Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 131 stories in 24 hours
Threat Intelligence
👉 Malware, zero-days, exploits
159stories this week
18today
the last seven days
Most fromThe Hacker News, Help Net Security, BleepingComputer, Bitdefender
In the news hereGoogle16Microsoft13GitHub6Fortinet6Lazarus2Qilin2APT411APT29 (Cozy Bear)1
MyCyberWay trainingSomeone will report this email. Know exactly what to do next.See the Analyst curriculum
-
An active ClickFix campaign has been observed compromising legitimate Ukrainian business websites to inject bogus Cloudflare verification pages and trick victims into downloading a previously undocumented information stealer called Psychedelic. “When a visitor interacts with the page, the lure copies a Windows Installer command to the clipboard and instructs the visitor to paste it into…
The Hacker News
-
Securing edge computing requires organizations to fundamentally rethink security governance. This step-by-step guide to building a SASE framework provides the path forward. (Third in a three-part series.)
Dark Reading
-
Securing edge computing requires organizations to fundamentally rethink security governance. This step-by-step guide to building a SASE framework provides the path forward. (Third in a three-part series.)
Dark Reading
-
Microsoft has set a clearer deadline for the last surviving part of Internet Explorer. The company is now telling admins that IE mode in Microsoft Edge will remain supported through at least the end of 2029 and is urging organizations to begin mapping their remaining dependencies now.
Bitdefender
-
Even if the organization locks down employee accounts, forgotten and lost service accounts can still undo the organization’s entire M365 environment.
Dark Reading
-
AI apps that interpret external data (read: most AI apps) need exceptionally rigorous security filters, or attackers can take advantage.
Dark Reading
-
Analysis of a SectopRAT variant hidden in tampered legitimate software that steals credentials and enables remote system control…
FortiGuard Labs
-
The logistics sector has become the target of a new malicious cyber campaign that distributes an Android spyware codenamed Corp MDM. According to Have I Been Squatted, the campaign uses fake Google Play pages branded as CEVA and TKW Logistics to distribute an Android Package Kit (APK) file that’s dressed up as a system service.…
The Hacker News
-
New agreement will boost intelligence sharing between UK and Cambodian law enforcement to dismantle scam operations.
Home Office
-
We look at a new version of the MacSync macOS stealer with a backdoor module that targets crypto enthusiasts and developers.
Securelist (Kaspersky)
-
A new Android banking trojan called RemControl tricks victims into installing a fake TV app, then takes control of their phones to steal banking PINs, Group-IB has found. Researchers confirmed that the malware targets customers of more than 30 banks in Italy, France, Spain, Poland, Portugal, Canada and some Gulf states. The first samples were…
Help Net Security
-
ClickFix has become the most common way attackers get into enterprise networks, and it does it without an exploit, an attachment, or a file on disk. Our new global threat report traces the technique from a novelty in late 2023 to a subscription product with on-chain infrastructure and a state-sponsored user base, and explains why…
The Hacker News
