Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,721 articles

NEWScriticalBleeping Computer3 months ago

Valve notifies Steam hardware customers of a data breach

Video game publisher and digital distribution giant Valve is notifying Steam hardware customers in Europe that hackers stole their…

NEWSSecurityWeek3 months ago

New Jersey, Alabama Join States Targeted in Water Cyberattacks

Hackers linked to Iran targeted industrial control systems (ICS) at water facilities in at least a dozen US states. The post New J…

NEWShighThe Hacker News3 months ago

TrueConf Server Flaws Exploited to Replace Client Installers with PhantomCore

The threat actor known as Head Mare has been observed weaponizing security flaws in unpatched TrueConf servers once again in attac…

NEWScriticalThe Register3 months ago

Framework loses customer data in Metabase zero-day attack

Repairable hardware is little comfort when personal details escape

NEWScriticalSecurityWeek3 months ago

Metabase Patches Vulnerability Exploited as Zero-Day

The security defect allows unauthenticated, remote attackers to gain administrative access to Metabase instances. The post Metabas…

NEWShighInfosecurity Magazine3 months ago

“Ghostjacking” Exploits AI Agents’ Trusted Access to Evade Firewall Controls

Tenet reported that half of Fortune 500 companies are vulnerable to the Ghostjacking technique, which involves tricking AI agents…

NEWSThe Register3 months ago

Claude Code puts auto mode in the driver's seat

Walk away and hope the classifier catches anything irreversible or destructive

NEWShighSecurityWeek3 months ago

Novel Private APN Pivot Let Hackers Sabotage Second Polish Energy Facility

CERT.PL said this appears to be the first instance of a private APN being used as an attack vector. The post Novel Private APN Piv…

NEWShighInfosecurity Magazine3 months ago

Go-Based macOS Malware Steals Crypto and Secrets

A macOS malware variant has been detected stealing crypto, passwords and more

NEWScriticalBleeping Computer3 months ago

Critical Progress LoadMaster flaw now actively exploited in attacks

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that hackers are exploiting a critical-severity Progress K…

NEWShighSecurityWeek3 months ago

CISA Urges Immediate Patching of Exploited Progress LoadMaster Vulnerability

The critical-severity flaw allows unauthenticated, remote attackers to execute arbitrary commands. The post CISA Urges Immediate P…

NEWSInfosecurity Magazine3 months ago

US Sanctions Iranian $6bn Crypto “Exchange” Shelbit

TRM Labs explains that sanctioned Iranian firm Shelbit was a fake crypto exchange

NEWSSecurityWeek3 months ago

Corporate Data Stolen in Levi Strauss Cyberattack

Using social engineering, a threat actor accessed the computers of three employees and exfiltrated data from them. The post Corpor…

NEWSThe Hacker News3 months ago

Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credentials

Cybersecurity researchers have flagged a malicious Microsoft Visual Studio Code (VS Code) extension named Solidity Pro ("solidity-…

NEWSThe Hacker News3 months ago

OpenAI's Next AI Model Astra Shows Cyber Performance Strong Enough to Trigger Pause

OpenAI has announced that it's pausing some "internal activities" involving its upcoming artificial intelligence (AI) model Astra…

NEWScriticalSecurityWeek3 months ago

Critical Flaws Discovered in Belgian eID Software Used by 2 Million People

The vulnerabilities affected software used by eight of Belgium’s ten largest banks and over 60 government agencies. The post Criti…

NEWSThe Register3 months ago

Advertisers are trying to influence AI bots with secret ads

PLUS: Hiveminds are emerging to hack the planet, and open-weight models are the new new red scare.

NEWSThe Register3 months ago

Ransomware gangs skip the CEO, head straight for the 40-something IT manager

Gen Xers who feel triggered by this should remember to unplug the network cable and call the cops

NEWShighBleeping Computer3 months ago

Hackers breach TrueConf to trojanize client installers with backdoors

The Head Mare hacktivist group has been exploiting vulnerabilities in unpatched TrueConf video conferencing servers to replace cli…

NEWSThe Register3 months ago

Devs to Anthropic, OpenAI, Cursor, and friends: Make security and privacy the default

Researchers scour social media to measure developer concerns about AI coding tools

NEWScriticalSecurityWeek3 months ago

Critical One-Click Vulnerability in Atlassian’s Rovo AI Exposed Enterprise Data

The RovoBlast attack method identified by Varonis researchers could have been exploited to steal Confluence, Jira and SharePoint d…

NEWSWired Security3 months ago

Flock’s Plans for Rideshare Dashcams and Coaching Police, Revealed

Plus: A judge rules cell tower dumps unconstitutional, water utility hacks spread to a dozen states, a phishing email opens a miss…

NEWSWired Security3 months ago

Sensitive Info Goes Into ‘No Reply’ Emails Constantly. This Guy Sees It All

Two security researchers bought cheap domains—including noreply.net and deleteduser.com—and set up email listening services. Hundr…

NEWSThe Hacker News3 months ago

Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Attackers

Attacker-controlled instructions can make Atlassian's Rovo assistant collect Jira or Confluence data that a signed-in user can acc…

NEWSThe Hacker News3 months ago

New CSS Attacks Can Break Webmail Defenses to Steal Passwords and Tokens

New research shows content inside an email can escape its message boundary and interfere with the webmail interface. Across attac…

NEWScriticalThe Hacker News3 months ago

Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication

Metabase has warned that a maximum-severity security flaw impacting its business intelligence and data visualization software pack…

NEWSThe Hacker News3 months ago

N-able Issues N-central Hotfix 2 as Attackers Reach Managed Systems and Persist

N-able has released a fresh round of hotfixes for N‑central as part of its investigation into ongoing exploitation of a recently d…

NEWShighCVE-2026-80379.6 CRITICALThe Hacker News3 months ago

Progress Kemp LoadMaster Flaw Hits CISA KEV After 792 Reported Exploit Attempts

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a critical-severity security flaw impacting Progr…

NEWSThe Register3 months ago

OpenAI pledges to add Astra security as Anthropic loosens Fable's leash

Or how I learned to stop worrying and love dangerous AI

NEWScriticalBleeping Computer3 months ago

Metabase SQLi zero-day exploited in customer data-theft attacks

A critical Metabase SQL injection vulnerability was exploited in zero-day attacks to breach customer instances in data theft attac…