Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,718 articles

Hackers leverage new Microsoft SharePoint exploit in attacks

Hackers have already begun using a proof-of-concept (PoC) exploit for a critical Microsoft SharePoint vulnerability, published by…

NEWShighWired Security3 months ago

This Coin-Sized Device Can Hack a Boeing 737

Security researchers found that in less than 60 seconds, they could open a hatch on a plane’s exterior, plug in a tiny device, and…

NEWSThe Hacker News3 months ago

OpenAI, Anthropic, Google API Flaw Let Weaker AI Models Decode Stronger Models' Reasoning

A newly disclosed flaw in the way OpenAI, Anthropic, and Google carried hidden AI reasoning between API calls let researchers reco…

NEWSThe Hacker News3 months ago

Enterprise Defenses Recovered at the Edge and Collapsed Inside

Enterprise defenses are tuned to catch the attacks that make noise. This year's data shows attackers winning by making none. Acco…

NEWSSecurityWeek3 months ago

Ceva Logistics Operations Disrupted by Cyberattack

Affecting European contract logistics operations at eight Ceva warehouses, the incident caused shipment delays for multiple custom…

NEWSBleeping Computer3 months ago

Signal adds new security feature to thwart man-in-the-middle attacks

Signal has introduced Automatic Key Verification, a new security feature that gives users a new way to ensure their encrypted cha…

NEWSThe Register3 months ago

Brit rail cops bring live facial recognition to the London Underground

Victoria is the first stop as privacy campaigners warn the technology is becoming routine

NEWSCVE-2026-4836210.0 CRITICALThe Hacker News3 months ago

Adobe Patches Three CVSS 10.0 ColdFusion and Campaign Classic Flaws

Adobe has shipped updates to address multiple critical security vulnerabilities impacting ColdFusion, Commerce, and Campaign Class…

NEWShighSecurityWeek3 months ago

Chipmaker Patch Tuesday: Intel, AMD Fix Over 80 Vulnerabilities Combined

Intel has informed customers about several high-severity vulnerabilities that can lead to privilege escalation and even code execu…

NEWScriticalBleeping Computer3 months ago

New Microsoft Defender 'ShieldBreak' zero-day grants SYSTEM privileges

Nightmare Eclipse has released a new Microsoft Defender zero-day exploit named "ShieldBreak" after Microsoft released the August 2…

NEWSWired Security3 months ago

‘The Worst I’ve Ever Seen’: Cargo Thefts Have Turned Violent in Pursuit of AI Hardware

Experts allege that two recent incidents in California show the extreme lengths that criminal organizations are willing to go to t…

NEWSSecurityWeek3 months ago

Over 2,500 Organizations Impacted by LiteLLM Supply Chain Attack

LiteLLM was compromised through the Trivy hack and abused to distribute information-stealing malware to its users. The post Over 2…

NEWShighInfosecurity Magazine3 months ago

Russian-Linked Hackers Accessed Polish Power Plant OT Network Through Private APN, Says CERT.PL

The Polish CERT has released details of another 2025 attack on a combined heat and power plant in the country

NEWShighCVE-2026-593109.8 CRITICALThe Hacker News3 months ago

Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access

Threat actors have begun to actively exploit a recently patched critical security flaw in Broadcom VMware vCenter, according to ne…

NEWScriticalSecurityWeek3 months ago

Fresh Windows Zero-Day Exploited in North Korean Cyberattacks

The bug allowed attackers to gain full control of the victims’ systems and deploy the ForestTiger backdoor. The post Fresh Windows…

NEWShighSecurityWeek3 months ago

Ivanti EPM Update Patches Remotely Exploitable Flaws

The vulnerabilities could be exploited to leak credentials for external SQL connections or crash an agent service. The post Ivanti…

NEWShighInfosecurity Magazine3 months ago

Microsoft Fixes 400 Flaws on August Patch Tuesday

Microsoft has issued another massive batch of security updates with 400 fixed in the August Patch Tuesday

NEWShighThe Hacker News3 months ago

Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organizations

Two malicious LiteLLM releases sat on PyPI for about 40 minutes in March carrying credential-stealing code capable of harvesting c…

NEWShighSecurityWeek3 months ago

ICS Patch Tuesday: Vulnerabilities Fixed by Siemens, Schneider, Phoenix Contact

CISA has also published several advisories describing vulnerabilities in ICS and other OT products. The post ICS Patch Tuesday: Vu…

NEWSCVE-2026-5823110.0 CRITICALThe Hacker News3 months ago

SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code

SAP has released patches to address a maximum-severity security flaw impacting Commerce Cloud (Data Hub Adapter) that could result…

NEWScriticalSecurityWeek3 months ago

SonicWall Patches Critical Vulnerabilities in Discontinued GMS Platform

The security defects could allow unauthenticated attackers to execute arbitrary code remotely and read sensitive data. The post So…

NEWScriticalCVE-2026-506567.8 HIGHThe Hacker News3 months ago

ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access

The security researcher going by the name Chaotic Eclipse (aka INFINITE NIGHTMARE, MSNightmare, and Nightmare-Eclipse) has release…

NEWShighCVE-2026-203498.6 HIGHThe Hacker News3 months ago

Cisco ASA and FTD Flaw Exploited in the Wild Can Trigger Remote DoS

Cisco has warned that a new vulnerability impacting Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall…

NEWScriticalCVE-2026-203498.6 HIGHSecurityWeek3 months ago

Cisco Patches Firewall Zero-Day Exploited for DoS Attacks

CVE-2026-20349 can be exploited remotely without authentication against Secure Firewall ASA and FTD devices. The post Cisco Patche…

NEWSBleeping Computer3 months ago

Google says Chrome cuts 7 billion unwanted Android notifications a day to fight abuse

Google says Chrome's anti-abuse systems reduced unwanted notifications on Android by more than 7 billion per day during the first…

NEWSCyberScoop3 months ago

Kimwolf botnet rebuilt to survive takedowns, researchers say

Months after police seized its servers and arrested an alleged operator, the Kimwolf botnet is running code that disguises attacks…

NEWSCyberScoop3 months ago

Federal judge issues second order blocking Trump mail-in voting directive

The U.S. Supreme Court temporarily reversed an earlier decision through the shadow docket. The post Federal judge issues second o…

NEWSBleeping Computer3 months ago

DeadLock ransomware uses blockchain to resist infrastructure takedown

The DeadLock ransomware operation is using a decentralized infrastructure that relies on blockchain-backed services to protect its…

NEWSThe Register3 months ago

Signal adds an extra layer of security to make sure you're actually chatting with the right person

One big caveat, though: You need your contact's phone number

NEWShighThe Register3 months ago

421 bugs in Microsoft's Patch Tuesday release, and the Norks have already attacked one

Sysadmins, welcome to your new norm