Cyber security news, as it breaks.
Updated 76 stories in 24 hours
Cyber Security News
Parent Category for MyCyberWay Blog
MyCyberWay trainingEvery story here started as an alert. Learn to triage them.See Blue Team Analyst
-
The vulnerability tracked as CVE-2026-85097 can allow threat actors to take control of the targeted WordPress websites.
SecurityWeek
-
Privacy International
-
GitLab warned users today to immediately patch a maximum-severity vulnerability in the CI/CD Regular Expression Compiler that could let remote attackers run arbitrary code on targeted instances.
BleepingComputer
-
A series of security failures, including a very weak password, exposed almost 9 million people’s personal information.
Malwarebytes
-
Fahmida Y Rashid will keep the momentum going as she leads Dark Reading.
Dark Reading
-
There’s an old leadership fantasy that goes something like this: The CISO surveys a sprawling technology estate, discovers 11 tools doing the work of four, calculates the licensing savings, selects a shiny new strategic platform and declares that consolidation has begun. Six months later, all 11 tools are still running. The new platform is now…
CSO Online UK
-
Researchers have tricked six widely used AI agent frameworks into running tool calls written by an attacker, simply by asking the underlying model to repeat the call back. The technique, which the researchers call “Repeat-After-Me,” worked on LangChain’s LangGraph, Microsoft Agent Framework, Microsoft’s AutoGen, Google’s Agent Development Kit 2.0, AWS’ Strands Agents and CrewAI, according…
CSO Online UK
-
40 + 40=80. That’s how old Raheim Hamilton will be when he gets out of prison if he serves his full sentence. There’s an update to a previously reported case. October 7, CHICAGO — A Virginia man who co-created and operated “Empire Market”—a dark web marketplace that enabled users to anonymously buy and sell illegal……
DataBreaches.net
-
We’re looking to hear from people involved in evaluating, selecting or adopting EASM.
NCSC
-
A third Yandex data center in Russia was hit by Ukrainian drones over the weekend, forcing it to shut down and causing further disruptions to cloud services, payments, deliveries and other online services across the country.
The Record
-
Background information Date of final decision: 05/06/2026 National case Controller: Wind Tre S.p.A. Legal Reference(s): Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right to access by the data subject),…
European Data Protection Board
-
The outage hit the main Ubuntu and Canonical websites, including the Ubuntu blog and developer portal.
SecurityWeek
