Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

3,747 articles

NEWScriticalCVE-2026-87491The Hacker News27 minutes ago

Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandbox

Google on Thursday released updates to patch 230 security vulnerabilities, including one that has come under active exploitation i…

NEWSBleeping Computerabout 1 hour ago

Man gets 15 years for extorting women with AI-generated porn videos

An Ohio man was sentenced to 15 years in prison for multiple cybercrimes, including sextortion and cyberstalking of numerous victi…

NEWSThe Hacker Newsabout 1 hour ago

New cPanel Flaw Lets a Hosting Account With Mail Privileges Run Code as Root

cPanel has patched a flaw that it says lets a single hosting account take control of an entire server. An authenticated account ho…

NEWSInfosecurity Magazineabout 1 hour ago

SAP Patches Maximum Severity “Overpass” Flaw

Onapsis urges SAP customers to patch “Overpass” vulnerability, which has a CVSS score of 10.0

NEWShighThe Hacker Newsabout 2 hours ago

F5 BIG-IP APM Malware Injects a PHP Web Shell Into Memory, Evading Disk Scans

Malware linked to break-ins at F5 BIG-IP Access Policy Manager appliances hides a PHP web shell in memory instead of in a file on…

NEWScriticalBleeping Computerabout 2 hours ago

New Microsoft Defender 'ShieldCrash' zero-day grants SYSTEM access

An anonymous security researcher known as Nightmare Eclipse has released a new Microsoft Defender zero-day exploit named "ShieldCr…

NEWSCVE-2026-694147.8 HIGHThe Hacker Newsabout 3 hours ago

Researcher Drops New Microsoft Defender PoC Showing ShieldBreak Patch Can Be Bypassed

The security researcher known as Chaotic Eclipse has dropped a proof-of-concept (PoC) for yet another zero-day in Microsoft Defend…

NEWScriticalBleeping Computerabout 3 hours ago

Google warns of new Chrome zero-day bug exploited in attacks

Google has patched 230 vulnerabilities on Tuesday, including another actively exploited Chrome zero-day bug, the seventh such vuln…

NEWSCVE-2026-4475610.0 CRITICALThe Hacker Newsabout 3 hours ago

SAP Patches CVSS 10.0 Kernel Flaw Enabling Unauthenticated Remote Code Execution

SAP has released security updates to address multiple vulnerabilities, including a maximum-severity flaw in SAP Extended Passport…

NEWScriticalThe Hacker Newsabout 5 hours ago

Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-Days

Microsoft on Tuesday broke Patch Tuesday records by addressing an earth-shattering 974 vulnerabilities spanning its software portf…

NEWShighCVE-2026-86218The Hacker Newsabout 5 hours ago

N-able N-central Pre-Auth RCE Flaw Exploited in the Wild

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a maximum-severity security flaw impacting N-abl…

NEWSBleeping Computerabout 8 hours ago

Microsoft adds age-awareness APIs that can tell if users are children, teens, or adults

Microsoft is adding new age-awareness APIs to Windows 11 that will allow apps to determine whether someone is a child, teenager, o…

NEWShighThe Registerabout 9 hours ago

Microsoft breaks Patch Tuesday record with 974-CVE deluge

Adobe also brought goodies to the patch party and they deserve immediate attention

NEWScriticalCyberScoopabout 11 hours ago

Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

While the vendor hit another monthly record, it hasn’t resulted in a flood of active exploits. Researchers encourage customers to…

NEWSKrebs on Securityabout 12 hours ago

Microsoft Plugs Nearly 1,000 Security Holes

Microsoft Corp. today issued updates to plug at least 974 security holes in its Windows operating systems and other software, by f…

NEWSThe Registerabout 12 hours ago

OpenAI's Artifactory opened covert data-stealing channel alongside Hugging Face attack

Researchers disclosed the cross-account trick the same day rogue agents exploited another zero-day for admin access

NEWSCyberScoopabout 13 hours ago

Feds accuse China of ‘systematic’ distillation of U.S. AI models

A joint advisory alleges Chinese companies are using sophisticated systems to route millions of data requests to US AI models acro…

NEWSBleeping Computerabout 13 hours ago

DoppelCart fraud network uses 119,000 fake shops to steal credit cards

A massive operation dubbed "DoppelCart" uses more than 119,000 domains to run a network of fake e-shops that steal payment card de…

NEWSCyberScoopabout 13 hours ago

Russian national extradited to US for alleged involvement in bank-account takeover scheme

Authorities accuse the 36-year-old and co-conspirators of collecting more than 5,000 victim login credentials to various banks. T…

NEWSBleeping Computerabout 13 hours ago

The EU CRA's Real Question: What Shipped, and When Did You Know?

The EU Cyber Resilience Act's vulnerability reporting requirements take effect September 11, giving software vendors as little as…

NEWSWired Securityabout 13 hours ago

Meta Releases Muse, a Personal AI Agent With Privacy ‘Built Into It’

Designed to compete with OpenClaw and Instinct, the company says Muse can do everything from sell your car to book you a plane tic…

NEWShighBleeping Computerabout 13 hours ago

Hackers breach F5 BIG-IP APM devices to deploy Linux rootkit

A Linux rootkit targeting devices in F5 BIG-IP APM environments can intercept PHP file loading and inject a fileless web shell dir…

NEWSCyberScoopabout 14 hours ago

CIA’s Michael Ellis says cyber intelligence is changing how the agency operates

The deputy director cited Operation Absolute Resolve as evidence that cyber teams have become central to CIA missions. The post CI…

NEWScriticalSecurityWeekabout 14 hours ago

Microsoft Patches Record 974 Vulnerabilities, Including Two Exploited Zero-Days

The record-breaking September security update fixes two exploited privilege-escalation zero-days and 20 potentially wormable vulne…

NEWSBleeping Computerabout 15 hours ago

Microsoft releases Windows 10 KB5122878 extended security update

Microsoft has released the Windows 10 KB5122878 extended security update, which includes this month's record-breaking September 20…

NEWScriticalCVE-2026-7565010.0 CRITICALSecurityWeekabout 15 hours ago

Adobe Patches Over 170 Vulnerabilities, Including Commerce Zero-Day

Tracked as CVE-2026-75650, the exploited defect allows unauthenticated attackers to execute arbitrary code. The post Adobe Patches…

NEWSCyberScoopabout 15 hours ago

Why federal cyber defense demands an offense-driven mindset

Static checklists and annual penetration tests leave agencies with dangerous blind spots. True resilience requires moving from rea…

NEWScriticalBleeping Computerabout 15 hours ago

Microsoft September 2026 Patch Tuesday fixes 966 flaws, 2 zero-days

Today is Microsoft's September 2026 Patch Tuesday, with security updates released for a record-breaking 966 flaws, including two a…

NEWSBleeping Computerabout 16 hours ago

Windows 11 cumulative updates KB5124008 & KB5122880 released

Microsoft has released Windows 11 KB5124008 and KB5122880 cumulative updates for versions 25H2/24H2 and 23H2 to fix security vulne…

NEWSSecurityWeekabout 17 hours ago

The Hidden Instructions That Can Hijack AI Agents

Malicious prompts concealed in documents, metadata, emails, images and code can manipulate autonomous agents into taking dangerous…