Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 108 stories in 24 hours
Threat Intelligence
👉 Malware, zero-days, exploits
143stories this week
0today
the last seven days
Most fromThe Hacker News, BleepingComputer, Bitdefender, Help Net Security
In the news hereGoogle14Microsoft12Fortinet6GitHub5Lazarus2Qilin2APT411APT29 (Cozy Bear)1
MyCyberWay trainingSomeone will report this email. Know exactly what to do next.See the Analyst curriculum
-
The outage hit the main Ubuntu and Canonical websites, including the Ubuntu blog and developer portal.
SecurityWeek
-
If you use an AI assistant to summarize your inbox, hidden instructions could turn a phishing email you wisely ignored into your next to-do item.
Malwarebytes
-
People who buy low-cost Android phones from online marketplaces may be carrying malware that was placed on the device before it reached them, Bitdefender has found. The campaign, dubbed Midnight Mimosa, runs on budget Android devices from different brands built on MediaTek platforms. The malware ships in the device firmware, is present before the owner…
Help Net Security
-
Threat actors have been observed exploiting a recently disclosed critical security flaw in SonicWall Secure Mobile Access (SMA) 1000 appliances within days of public disclosure. The vulnerability, tracked as CVE-2026-102255 (CVSS score: 10.0), is a case of pre-authenticated server-side request forgery (SSRF) that could allow a remote attacker “to direct the appliance to issue requests…
The Hacker News
-
A maximum-severity security flaw impacting the Bricksforge plugin for WordPress has come under active exploitation in the wild, according to Patchstack. The critical vulnerability in question is CVE-2026-85097 (CVSS score: 10.0), which allows unauthenticated attackers to upload and execute arbitrary PHP code on vulnerable WordPress websites, resulting in remote code execution (RCE). The…
The Hacker News
-
Data breach notifications are telling victims less than ever. What the company leaves out can still shape what you do next.
ESET WeLiveSecurity
-
CVE-2026-102255 is a pre-authenticated SSRF flaw that could allow attackers to perform unauthorized operations.
SecurityWeek
-
A side hustle often starts small: a few clients, a laptop and whatever tools you need to get the work done. But if it becomes your full-time business, a lot can change. You may be working online all day, handling more customer information, using more business accounts and services, or even bringing other people into…
Bitdefender
-
Running a small business means dealing with problems you can’t always control: finding good employees, keeping costs down, bringing in enough sales, paying taxes and planning for what’s next. Scammers often take advantage of those pressures, offering solutions that turn out to be scams. Key takeaways: * Labor quality or availability was the top problem…
Bitdefender
-
You’re in the airport security line, one eye on your boarding pass and the other on a Black Friday deal that expires in ten minutes. The airport Wi-Fi is right there, free and fast. Do you trust it with your card details? The last months of the year change how we use the internet: more…
Bitdefender
-
Researchers at Northwestern University tested AI coding agents on 112 real security bugs. They found that a patch which stops a crash often fails the checks the project’s maintainers wrote for the fix. With Claude Opus 4.7, third of the patches that made the crash go away still failed those maintainer tests. If you’re thinking…
Help Net Security
-
Bitdefender finds Midnight Mimosa, preinstalled Android malware on cheap MediaTek phones that fakes ad clicks, drops apps and builds a proxy botnet. Bitdefender researchers discovered a campaign called Midnight Mimosa involving preinstalled Android malware on low-cost phones from different brands that use MediaTek platforms. The malware is built into the device firmware and may be…
Security Affairs
