Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,050 articles

SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities

The bugs could allow attackers to invoke internal operations and execute code, completely compromising the system. The post SAP Pa…

NEWSThe Hacker Newsabout 1 hour ago

Four-Byte Write and Timing Bug Let Researchers Run Code in Windows SmartScreen Enclave

Security researchers ran their own code inside a protected part of Windows that is meant to stay sealed off even when the rest of…

NEWSThe Registerabout 2 hours ago

Ransomware gets personal: 'We-know-where-you-are kind of stuff'

37% of ransomware attacks involve psychological or physical threats, global survey found

NEWShighThe Hacker Newsabout 2 hours ago

Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug

Microsoft on Tuesday shattered its own Patch Tuesday record by shipping patches for a whopping 1,413 vulnerabilities, including on…

NEWSThe Hacker Newsabout 5 hours ago

OpenAI Employee Arrested for Allegedly Planting Hidden Recorder in Executive Conference Room

A Saudi National and employee of OpenAI has been arrested for allegedly planting a hidden recording device in an executive confere…

NEWSKrebs on Securityabout 7 hours ago

Microsoft Patches More Than 1,400 Security Flaws

Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software…

NEWSWired Securityabout 8 hours ago

An OpenAI Employee Allegedly Used a Chatbot to Help Plant a Recording Device at the Office

Chatbot prompts reveal the engineer’s alleged efforts to set up a covert listening device days before one was found in a meeting r…

NEWSSecurityWeekabout 8 hours ago

Employee Arrested After Listening Device Found in OpenAI Conference Room, FBI and the Company Say

Saudi national Abdulrahman Alfozan was arrested Friday and terminated by OpenAI. The post Employee Arrested After Listening Device…

NEWSBleeping Computerabout 8 hours ago

OpenAI engineer arrested for allegedly planting spy device in office

A Saudi OpenAI engineer has been arrested for allegedly planting a hidden recording device in an executive conference room at the…

NEWScriticalCyberScoopabout 9 hours ago

Ivanti misses opportunity to fix vulnerability before attackers got to work and made it a zero-day

The security vendor said it initially discovered a portion of the defect during internal security checks in June, but the company…

NEWSCyberScoopabout 9 hours ago

DOJ charges 14 over a sprawling North Korean remote work scheme

Operation Lonestar Roundup uncovered an operation that used stolen identities to secretly funnel $3 million from 70 U.S. employers…

NEWShighCVE-2026-399199.8 CRITICALBleeping Computerabout 9 hours ago

Ghostscript flaw lets hackers hijack servers via PDF uploads

A critical heap buffer overflow vulnerability (CVE-2026-39919) in the Ghostscript interpreter and rendering engine could allow rem…

NEWSHackreadabout 9 hours ago

AI Scams Target Crypto Users, Not Protocols, and Wallet Security Is Catching Up

Picture a composite case drawn from documented scams where a tech professional spends forty minutes on a video…

NEWSBleeping Computerabout 10 hours ago

Anthropic warns self-replicating AI could spread to your smart devices

Anthropic is warning that small AI models could soon be able to self-replicate across consumer IoT devices, from Android TV boxes…

NEWScriticalBleeping Computerabout 11 hours ago

Microsoft October 2026 Patch Tuesday fixes 1,411 flaws, 3 zero-days

Today is Microsoft's October 2026 Patch Tuesday, with security updates addressing a record-breaking 1,411 flaws, including one act…

NEWSBleeping Computerabout 11 hours ago

Microsoft releases Windows 10 KB5126657 extended security update

Microsoft released the Windows 10 KB5126657 extended security update, which includes this month's record-breaking October 2026 Pat…

NEWSCyberScoopabout 12 hours ago

FTC says ‘sextortion’ protection companies deceived customers about services

A federal lawsuit claims that Dmitry Belkin and his companies routinely failed to deliver on services to protect customers, genera…

NEWSBleeping Computerabout 12 hours ago

Microsoft: Windows 11 24H2 Home and Pro reached end of support

Microsoft announced today that devices running Windows 11 24H2 Home and Pro editions have reached the end of support and will no l…

NEWScriticalCVE-2026-1049358.6 HIGHSecurityWeekabout 12 hours ago

Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN

CVE-2026-104935 affects Ivanti Connect Secure and it can be exploited for unauthenticated remote code execution with elevated priv…

NEWSThe Hacker Newsabout 13 hours ago

Anthropic Warns Small AI Models Could Soon Form Self-Propagating IoT Botnets

Small artificial intelligence (AI) models may be months away from developing capabilities to self-replicate on IoT devices like sm…

NEWSBleeping Computerabout 13 hours ago

UK Housing Ombudsman Service investigates 'security incident'

The U.K. Housing Ombudsman Service is investigating a third-party IT security incident that impacted its case management system on…

NEWScriticalThe Hacker Newsabout 13 hours ago

Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another

A flaw in Docker Hub, the registry where container images are published and downloaded, let one user push, pull, or delete images…

NEWSBleeping Computerabout 13 hours ago

Windows 11 KB5127648 & KB5126653 cumulative updates released

Microsoft has released the Patch Tuesday Windows 11 KB5127648 and KB5126653 cumulative updates for versions 26H2/25H2/24H2 and 23H…

NEWScriticalThe Hacker Newsabout 13 hours ago

Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far

An attacker chained three zero-day flaws in Ivanti Connect Secure, a VPN appliance, to run commands as root without logging in, se…

NEWScriticalThe Hacker Newsabout 13 hours ago

SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft

A flaw in SAP's Cloud SDK for Python can send an application's OAuth2 client credentials to a server an attacker controls, SAP sai…

NEWShighHackreadabout 14 hours ago

Best NinjaOne Alternatives for Endpoint, Patch, and Vulnerability Management

Compare the best NinjaOne Alternatives for endpoint management, patch management, remote monitoring, IT automation and MSP securit…

NEWSThe Registerabout 14 hours ago

Claude submitted fake murder tip to Philly police during summertime testing

Anthropic took more than two months to alert cops

NEWShighSecurityWeekabout 14 hours ago

Adobe Patches 140 Vulnerabilities Across 10 Products

The flaws affect products such as Commerce, Photoshop, ColdFusion, Substance 3D, Dimension, FrameMaker and Bridge. The post Adobe…

NEWSSecurityWeekabout 14 hours ago

Google Partially Reverses Chrome Bug Bounty Cuts

Google is restructuring bug bounty rewards with a focus on complex memory safety vulnerabilities. The post Google Partially Rever…

NEWSThe Registerabout 14 hours ago

Anthropic conjures another threat that doesn't exist yet to stoke fears of AI apocalypse

Self-replicating AI botnets could become feasible on IoT hardware within months, claims the Claude maker, if smaller models get sm…