Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

3,157 articles

NEWShighInfosecurity Magazine4 months ago

ZionSiphon Malware Targets Water Infrastructure Systems

ZionSiphon malware targets OT water systems with sabotage and ICS scanning capabilities

NEWShighInfosecurity Magazine4 months ago

Formbook Malware Campaign Uses Multiple Obfuscation Techniques to Avoid Detection

Formbook attacks use combination of DLL Side-Loading and Obfuscated JavaScript to stay hidden, researchers at WatchGuard have unco…

NEWShighCVE-2024-37216.3 MEDIUMInfosecurity Magazine4 months ago

Attackers Exploit DVR Command Injection Flaw to Deploy Mirai-Based Botnet

FortiGuard Labs has identified a Mirai-based Nexcorium campaign actively exploiting CVE-2024-3721 in TBK DVR devices

NEWSInfosecurity Magazine4 months ago

NCSC Outlines Coordinated Plan to Boost NHS Cyber Resilience

The National Cyber Security Centre has shared an update of its resilience-building efforts for the NHS

NEWSInfosecurity Magazine4 months ago

Crypto Exchange Grinex Blames Western Spies for $13m Theft

Russian crypto-exchange Grinex claims Western intelligence agencies were behind a $13m heist

NEWShighInfosecurity Magazine4 months ago

Commercial AI Models Show Rapid Gains in Vulnerability Research

AI models are making rapid gains in vulnerability research and exploit development, raising new cybersecurity risks, a Forescout s…

NEWSInfosecurity Magazine4 months ago

DDoS-For-Hire Services Disrupted by International Police Action in ‘Operation PowerOff’

Coordinated action by FBI, Europol and others seizes infrastructure, makes arrests – and sends warning letters to known DDoS servi…

NEWSInfosecurity Magazine4 months ago

US Nationals Jailed for Operating Fake Remote Worker Laptop Farms for North Korea

US authorities jail two Americans for aiding North Korean laptop farm scams that infiltrated over 100 firms

NEWShighInfosecurity Magazine4 months ago

APK Malformation Found in Thousands of Android Malware Samples

APK malformation tactic now appears in over 3000 Android malware samples evading static analysis

NEWScriticalInfosecurity Magazine4 months ago

Cookeville Medical Center Notifies Patients After July 2025 Ransomware Attack

Tennessee's CRMC notifies over 337,000 patients of Rhysida ransomware breach exposing sensitive data

NEWShighInfosecurity Magazine4 months ago

NIST Drops NVD Enrichment for Pre-March 2026 Vulnerabilities

NIST’s National Vulnerability Database will now prioritize enriching new and exploited flaws to address the record growth of repor…

NEWSInfosecurity Magazine4 months ago

Systemic Flaw in MCP Protocol Could Expose 150 Million Downloads

Ox Security claims as many as 200,000 servers are exposed by newly discovered MCP vulnerability

NEWScriticalInfosecurity Magazine4 months ago

Automotive Ransomware Attacks Double in a Year

Halcyon says ransomware now accounts for more than two-fifths of cyber-attacks targeting carmakers

NEWSInfosecurity Magazine4 months ago

OpenAI Unveils GPT-5.4-Cyber for Improving Cyber Defense With AI

OpenAI’s new frontier model focused on cybersecurity comes following Anthropic’s launch of Claude Mythos Preview and Project Glass…

NEWSInfosecurity Magazine4 months ago

European Cybersecurity Agency ENISA Seeks Top-Tier Status in CVE Program

The EU cybersecurity agency looks to become the third Top-Level Root CVE Numbering Authority, alongside CISA and MITRE

NEWSInfosecurity Magazine4 months ago

Signed Adware Operation Disables Antivirus Across 23,000 Hosts

Huntress uncovers adware deploying AV-killing payloads via signed updates across 23,000 endpoints

NEWScriticalCVE-2026-330329.8 CRITICALInfosecurity Magazine4 months ago

Critical Nginx-ui MCP Flaw Actively Exploited in the Wild

Critical nginx-ui MCP authentication bypass CVE-2026-33032 actively exploited with CVSS 9.8

NEWSInfosecurity Magazine4 months ago

AI Companies to Play Bigger Role in CVE Program, Says CISA

At VulnCon, Lindsey Cerkovnik, head of vulnerability management at CISA, said AI companies should play a bigger role in vulnerabil…

NEWSInfosecurity Magazine4 months ago

Researchers Spot Surge in Brute-Force Attacks from Middle East

Barracuda says 88% of brute-force attempts in Q1 were from the region

NEWScriticalInfosecurity Magazine4 months ago

Microsoft Fixes Two Zero-Days in April Patch Tuesday

Microsoft has patched two zero-day flaws and over 160 others

NEWShighKrebs on Security4 months ago

Patch Tuesday, April 2026 Edition

Microsoft today pushed software updates to fix a staggering 167 security vulnerabilities in its Windows operating systems and rela…

NEWSInfosecurity Magazine4 months ago

CISOs Urged to Innovate with Talent Retention as Job Satisfaction Declines

A new IANS report claims just 34% of cybersecurity professionals plan to stay put in the next 12 months

NEWSInfosecurity Magazine4 months ago

Triad Nexus Expands Global Fraud Operations Despite US Sanctions

Triad Nexus scales $200m scams, uses infrastructure laundering, localized fraud and US-access blocks

NEWSInfosecurity Magazine4 months ago

Malicious Chrome Extensions Campaign Exposes User Data

108 malicious Chrome extensions steal sessions, Google data, inject ads via single C2 infrastructure

NEWSInfosecurity Magazine4 months ago

AI Security Institute Advocates Security Best Practices After Mythos Test

The AISI has issued its judgement on Anthropic’s Mythos Preview model

NEWSInfosecurity Magazine4 months ago

Mailbox Rule Abuse Emerges as Stealthy Post-Compromise Threat

Attackers are abusing Microsoft 365 mailbox rules to hide activity, exfiltrate data and retain access after account compromise, re…

NEWSInfosecurity Magazine4 months ago

Mirax Android Trojan Turns Devices Into Residential Proxy Nodes

Security researchers warn of Mirax, an emerging Android banking trojan using MaaS, remote access and residential proxies to target…

NEWShighInfosecurity Magazine4 months ago

FBI Dismantles $20m Phishing Operation W3LL

The W3LL phishing kit has been associated with fraud attempts totaling $20m

NEWSInfosecurity Magazine4 months ago

UK Cyber Security Council Launches Associate Cyber Security Professional Title

The UK Cyber Security Council has unveiled a new Associate Cyber Security Professional title aimed at supporting early‑career cybe…

NEWSInfosecurity Magazine4 months ago

Operation Atlantic Seizes $12m in Crypto Losses

UK, US and Canadian authorities have identified over 20,000 victims of approval phishing scams that trick users into handing over…