The CYBER media, unfolded.
Breaches, ransomware, zero-days, vulnerabilities, encryption and privacy — who was hit, how, and what to patch.
2,257 reports across 7 topics, updated hourly.
A new webinar aims to equip cybersecurity professionals with the knowledge to ascertain the exploitability of newly disclosed Common Vulnerabilities and Exposures (CVEs) in their specific environments, a critical capability in the face of rapidly evolving threats.
The China-aligned state-sponsored threat actor identified as FamousSparrow has been actively deploying a newly discovered backdoor, named SparroWocky, in cyberattacks targeting multiple nations across Latin America. ESET security researchers Alexandre Côté Cyr and Romain Dumont detailed these findings…
The Internet Systems Consortium (ISC) has addressed fourteen security vulnerabilities within its widely-used BIND 9 open-source DNS server software, releasing updates BIND 9.20.29 and 9.21.26 on September 16. Among the patched flaws is a critical vulnerability that can lead…
Gyazo, an image-sharing service operated by Helpfeel, disclosed a significant security breach on Wednesday, revealing that approximately 23.62 million user records were compromised. The exposed data includes user email addresses and password hashes, according to a notice published…
Cisco has issued a critical warning regarding a newly discovered zero-day vulnerability affecting its Identity Services Engine (ISE). This flaw, tracked as CVE-2026-76460, has been assigned the highest possible severity score of 10.0 on the Common Vulnerability Scoring System (CVSS)…
The U.S. Department of Justice (DoJ) announced on Tuesday the court-authorized seizure of internet domains associated with NightmareStresser, a distributed denial-of-service (DDoS)-for-hire service. The seized domains are nightmare-stresser[.]com and nightmarestresser[.]org.