Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 110 stories in 24 hours
Threat Intelligence
👉 Malware, zero-days, exploits
177stories this week
37today
the last seven days
Most fromThe Hacker News, Bitdefender, Help Net Security, BleepingComputer
In the news hereGoogle14Microsoft12Fortinet6Linux5Lazarus2Qilin2APT411APT29 (Cozy Bear)1
MyCyberWay trainingSomeone will report this email. Know exactly what to do next.See the Analyst curriculum
-
Replacing letters with symbols still doesn’t make it good.
The Register
-
An agentic AI-powered attack that hit the Dutch Institute for Vulnerability Disclosure (DIVD) on September 21 exploited two zero-day vulnerabilities in Zammad, an open-source helpdesk and customer support ticketing system. “Used together, [the two flaws] allowed the attackers to hijack sessions, run code remotely and escalate privileges from the Zammad user to root, in seconds,…
Help Net Security
-
Under certain conditions, CVE-2026-73570 can be exploited via specially crafted emails without user interaction.
SecurityWeek
-
AI coding agents published internal screenshots from over 300 organizations, exposing billing records and unreleased features.
Bitdefender
-
I can’t believe it’s already October. The start of this month means we are kicking off Cybersecurity Awareness Month—a time to slow down, look at the risks we face online, and talk about the small things that can help protect us and the people we love. But Oct. 1 also marks the International Day of…
Bitdefender
-
Apple patched a CoreGraphics zero-day that may have been exploited in targeted attacks. A public PoC for the flaw is now available. Apple patched a zero-day vulnerability, tracked as CVE-2026-86950, in CoreGraphics that attackers may have exploited to target specific individuals. The flaw is an out-of-bounds write that can lead to arbitrary code execution when…
Security Affairs
-
Exploited
Suspected State Hackers Exploited Citrix NetScaler for Weeks. 50,000 Devices May Still Be Exposed.
Datawater reports: Two critical NetScaler zero-days, CVE-2026-88771 and CVE-2026-88772, were used against organizations worldwide before a patch existed. CISA’s deadline is today. Patching alone will not tell you whether you were already breached. Threat level: Critical What: Two unauthenticated remote-code-execution flaws in Citrix NetScaler ADC and NetScaler Gateway, both CVSS 9.5. Status: Exploited as zero-days….…
DataBreaches.net
-
Free Mobile customers received very convincing phishing emails after major data breach.
Malwarebytes
-
Apple is urging users to update after patching a CoreGraphics vulnerability that attackers have already exploited against specific individuals. The flaw could let malicious files run code on vulnerable iPhones, iPads and Macs. Key takeaways * Apple has patched a CoreGraphics zero-day tracked as CVE-2026-86950 * Processing a maliciously crafted file could let attackers execute…
Bitdefender
-
The US government continues its crackdown on Tren de Aragua over its ATM jackpotting scheme.
SecurityWeek
-
The flaws were chained to hijack sessions, achieve remote code execution, and elevate privileges to root.
SecurityWeek
-
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a critical authentication bypass flaw impacting Cisco Catalyst SD-WAN Manager to its Known Exploited Vulnerabilities (KEV), following reports of active exploitation. The vulnerability, tracked as CVE-2026-76504 (CVSS score: 9.8), could allow an unauthenticated, remote attacker to access an affected system with…
The Hacker News
