Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 131 stories in 24 hours
Cyber Security News
Parent Category for MyCyberWay Blog
MyCyberWay trainingEvery story here started as an alert. Learn to triage them.See Blue Team Analyst
-
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that attackers are actively exploiting four vulnerabilities in Plex Media Server.
BleepingComputer+2 sources
-
The pair stressed the latest update showed no country is pursuing the technically challenging effort to interfere with or hack into the country’s election infrastructure or tamper directly with votes.
The Record
-
Storm-0940 used ARTEX agentic AI to accelerate a ConnectWise supply chain compromise, enabling application credential abuse across Microsoft 365 environments.
Microsoft Threat Intelligence+2 sources
-
Plus a RAT for good measure – get threat hunting now…
The Register+2 sources
-
The popular LiteLLM Python package has been compromised as part of a software supply chain attack that delivered a credential stealer and a backdoor, according to reports from SafeDep, Socket, StepSecurity, and Upwind. The compromise affects LiteLLM 1.107.0, distributed through PyPI wheels and Docker images. The Python package has since been quarantined on Python Package…
The Hacker News+2 sources
-
This is the kind of security issue that was found and prevented by AI, but is also a high risk because of AI.
TechCrunch
-
Police agencies across the U.S. have deployed Automated License Plate Readers (ALPRs) to capture images of passing vehicles along with time, date, and GPS coordinates. While the technology itself isn’t new (ALPRs have existed in various forms for more than 50 years, and in the U.S. since 1998), the surveillance landscape has shifted dramatically. Rapid…
EFF
-
Major web browsers blocked the eMudhra TLS certificates to prevent them from being weaponized.
Cybersecurity Dive
-
In a lengthy statement about two critical vulnerabilities, the PHP Foundation explained how one dated to 2024, how a recent third-party review by AI companies heightened attention on both, why it scrambled to post information earlier than planned.
The Record
-
Using temporary credentials is a security best practice to reduce the risk from credentials getting compromised. With AWS IAM Roles Anywhere, now your workloads outside of Amazon Web Services (AWS) will be able to access AWS resources by obtaining temporary security credentials in AWS Identity and Access Management (IAM). IAM Roles Anywhere relies on public…
AWS Security Blog
-
Careful what you say after goodbye, or better yet, update your messaging app…
The Register
-
Protections have been added against scams and social engineering, including new site warnings and server-side Gemini analysis.
SecurityWeek
