Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 108 stories in 24 hours
Cyber Security News
Parent Category for MyCyberWay Blog
MyCyberWay trainingEvery story here started as an alert. Learn to triage them.See Blue Team Analyst
-
OpenBSD flaws, including a 37-year-old BSD bug, enable local attackers to bypass security protections and gain root access. Patches are available. Cybersecurity firm Calif published a full exploit and write-up this week for a local privilege escalation on OpenBSD 7.9 that chains two separate kernel flaws, one of them a 37-year-old integer overflow inherited from…
Security Affairs
-
A fake Web3 accelerator has been observed pushing information stealers and backdoors to Windows and macOS systems using malicious npm packages under the pretext of offering free artificial intelligence (AI) credits for Anthropic Claude and Google Gemini, coding tools, and security audits. “The tools delivered information-stealing malware and backdoors for macOS and Windows machines,” Elastic…
The Hacker News
-
The confirmed and suspected targets include a university rector backing Serbia’s protests and a prosecutor who investigated a Trump-linked Belgrade development, weeks before parliamentary elections.
CyberScoop
-
Microsoft accounted for 33% of brand impersonation attempts tracked by Check Point Research in the third quarter of 2026, up from 23% in the previous quarter and roughly four times the share of any other brand. Top 10 most impersonated brands in phishing attacks (Source: Check Point) Apple and Google followed with 8% each. Dropbox…
Help Net Security
-
Defenders get 15 new detection strategies, six for Enterprise and nine for ICS, backed by 38 analytics.
SecurityWeek
-
Attackers stole ConnectWise application credentials to access Microsoft 365 tenants, prompting the company to suspend cloud services. ConnectWise suspended its Cloud Backup service and took both SaaS Security and Cloud Management offline over the weekend after discovering that unknown attackers had obtained unauthorized access to seven of its application identities. The company discovered the incident…
Security Affairs
-
First harmonised standard supporting the AI Act published in the Official Journal Anonymous (not verified) Mon, 10/19/2026 – 09:37 The European Commission has published the reference to the first harmonised standard supporting the implementation of the AI Act in the Official Journal of the European Union. The standard, EN 18286:2026 – Artificial intelligence – Quality…
European Commission
-
Jessica Rusu, FCA chief data, information and intelligence officerat Bloomberg’s UK Policy Series. The Mills ReviewThat is why we commissioned the Mills Review, published in July, focused on how AI could reshape retail financial services by 2030.Some developments we anticipated are already emerging, including the transition towards agentic finance, such as the launch of Meta’s…
Financial Conduct Authority
-
An intruder reached a legacy system at OpenCode on the night of October 16 and may have exposed the third-party AI provider keys that users had saved in OpenCode Console, the company said. Console is OpenCode’s optional hosted service: a workspace saves its own OpenAI, Anthropic, or Google key there, and Console uses that key…
The Hacker News+1 source
-
Ask your infrastructure lead who owns the service account behind the overnight finance batch and notice how long the answer takes. In many of the environments I’ve reviewed, the engineer who set it up left years ago and the password has been sitting in a vault, or sometimes a plain config file, ever since. It…
CSO Online UK
-
Q-day is coming. Discover how to prepare your IT infrastructure for post-quantum security challenges.
Cybersecurity Dive
-
Can traditional firewalls keep up with today’s distributed enterprise? Discover how hybrid mesh firewalls close security gaps without slowing networks.
Cybersecurity Dive
