Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

1,610 articles

NEWSSecurity Magazineabout 2 hours ago

Security Leaders Discuss Exposure of 24B Credentials

Researchers discovered 8 terabytes of exposed credentials.

NEWScriticalCVE-2026-489399.8 CRITICALThe Hacker Newsabout 3 hours ago

iCagenda and Balbooa Forms Joomla Flaws Reportedly Exploited as Zero-Days

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two maximum-severity security flaws impacting iCagenda…

NEWSBleeping Computerabout 8 hours ago

OpenAI temporarily relaxes GPT-5.6 Sol usage limits

OpenAI is temporarily relaxing GPT-5.6 Sol usage after demand for the company's most powerful model surged over the past 48 hours.…

NEWSBleeping Computerabout 13 hours ago

Claude Fable 5 stays free for paid users until July 19 as Anthropic buys more time

Anthropic has just extended access to Claude Fable 5 for paid subscribers until July 19, giving you another week to keep using the…

NEWShighBleeping Computerabout 18 hours ago

RedHook Android malware now uses Wireless ADB for shell access

A new version of the RedHook Android malware abuses the Android Wireless Debugging (Wireless ADB) mechanism in a novel way to gain…

NEWSThe Hacker News1 day ago

Compromised jscrambler 8.14.0 npm Release Drops Rust Infostealer During Install

Version 8.14.0 of the jscrambler npm package shipped with a malicious preinstall hook that silently drops and runs a native infost…

NEWShighThe Hacker News1 day ago

Hackers Weaponize Balochistan Police Portal in Multi-Group Espionage Campaigns

Cybersecurity researchers have disclosed details of sustained cyber espionage activity against several Pakistani law enforcement o…

NEWSSecurityWeek1 day ago

Ghost Accounts Abuse GitHub API in Mass Recon Campaign

Multiple campaigns are using ghost accounts to map GitHub organizations, including their repositories and members. The post Ghost…

NEWSBleeping Computer2 days ago

Australia warns of global campaign targeting vulnerable CMS platforms

The Australian Cyber Security Centre (ACSC) issued an alert about a global exploitation campaign targeting vulnerable content mana…

NEWSWired Security2 days ago

AI Found a Root Bug in Linux That Everyone Missed for 15 Years

Plus: The Pentagon is training amateurs to become part of its hacker army, a Flock license plate reader error led to cops surround…

NEWSBleeping Computer2 days ago

'Ghostcommit' hides prompt injection in images to fool AI agents, steal secrets

A PNG hiding a prompt injection could steal your repo's secrets, researchers demonstrate. The technique, dubbed 'Ghostcommit,' sli…

NEWScriticalThe Hacker News2 days ago

Critical Zimbra Flaw Could Let Crafted Emails Run Malicious Code in User Sessions

Zimbra is urging customers to apply updates to address a critical security vulnerability impacting the Classic Web Client that cou…

NEWSBleeping Computer2 days ago

New U-Boot flaws could enable stealthy firmware attacks

Six vulnerabilities in the widely used U-Boot bootloader have been discovered that could allow attackers to execute malicious code…

NEWScriticalCyberScoop3 days ago

Armenian national pleads guilty to Ryuk ransomware attacks

Karen Vardanyan faces up to 15 years in federal prison and agreed to pay nearly $1.2 million in restitution. The post Armenian nat…

NEWSCyberScoop3 days ago

CISA looks to remedy ailments from big May credential leak

A major credential leak spurred the Cybersecurity and Infrastructure Security Agency to strengthen protections for its sensitive m…

NEWSBleeping Computer3 days ago

Ryuk ransomware member pleads guilty in the US, faces 15 years in prison

A 34-year-old Armenian man has pleaded guilty to hacking U.S. companies and deploying the infamous Ryuk ransomware to encrypt thei…

NEWShighThe Register3 days ago

Destructive Windows backdoor stuffs multiple wipers and ransomware code into a single package

Microsoft says GigaWiper combines at least 3 malware families into one modular tool

NEWSThe Hacker News3 days ago

Injective Labs GitHub Compromise Pushes Wallet-Key-Stealing npm Packages

Unknown threat actors compromised the Injective Labs SDK project's GitHub repository and leveraged it to publish a malicious packa…

NEWShighBleeping Computer3 days ago

Police suspects Dutch hackers were involved in Odido breach

The Dutch National Police (Politie) says it has found "strong indications" that Dutch hackers have been involved in a February bre…

NEWSThe Hacker News3 days ago

URGENT - Progress Tells ShareFile Customers to Shut Down Storage Zone Controllers Over Security Threat

Progress Software has told ShareFile customers to shut down the Windows servers running their Storage Zone Controllers, confirming…

NEWSBleeping Computer3 days ago

Progress urges ShareFile customers to shut down servers over "credible" threat

Progress Software is emailing ShareFile customers who use Storage Zone Controllers to immediately shut down their servers after id…

NEWSInfosecurity Magazine3 days ago

CISA Details Incident Response to Exposed AWS GovCloud Keys

CISA reveals how it responded after sensitive AWS GovCloud credentials and internal data were exposed in a public GitHub repositor…

NEWSThe Hacker News3 days ago

Six New U-Boot Flaws Could Let Malicious Images Crash Devices or Run Code at Boot

Researchers at firmware security firm Binarly have found six new flaws in U-Boot, the small program that starts up hardware as var…

NEWScriticalBleeping Computer3 days ago

Hackers exploit critical auth bypass in Gitea Docker image

Hackers are actively exploiting a critical vulnerability in the official Docker image for the Gitea self-hosted Git service that a…

NEWSBleeping Computer3 days ago

Money launderer accused of stealing seized crypto while in prison

A Bulgarian national has been charged with stealing $290,000 in government-seized cryptocurrency while serving 121 months in priso…

NEWShighInfosecurity Magazine3 days ago

Microsoft Warns New 'GigaWiper' Malware Combines Espionage and Destructive Capabilities

A new multi-purpose backdoor allows cyber threat actors to conduct both quiet espionage activity and destructive wiping operations

NEWShighSecurityWeek3 days ago

In Other News: DHS Database Hacked, Adobe Boosts Patch Cadence, Canada Disrupts Ransomware Ops

Other noteworthy stories that might have slipped under the radar: Abnormal AI sued by Anthropic, AssuranceAmerica data breach affe…

NEWSThe Hacker News3 days ago

Laser Attack Resets Tangem Wallet Passwords on Cards That Can't Be Patched

Researchers at Ledger's Donjon security team have shown that a precisely timed laser pulse, aimed at the chip inside a Tangem cryp…

NEWSThe Hacker News3 days ago

Researcher Details WhatsApp-to-Host Attack Chain Using Three OpenClaw Flaws

Details have emerged about three now-patched security flaws in the OpenClaw personal artificial intelligence (AI) assistant that,…

NEWSBleeping Computer3 days ago

The Replicant in Your Directory: AI Agents and the Identity Security Gap

AI agents are accelerating the growth of non-human identities, making it harder for organizations to understand what exists, who o…