Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 107 stories in 24 hours
Threat Intelligence
👉 Malware, zero-days, exploits
141stories this week
0today
the last seven days
Most fromThe Hacker News, BleepingComputer, Bitdefender, Help Net Security
In the news hereGoogle14Microsoft12Fortinet6GitHub5Lazarus2Qilin2APT411APT29 (Cozy Bear)1
MyCyberWay trainingSomeone will report this email. Know exactly what to do next.See the Analyst curriculum
-
GitHub has taken the step of expiring unvalidated npm trusted publishing configurations 48 hours after creation after researchers found that it was possible for an attacker to push new versions of a different user’s package without having to steal their credentials. “Your configuration becomes validated and exempt from expiry after its first successful publish,” the…
The Hacker News
-
The new research, published by AI security startup AIR, found that a network filtering flaw in Vercel Sandbox — a tool used to run code in isolated environments — could allow agents to exploit certificate validation processes to transmit data outside approved networks.
The Record
-
Participants said it was the largest joint scam operation to date and the first focused on the region.
CyberScoop
-
More than two dozen people were arrested by police in Ghana and Nigeria as part of a U.K.-hosted operation that also included tech companies.
The Record
-
Ivanti urged customers on Tuesday to immediately patch an actively exploited zero-day vulnerability in the Ivanti Connect Secure (ICS) remote access gateway.
BleepingComputer
-
Docker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers access another user’s container repositories using a personal access token (PAT).
BleepingComputer
-
Autonomous AI systems may pose cybersecurity risks during development, long before they reach the public, Britain’s AI Security Institute warns. Researchers say existing safety tests are struggling to keep pace. Some of the world’s most advanced AI systems may be capable of causing real-world harm before they’re even released to the public, according to the…
Bitdefender
-
Almost 30 suspected scammers have been arrested and 3.7 million online profiles and accounts removed as part of a National Crime Agency-hosted crackdown against fraud perpetrated from across Africa.
National Crime Agency
-
Hundreds of French supermarkets faced a sophisticated cyberattack Monday, allowing hackers to manipulate industrial controls.
Cybersecurity Dive
-
Risks are growing at a time when companies rely more than ever on vendors for cybersecurity, according to a new report.
Cybersecurity Dive
-
TL;DR; Our security assessment of LiteLLM (v1.77.7), a widely used open-source LLM gateway, uncovered multiple high-impact vulnerabilities (tracked as CVE-2026-35029, CVE-2026-59823) which have been resolved as of LiteLLM version 1.83.9. The most significant issues stemmed from a missing authorization check on the /config/update endpoint, which allowed any authenticated user (including low-privileged accounts) to modify the…
Check Point Research
-
Attackers continue exploiting gaps in MFA coverage, using stolen credentials to access VPNs, RDP, and Windows systems that still rely on passwords alone. Specops explains why protecting cloud applications isn’t enough and how organizations can close these authentication gaps.
BleepingComputer
