Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 105 stories in 24 hours
👉 Malware, zero-days, exploits
141stories this week
0today
the last seven days
Most fromThe Hacker News, BleepingComputer, Bitdefender, Help Net Security
In the news hereGoogle14Microsoft12Fortinet6GitHub5Lazarus2Qilin2APT411APT29 (Cozy Bear)1
When it comes to cybersecurity, October is the time to remind everyone that staying safer online doesn’t mean you have to become a security expert. It’s mostly about small habits, consistency, and smart tools. This magic combo doesn’t sidetrack your daily routine and, over time, makes it much harder for criminals to catch you off…
Bitdefender
CVE-2026-61500 allows attackers to recover the session-cookie signing key and gain administrative access and RCE.
SecurityWeek
A recent ABC investigation highlights a troubling form of online exploitation affecting Australian children through coercive, cult-like networks that use games, social platforms and messaging apps. These networks can use friendship, harassment, threats and blackmail to gain control over a child. In some cases, victims are pressured into creating sexual material, isolating themselves from the…
Bitdefender
Microsoft has pushed out an out-of-band security update for Exchange Server that fixes a high-severity vulnerability (CVE-2026-96940) that may allow authenticated attackers to read emails and attachments of other users in the same organization, but “does not allow access across tenant boundaries.” CVE-2026-96940 was discovered internally and, according to the Exchange Server Team, they “are…
Help Net Security
Fidget trading may happen on the playground, but like many kids’ trends, much of the excitement around it is being fueled online. Kids watch trading videos, hunt for rare toys, compare collections and may look for places to buy, sell or swap them online. That’s where a harmless schoolyard game can introduce some less obvious…
Bitdefender
Sharing passwords with someone you love can feel completely normal. Couples may know each other’s phone PINs, share passwords for household accounts, or even have access to each other’s email or social media. It can be practical, but it can also feel like a sign of trust: We have nothing to hide from each other.…
Bitdefender
Iranian hacker Amir Barati faces extradition to the US over an alleged Iranian campaign that stole 31TB of data from universities. Amir Barati spent June 25 getting arrested in Montenegro, and this week a Montenegrin court signed off on sending him to the United States. He’s a dual Turkish and Iranian citizen, 40 years old,…
Security Affairs
Google has now suspended submissions to its Open Source Software Vulnerability Rewards Program (OSS VRP) after being flooded by AI-generated reports.
BleepingComputer
A critical security flaw impacting Rejetto HTTP File Server (HFS) is witnessing active exploitation attempts, according to VulnCheck. The vulnerability in question is CVE-2026-61500 (CVSS score: 9.3), a case of session forgery stemming from the use of a weak pseudo-random number generator (PRNG) that can lead to a predictable key, which an attacker can then…
The Hacker News
OpenAI safety veteran David Robinson resigns, warning that the company’s culture and fast AI development model could create bigger risks. OpenAI safety veteran David Robinson knows how his resignation looks. He starts his essay by calling himself “something of a cliché”: an AI company employee who quits and then raises concerns about the company. But…
Security Affairs
Citrix has released security updates for a high-severity security flaw in NetScaler ADC and Citrix NetScaler Gateway that has been exploited as part of targeted zero-day attacks. The vulnerability, tracked as CVE-2026-88779, carries a CVSS score of 8.7 out of 10.0. “CVE-2026-88779 is a memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway…
The Hacker News
Citrix has confirmed that a new zero-day vulnerability, CVE-2026-88779, emerged just days after two other exploited flaws were patched.
SecurityWeek