFF legal intern. Automated license plate readers (ALPRs) are mass surveillance. They photograph every passing car and log where and when it was captured, building a searchable record of where nearly everyone drives. Cities should not buy them, and cities that already have them should shut them…
EFF
-
Ransomware operators including Spikey Scorpius (aka Qilin) and Tarnished Scorpius (aka Inc) are exploiting PAN-OS vulnerability CVE-2026-0257.
Unit 42+5 sources
-
Nikkei Inc. disclosed a new data breach, the third in about a month, that exposed 1.83 million personal information records.
BleepingComputer+1 source
-
Some downloads of the Rank Math PRO WordPress plugin from the vendor’s official website carried malware that planted hidden backdoors in a supply-chain attack last week.
BleepingComputer+2 sources
-
Threat actors have begun to exploit a chain of vulnerabilities in Plex Media Server to deploy cryptocurrency miners and reverse proxy software, a day after a proof-of-concept (PoC) went public. According to a researcher who goes by the online alias boredhackerblog, the exploitation activity involves chaining four different vulnerabilities, collectively called Plex2Shell. The vulnerabilities…
The Hacker News
-
Second security snafu in two years…
The Register+3 sources
