Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 84 stories in 24 hours
Cyber Security News
Parent Category for MyCyberWay Blog
MyCyberWay trainingEvery story here started as an alert. Learn to triage them.See Blue Team Analyst
-
Almost 30 suspected scammers have been arrested and 3.7 million online profiles and accounts removed as part of a National Crime Agency-hosted crackdown against fraud perpetrated from across Africa.
National Crime Agency
-
Hundreds of French supermarkets faced a sophisticated cyberattack Monday, allowing hackers to manipulate industrial controls.
Cybersecurity Dive
-
Risks are growing at a time when companies rely more than ever on vendors for cybersecurity, according to a new report.
Cybersecurity Dive
-
TL;DR; Our security assessment of LiteLLM (v1.77.7), a widely used open-source LLM gateway, uncovered multiple high-impact vulnerabilities (tracked as CVE-2026-35029, CVE-2026-59823) which have been resolved as of LiteLLM version 1.83.9. The most significant issues stemmed from a missing authorization check on the /config/update endpoint, which allowed any authenticated user (including low-privileged accounts) to modify the…
Check Point Research
-
Anthropic researchers show how small AI models could autonomously replicate across IoT devices, raising concerns about adaptive, AI-powered botnets. Anthropic published a paper this week that should make anyone who manages IoT infrastructure sit down for a moment. The research shows that small AI models are approaching the capability to replicate themselves autonomously across networks…
Security Affairs
-
Researchers in Hong Kong have developed a method to remotely capture the audio signal from headphones by picking up electromagnetic emissions.
Kaspersky
-
UK
Journalists subject to unlawful surveillance seek legal costs after ‘unreasonable conduct’ by PSNI
Court of Appeal to decide whether Investigatory Powers Tribunal has powers to award compensation for legal costs to victims of unlawful surveillance…
Computer Weekly
-
Attackers continue exploiting gaps in MFA coverage, using stolen credentials to access VPNs, RDP, and Windows systems that still rely on passwords alone. Specops explains why protecting cloud applications isn’t enough and how organizations can close these authentication gaps.
BleepingComputer
-
Two people who worked at financial advice firms have pleaded guilty to fraud after 4 clients lost £2m. Kerry Nelson, the director of Nexus Independent Financial Advisers Limited and Nexus Investment Managers Limited, and Jacqueline Stephens, the firms’ business operations manager, admitted all charges brought by the FCA at Portsmouth Crown Court.They admitted defrauding clients…
Financial Conduct Authority
-
Mozilla’s Firefox Enterprise is a paid platform that lets organizations control how sensitive data is shared, check device security, and manage employee access to web applications. The platform pairs the browser with a management dashboard hosted on an organization’s own infrastructure. IT teams can set policies across their workforce, restrict AI tools, and connect browser…
Help Net Security
-
SAP has addressed 20 security flaws across multiple products in its October 2026 security updates, including a maximum-severity vulnerability in the Cloud SDK for Python.
BleepingComputer
-
GitLab fixed a critical vulnerability with a maximum CVSS score of 10.0 that could let unauthenticated attackers run code on its servers. GitLab has addressed a critical security flaw, tracked as CVE-2026-97229 (CVSS score of 10.0), that could let attackers run code on its servers without logging in. The flaw affects Community Edition (CE) and…
Security Affairs
