Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 78 stories in 24 hours
Cyber Security News
Parent Category for MyCyberWay Blog
MyCyberWay trainingEvery story here started as an alert. Learn to triage them.See Blue Team Analyst
-
The ICO has handed the Metropolitan Police a reprimand and enforcement notice after privacy failings linked to the Auror platform…
Infosecurity Magazine
-
James Robinson never planned a cybersecurity career — seven companies and one deputy CISO role later, he leads security at Netskope.
SecurityWeek
-
The Legal Aid Agency (LAA), an executive agency of the UK’s Ministry of Justice that manages the country’s Public Defender Service, says attackers who breached its IT systems in April 2025 stole records dating back to 1978.
BleepingComputer
-
Officers unlawfully uploaded 179 people’s details to Auror without required privacy checks or corporate approval…
The Register
-
Threat actors are exploiting a critical security flaw in Langflow, according to an alert from Previdian. Langflow is an open-source platform that allows developers to build artificial intelligence (AI) applications and agentic workflows. In February 2025, DataStax, the parent company of Langflow, was acquired by IBM. The vulnerability in question is CVE-2026-105740 (CVSS score: 9.9),…
The Hacker News
-
Hundreds of stores lost millions of dollars because they hired third parties to manage the outdated OT firmware running their cooling systems.
Dark Reading
-
The company says it’s aware of limited exploitation against customers’ firewalls, and it has made IoCs available.
SecurityWeek
-
Singapore-based Ahsay Backup has released security updates to address two security flaws in AhsayCBS that have been exploited by bad actors to drop web shells and XMRig cryptocurrency miners. The vulnerabilities in question are CVE-2026-105133 and CVE-2026-105134, which could be chained to sidestep authentication and execute arbitrary commands on affected systems. In a report published…
The Hacker News
-
Unauthenticated, remote attackers could write arbitrary files to the operating system and execute commands with root privileges.
SecurityWeek
-
Never making type errors does not mean never making errors…
The Register
-
Android trojan Hirudo replaces genuine banking apps with modified versions to steal credentials and bypass security checks, enabling financial fraud. ThreatFabric researchers detailed a new Android banking trojan called Hirudo that takes a genuinely different approach to defeating banking security. Instead of throwing a fake login screen over the real app, it uninstalls the real…
Security Affairs
-
In this Help Net Security interview, Michael Scott, CISO at Immuta, talks about how organizations should handle permissions for AI agents. He argues agents should be treated as lower-trust identities that don’t inherit everything their user can access. Scott explains why agent privilege creep differs from the human kind, how authority should pass to sub-agents,…
Help Net Security
