Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 133 stories in 24 hours
Threat Intelligence
👉 Malware, zero-days, exploits
152stories this week
9today
the last seven days
Most fromThe Hacker News, BleepingComputer, Help Net Security, Bitdefender
In the news hereGoogle17Microsoft11Linux6Palo Alto Networks5Lazarus2Qilin2APT411APT29 (Cozy Bear)1
MyCyberWay trainingSomeone will report this email. Know exactly what to do next.See the Analyst curriculum
-
Expect to see quite a few websites serving “404” or “Page Not Found” errors today: Nearly 70 percent of websites need to update their core software to fix a pair of vulnerabilities that allow an attacker to seize full control over affected servers. Experts say there are working exploits for the flaws, and that these…
Krebs on Security
-
Cybersecurity researchers have disclosed details of a previously undocumented China-aligned threat cluster known as Bronze Sandcastle that has been observed targeting organizations in Asia and Africa since mid-2025. “The most distinctive technical marker for Bronze Sandcastle is its consistent use of Sandboxie DLL sideloading,” Sophos security researcher Gabor Szappanos said in a post published…
The Hacker News+1 source
-
We discuss the incident involving the leak of information about vulnerabilities CVE-2026-109618 and CVE-2026-109619. Kaspersky solutions detect the PHP2Shell exploit: we’ll walk you through examples using KEDR, KATA, and KES.
Securelist (Kaspersky)+11 sources
-
PHP.net announced that it will release a critical update today. We decided to change the infoCon to YELLOW due to the widespread use of PHP, the expected severity of the flaw (CVSS 9.4), and the availability of early PoC exploits ahead of the patch becoming available.
SANS Internet Storm Center+11 sources
-
Cisco Talos is tracking the disclosure of two unauthenticated remote code execution (RCE) flaws in PHP core, dubbed “php2shell”, triggered by a plain HTTP request and exploitable before any application code runs, affecting every PHP build since 5.4. Based on the entities involved in the disclosure, artificial…
Cisco Talos
-
Websites down as precaution as exploits have already been published…
The Register
-
Rapid7’s Q3 analysis finds high-severity flaws exploited within three days on average, while AI appeared in just 8% of tracked incidents.
SecurityWeek
-
The Cat in the Hat trend uses creepy, often AI-generated images and videos to place the familiar character in real-life locations. Some posts have gone further, using real schools, towns and even children’s names. What may start as a joke can quickly raise questions about privacy, location sharing and how much information kids reveal about…
Bitdefender+1 source
-
For years, one of the things parents have watched most closely has been screen time. It’s easy to measure and set limits around. But screen time only tells us how long a child spent in front of a screen, not what happened while they were there. In other words, two children can spend exactly two…
Bitdefender
-
The PHP Foundation has revealed two serious vulnerabilities that could impact millions of websites. Security experts warn that failure to quickly patch the flaws could have dire consequences.
WIRED
-
The maintainers of the globally used PHP scripting language released patches for two vulnerabilities after alerting users that the bugs were severe.
The Record
-
The serious flaws in popular website software prompted government agencies to urge organizations to take their sites offline until they could be fixed.
Cybersecurity Dive
