Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,718 articles

AI 'watermark removers' flood the web. Almost none can prove they work.

Multiple 'watermark removers' have surfaced days after Anthropic began watermarking text generated by Claude, including an open so…

NEWSSecurity Magazine3 months ago

Uber Freight Investigates Data Security Concern

Following a hacker’s breach claims, Uber Freight is investigating a data security incident.

NEWShighCyberScoop3 months ago

AI’s ‘middle class’ has gotten dramatically better at hacking

As frontier models and their sandbox escaping exploits dominate front-page news, researchers are increasingly worried about cheape…

NEWScriticalCVE-2026-593109.8 CRITICALBleeping Computer3 months ago

Critical VMware vCenter RCE flaw exploited for reverse SSH access

A recently patched critical vulnerability (CVE-2026-59310) in VMware vCenter Syslog Server is being exploited in an active campaig…

NEWScriticalInfosecurity Magazine3 months ago

Exposed AWS Access Key Linked to Data Breach Affecting 1500+ UK Charities

CRM provider Beacon has revealed that a compromised AWS access key was the likely root cause of the breach of 1500 UK charities’ d…

NEWScriticalBleeping Computer3 months ago

Trezor discloses data breach affecting nearly 14,000 customers

Hardware wallet manufacturer Trezor disclosed a data breach affecting nearly 14,000 of its customers after ShipMonk, its shipping…

NEWShighThe Register3 months ago

Trump wants to grant private cyber firms a license to hack back

Contractors could surveil and disrupt foreign criminal networks, provided they follow strict rules and put up $1M

NEWScriticalThe Hacker News3 months ago

New PATCHCORD Backdoor Targets Afghan Telecom and Indian Critical Infrastructure

Afghan telecom providers and South Asian critical infrastructure organizations have emerged as the target of a new ongoing campaig…

NEWSThe Register3 months ago

The backup Microsoft never promised you

SPONSORED FEATURE: Your M365 and Azure data might not be as safe as you think from ransomware; time for a reality check

NEWSInfosecurity Magazine3 months ago

Google Cloud Targets 2027 for First Major Post-Quantum Security Milestone

Google Cloud has set a 2027 deadline to mitigate store-now-decrypt-later risks as part of its post-quantum cryptography roadmap, w…

NEWSSecurity Magazine3 months ago

Shadow AI Impacts 74% of Organizations

Most organizations are running more AI tools than they thought.

NEWSSecurityWeek3 months ago

Cybersecurity M&A Roundup: 21 Deals Announced in July 2026

Significant cybersecurity M&A deals announced by Barracuda, CrowdStrike, Cyera, Okta, Palo Alto Networks, and Qualcomm. The post C…

NEWSCVE-2026-713629.1 CRITICALSecurityWeek3 months ago

Adobe Commerce Bug Targeted Immediately After Disclosure

The first exploitation attempts targeting CVE-2026-71362 were observed shortly after Adobe released patches. The post Adobe Commer…

NEWSBleeping Computer3 months ago

Who Vets AI’s Code? The Scale Challenge Facing Open Source Ingestion

AI coding tools can introduce unvetted or hallucinated open source dependencies faster than traditional security reviews can keep…

NEWShighInfosecurity Magazine3 months ago

vCenter Flaw Exploited Just Five Days After Disclosure

Attackers exploited a critical-severity vCenter flaw five days after Broadcom disclosed it

NEWSThe Hacker News3 months ago

AmnesiaStealer Hijacks Chromium Sessions to Give Attackers Live Browser Control on macOS

Cybersecurity researchers have disclosed details of a new macOS-oriented, Rust-based information stealer called AmnesiaStealer tha…

NEWShighBleeping Computer3 months ago

White House taps security firms for offensive hack-back operations

A new White House memo signed by U.S. President Donald Trump instructs the National Coordination Center (NCC) to establish a progr…

NEWShighSecurityWeek3 months ago

WordPress 7.0.4 Patches Remote Code Execution Vulnerability

Attackers with Author-level user or higher permissions could exploit the flaw via malicious Postscript files. The post WordPress 7…

NEWSInfosecurity Magazine3 months ago

Trump Authorizes Private Sector Participation in Offensive Cyber Operations

The White House has authorized government-directed offensive cyber operations against transnational groups, prompting warnings ove…

NEWShighThe Hacker News3 months ago

WindRelay Android Malware Turns Victims' Phones Into NFC Relays for Payment Fraud

A previously unseen Android near field communication (NFC) relay malware family dubbed WindRelay is being deployed in conjunction…

NEWSBleeping Computer3 months ago

WhatsApp rolls out new feature that flags potential scam messages

WhatsApp has begun rolling out a new optional "Scam Alert" feature, which uses a local machine learning model to warn users when s…

NEWShighCyberScoop3 months ago

Trump turns to private sector in offensive hacking operations memo

One expert called it a “pretty big shift in U.S. cyber policy,” and there have been reservations in the past about opening the doo…

NEWSThe Hacker News3 months ago

North Korean Remote Workers Are Infiltrating Government and Businesses: How to Expose Them Before Hiring

Companies are used to thinking about attackers as outsiders trying to break in. North Korean IT workers flip that model. They app…

NEWSSecurityWeek3 months ago

Venture Firm Team8 Secures Additional $365 Million

The Israeli company has nearly $2 billion in total assets under management since 2014. The post Venture Firm Team8 Secures Additio…

NEWSThe Register3 months ago

AWS key exposed in JavaScript may have lit way to Beacon's charity data

CRM provider confirms customer database was copied and probably downloaded in readable form

NEWSSecurityWeek3 months ago

Fortinet Patches Authentication Flaws in FortiWeb and FortiManager

The vulnerabilities could allow attackers to log in with random usernames and passwords or impersonate any FortiGate appliance. Th…

NEWSSecurityWeek3 months ago

White House Mobilizes Security Firms for Operations Against Foreign Cybercrime Gangs

Contracts may require a $1 million bond, which will be forfeited if a company fails to comply with operational requirements. The p…

NEWSWired Security3 months ago

CBP Workers Allegedly Used Government Databases to Spy on Exes, Crushes, and Colleagues

Records obtained by WIRED detail hundreds of allegations of Customs and Border Protection workers misusing internal tools to look…

NEWSInfosecurity Magazine3 months ago

Akira Affiliate Crashes Ransomware After Attempting EDR Evasion

Huntress documents how a ransomware affiliate sabotaged its own attack with an anti-EDR effort

NEWScriticalSecurityWeek3 months ago

Critical VMware vCenter Vulnerability in Attackers’ Crosshairs

Tracked as CVE-2026–59310, the directory traversal bug allows remote attackers to execute arbitrary code. The post Critical VMware…