Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 122 stories in 24 hours
Phishing & Scams
Malware, exploited flaws, phishing and botnets, from the researchers who found them.
41stories this week
2today
the last seven days
Most fromBitdefender, Help Net Security, KnowBe4, BleepingComputer
In the news hereGoogle8Microsoft4Apple2Meta1Qilin1
MyCyberWay trainingSomeone will report this email. Know exactly what to do next.See the Analyst curriculum
-
The Attorney General has announced applications are open for a new Director to lead the Serious Fraud Office.
GOV.UK
-
A plausible-sounding sponsorship offer could mask an attempt to compromise your Google account…
ESET WeLiveSecurity
-
AI agents are increasingly being trusted with real work. They can help write and run code, connect to tools, access files, use credentials, install skills, and carry out tasks on our behalf. Despite their usefulness, these capabilities create new security risks if an agent is manipulated, given too much access, or directed to take an…
Bitdefender
-
Cofense Intelligence has been tracking a series of email campaigns that target the accommodation industry with fake guest complaints or reviews that deliver blockchain technology-abusing malware. These emails appear to likely be a continuation of a prior series of predominantly Booking.com-spoofing emails that were seen delivering various remote access trojans (RAT) via ClickFix fake CAPTCHA…
Cofense
-
Active Directory defenses must combine identity fundamentals, telemetry, and rapid response as attackers reach the environment’s first breach attempt within a median of 11 hours.
Sophos
-
A phishing campaign is targeting Google accounts with lures that promise free subscriptions to Anthropic’s Claude Max AI model, Malwarebytes warns.
KnowBe4
-
Linux backdoors targeting telecom and network appliances in South Korea and Taiwan have been disguising their traffic as email services and seemingly legitimate processes to blend in and evade detection. Threat actors are known to name their malicious software after a legitimate operating system component or a process as a defense evasion measure. By borrowing…
The Hacker News
-
Researchers at Netskope are tracking a phishing kit that hijacks users’ browser windows to display fake security alerts. The malicious websites are distributed via Google Ads, and pose as normal online stores. Once a user clicks a link on the page, however, the site will present them with an urgent-looking security warning.
KnowBe4
-
Scammers are capitalizing on the upcoming GTA VI release by luring gamers with leaked builds and other ways of getting pre-launch access. Here’s how to avoid falling for their tricks.
Kaspersky
-
AI chats aren’t private diaries: Florida woman arrested after journaling about possible armed attack
Investigators have charged a woman in Florida after discovering alleged threats against the Lee County Sheriff’s Office that she posted on Anthropic’s Claude AI platform while chatting with the bot.
Bitdefender
-
Lead Analysts: Lucy Gee and Emily Hanlon As millions of shoppers prepare their wishlists and await discounts for Amazon’s Prime Big Deal Days starting October 6, cybercriminals are gearing up for their own payday.
KnowBe4
-
Following the launch of Apple’s iPhone 18 Pro and iPhone 18 Pro Max, Which? has warned shoppers about fake websites claiming to sell the new phones at tempting prices. The warning follows reporting from The Guardian about scam websites appearing around the launch, including sites using words such as “Apple” and “iPhone 18” in their…
Bitdefender
