Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 122 stories in 24 hours
👉 Malware, zero-days, exploits
159stories this week
18today
the last seven days
Most fromThe Hacker News, Help Net Security, BleepingComputer, Bitdefender
In the news hereGoogle13Microsoft12GitHub6Fortinet6Lazarus2Qilin2APT411APT29 (Cozy Bear)1
Attackers paired a genuine, signed copy of Siemens Software Center with malicious DLLs to infect Windows PCs via ClickFix lures.
SecurityWeek+2 sources
Copies of Rank Math PRO, the paid version of the Rank Math SEO plugin for WordPress, that were downloaded from rankmath.com or delivered as updates between 20:02 UTC on October 15 and 07:12 UTC on October 16 contained malware, Rank Math said in a security notice published on October 16. Any site that installed and…
The Hacker News+2 sources
Police Scotland is pleased to introduce the Little Book of Fraud, reproduced with the kind permission of the Metropolitan Police Service. The booklet is to help people recognise fraud at an early stage, protect themselves, their families and communities and…
CyberScotland
Finding good employees is one of the biggest challenges facing small business owners, according to the NFIB Small Business Economic Trends report. We don’t want to add to that worry, but there’s another risk worth paying attention to: the more stretched your team becomes, the easier it can be to overlook scams, skip security checks…
Bitdefender
Critical flaws impact the Entity List and Field UI modules, and exploit paths exist with contributed modules.
SecurityWeek
Black Friday is a great opportunity for small businesses, and email is one of the ways to reach customers with your best offers. But before you hit send, it’s worth checking a few things. From outdated email addresses and broken discount codes to security risks, small mistakes can cost you sales when you can least…
Bitdefender
A delayed flight, a missing hotel reservation or a last-minute conference change can quickly send anyone searching for help. But scammers know that travelers are often stressed and hurried. They use paid search ads, lookalike websites, and fake customer-support numbers to appear when people search for an airline, hotel, or car-rental company. Key takeaways *…
Bitdefender
Attackers tampered with AOMEI Backupper’s update system to deliver malware that could give them remote access to users’ PCs.
Malwarebytes+1 source
An industry-wide laser focus on vulnerabilities has left cybersecurity teams without enough room to strategize for resilience.
Dark Reading
F5 has released out-of-band security patches to address multiple NGINX web server flaws, including three critical-severity vulnerabilities that can let attackers execute code on vulnerable systems.
BleepingComputer
The threat actor behind the GhostAction supply chain attack has expanded beyond injecting malicious GitHub Actions workflows into compromised projects to phish open-source developers and deliver a stealer malware disguised within a fake font file. The latest evolution, detailed by OpenSourceMalware, signals that the attackers are actively refining their modus operandi in response to steps…
The Hacker News
Security researchers say targeted advertising was used to infect devices at the Al Jazeera news agency, exposing how everyday online ads can become a delivery system for surveillance. You don’t have to click a suspicious link to become a spyware target. Sometimes, simply loading an ad can be enough. Citizen Lab says it has documented…
Bitdefender