Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 108 stories in 24 hours
Threat Intelligence
👉 Malware, zero-days, exploits
144stories this week
1today
the last seven days
Most fromThe Hacker News, BleepingComputer, Bitdefender, Help Net Security
In the news hereGoogle14Microsoft12Fortinet6GitHub5Lazarus2Qilin2APT411APT29 (Cozy Bear)1
MyCyberWay trainingSomeone will report this email. Know exactly what to do next.See the Analyst curriculum
-
A critical vulnerability in LMCache, open-source software that speeds up large language model (LLM) servers such as vLLM, lets an attacker run code on the cache server without logging in, and no fixed version is available. The flaw is in LMCache’s multiprocess mode, where the cache runs as a standalone server that LLM workers reach…
The Hacker News
-
Cybersecurity researchers are calling attention to a new malware family that has been observed targeting exposed artificial intelligence (AI) and large language model (LLM) infrastructure with an aim to deploy cryptocurrency miners and further expand the scale of the botnet. The financially motivated campaign, dubbed Canto Incognito, has been found to install cryptocurrency miners, including…
The Hacker News
-
The company presented new data about the prevalence of different forms of social-engineering attacks, saying identity fundamentals still matter in the AI era.
Cybersecurity Dive
-
A cryptomining campaign targeting exposed AI services is using PoeLLM malware to turn compromised servers into scanners and exploit launchpads.
BleepingComputer
-
More than 3,400 servers have been compromised by malware that hides its infrastructure coordinates in a poem.
CyberScoop
-
On October 5th, Atlassian published patches&#;x26;#;xc2;&#;x26;#;xa0;for multiple products to fix an “Arbitrary File Access” vulnerability &#;x26;#;x5b;CVE-2026-21589&#;x26;#;x5d;. An attacker can read arbitrary files in the web application&#;x26;#;39;s directory, potentially exposing sensitive information such as configuration files.
SANS Internet Storm Center
-
There’s another TikTok trend making the rounds called the bathroom swearing trend, where parents send their children into the bathroom, give them permission to swear freely and film their reactions. Rather than deciding whether parents should or shouldn’t do it, we wanted to look at what these videos bring to the surface: Why are kids…
Bitdefender
-
One day after Atlassian released patches fixing a critical arbitrary file access vulnerability (CVE-2026-21589) in its self-managed Data Center products, and a few hours after watchTowr researchers published a technical rundown of the flaw, attackers have been spotted attempting to exploit it. CVE-2026-21589 PoC in action (Source: watchTowr) “Exploitation attempts have now started to hit…
Help Net Security
-
FBI and Secret Service warn FortiBleed, a credential-harvesting campaign against Fortinet firewalls, has compromised 86,644 devices and is locking out admins. The FBI and the U.S. Secret Service issued a joint advisory about FortiBleed, and the headline number alone is worth sitting with: more than 86,644 compromised Fortinet FortiGate devices across 194 countries, according to…
Security Affairs
-
An infrastructure engineer used his knowledge of his employer’s network to lock administrators out, disrupt servers and demand $750,000 in Bitcoin. He will now spend almost three years behind bars. A former infrastructure engineer who turned his privileged access against his employer, sabotaging its computer network before demanding ransom, has been sentenced to 32 months…
Bitdefender
-
Over 100 hacked websites used fake Cloudflare checks to trick visitors into installing LunexStealer through ClickFix commands. The lure is the now-familiar ClickFix technique, dressed up as Cloudflare’s standard bot check. The fake page asks you to run a command, supposedly to confirm you’re not a bot, and that command quietly downloads and installs an…
Security Affairs
-
A recent phishing campaign abused Microsoft Power BI links to deliver multiple rogue ScreenConnect clients.
Huntress
