Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 108 stories in 24 hours
Threat Intelligence
👉 Malware, zero-days, exploits
143stories this week
0today
the last seven days
Most fromThe Hacker News, BleepingComputer, Bitdefender, Help Net Security
In the news hereGoogle14Microsoft12Fortinet6GitHub5Lazarus2Qilin2APT411APT29 (Cozy Bear)1
MyCyberWay trainingSomeone will report this email. Know exactly what to do next.See the Analyst curriculum
-
Attackers who know where to look can read files from Atlassian Data Center installations without logging in, the company has warned. About CVE-2026-21589 CVE-2026-21589, a critical arbitrary file access vulnerability with a 9.3 CVSS score, affects all versions of Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo…
Help Net Security
-
Following the launch of Apple’s iPhone 18 Pro and iPhone 18 Pro Max, Which? has warned shoppers about fake websites claiming to sell the new phones at tempting prices. The warning follows reporting from The Guardian about scam websites appearing around the launch, including sites using words such as “Apple” and “iPhone 18” in their…
Bitdefender
-
A customer data breach can happen in many ways, from a compromised business account to a misconfigured cloud folder or an email sent to the wrong person. Whatever caused it, the next steps matter. Acting quickly can help limit the damage, protect your customers and prevent more information from being exposed. The priority now is…
Bitdefender
-
Facebook users are reporting receiving a message with a fake Facebook Marketplace listing that has their name as the seller.
Malwarebytes
-
A malicious spreadsheet can make LibreOffice and Apache OpenOffice run an attacker’s code as soon as the file is opened, security researchers have shown. There is no warning first, of the kind either program shows before it runs a macro. The attack works only when the program’s Java support is enabled. So far, it has…
The Hacker News
-
A new Linux backdoor is turning vulnerable internet-facing devices into remotely controlled proxy nodes, while using the public Session Traversal Utilities for NAT (STUN) infrastructure to blend into normal VoIP and WebRTC traffic. Fortinet’s FortiGuard Labs said it has been tracking the malware, dubbed ClingSTUN, across multiple attacks exploiting known vulnerabilities in routers, IoT devices,…
CSO Online UK
-
A message saying a supplier has changed bank details can be genuine, but it is also a classic payment-redirection tool. This guide explains how the supplier bank details changed scam works, how to verify a change independently, and what to do if money has already gone to the wrong account.
Bitdefender
-
404Media is reporting (alternate link) that a cyber-weapons arms manufacturer is exploiting a vulnerability in iOS to bypass its automatic reboot security feature. This is the feature that automatically puts an iPhone into a more secure state if it hasn’t been used for 72 hours. The new technology to get around inactivity reboot was developed…
Schneier on Security
-
ChatGPT and Codex will soon add invisible watermarks to eligible text generated in the European Union. But the technology is far from an infallible AI detector. OpenAI is preparing to add invisible watermarks to text generated by ChatGPT and Codex in the European Union, giving authorized researchers and organizations a new way to spot content…
Bitdefender
-
Dell is urging customers to patch a vulnerability (CVE-2026-86360) in Dell System Update (DSU) that could allow an unauthenticated remote attacker to execute arbitrary code with root privileges. DSU is a tool used by enterprise IT administrators to apply driver, BIOS, and firmware updates to Dell PowerEdge servers. About CVE-2026-86360 CVE-2026-86360 is a path traversal…
Help Net Security
-
Since August 2023, attackers have published eight malicious packages as part of the MALFEX supply chain campaign.
SecurityWeek
-
AI is accelerating the discovery of software vulnerabilities, but it is also creating a new bottleneck for defenders: deciding which machine-generated findings warrant investigation. Google has decided to temporarily stop accepting certain bug bounty submissions after a surge of largely invalid automated reports highlights a growing challenge for security teams as AI-driven vulnerability discovery begins…
CSO Online UK
