Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 106 stories in 24 hours
Threat Intelligence
👉 Malware, zero-days, exploits
141stories this week
0today
the last seven days
Most fromThe Hacker News, BleepingComputer, Bitdefender, Help Net Security
In the news hereGoogle14Microsoft12Fortinet6GitHub5Lazarus2Qilin2APT411APT29 (Cozy Bear)1
MyCyberWay trainingSomeone will report this email. Know exactly what to do next.See the Analyst curriculum
-
Two people who worked at financial advice firms have pleaded guilty to fraud after 4 clients lost £2m. Kerry Nelson, the director of Nexus Independent Financial Advisers Limited and Nexus Investment Managers Limited, and Jacqueline Stephens, the firms’ business operations manager, admitted all charges brought by the FCA at Portsmouth Crown Court.They admitted defrauding clients…
Financial Conduct Authority
-
SAP has addressed 20 security flaws across multiple products in its October 2026 security updates, including a maximum-severity vulnerability in the Cloud SDK for Python.
BleepingComputer
-
GitLab fixed a critical vulnerability with a maximum CVSS score of 10.0 that could let unauthenticated attackers run code on its servers. GitLab has addressed a critical security flaw, tracked as CVE-2026-97229 (CVSS score of 10.0), that could let attackers run code on its servers without logging in. The flaw affects Community Edition (CE) and…
Security Affairs
-
Almost 30 arrests and four million online profiles were removed in an NCA-hosted operation targeting fraudsters in Ghana and Nigeria.
Computer Weekly
-
GitLab just fixed a max-severity vulnerability that could allow unauthenticated attackers to execute arbitrary code on its servers. The company released a fix on Monday, alongside patches for five other high-severity flaws affecting its source code management and continuous integration and delivery (CI/CD) platform. The vulnerability, tracked as CVE-2026-97229, was fixed in versions 19.4.2, 19.3.5,…
CSO Online
-
Cryptocurrency exchanges may ask where your money came from before approving a transaction. Sometimes, it’s a legitimate compliance check. Other times, scammers use the same language to steal your money or personal information. Here’s how to recognize the difference and respond safely.
Bitdefender
-
Expanded plugin count allows the malware to monitor users’ location, stream live audio, and interact with authenticated browser sessions.
SecurityWeek
-
Expanded plugin count allows the malware to monitor users’ location, stream live audio, and interact with authenticated browser sessions.
SecurityWeek
-
Expanded plugin count allows the malware to monitor users’ location, stream live audio, and interact with authenticated browser sessions.
SecurityWeek
-
Expanded plugin count allows the malware to monitor users’ location, stream live audio, and interact with authenticated browser sessions.
SecurityWeek
-
Expanded plugin count allows the malware to monitor users’ location, stream live audio, and interact with authenticated browser sessions.
SecurityWeek
-
A flaw in npm’s Trusted Publishing mechanism could allow attackers to hijack legitimate software packages by reclaiming abandoned GitHub repository names, potentially exposing millions of package downloads to supply-chain attacks. Researchers at Bloom Security identified more than 1500 potentially vulnerable npm packages, including security scanners, authentication tools, and cryptographic packages. The vulnerability, dubbed SlugFest, came…
CSO Online
