Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

2,130 articles

NEWShighThe Hacker Newsabout 2 hours ago

Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable

A malvertising operation dubbed SourTrade is making victims' browsers build the final Windows executable themselves, using a legit…

NEWShighBleeping Computerabout 5 hours ago

Malicious sites use JavaScript to build malware in browser memory

A massive malvertising campaign is using fake Solana, Luno, and TradingView webpages with malicious JavaScript that instructs brow…

NEWSBleeping Computerabout 6 hours ago

ShinyHunters data leaks fuel $2,000 sextortion email scam

Threat actors are using email addresses exposed in data breaches leaked by the ShinyHunters extortion group to send sextortion ema…

NEWShighCVE-2026-167239.0 CRITICALThe Hacker Newsabout 8 hours ago

Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available

Security firms ThreatBook and Imperva say attackers are targeting a critical flaw in Fastjson, Alibaba's JSON library for Java. In…

NEWShighWired Securityabout 10 hours ago

The OpenAI Models That Hacked Hugging Face Were ‘Active on the Internet’ for Days

Plus: Russian hackers are trying to steal US nuclear scientists’ emails, the State Department bans known scammers from entering th…

NEWShighThe Hacker Newsabout 10 hours ago

CTM360 Research Reveals How Insurance Phishing Has Evolved Into Real-Time Account Hijacking

For years, phishing campaigns targeting financial institutions followed the same playbook. Victims were tricked into entering user…

NEWSThe Hacker Newsabout 10 hours ago

Cl0p Affiliates Target Internet-Exposed PTC Windchill and FlexPLM with Unauthenticated RCE

Threat actors linked to the Cl0p (aka Chubby Scorpius, FIN11, Graceful Spider, and Lace Tempest) ransomware campaign are exploitin…

NEWSThe Hacker Newsabout 11 hours ago

DevMan RaaS Portal Centralizes Payload Builds, Victim Management, and Affiliate Payouts

The operators of the DevMan ransomware-as-a-service (RaaS) scheme are maintaining a dedicated web platform that offers affiliates…

NEWSBleeping Computerabout 11 hours ago

OpenAI confirms ChatGPT is down worldwide

ChatGPT, the famous artificial intelligence chatbot that allows users to converse with various personalities and topics, has conne…

NEWSThe Hacker Newsabout 12 hours ago

Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git

Security researcher Yuhang Wu at depthfirst has published a working proof-of-concept (PoC) exploit that executes commands as git o…

NEWSSecurityWeekabout 12 hours ago

Rockwell Patches Code Execution Flaws in Arena Simulation Software

A researcher has explained how an attacker could exploit these vulnerabilities to target industrial organizations. The post Rockwe…

NEWSThe Registerabout 22 hours ago

Pope's official prayer app commits cardinal sin, leaks 700K+ users' info

(Security) hole-ier than thou

NEWSCyberScoopabout 24 hours ago

Industry’s message on CIRCIA: Please ask us fewer questions about cyberattacks

The administration set a target date of September for CISA to finalize the rule, but where the agency is headed remains a mystery…

NEWSThe Register1 day ago

Europol flags 4,340 'horrific' URLs linked to The Com

Stop the spread (of online recruiting and propaganda)

NEWScriticalBleeping Computer1 day ago

OnTrac notifies customers of data breach after network hack

OnTrac parcel delivery company is informing that hackers breached its corporate network and may have accessed personal details bel…

NEWSCyberScoop1 day ago

Despite multiple takedowns, botnets continue to grow

Roughly 1 in 4 of those compromised IPs are based in the United States, Lumen’s Black Lotus Labs said. Botnets like IPIDEA have al…

NEWSBleeping Computer1 day ago

Hermes AI agent used to automate attack on Thai Finance Ministry

A threat actor used the open-source Hermes AI agent in unattended "YOLO" mode to automate post-exploitation activity during an all…

NEWShighBleeping Computer1 day ago

Hackers hijack hotel Wi-Fi DNS to steal Microsoft 365 accounts

Hackers are changing the DNS settings on Wi-Fi devices at hotels and conference centers to redirect users to fake Microsoft 365 lo…

NEWShighSecurity Magazine1 day ago

CISA, FBI Issue Warning of Ongoing Cyber Exploitation from Iran

An alert issued earlier this year was updated, providing more guidance on Iranian-linked cyber activity.

NEWSBleeping Computer1 day ago

Microsoft blames massive Microsoft 365 outage on maintenance bug

Microsoft says a bug in its automated network maintenance request system caused Thursday's massive outage by mistakenly removing I…

NEWSCyberScoop1 day ago

Microsoft, tech companies throw weight behind spread of open-source AI

Other signatories of the letter include Meta, Palantir, Perplexity, Mistral, NVIDIA, Mozilla, The Linux Foundation, Hugging Face,…

NEWSSecurity Magazine1 day ago

AI Without Guardrails Is Driving a New Era of Cybercrime

The risk of guardrail-free AI isn’t a future concern — it’s a current-day threat.

NEWShighThe Hacker News1 day ago

BlueNoroff Zoom Phishing Kit Profiles Crypto Wallets Before Malware Delivery

The North Korean threat actors behind the ClickFix-style campaigns that employ typosquatted Zoom and Microsoft Teams domains have…

NEWShighSecurityWeek1 day ago

In Other News: Dolphin X AI-Powered Malware, Car Anti-Theft Device Hack, 400 Linux Kernel Flaws

Noteworthy stories that might have slipped under the radar: Siemens ROX II industrial switch vulnerabilities, Russian Zimbra webma…

NEWShighThe Hacker News1 day ago

Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller

Researchers H0j3n and Aniq Fakhrul published a working exploit on July 24 that lets a low-privileged Active Directory user obtain…

NEWScriticalBleeping Computer1 day ago

Chick-fil-A data breach affects more than 13,000 customers

Chick-fil-A has confirmed that over 13,000 customers had their accounts breached in a wave of credential stuffing attacks targetin…

NEWSBleeping Computer1 day ago

Slopsquatting, Phantom Domains, and HalluSquatting Are the Same AI Attack

Slopsquatting, phantom squatting, and HalluSquatting all exploit the same late-binding attack pattern, where AI coding agents trus…

NEWSBleeping Computer1 day ago

Europol flags 4,340 URLs for removal in 'The Com' crackdown

Europol has flagged 4,340 URLs for removal during a multi-week operation targeting online content linked to "The Com," a loosely o…

NEWSThe Register1 day ago

Uncle Sam tells overseas cybercrooks their visas are canceled

Policy targets online scammers, sextortionists, and potentially their immediate families

NEWSSecurityWeek1 day ago

AegisAI Raises $36 Million for AI-Powered Email Security

The company has raised a total of $49 million in funding, including from Battery Ventures, Accel and Foundation Capital. The post…