Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 108 stories in 24 hours
Threat Intelligence
👉 Malware, zero-days, exploits
143stories this week
0today
the last seven days
Most fromThe Hacker News, BleepingComputer, Bitdefender, Help Net Security
In the news hereGoogle14Microsoft12Fortinet6GitHub5Lazarus2Qilin2APT411APT29 (Cozy Bear)1
MyCyberWay trainingSomeone will report this email. Know exactly what to do next.See the Analyst curriculum
-
Learn how CISOs can mitigate cybersecurity risks and increase resilience in the age of AI-powered vulnerability management.
Microsoft
-
Researchers at Netskope are tracking a phishing kit that hijacks users’ browser windows to display fake security alerts. The malicious websites are distributed via Google Ads, and pose as normal online stores. Once a user clicks a link on the page, however, the site will present them with an urgent-looking security warning.
KnowBe4
-
Aguirre was added to the FBI’s “Top 10 Most Wanted Fugitives” list in March, becoming the first cybercriminal added to the list.
The Record
-
Scammers are capitalizing on the upcoming GTA VI release by luring gamers with leaked builds and other ways of getting pre-launch access. Here’s how to avoid falling for their tricks.
Kaspersky
-
The tech giant’s announcement underscores the insufficiency of companies’ existing software supply-chain security practices.
Cybersecurity Dive
-
Google has closed its open source vulnerability reporting programme to new submissions while it recalibrates in the face of a surge in automated junk reports.
Computer Weekly
-
Microsoft released emergency updates for Exchange Server to fix CVE-2026-96940, a high-severity flaw that can let attackers gain higher privileges. Microsoft has released out-of-band security updates for Exchange Server to fix a high-severity vulnerability tracked as CVE-2026-96940 (CVSS score of 8.8). The flaw is caused by weak authorization and can allow an authenticated attacker to…
Security Affairs
-
AI chats aren’t private diaries: Florida woman arrested after journaling about possible armed attack
Investigators have charged a woman in Florida after discovering alleged threats against the Lee County Sheriff’s Office that she posted on Anthropic’s Claude AI platform while chatting with the bot.
Bitdefender
-
CERT-UA found fake Cloudflare verification pages that led visitors into a now-familiar ClickFix trap. This time the goal was to infect machines with an infostealer.
The Record
-
It seems that a trend started… I continue my journey discovering more RMM (“Remote Management & Monitoring”) tools abused by threat actors! A few days ago, I wrote a diary[1] about ScreenConnect used in the wild. Today, I found another one.
SANS Internet Storm Center
-
Lead Analysts: Lucy Gee and Emily Hanlon As millions of shoppers prepare their wishlists and await discounts for Amazon’s Prime Big Deal Days starting October 6, cybercriminals are gearing up for their own payday.
KnowBe4
-
An alleged leader of Tren de Aragua’s ATM jackpotting activities, Canelon Aguirre was on the FBI’s top 10 most wanted list since March 2026.
SecurityWeek
