Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 87 stories in 24 hours
Cyber Security News
Parent Category for MyCyberWay Blog
MyCyberWay trainingEvery story here started as an alert. Learn to triage them.See Blue Team Analyst
-
The Sophos AI team presents a novel technique for calibrating agentic SOC analysts…
Sophos
-
Explore joint Cisco Talos and Recorded Future research on TAG-193’s cyber-espionage operations targeting government across Central Asia and the wider Commonwealth of Independent States (CIS)
Recorded Future
-
Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software. Today’s epic patch batch dwarfs September’s record of nearly 1,000 fixes, which was already about ten times the normal monthly patch load from Redmond.
Krebs on Security
-
Chatbot prompts reveal the engineer’s alleged efforts to set up a covert listening device days before one was found in a meeting room used by high-level executives.
WIRED
-
Saudi national Abdulrahman Alfozan was arrested Friday and terminated by OpenAI.
SecurityWeek
-
In June, Google DeepMind did something unusual: it published an AI control roadmap premised on the idea that its own AI agents might turn against it. The AI Control Roadmap treats advanced internal agents as potential insider threats — the way a company treats a rogue employee who already has badge access. It builds on…
Cloud Security Alliance
-
Abdulrahman Alfozan, 35, a Saudi national working as an engineer for OpenAI, was charged Tuesday with secretly bugging an executive conference room at one of the company’s buildings in San Francisco.
The Record
-
A Saudi OpenAI engineer has been arrested for allegedly planting a hidden recording device in an executive conference room at the company’s San Francisco offices to secretly record sensitive conversations.
BleepingComputer
-
The scary surprises for the largest security update ever include security bypasses and unauthenticated RCEs.
Dark Reading
-
Exploited
Ivanti misses opportunity to fix vulnerability before attackers got to work and made it a zero-day
The security vendor said it initially discovered a portion of the defect during internal security checks in June, but the company said it didn’t meet the threshold for an out-of-band release.
CyberScoop
-
A . is all you need! Today Microsoft shipped the patch for a vulnerability in Visual Studio Copilot that I reported in August. Microsoft classified it as Important severity Remote Code Execution vulnerability. At the root cause it allows Copilot in Visual Studio or SQL Server Management Studio to bypass a path validation check and…
Embrace The Red
-
Unit 42 dissects a cyberattack targeting a European bank’s IT infrastructure, delivering concrete defense strategies to help organizations detect and counter comparable threats.
Unit 42
