Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,720 articles

NEWSThe Register3 months ago

Signal adds an extra layer of security to make sure you're actually chatting with the right person

One big caveat, though: You need your contact's phone number

NEWShighThe Register3 months ago

421 bugs in Microsoft's Patch Tuesday release, and the Norks have already attacked one

Sysadmins, welcome to your new norm

NEWSKrebs on Security3 months ago

Microsoft Plugs Nearly 400 Security Holes

Microsoft today released updates to remedy at least 398 security vulnerabilities in its Windows operating systems and supported so…

NEWShighBleeping Computer3 months ago

Sandworm hackers target IT pros with trojanized WireGuard VPN client

Hackers associated with the Russian threat group Sandworm have been targeting system administrators and IT professionals through f…

NEWScriticalCVE-2026-688207.0 HIGHThe Hacker News3 months ago

Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack

Microsoft released its monthly security updates on Tuesday, and one of the flaws it closed is already being used in attacks. The…

NEWShighBleeping Computer3 months ago

Cisco warns of ASA and FTD VPN flaw exploited to crash devices

Cisco is warning that a high-severity denial-of-service vulnerability in Secure Firewall ASA and Threat Defense (FTD) software is…

NEWSThe Hacker News3 months ago

Kimwolf v7 Android Botnet Makes HTTP/2 DDoS Traffic Look Like Legitimate Browsing

Cybersecurity researchers have discovered a new version of the Kimwolf/AISURU Android and Internet of Things (IoT) botnet that com…

NEWSThe Hacker News3 months ago

Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attendee's Client

Anyone sharing their screen on a Zoom call could have taken over the computers of everyone watching, and anyone watching could hav…

NEWScriticalSecurityWeek3 months ago

August 2026 Patch Tuesday: Microsoft Fixes 421 CVEs, One Exploited Zero-Day

A use-after-free in the afd.sys Windows kernel-mode driver has been exploited to gain SYSTEM privileges. The post August 2026 Patc…

NEWSThe Hacker News3 months ago

Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands

The Computer Emergency Response Team of Ukraine (CERT-UA) has disclosed details of a new social engineering campaign orchestrated…

NEWSBleeping Computer3 months ago

Delta probes Wi-Fi deauth attack on flight carrying DEF CON attendees

Delta Air Lines is investigating an unauthorized Wi-Fi network that appeared aboard a flight from Las Vegas to Atlanta carrying pa…

NEWSBleeping Computer3 months ago

Microsoft releases Windows 10 KB5120249 extended security update

Microsoft has released Windows 10 KB5120249 Extended Security Updates for versions 22H2 and 21H2 to fix security vulnerabilities a…

NEWScriticalBleeping Computer3 months ago

Microsoft August 2026 Patch Tuesday fixes 400 flaws, 3 zero-days

Today is Microsoft's August 2026 Patch Tuesday, and with it comes security updates for a massive 400 flaws, including one actively…

NEWSCyberScoop3 months ago

Delta investigates in-flight Wi-Fi spoofing on post-DEF CON flight from Las Vegas

The airline deactivated the network after the crew realized someone was messing with the in-flight system. The feds are investigat…

NEWSBleeping Computer3 months ago

Windows 11 KB5121003 & KB5120240 cumulative updates released

Microsoft has released Windows 11 KB5121003 and KB5120240 cumulative updates for versions 25H2/24H2 and 23H2 to fix security vulne…

NEWScriticalSecurityWeek3 months ago

Adobe Urges Immediate Patching of Critical ColdFusion, Campaign Classic Flaws

The security defects could be exploited for arbitrary code execution and denial-of-service. The post Adobe Urges Immediate Patchin…

NEWShighCVE-2026-550409.1 CRITICALThe Hacker News3 months ago

Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE

Security researchers found a way to enter Microsoft SharePoint servers as any user, including an administrator, with no valid acco…

NEWSThe Hacker News3 months ago

DeadLock Ransomware Uses Polygon Smart Contracts to Make Extortion Infra Harder to Disrupt

The ransomware group known as DeadLock has been observed using decentralized infrastructure to facilitate victim communications an…

NEWSThe Register3 months ago

DEF CON dingus suspected of trying to take over Delta in-flight Wi-Fi

This is why we can't have nice things, people

NEWSSecurity Magazine3 months ago

Film Festival Data Leak Exposes A-List Directors, Actors, Celebrities

Records associated with Tribeca Film Festival were exposed.

NEWSBleeping Computer3 months ago

Wesco confirms security incident after ExfilSquad claims data theft

Global supply chain and distribution giant Wesco has confirmed in a statement for BleepingComputer that it is investigating a cybe…

NEWShighSecurityWeek3 months ago

Zoom Patches Zero-Click Code Execution Vulnerability

Impacting Zoom annotation, the bug could be exploited by a meeting participant to execute code on another participant’s machine. T…

NEWShighCyberScoop3 months ago

NIST wants to overhaul its vulnerability database for the AI age

NIST is seeking public input to modernize the National Vulnerability Database to keep pace with AI-driven cyber threats and machin…

NEWSThe Register3 months ago

Two wars and a World Cup lead to epic DDoS attacks on publishers

Ukraine, Iran, and football inspire geopolitically motivated DDoS attacks, while 1 Tbps traffic jams up 519 percent

NEWSInfosecurity Magazine3 months ago

Six npm Packages Read C2 Addresses From Ethereum Wallet

Six npm packages queried an Ethereum wallet to locate C2 infrastructure

NEWSSecurityWeek3 months ago

The AI Governance Gap Is a Leadership Problem: Waiting Won’t Close It

Organizations are rushing to implement AI without fully grasping where its legal protections begin and end. The post The AI Govern…

NEWSInfosecurity Magazine3 months ago

Cursor Security Bug Allowed Repositories to Execute Commands Before Trust Verification

Cursor fixed a pre-trust code execution path in three days then closed the report as informative

NEWScriticalSecurityWeek3 months ago

SAP Patches Critical Code Injection, Memory Corruption Vulnerabilities

SAP released 28 new and two updated security notes, including four notes dealing with critical-severity bugs. The post SAP Patches…

NEWSSecurityWeek3 months ago

US Water Systems Get Cyber Boost From New Senate Bill and ‘Water Watch Center’

The Water Watch Center launched at DEF CON aims to help under-resourced utilities protect their systems against hackers. The post…

NEWSBleeping Computer3 months ago

Mozilla updates GPG signing key for Firefox releases after exposure

Mozilla announced today that it updated the GPG key used to sign Firefox and Thunderbird releases after it was accidentally expose…