Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 125 stories in 24 hours
Malware & Exploits
Malware, exploited flaws, phishing and botnets, from the researchers who found them.
117stories this week
16today
the last seven days
Most fromThe Hacker News, BleepingComputer, SecurityWeek, Help Net Security
In the news hereMicrosoft8GitHub6Fortinet6Linux6Lazarus2APT411APT29 (Cozy Bear)1Lumma Stealer1
MyCyberWay trainingYou can't patch everything at once. Learn what to fix first.See the Analyst curriculum
-
Terra finds sharp rise in GitHub security fixes reported broken within 90 days…
The Register
-
Attackers paired a genuine, signed copy of Siemens Software Center with malicious DLLs to infect Windows PCs via ClickFix lures.
SecurityWeek+2 sources
-
Copies of Rank Math PRO, the paid version of the Rank Math SEO plugin for WordPress, that were downloaded from rankmath.com or delivered as updates between 20:02 UTC on October 15 and 07:12 UTC on October 16 contained malware, Rank Math said in a security notice published on October 16. Any site that installed and…
The Hacker News+2 sources
-
Critical flaws impact the Entity List and Field UI modules, and exploit paths exist with contributed modules.
SecurityWeek
-
Attackers tampered with AOMEI Backupper’s update system to deliver malware that could give them remote access to users’ PCs.
Malwarebytes+1 source
-
An industry-wide laser focus on vulnerabilities has left cybersecurity teams without enough room to strategize for resilience.
Dark Reading
-
F5 has released out-of-band security patches to address multiple NGINX web server flaws, including three critical-severity vulnerabilities that can let attackers execute code on vulnerable systems.
BleepingComputer
-
The threat actor behind the GhostAction supply chain attack has expanded beyond injecting malicious GitHub Actions workflows into compromised projects to phish open-source developers and deliver a stealer malware disguised within a fake font file. The latest evolution, detailed by OpenSourceMalware, signals that the attackers are actively refining their modus operandi in response to steps…
The Hacker News
-
Security researchers say targeted advertising was used to infect devices at the Al Jazeera news agency, exposing how everyday online ads can become a delivery system for surveillance. You don’t have to click a suspicious link to become a spyware target. Sometimes, simply loading an ad can be enough. Citizen Lab says it has documented…
Bitdefender
-
Microsoft has fixed a known issue that removed the Copilot Chat and Copilot buttons in the classic Outlook desktop mail client for some Windows users.
BleepingComputer
-
Threat actors have been observed delivering cryptocurrency miners and proxy software.
SecurityWeek+2 sources
-
The persistent, stealthy FortiGate implant was deployed against a telecommunications organization.
SecurityWeek
