Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 109 stories in 24 hours
Threat Intelligence
👉 Malware, zero-days, exploits
178stories this week
39today
the last seven days
Most fromThe Hacker News, BleepingComputer, Bitdefender, Help Net Security
In the news hereGoogle14Microsoft12Fortinet6GitHub5Lazarus2Qilin2APT411APT29 (Cozy Bear)1
MyCyberWay trainingSomeone will report this email. Know exactly what to do next.See the Analyst curriculum
-
Exploited
Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far
An attacker chained three zero-day flaws in Ivanti Connect Secure, a VPN appliance, to run commands as root without logging in, security firm Volexity said on October 13. Ivanti has released fixes for two of the flaws and told customers on affected versions to “act immediately.” A fix for the third is still pending, according…
The Hacker News
-
Blog post covering the vulnerabilities disclosed during Microsoft Patch Tuesday.
Cisco Talos
-
Anthropic’s latest study combined IoT and network tests to explore AI self-replication, which researchers said would be “challenging” to shut down.
Dark Reading
-
Researchers at ReliaQuest have observed a surge in voice phishing (vishing) and Microsoft Teams phishing over the past several months, particularly from extortion groups like ShinyHunters.
KnowBe4
-
Today is Microsoft’s October 2026 Patch Tuesday, with security updates addressing a record-breaking 1,411 flaws, including one actively exploited and two publicly disclosed zero-day vulnerabilities.
BleepingComputer
-
Microsoft today released patches for 1,417 vulnerabilities. 76 of these vulnerabilities are rated critical, with 7 critical vulnerabiilties requiring no customer actions. One vulnerability was disclosed before today&#;x26;#;39;s patch Tuesday, and one is already exploited.
SANS Internet Storm Center
-
CVE-2026-104935 affects Ivanti Connect Secure and it can be exploited for unauthenticated remote code execution with elevated privileges.
SecurityWeek
-
Small artificial intelligence (AI) models may be months away from developing capabilities to self-replicate on IoT devices like smart ovens and off-brand Android TV boxes, according to a warning from Anthropic. The frontier AI lab said small AI models could form autonomous, self-propagating worm botnets that are “challenging to shut down,” since “there’s no centralized…
The Hacker News
-
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Ivanti Connect Secure flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added an Ivanti Connect Secure FortiMail flaw, tracked as CVE-2026-104935 (CVSS score of 8.6), to its Known Exploited Vulnerabilities (KEV) catalog. The vulnerability is an authentication bypass issue caused…
Security Affairs
-
The flaws affect products such as Commerce, Photoshop, ColdFusion, Substance 3D, Dimension, FrameMaker and Bridge.
SecurityWeek
-
Google is restructuring bug bounty rewards with a focus on complex memory safety vulnerabilities.
SecurityWeek
-
An Ohio woman reportedly lost more than $1.8 million in gold coins after scammers convinced her that her identity had been stolen and her savings were at risk. The story is heartbreaking, but it also serves as an important reminder: no legitimate government agency, bank, police department, Microsoft employee or security company will tell you…
Bitdefender
