Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 87 stories in 24 hours
Cyber Security News
Parent Category for MyCyberWay Blog
MyCyberWay trainingEvery story here started as an alert. Learn to triage them.See Blue Team Analyst
-
Since July, US frontier AI labs and other AI leaders have revealed a string of incidents in which their models accessed external computer systems without authorization, events popularly described as AI agents “going rogue.” The most well-known and studied of these incidents is OpenAI’s hack into Hugging Face, which OpenAI initially characterized as “an unprecedented…
CSO Online UK
-
In another record-breaking Patch Tuesday, Microsoft has squashed over 1,400 security bugs, including a Mark of the Web bypass vulnerability (CVE-2026-96951) exploited by attackers in the wild. CVE-2026-96951 is a command injection vulnerability in Windows Shell that can be triggered by remote attackers via a file that is designed to exploit the vulnerability. Such a…
Help Net Security
-
A flaw in Linux’s vhost subsystem lets a local user read and write kernel memory at will and become root across nearly a decade of kernel versions. In one virtualization setup, it lets an untrusted virtual machine write to the host’s memory and hijack the program that runs the virtual machine. The bug is tracked…
The Hacker News
-
Mozilla has introduced Firefox Enterprise for organizations with strict compliance, governance, and security requirements.
SecurityWeek
-
Critical-severity flaws could lead to authentication bypass, code execution, and sensitive authentication information leaks.
SecurityWeek
-
The most important is CVE-2026-96951, a security feature bypass flaw in Windows that has been exploited in the wild.
SecurityWeek
-
AI can speed up attacks, with faster reconnaisance, while defenders should use AI to accelerate existing SOC work, but not chase after full autonomy…
Computer Weekly
-
Years ago I wrote diary entries about VBA code stored inside AutoCAD drawing files (.dwg).
SANS Internet Storm Center
-
A Saudi National and employee of OpenAI has been arrested for allegedly planting a hidden recording device in an executive conference room at the company’s San Francisco offices to covertly record sensitive conversations. Abdulrahman Alfozan, 35, has been charged with using or endeavoring to use an electronic, mechanical, or other device to intercept oral communications.…
The Hacker News
-
The bugs could allow attackers to invoke internal operations and execute code, completely compromising the system.
SecurityWeek
-
560K accounts
Crunchbase – 559,908 breached accounts
In January 2026, the private company intelligence platform Crunchbase was targeted in a ShinyHunters “pay or leak” extortion attempt. Data allegedly obtained from the company was subsequently published publicly and included 560k unique email addresses, largely belonging to leads and business contacts. Other data included names, physical addresses, phone numbers, job titles, employers and LinkedIn…
Have I Been Pwned
-
Netskope tracks four XWorm versions in the wild, 46 plugins, and new tools for location, audio and live browser control, with detections up fourfold. Netskope Threat Labs has been following XWorm since September 2024, and its latest report shows the malware has changed a lot. Over the past year the team identified four distinct versions…
Security Affairs
