Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 104 stories in 24 hours
Threat Intelligence
👉 Malware, zero-days, exploits
177stories this week
37today
the last seven days
Most fromThe Hacker News, Bitdefender, Help Net Security, BleepingComputer
In the news hereGoogle14Microsoft12Fortinet6Linux5Lazarus2Qilin2APT411APT29 (Cozy Bear)1
MyCyberWay trainingSomeone will report this email. Know exactly what to do next.See the Analyst curriculum
-
Researchers say small AI models could be capable of spreading across vulnerable smart devices within months.
Malwarebytes
-
The U.S. Department of Justice (DoJ) on Tuesday charged 14 people and seized about 187 computers as part of its ongoing efforts to disrupt North Korea’s fraudulent remote IT worker (ITW) scheme. The indictment charges a mix of U.S. citizens and Chinese nationals for their roles in an IT worker conspiracy affecting more than 70…
The Hacker News
-
A phishing campaign is using AI-themed lures to target employees who operate advertising accounts, according to a new report from Island. The campaign is launched from a phishing platform that poses as a portfolio of AI advertising tools, using branding from Gemini, Claude, ChatGPT, Perplexity, and Muse. The platform’s operator added a fake Muse Ads…
KnowBe4
-
Learn how business email compromise (BEC) attacks work, the warning signs to watch for, and how Huntress stops BEC with 24/7 identity threat detection.
Huntress
-
The update collection published by Microsoft on October 13, 2026 includes a total of 1,414 patches. Here’s what you need to know.
Kaspersky
-
A flaw in how curl handles HTTP/2 uploads lets a malicious server receiving an upload corrupt the client’s memory, and the researcher who reported it turned that into code execution on the uploading machine. The curl project fixed it on October 14 in curl 8.23.0. Taking over a client needs exact knowledge of its build…
The Hacker News
-
ABB previously published an advisory warning about possible probing of a dynovaPRO vulnerability.
SecurityWeek
-
The three marketplaces helped hackers impersonate major businesses and governments. Microsoft now controls the markets’ domain names.
Cybersecurity Dive
-
Microsoft Patch Tuesday security updates for October 2026 address a record 1,415 vulnerabilities. Prioritize the exploited zero-day, critical bugs and potentially wormable vulnerabilities. Microsoft just shattered every patch record in the book. October 2026 brought us a staggering 1,415 new CVEs from Microsoft alone. “Well, it’s a new record release from Microsoft, again. This is…
Security Affairs
-
Talos and Recorded Future identified UAT-6275 activity targeting government organizations across the Commonwealth of Independent States. Recovered artifacts show additional interest in water resources and energy.
Cisco Talos
-
An OpenAI engineer has been arrested after a hidden recording device was discovered in a conference room used for sensitive discussions about the company’s AI technology. Investigators say the suspect researched how to build and conceal the device using an AI chatbot. The FBI have arrested OpenAI engineer for allegedly installing a sophisticated listening device…
Bitdefender
-
The tech giant worked with Japan’s National Police Agency and healthcare cybersecurity organization Health-ISAC to obtain a U.S. court order seizing and redirecting domains that were part of the infrastructure underlying YAM Store, CoGUI and Iron Man.
The Record
