Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 80 stories in 24 hours
Parent Category for MyCyberWay Blog
Cloned voices and synthetic video calls now show up in payment fraud, help desk resets, and access requests. A structured drill shows security teams exactly where verification breaks down, while nothing is at stake. The call comes in at 4:40 on a Friday. It’s the CFO, or it sounds exactly like her, asking the controller…
The Hacker News
A flaw in how curl handles HTTP/2 uploads lets a malicious server receiving an upload corrupt the client’s memory, and the researcher who reported it turned that into code execution on the uploading machine. The curl project fixed it on October 14 in curl 8.23.0. Taking over a client needs exact knowledge of its build…
The Hacker News
ABB previously published an advisory warning about possible probing of a dynovaPRO vulnerability.
SecurityWeek
Researchers warn the attacker is taking multiple steps to clean up forensic evidence after an attack.
Cybersecurity Dive
The letter argues federal agencies should more rigorously test AI models for security threats and sandbox evasion, set new safety standards and lean into defensive AI.
CyberScoop
Audrey Liza M. Nolasco reports: Japan is confronting a mounting cybersecurity crisis, with a ransomware attack disrupting hundreds of organisations and a series of separate breaches putting millions of customer records at risk. One alarming detail: experts estimate that stolen Japanese driver’s licence images could be offered on dark-web markets for as little as ¥25,……
DataBreaches.net
The websites and apps for the five chains have been down for several days as the parent company contends with a cybersecurity incident.
Cybersecurity Dive
How do you secure AI agents when your identity program is already years in the making? Start with the access those agents can use. Amy ended her last post with four questions …
Palo Alto Networks (CyberArk)
The latest operation targeted “laptop farms” across Texas that allegedly aided North Korea’s moneymaking plots.
Cybersecurity Dive
The three marketplaces helped hackers impersonate major businesses and governments. Microsoft now controls the markets’ domain names.
Cybersecurity Dive
Microsoft has resolved a known issue that caused Always On VPN connection issues after installing the September 2026 Windows 11 security updates.
BleepingComputer
Matthew Green has been writing a rather pessimistic series of posts about the potential for AI systems to vastly outperform humans in cryptanalysis of both symmetric and public-key ciphers. I am more optimistic than he is. That is, I have stronger faith in the over-engineering cryptographers tend to do. I am trying to write this…
Schneier on Security