Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 107 stories in 24 hours
Threat Intelligence
👉 Malware, zero-days, exploits
143stories this week
0today
the last seven days
Most fromThe Hacker News, BleepingComputer, Bitdefender, Help Net Security
In the news hereGoogle14Microsoft12Fortinet6GitHub5Lazarus2Qilin2APT411APT29 (Cozy Bear)1
MyCyberWay trainingSomeone will report this email. Know exactly what to do next.See the Analyst curriculum
-
The security defects could lead to unauthorized access, information leaks, privilege escalation, DoS attacks, and remote code execution.
SecurityWeek
-
The Russia-aligned threat actor known as UAC-0099 has been attributed to a previously undocumented .NET infostealer and remote access trojan (RAT) codenamed ASHVEIN. According to TrendAI, the malware has been put to use in attacks targeting Ukrainian government personnel. The cybersecurity company is tracking the cluster under the name Earth Sirrush (previously SHADOW-EARTH-065). ASHVEIN,…
The Hacker News
-
Cisco released security advisories for five critical vulnerabilities in its NX-OS data center network operating system that could be exploited to run arbitrary code with root privileges on Nexus switches.
BleepingComputer
-
Threat actors have started targeting CVE-2026-21589, a critical vulnerability in Atlassian’s self-hosted Data Center products.
SecurityWeek
-
Cybersecurity Awareness Month is a good time for a reminder that online safety is not only about strong passwords, software updates or avoiding suspicious links. It’s also about the information we give away without really thinking about it. This may look like a long read, but stay with us. Oversharing is often discussed as a…
Bitdefender
-
What would you do if a call came on your business line, urgently warning that your company is not showing up properly on Google, Google Voice Search, Siri or another voice assistant? Google community users have reported repeated robocalls claiming their businesses were not correctly listed for Google or voice search. In one case, the…
Bitdefender
-
Scammers are going after YouTube creators’ Google accounts by posing as a brand looking for sponsorship partners. By sending out personalized emails that reference a creator’s own videos and directing targeted creators to a convincing fake collaboration platform, the fraudsters walk them through what looks like a routine brand deal, right up until the moment…
Help Net Security
-
Critical and high-severity vulnerabilities could allow attackers to bypass authentication, execute arbitrary code, and elevate their privileges.
SecurityWeek
-
Coverage period: July 1, 2026 through September 30, 2026 Overview This roundup consolidates selected major AI-related security incidents and exploit disclosures reported during the coverage period. It aligns each entry to the OWASP Top 10 for LLM Applications 2026 and the OWASP Top 10 for Agentic Applications 2026, with published CVE references where available. It…
OWASP GenAI Security Project
-
ASOS is sending updates to affected customers about the cybersecurity incident it suffered earlier this week, confirming that hackers accessed some personal data.
BleepingComputer
-
The owner of a US ransomware remediation company allegedly promised businesses he could recover their files without paying cybercriminals. Prosecutors say he secretly paid the hackers instead — and charged victims substantially more. Imagine your company has just been hacked with ransomware. You hire a cybersecurity firm that says it can recover your files without…
Bitdefender
