Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,720 articles

Vague Task, Total Access: When AI Delegation Becomes a Security Risk

AI agents can improvise beyond the intended scope of a task when they are given broad access to enterprise systems and data. Token…

NEWShighThe Hacker News3 months ago

OpenAI Launches GPT-5.6-Cyber with Reduced Safeguards for Exploit Development

OpenAI on Monday unveiled a new cybersecurity-focused model called GPT‑5.6‑Cyber that it said is focused on vulnerability research…

NEWSBleeping Computer3 months ago

DDoS attacks over 1 Tbps surged fivefold in the second quarter

Cloudflare says it mitigated more than 800 network-layer distributed denial-of-service (DDoS) attacks exceeding 1 Tbps in the seco…

NEWSWired Security3 months ago

A Zoom Screen-Sharing Bug Let Anyone Take Over Other Devices on a Call

Researchers say it took fewer than 20 prompts for a public AI tool to find a flaw (now fixed) allowing anyone on a Zoom call to hi…

NEWSThe Register3 months ago

Deepfake hiccup unmasks suspected digital certificate fraudster

Face-swap software blinked for 'barely a second,' giving Spanish cops the break they needed

NEWScriticalBleeping Computer3 months ago

CISA: Microsoft SharePoint flaw now exploited in ransomware attacks

CISA confirmed today that ransomware gangs have begun abusing a high-severity Microsoft SharePoint remote code execution vulnerabi…

NEWSThe Hacker News3 months ago

A Malicious SIM Card Can Run Attacker Code Inside the Modems Behind Cellular IoT Devices

A malicious SIM card can order the device it sits in to run commands of the attacker's choosing. On the cellular modules built int…

NEWSThe Hacker News3 months ago

Mozilla Revokes Firefox and Thunderbird Linux Signing Key After Key Lands in Private Repo

Mozilla has scrapped the cryptographic key behind Firefox and Thunderbird downloads for Linux after an unencrypted copy of it was…

NEWSSecurityWeek3 months ago

Corma Raises $60 Million for Defensive Cybersecurity AI Model

Corma emerged from stealth with seed funding from Sequoia Capital, Khosla Ventures, and Coatue. The post Corma Raises $60 Million…

NEWSInfosecurity Magazine3 months ago

Suisan City, California, Responds to Cyber Incident Amid Wave of US Local Government Attacks

Police and fire response has been impacted by the attack on Suisan City, while two other local authorities have been hit by cyber…

NEWSThe Register3 months ago

Mozilla revokes Firefox signing key after unencrypted copy lands in GitHub

Audit logs found no unexpected visitors, but release verification still needs an update

NEWSThe Hacker News3 months ago

Researchers Built a Fake Crypto Startup and Hired Three Suspected North Korean IT Workers

Security researchers invented a cryptocurrency startup, advertised developer jobs, and hired three people they believe were North…

NEWSInfosecurity Magazine3 months ago

OpenAI Launches Two-Tier Security Access Program Alongside GPT 5.6 Cyber

Daybreak Blue removes some OpenAI-made guardrails while Daybreak Red grants the use of cyber-focused frontier AI models

NEWSSecurityWeek3 months ago

Extension Banned for Stealing AI Chats Returns to Chrome Store, Resumes Malicious Activities

The extension amassed over 300,000 installs and a 4.6 rating before Google removed it for stealing data. The post Extension Banned…

NEWShighBleeping Computer3 months ago

Cisco warns of high-severity ClamAV flaws with public exploits

Cisco warned of two high-severity vulnerabilities affecting the Secure Endpoint Connector that allow threat actors to crash the Cl…

NEWSThe Hacker News3 months ago

Researchers Turn USB Auto-Install Into a Full SYSTEM Takeover on Windows 11

Windows Plug and Play can be abused to fetch signed vendor software for an emulated USB device and execute privileged installation…

NEWScriticalInfosecurity Magazine3 months ago

Logistics Giant Ceva Suffers Data Breach Impacting European Clients

Supply chain attack and data breach at Ceva Logistics appears to have a large blast radius

NEWSThe Hacker News3 months ago

Malicious MCP Servers Can Split Instructions to Make AI Coding Agents Exfiltrate Secrets

A malicious tool server connected to an AI coding assistant can quietly walk off with SSH keys, environment secrets, source code,…

NEWShighSecurityWeek3 months ago

Hacker Conversations: Marcus Hutchins and the Journey From the Gray Zone to Redemption

Marcus Hutchins doesn’t personally consider himself a hacker – but he accepts the epithet because it’s a widely used term for what…

NEWSBleeping Computer3 months ago

US and South Korea warn of Gunra ransomware targeting govt agencies

U.S. federal agencies and South Korea's National Policy Agency warned government and critical infrastructure organizations worldwi…

NEWSSecurityWeek3 months ago

OpenAI Unveils New Cybersecurity Model GPT-5.6-Cyber

OpenAI has also announced the expansion of its Daybreak platform to give more organizations access to its AI. The post OpenAI Unve…

NEWSThe Register3 months ago

Malicious SIMs can shut down phones, steal files, and drag 5G back to 2G

Researchers find standards-compliant functionality can be abused to hijack modems, downgrade connections, and even execute code

NEWShighThe Hacker News3 months ago

Gunra Ransomware Exploits Fortinet and Schneider Electric Flaws to Breach Networks

Cybersecurity and intelligence agencies from South Korea and the U.S. warned of Gunra ransomware attacks targeting critical infras…

NEWSInfosecurity Magazine3 months ago

OpenAI Pauses Some Development of Astra Model on Security Concerns

OpenAI is tightening restrictions on testing of its upcoming Astra model due to security concerns

NEWSInfosecurity Magazine3 months ago

Only Half of UK Manufacturers Have a Cyber Incident Response Plan

Make UK reveals major cyber resilience gaps as 30% of UK manufacturers report recent cyber incidents

NEWShighThe Hacker News3 months ago

Hackers Breach Polish Power Plant Controls via Private Cellular Network and Shut Turbine

Attackers shut down a steam turbine and the process-water treatment system at a Polish combined heat and power plant by coming in…

NEWSSecurityWeek3 months ago

Mozilla Issues New Firefox GPG Key Following Exposure

The previous GPG signing subkey was inadvertently added to a GitHub repository and Mozilla decided to revoke it. The post Mozilla…

NEWSThe Hacker News3 months ago

BdThemes Supply Chain Attack Poisons JSON to Create Rogue WordPress Admins

Cybersecurity researchers have warned of a supply chain compromise impacting WordPress plugin vendor BdThemes, prompting the conte…

NEWShighBleeping Computer3 months ago

Hackers breached a small Polish energy plant via private APN last year

Hackers breached a heat-and-power plant facility in Poland, which supplies heat to about 50,000 residents, using a private APN (Ac…

NEWSCyberScoop3 months ago

The FTC wants to regulate AI for ideological bias

The commission is mulling whether to begin regulating bias in AI systems. Critics say they’re overstepping their legal authority a…