Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 84 stories in 24 hours
Cyber Security News
Parent Category for MyCyberWay Blog
MyCyberWay trainingEvery story here started as an alert. Learn to triage them.See Blue Team Analyst
-
An Ohio woman reportedly lost more than $1.8 million in gold coins after scammers convinced her that her identity had been stolen and her savings were at risk. The story is heartbreaking, but it also serves as an important reminder: no legitimate government agency, bank, police department, Microsoft employee or security company will tell you…
Bitdefender
-
GitHub has taken the step of expiring unvalidated npm trusted publishing configurations 48 hours after creation after researchers found that it was possible for an attacker to push new versions of a different user’s package without having to steal their credentials. “Your configuration becomes validated and exempt from expiry after its first successful publish,” the…
The Hacker News
-
The new research, published by AI security startup AIR, found that a network filtering flaw in Vercel Sandbox — a tool used to run code in isolated environments — could allow agents to exploit certificate validation processes to transmit data outside approved networks.
The Record
-
Participants said it was the largest joint scam operation to date and the first focused on the region.
CyberScoop
-
More than two dozen people were arrested by police in Ghana and Nigeria as part of a U.K.-hosted operation that also included tech companies.
The Record
-
Most of the affected individuals are Meta employees in the United States and they are being offered credit monitoring services.
SecurityWeek
-
Ransomware attacks involving data theft have surged by 275% in 2026, according to a new report from Zscaler. Attackers exfiltrated more than 896.2 terabytes of data from victim organizations, more than seven times the amount stolen during the 2023–2024 reporting period.
KnowBe4
-
Ivanti urged customers on Tuesday to immediately patch an actively exploited zero-day vulnerability in the Ivanti Connect Secure (ICS) remote access gateway.
BleepingComputer
-
Docker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers access another user’s container repositories using a personal access token (PAT).
BleepingComputer
-
The Norwegian Data Protection Authority (DPA) has fined Xandr, an advertising unit owned by Microsoft, €8.6 million ($9.62 million) for illegally relaying Grindr users’ sensitive data to advertisers. The administrative penalty is the largest issued by the data protection watchdog, arguing the case merited a high fine because of the “very serious” nature of the…
The Hacker News
-
Autonomous AI systems may pose cybersecurity risks during development, long before they reach the public, Britain’s AI Security Institute warns. Researchers say existing safety tests are struggling to keep pace. Some of the world’s most advanced AI systems may be capable of causing real-world harm before they’re even released to the public, according to the…
Bitdefender
-
North Korean hackers have been targeting Ukrainian experts in diplomacy, security and international policy amid Pyongyang’s growing military cooperation with Russia.
The Record
