Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 117 stories in 24 hours
Threat Intelligence
👉 Malware, zero-days, exploits
169stories this week
28today
the last seven days
Most fromThe Hacker News, BleepingComputer, Help Net Security, Bitdefender
In the news hereGoogle15Microsoft12Fortinet6Linux6Lazarus2Qilin2APT411APT29 (Cozy Bear)1
MyCyberWay trainingSomeone will report this email. Know exactly what to do next.See the Analyst curriculum
-
Researchers said the first known attack by Armory Castle, also known as UNC5221, occurred almost seven weeks ago. The threat group previously compromised Ivanti and Citrix customers.
CyberScoop
-
Attackers repeatedly changed the files that AOMEI Backupper fetches from the vendor’s own update servers, in windows of five to ten minutes at a time between May and July 2026, so that any copy of the Windows backup program that checked for an update during one of those windows would download and run a backdoor.…
The Hacker News
-
Cybersecurity researchers have disclosed details of an advanced persistent threat (APT) spear-phishing campaign that has targeted individuals affiliated with Taiwan research organizations to direct victims to an adversary-in-the-middle (AitM) phishing framework designed to harvest their Google account credentials and multi-factor authentication (MFA) codes. The activity is being tracked by…
The Hacker News
-
Researchers say the hacker is harvesting credentials and stealing sensitive information.
Cybersecurity Dive
-
F5 addressed multiple vulnerabilities, including critical RCE flaws in NGINX that attackers could exploit without authentication. Security and application delivery firm F5 announced fixes for eleven security issues in NGINX. Among them, critical vulnerabilities tracked as CVE-2026-15176 and CVE-2026-93479 could be exploited without authentication via crafted HTTP requests. Under certain conditions beyond their control, an…
Security Affairs
-
An alleged Chinese state-backed group is using a new zero-day affecting BeyondTrust IT support software to conduct espionage attacks.
The Record
-
Attackers are breaking into business email accounts with short messages asking whether a company can quote on an upcoming project, the kind of request sales and procurement staff answer every week. Cadence Riddle, a cybersecurity researcher at Fortra, tracked a 12-fold increase in malicious emails mentioning “RFQ” (request for quotation) between October 2025 and September…
Help Net Security
-
Some parents don’t know the minimum age for opening a social media account, even as governments move to impose stricter limits…
Bitdefender
-
US regulators have sued a cybersecurity company accused of exploiting sextortion victims by charging thousands of dollars for investigative services it allegedly never delivered, sometimes using fabricated evidence and fake customer reviews. People desperate to prevent intimate images from being leaked online may have fallen victim to a second scheme while seeking help. The Federal…
Bitdefender
-
Sending out lots of job applications without keeping track could make a scammer’s message look like a reply you’ve been waiting for.
Malwarebytes
-
The Linux kernel’s networking stack was found vulnerable to a guest-to-host escape attack, in which an attacker operating inside a virtual machine (VM) could cross the isolation boundary and access the underlying host. Dubbed PwnEscape and tracked as CVE-2026-99999, a flaw allowed guest-controlled packet metadata to trigger a write that changes an IPv4 header after…
CSO Online UK
-
Three weeks before Americans vote in the 2026 midterm election, fraudsters are borrowing candidate names, logos and slogans to collect fake donations and harvest personal data, the FBI warned. “The FBI warns the public that scammers could exploit the 2026 US Midterm Election to perpetrate financial fraud schemes,” reads the public service announcement, which adds…
Help Net Security
