Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,722 articles

Malware Can Abuse Windows Hello for Business Keys for Persistent Entra ID Access

Security researcher Malcolm Stagg has disclosed a new attack class called NatJack that manipulates network address translation (NA…

NEWSInfosecurity Magazine3 months ago

Ransomware Surges in July After Q2 Lull

Finance, technology and healthcare sectors were particularly heavily targeted in July, according to Comparitech

NEWSThe Hacker News3 months ago

Claude Code and Gemini CLI Flaws Let a GitHub Issue Reach CI Workflow Secrets

A GitHub issue opened by an account with no repository privileges was enough to execute code on the CI runners behind Anthropic's…

NEWScriticalSecurityWeek3 months ago

3.8 Million Impacted by Unlimited Technology Systems Data Breach

Hackers stole personal, medical, and health insurance information from a company’s data center. The post 3.8 Million Impacted by U…

NEWScriticalSecurityWeek3 months ago

Critical Vulnerabilities Patched With Chrome 151 Update

The browser refresh eliminates over two dozen memory safety bugs, including critical use-after-free flaws. The post Critical Vulne…

NEWSThe Hacker News3 months ago

TeamPCP Linked To Redis Attacks Dating Back To 2020 And Later Supply Chain Campaign

A new analysis has uncovered that the threat actor tracked as TeamPCP has been active on the cybercrime scene as far back as 2020,…

NEWSThe Register3 months ago

China launches mysterious probe into security of Palo Alto Networks' products

Beijing’s not saying why, which is just what happened when it investigated Micron

NEWSThe Register3 months ago

How the famed USENIX Security conf is managing a flood of papers in the AI era

AI usage is evident but isn't yet a serious problem

NEWSBleeping Computer3 months ago

OpenAI rolls out a major ChatGPT upgrade, even if you don’t pay for it

OpenAI is rolling out a more reliable version of ChatGPT GPT-5.6 Sol for Plus and Pro users, while Free users are getting unlimite…

NEWSBleeping Computer3 months ago

ClickFix attack pushes macOS infostealer for crypto theft attacks

A Go-based malware delivered in ClickFix attacks targeting macOS users is stealing cryptocurrency assets, browser-stored passwords…

NEWShighWired Security3 months ago

Hackers Stalked Me by Hijacking a Smartwatch for Kids

Security researchers tracked and eavesdropped on a WIRED reporter using vulnerabilities in a pink plastic smartwatch. It’s just on…

NEWSCyberScoop3 months ago

Capitol Hill wants to know if executive branch, foreign allies coordinated enough to combat scams

A Senate Foreign Relations Committee hearing explored how 13 federal agencies and myriad foreign governments are wrestling with th…

NEWSBleeping Computer3 months ago

Hedge fund cyberattacks tied to BlackFile-linked UNC6671 extortion group

A recent wave of cyberattacks targeting hedge funds, private-equity firms, and other financial organizations has been linked to UN…

NEWSCyberScoop3 months ago

Despite federal warnings, thousands of U.S. industrial controllers used in water systems remain exposed online

A scan of internet-connected industrial equipment found 4,400 exposed PLCs, including 22 in cities recently targeted by water syst…

NEWSThe Register3 months ago

AI struggles to patch vulns without adult supervision

Left alone, autonomous fixes often fail to fully remediate flaws

NEWSCyberScoop3 months ago

Ransom Cartel creator sentenced to 16 years in prison

Maksim Silnikau participated in cybercrime since at least 2005. He ran Ransom Cartel from 2021 until his arrest in 2023. The post…

NEWSBleeping Computer3 months ago

Swiss government SharePoint breach compromised 200 accounts

Switzerland's federal IT office says hackers exploited vulnerabilities to breach its Microsoft SharePoint servers and compromised…

NEWSBleeping Computer3 months ago

New TONTOU CPU attack bypasses Spectre v2 fixes, leaks Linux password hashes

Researchers found a way to bypass recent mitigations for Spectre v2 speculative execution side-channel attacks and developed an ex…

NEWSCVE-2026-64561The Hacker News3 months ago

New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts

Zapscape, a new Linux kernel vulnerability, could allow an attacker with kernel privileges inside an L1 guest virtual machine (VM)…

NEWSThe Hacker News3 months ago

Cisco Patches 12 SD-WAN and IOS XE Flaws, Including Three 9.8 CVSS Score Bugs

Cisco has rolled out updates to address multiple critical security vulnerabilities impacting Catalyst SD-WAN and IOS XE Software a…

NEWSKrebs on Security3 months ago

Canadian Man Pleads Guilty in Snowflake Extortions

A 26-year-old Canadian man once described as one of the most consequential cybercrime threat actors of 2024 has pleaded guilty to…

NEWSThe Register3 months ago

Humans in the loop miss a third of dangerous AI coding agent requests

You wouldn't let Claude Code cat your AWS credentials or Kubernetes config on request, would you?

NEWSThe Hacker News3 months ago

New Interrupt Injection Attack Can Bypass Spectre v2 Defenses on Intel and AMD CPUs

An unprivileged Linux program can time a hardware interrupt to land in the gap between a processor sanitizing its branch predictor…

NEWShighBleeping Computer3 months ago

Meta AI model hacked a company during misconfigured cyber test

Meta has become the latest AI company to confirm that one of its models hacked a real organization during cybersecurity testing, a…

NEWSInfosecurity Magazine3 months ago

Toolkit Hidden Inside Oracle Database Evades Endpoint Tools

Attackers used SQL injection to compile a post-exploitation toolkit inside an Oracle database

NEWShighThe Hacker News3 months ago

ThreatsDay: Odysseus RCE, Samsung One-Click Takeover, iCloud Backdoor Fight + 27 More Stories

Apparently, opening the thing is now enough. A repo can run before the first prompt, a package can hide among hundreds, and a harm…

NEWShighSecurityWeek3 months ago

Snowflake Hacker Pleads Guilty in US Court

Connor Riley Moucka was extradited to the United States in July 2025 after he was arrested in Canada. The post Snowflake Hacker P…

NEWSInfosecurity Magazine3 months ago

TeamPCP Traced Back to 2020 Cryptojacking Operation

Oligo Security has linked TeamPCP to ShadowRay 2.0 and to cryptojacking infrastructure dating back to 2020

NEWSBleeping Computer3 months ago

How AI Exposed a Browser Security Gap that Enterprises Cannot Ignore

AI did not create a new browser security problem. It exposed one that enterprises have long been able to ignore. Skyhigh Security…

NEWShighInfosecurity Magazine3 months ago

Meta Joins OpenAI and Anthropic in Reporting AI Exploit Incident

One of Meta’s AI models exploited a third-party security flaw during an evaluation, the latest in a series of similar incidents in…