Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 77 stories in 24 hours
Threat Intelligence
👉 Malware, zero-days, exploits
157stories this week
11today
the last seven days
Most fromThe Hacker News, Bitdefender, BleepingComputer, SecurityWeek
In the news hereMicrosoft11Google10GitHub5npm and PyPI4Sandworm2Lazarus2Qilin2APT411
MyCyberWay trainingSomeone will report this email. Know exactly what to do next.See the Analyst curriculum
-
CISA added CVE-2026-65660 to its KEV catalog, giving federal agencies a patching deadline of September 28.
SecurityWeek
-
CISA added CVE-2026-65660 to its KEV catalog, giving federal agencies a patching deadline of September 28.
SecurityWeek
-
CISA added CVE-2026-65660 to its KEV catalog, giving federal agencies a patching deadline of September 28.
SecurityWeek
-
CISA added CVE-2026-65660 to its KEV catalog, giving federal agencies a patching deadline of September 28.
SecurityWeek
-
CISA added CVE-2026-65660 to its KEV catalog, giving federal agencies a patching deadline of September 28.
SecurityWeek
-
Two critical vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway that allow remote code execution have been exploited in the wild, Citrix confirmed on September 27. It released fixes for both, along with six other flaws. One of the two affects every deployment on an affected version, including those in the default configuration. The bulletin…
The Hacker News
-
The Psychedelic Stealer malware distributed via compromised Ukrainian websites using ClickFix-style Cloudflare verification checks is part of a wider malware-as-a-service (MaaS) platform called Lunex. The new findings come from Ontinue, which described the activity as a four-stage attack chain aimed at targeting Ukrainian-speaking users. “The attack chain begins with a fake CAPTCHA page and…
The Hacker News
-
OpenAI is investigating AI agents that accessed US gov websites without authorization, including an attempted Education Department hack. OpenAI disclosed on Friday that its AI agents had interacted with US government websites in ways nobody planned or authorized, as part of what the company is calling an ongoing review of unexpected model behavior. The affected…
Security Affairs
-
Exploit.in data shows how a 2005 cybercrime forum helped shape today’s ransomware ecosystem, with users and practices surviving for decades. Ransomnews researcher Dancho Danchev dug up a database dump of Exploit.in covering its first three years, from February 2005 to May 2008, and the numbers inside it tell a story about Russian cybercrime that enforcement…
Security Affairs
-
The Windows botnet relies on AI to maintain persistence, using xAI Grok to choose from predefined actions.
SecurityWeek
-
The Windows botnet relies on AI to maintain persistence, using xAI Grok to choose from predefined actions.
SecurityWeek
-
The Windows botnet relies on AI to maintain persistence, using xAI Grok to choose from predefined actions.
SecurityWeek
