Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,723 articles

NEWShighInfosecurity Magazine3 months ago

Meta Joins OpenAI and Anthropic in Reporting AI Exploit Incident

One of Meta’s AI models exploited a third-party security flaw during an evaluation, the latest in a series of similar incidents in…

NEWSHackread3 months ago

Black Hat USA: TP-Link Flaws Put Omada Controllers and Camera Feeds at Risk

Forescout disclosed 15 TP-Link flaws at Black Hat USA 2026 that could expose Omada credentials and VPN keys, allow internal access…

NEWShighSecurityWeek3 months ago

Zero-Click AI Browser Hacking: Claude and ChatGPT Atlas Hijacked via Emails, X Posts

Zenity researchers reported the findings to Anthropic and OpenAI in late 2025 and early 2026, but they remain unpatched. The post…

NEWSThe Hacker News3 months ago

Over 4,400 Rockwell PLCs Exposed Online, 22 Found in Water Attack Cities

Forescout found 22 internet-facing Rockwell Automation programmable logic controllers (PLCs) in cities hit by recent cyberattacks…

NEWSThe Register3 months ago

IT department put sticky notes on the laptops to help employees log in

Leaving this information exposed allowed someone else to gain access

NEWSInfosecurity Magazine3 months ago

Violent Physical Crypto Thefts Surge to $30m in Losses

So-called “wrench attacks” have resulted in $30m in losses so far in 2026, says Chainalysis

NEWSSecurityWeek3 months ago

Podcast: Compliance Won’t Save You: The Future of Cyber Risk with Edna Conway

(Video) In this podcast, we share insights from Edna Conway, a recognized leader in cybersecurity and supply chain resilience with…

NEWSThe Hacker News3 months ago

CryptoJS Weak RNG Behind $5.7 Million in Drains Affects Five Crypto Wallet Apps

Coinspect has identified CryptoJS.lib.WordArray.random() as the weak random number generator behind the Ill Bloom wallet drains.…

NEWSThe Hacker News3 months ago

Apple iCloud Private Relay Can Expose Real IPs Through WebKit Proxy Bypasses

Cybersecurity researchers have disclosed a security issue with Apple's iCloud Private Relay tool that can expose a user's real IP…

NEWSThe Hacker News3 months ago

AI Recommendation Poisoning: How "Ask AI" Buttons Silently Alter LLM Memory

A new class of prompt injection is spreading across commercial websites. It requires no malware, no stolen credentials, and no zer…

NEWScriticalSecurityWeek3 months ago

Critical Paperclip Flaw Allowed Admin Access, Code Execution

An attacker could self-register, sign in for board-level API access, and import a new company for code execution. The post Critica…

NEWSHackread3 months ago

Black Hat USA 2026: One GitHub Issue Could Compromise Major AI Coding Workflows

At Black Hat USA 2026, Novee found GitHub workflow flaws in Claude Code, Gemini CLI and Codex that enabled RCE, credential theft a…

NEWShighInfosecurity Magazine3 months ago

Canadian Hacker Pleads Guilty Over Snowflake Extortion Campaign

A Canadian hacker has admitted involvement in the widespread compromise of 165 Snowflake customer accounts used to steal data and…

NEWSCyberScoop3 months ago

The water sector just got it’s wake-up call. Again.

The attack on water systems across seven states was preventable. Utilities had the playbook. They didn't use it. The post The wate…

NEWShighSecurityWeek3 months ago

Meta AI Hacked External Systems During Cybersecurity Testing

The incident involved a testing environment set up by Irregular, similar to what Anthropic reported last week. The post Meta AI Ha…

NEWSSecurityWeek3 months ago

Belarusian Ransom Cartel Mastermind Gets 16 Years in Prison

Maksim Silnikau was the creator and administrator of the ransomware group and involved in Angler EK’s distribution. The post Belar…

NEWSThe Hacker News3 months ago

Attackers Compile khunt Inside Oracle to Turn SQL Injection Into Windows SYSTEM Access

Attackers broke into an organization's Oracle database through a SQL injection flaw in a public-facing web application, then insta…

NEWSThe Hacker News3 months ago

AWS, Google, and Vercel Agent Flaws Let Attackers Trigger Tools Without Running the Model

Security flaws in agent infrastructure from Amazon Web Services (AWS), Google, and Vercel let untrusted or forged instructions rea…

NEWSInfosecurity Magazine3 months ago

NVIDIA Group Proposes SAFE Initiative for Agentic Threat Intel Sharing

The Open Secure AI Alliance has announced plans for the Shared AI Findings Exchange (SAFE)

NEWShighThe Hacker News3 months ago

Chinese-Made Zbtlink Routers Ship With Backdoor That Opens Unauthenticated Root Shells

Cybersecurity researchers have disclosed details of a "factory-shipped backdoor" implanted in at least 20 Chinese router models fr…

NEWScriticalSecurityWeek3 months ago

Cisco Patches Critical SD-WAN, IOS XE, FMC Vulnerabilities

Patches were rolled out for two dozen vulnerabilities, including one with public proof-of-concept (PoC) code. The post Cisco Patch…

NEWSThe Hacker News3 months ago

Ransom Cartel Creator Gets 16 Years in Prison for Operating Ransomware-as-a-Service

A federal judge in Alexandria, Virginia, sentenced Maksim Silnikau to 16 years in prison on August 5 for creating and running Rans…

NEWShighCVE-2026-630779.8 CRITICALThe Hacker News3 months ago

CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the Wild

A newly patched security flaw impacting on-premise versions of JetBrains TeamCity has come under active exploitation in the wild,…

NEWShighCVE-2026-630779.8 CRITICALSecurityWeek3 months ago

Hackers Start Exploiting Recent JetBrains TeamCity Vulnerability

Tracked as CVE-2026-63077, the critical bug can be exploited without authentication for remote code execution. The post Hackers St…

NEWShighThe Hacker News3 months ago

Snowflake Hacker Pleads Guilty Over Breaches Affecting at Least 100 Million People

Connor Riley Moucka pleaded guilty in Seattle federal court on Wednesday to computer fraud, wire fraud, aggravated identity theft…

NEWShighThe Register3 months ago

Chinese router vendor denies its firmware contains backdoors – but pauses downloads to fix security issues anyway

It’s just a remote maintenance function, says Zbtlink

NEWShighThe Register3 months ago

OpenAI reveals its rogue agent swarm went a little bit Borg ahead of Hugging Face hack

It started with an 'impossible task' and led to AI deciding it needed to act as a collective intelligence

NEWShighWired Security3 months ago

OpenAI Didn’t Notice Its AI Agents Using a Message Board to Plan Their Hacking Spree

At the Black Hat security conference, the AI giant revealed new details about how its agents went rogue, hacked several other comp…

NEWShighWired Security3 months ago

A Security Pro Hacked North Korean Hackers. He Found They’d Breached Hundreds of Networks Worldwide

For nearly two years, researcher Vangelis Stykas has maintained access to North Korean hackers’ servers. His work shows they pulle…

NEWSWired Security3 months ago

OpenAI’s Browser Could Be Hijacked to Spam Your WhatsApp Contacts

Researchers at security firm Zenity found more than a dozen flaws in AI browsers—and managed to get OpenAI’s Atlas to make an unau…