Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

3,754 articles

NEWScriticalWired Security8 days ago

OpenAI Is About to Release Its First AI Model With ‘Critical’ Cyber Abilities

The company will give select partners early access to its Astra AI model—so they have time to shore up their defenses.

NEWScriticalBleeping Computer8 days ago

Aesto Health says data breach affects over 9.5 million patients

Aesto LLC, operating as Aesto Health, disclosed that a data breach discovered recently affects more than 9.5 million individuals.…

NEWSThe Register8 days ago

Anthropic pledges to try harder to keep models under control, asks partners to chip in

Security ... this time it will be different

NEWSSecurityWeek8 days ago

Sevii Targets AI-Speed Attacks With Preemptive Autonomous Defense

Sevii has expanded its ADR platform with AI agents designed to investigate, contain, and remediate AI-driven attacks within minute…

NEWSSecurityWeek8 days ago

Coast Guard Establishes Office of Maritime Cybersecurity Policy

The new office will serve as the central authority for cybersecurity policy covering US ports, vessels, and maritime facilities. T…

NEWScriticalCVE-2026-07689.8 CRITICALBleeping Computer8 days ago

Critical Langflow flaw exploited to steal OpenAI and AWS keys

Threat actors are exploiting an unauthenticated remote code execution vulnerability (CVE-2026-0768) in Langflow, an open-source fr…

NEWScriticalCVE-2026-823299.8 CRITICALThe Hacker News8 days ago

Attackers Exploit Critical JFrog Artifactory Flaw to Mint Admin Tokens Days After Disclosure

Threat actors are exploiting a newly patched critical security flaw impacting JFrog Artifactory merely days after public disclosur…

NEWSThe Hacker News8 days ago

Breeze Comet Executes Hundreds of Fraudulent Transactions via Brazilian Payment Systems

Brazilian financial services, retail, and e-commerce organizations have become the target of a financially motivated threat actor…

NEWSSecurity Magazine8 days ago

The Most Immediate Threat to the Global Financial System Is AI Cyberattacks

The Financial Stability Board issued a warning about the risks posed by frontier AI models.

NEWSSecurity Magazine8 days ago

Majority of Senior Cybersecurity Leaders Have Limited Trust in AI

A report by Onapsis analyzed AI cybersecurity challenges for organizations.

NEWScriticalSecurity Magazine8 days ago

McKesson Confirms Data Breach, Experts Weigh In

A healthcare giant experienced a data breach.

NEWShighBleeping Computer8 days ago

Hackers push malicious Virtualizor update in BGP hijacking attack

Hackers delivered malicious updates to the Virtualizor VPS management software after hijacking BGP routing for its update infrastr…

NEWSSecurity Magazine8 days ago

Could AI Elevate Women in Cybersecurity?

September 1 is International Women in Cyber Day, and this year, Security magazine is discussing how AI could uplift women in the f…

NEWSInfosecurity Magazine8 days ago

Attackers Steal METR API Key and Burn $600,000 in AI Credits

Attackers used a stolen METR API key for three weeks, consuming model credits worth $600,000

NEWScriticalBleeping Computer8 days ago

Novocure data breach affects more than 1,400 cancer patients

Healthtech company Novocure says the data of an undisclosed number of employees and more than 1,400 U.S. cancer patients has been…

NEWSThe Hacker News8 days ago

13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet Seeds

Cybersecurity researchers have identified a set of 13 malicious Composer theme packages on Packagist that are designed to inject J…

NEWSBleeping Computer8 days ago

Why Even the Best Edge Security Still Misses High-Risk Sessions

Attackers can hide behind residential proxies, VPNs, and other infrastructure that makes malicious sessions appear legitimate to e…

NEWSCyberScoop8 days ago

Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots

The Federal Ballot Mail Portal is described by a federal official as one of several IT systems that will be used to potentially de…

NEWSInfosecurity Magazine8 days ago

65% of Enterprises Have Seen AI Agents Act Out of Scope

EMA survey finds 65% of enterprises have seen AI agents act beyond intended scope

NEWShighThe Hacker News8 days ago

Iranian Hackers Pose as Recruiters to Deliver Cross-Platform RATs Through Coding Tests

The Iranian Nimbus Manticore hacking group has been attributed to two previously undocumented malware families that highlight the…

NEWSInfosecurity Magazine8 days ago

White House Launches Pilot Program in Texas to Protect Water Infrastructure

Project Watershed 250 will see water providers in Texas provided with federal and private sector cybersecurity resources amid risi…

NEWSBleeping Computer8 days ago

Nearly 22,000 Microsoft Exchange servers vulnerable to hijack attacks

Nearly 22,000 Microsoft Exchange servers exposed online remain unpatched against a high-severity authentication bypass vulnerabili…

NEWShighSecurityWeek8 days ago

Experiment: Porting a PLC Exploit With AI Takes Hours and Hundreds of Dollars

Forescout researchers used Claude AI to port a remote code execution exploit between WAGO PLC models. The post Experiment: Porting…

NEWScriticalCVE-2026-07689.8 CRITICALSecurityWeek8 days ago

Hackers Start Exploiting Critical Langflow Vulnerability

Tracked as CVE-2026-0768, the security defect allows unauthenticated attackers to execute arbitrary Python code remotely. The post…

NEWSThe Register8 days ago

33-hour BGP hijack of Softaculous traffic prompts security scramble

Hosting software vendor tells customers to reset credentials and hunt for malicious packages

NEWSWired Security8 days ago

Using High-Energy Laser, US Shoots Down Drones Near Mexico Border

The US Army’s laser system is part of a new generation of directed-energy weapons capable of detecting, tracking, and destroying d…

NEWSThe Hacker News8 days ago

Threat Actors Don’t Want Better Attacks. They Want Repeatable Ones

The most common way into a company last year was to ask. A web page tells the visitor to prove they are not a robot. While they r…

NEWSSecurityWeek8 days ago

Five Venezuelans Plead Guilty in US Court to ATM Jackpotting

The defendants unsuccessfully attempted to physically install malware on ATMs to force them to dispense cash. The post Five Venezu…

NEWScriticalSecurityWeek8 days ago

Ransomware Gang Claims Nutex Health Data Breach

The company has notified the SEC that hackers accessed patient, employee, provider, business, and financial information. The post…

NEWSCyberScoop8 days ago

The Collective Cyber Defense letter wrote your next vendor questionnaire

More than 200 companies have now signed to an August 27 letter about improving cyber defenses in the age of AI. Buried in it are t…