Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

3,925 articles

NEWShighBleeping Computerabout 1 hour ago

Hackers target exposed Vite dev servers to steal AWS, Azure secrets

A mass-scanning campaign targeting internet-exposed Vite development servers is attempting to steal cloud credentials and configur…

NEWSInfosecurity Magazineabout 2 hours ago

Malicious Twitch Extension Exposes 31,000 Users' OAuth Tokens

Socket has discovered a Twitch browser extension forwarding users' OAuth tokens to a Russian bot service

NEWSThe Hacker Newsabout 3 hours ago

⚡ Weekly Recap: Rogue AI Agents, WeChat Worm, PaperCut Attacks, AI Espionage, and Rootkits

AI keeps showing up in the wrong places. Attackers are using it to speed up exploits, test defenses, and automate more of the job.…

NEWSThe Registerabout 3 hours ago

Perfect-10 GitLab bug under attack days after patch lands

CISA confirms active exploitation as watchTowr spots miscreants probing internet-facing servers

NEWSSecurityWeekabout 3 hours ago

Beijing Hits Back at Anthropic CEO’s Call to Curb China’s AI Development

China’s Ministry of Foreign Affairs responded to a question about Amodei’s essay by saying that all parties should work together o…

NEWShighInfosecurity Magazineabout 3 hours ago

Human Attacker Hits Machine-Speed Exploitation of Marimo RCE

A human attacker exploited a Marimo RCE and reached an SSH bastion in eight seconds

NEWSBleeping Computerabout 3 hours ago

Why Patch Automation Needs Brakes, Not Just an Accelerator

Patch automation can help IT teams keep pace with growing update volumes, but deploying faster also means bad updates can spread f…

NEWSSecurityWeekabout 4 hours ago

New Warnings About the Risks of AI to Humanity Revive a Long-Running Debate

Concerns over the potential risks of the technology are rising as new AI models become more powerful, heightening both the potenti…

NEWScriticalSecurityWeekabout 4 hours ago

Personal, Financial Info Exposed in Revolut Data Breach

The company unintentionally disclosed users’ information to a third party impersonating a government agency. The post Personal, Fi…

NEWSSecurityWeekabout 4 hours ago

The Race to Control AI and Protect What Makes Us Human

As researchers warn that misaligned AI could threaten human survival, even beneficial systems may erode the critical thinking that…

NEWSInfosecurity Magazineabout 4 hours ago

Defense Cyber Spending Set to Surge Amid Rising Attacks on Military Systems

MarketsandMarkets has projected the cyber warfare market to double by 2031, amid growing demand for defensive and offensive cyber…

NEWSBleeping Computerabout 5 hours ago

Webinar: How malicious OAuth apps can lead to Google Workspace breaches

Attackers can combine social engineering with malicious OAuth applications to gain access to Google Workspace data without relying…

NEWSThe Hacker Newsabout 5 hours ago

AI Changed the Exposure Problem. Validation Needs to Change With It.

There's a lot of noise around AI and cybersecurity right now. What’s actually important is far simpler, if often lost in the hubbu…

NEWScriticalSecurityWeekabout 5 hours ago

Chinese Hackers Exploit Critical Tencent Software Flaw for One-Click Code Execution

The Chinese-language input method editor for Windows can allow attackers to execute arbitrary code remotely. The post Chinese Hack…

NEWScriticalInfosecurity Magazineabout 6 hours ago

Revolut Confirms Data Breach Through Fake Government Requests

An unauthorized party used a legitimate government email domain to fraudulently request Revolut customer data

NEWSWired Securityabout 6 hours ago

Sexually Explicit Deepfake Sites Target 100-Plus Politicians in Europe

An analysis of 160 deepfake websites reveals politicians in 22 countries appear on them. Nearly all of them are women.

NEWSSecurityWeekabout 7 hours ago

CISOs Race to Control AI Agents Without Destroying Their Value

Security leaders are struggling to modernize cyber hygiene and prevent over-privileged agents from causing unintended harm. The po…

NEWShighInfosecurity Magazineabout 7 hours ago

Hackers Exploit Maximum Severity Flaw in GitLab

CISA warns that threat actors are exploiting a vulnerability with a CVSS score of 10.0

NEWSSecurityWeekabout 7 hours ago

Telus Warns Customers of Account Breaches

Stolen credentials were used in a multi-month campaign to access subscriber personal data and billing records. The post Telus Warn…

NEWSBleeping Computerabout 7 hours ago

Microsoft: September updates cause RDS failures on Windows Server

Microsoft has confirmed reports that the September 2026 security updates cause Remote Desktop Services (RDS) failures on Windows S…

NEWShighSecurityWeekabout 8 hours ago

Three JFrog Artifactory Flaws Exploited for Backdoor Deployment

The vulnerabilities can allow attackers to bypass authentication and elevate their privileges to administrator. The post Three JFr…

NEWSThe Registerabout 8 hours ago

UK.gov begins killing off passwords for 23 million users

Passkeys promise fewer phishing headaches – and £600 a day off Whitehall's SMS bill

NEWShighInfosecurity Magazineabout 8 hours ago

OpenAI Agent Swarm Hacks RubyGems Package Manager

Researchers confirm that OpenAI agents uploaded hundreds of malicious packages to RubyGems

NEWScriticalBleeping Computerabout 8 hours ago

Revolut discloses data breach exposing financial info, passports

Fintech company Revolut has disclosed a data breach after sharing data from an undisclosed number of customers with a threat actor…

NEWShighSecurityWeekabout 9 hours ago

ConnectWise Patches ScreenConnect Vulnerability Exploited in Worm-Like Attacks

The flaw allows attackers to send files and execute them without authorization through an active remote session. The post ConnectW…

NEWSBleeping Computerabout 9 hours ago

Microsoft: September updates break audio on some Windows PCs

Microsoft has confirmed that USB audio devices may fail on some Windows systems after installing the KB5124008and KB5124012 Septem…

NEWSThe Hacker Newsabout 10 hours ago

Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users

A malicious cross-store Twitch browser extension has leaked OAuth tokens associated with nearly 31,000 users to proxy servers oper…

NEWShighBleeping Computerabout 10 hours ago

CISA: Hackers now exploit max severity GitLab flaw in attacks

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that hackers are now exploiting a maximum-severity GitLab…

NEWShighCVE-2026-51990Bleeping Computer1 day ago

Hackers exploit Tencent app flaw to deploy GrayRabbit malware

Threat actors linked to a China-aligned espionage group are exploiting a critical vulnerability (CVE-2026-51990) in Tencent's Sogo…

NEWSSecurityWeek1 day ago

Anthropic CEO Dario Amodei Says AI Industry Needs to Give Safety Measures Time to Catch Up

Dario Amodei warned that within six to 12 months AI could be capable of leading a swarm of agents that could take over the entire…