Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 96 stories in 24 hours
👉 Malware, zero-days, exploits
159stories this week
18today
the last seven days
Most fromThe Hacker News, Help Net Security, BleepingComputer, Bitdefender
In the news hereGoogle13Microsoft12Fortinet6Linux6Lazarus2Qilin2APT411APT29 (Cozy Bear)1
The native Sublime Security integration sends email detections into Elastic Security, where phishing incident response can tie a quarantined email to what happens next on the endpoint and pull the threat from every mailbox it reached.
Elastic Security Labs
Citrix confirmed two critical NetScaler zero-days were exploited before patches were available, with attackers able to remotely execute code. Citrix confirmed that two critical zero-day vulnerabilities in NetScaler ADC and NetScaler Gateway were exploited before the company released patches. The flaws allow remote code execution, meaning attackers can potentially take control of affected appliances. The…
Security Affairs
Citrix has confirmed that two critical NetScaler remote code execution vulnerabilities, tracked as CVE-2026-88771 and CVE-2026-88772, are being exploited in attacks and that it has released security updates to fix the flaws.
BleepingComputer
Wireshark release 4.6.9 fixes 19 vulnerabilities and 16 bugs.
SANS Internet Storm Center
Cloudflare has fixed a vulnerability in Containers and Sandboxes that allowed customers with a Workers Paid account to recover residual data from other customers’ containers on the same physical host.
BleepingComputer
Kosovo national Ardit Kutleshi pleaded guilty to running Rydox, a cybercrime marketplace that sold stolen identities and credentials for years. Ardit Kutleshi, 28 years old and a citizen of Kosovo, pleaded guilty last week to building and running the cybercrime marketplace Rydox. The Rydox marketplace has been active since February 2016; it facilitated over 7,600…
Security Affairs
CISA added CVE-2026-65660 to its KEV catalog, giving federal agencies a patching deadline of September 28.
SecurityWeek
CISA added CVE-2026-65660 to its KEV catalog, giving federal agencies a patching deadline of September 28.
SecurityWeek
CISA added CVE-2026-65660 to its KEV catalog, giving federal agencies a patching deadline of September 28.
SecurityWeek
CISA added CVE-2026-65660 to its KEV catalog, giving federal agencies a patching deadline of September 28.
SecurityWeek
CISA added CVE-2026-65660 to its KEV catalog, giving federal agencies a patching deadline of September 28.
SecurityWeek
CISA added CVE-2026-65660 to its KEV catalog, giving federal agencies a patching deadline of September 28.
SecurityWeek