Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

2,131 articles

The Race to Field Military Autonomy Is On, Can Trusted Information Infrastructure Keep Pace?

Military forces are under increasing pressure to field autonomous capabilities faster than ever before. Across the U.S., UK, and N…

NEWSSecurityWeek9 days ago

Industry Reactions to Pentagon Suspending CMMC Phase 2: Feedback Friday

Industry professionals broadly agree that the suspension pauses third-party CMMC audits but not the underlying legal obligation to…

NEWScriticalBleeping Computer9 days ago

New Windows LegacyHive zero-day gives hackers admin privileges

A security researcher using the "Nightmare Eclipse" handle has released a Windows zero-day exploit dubbed LegacyHive that allows a…

NEWShighThe Hacker News9 days ago

Armenia Detains Russian Tourist on U.S. Warrant for REvil Hacker, Lawyers Say Wrong Man

Armenia has held a Russian tourist named Aleksandr Ermakov in a detention center since June 28, on a U.S. extradition request for…

NEWSWired Security9 days ago

San Francisco Demands Apple and Google Delete AI ‘Nudify’ Apps From App Stores

The City Attorney’s Office sent the tech giants cease-and-desist letters this week telling them to stop profiting from 13 “face-sw…

NEWScriticalInfosecurity Magazine9 days ago

CISA Mandates Urgent Patch for Actively Exploited Critical Fortinet Vulnerabilities

US government agencies have until July 19 to patch two critical Fortinet vulnerabilities

NEWSThe Register9 days ago

Google fixing Android lock screen bug that lets Gemini send SMS without a PIN

A specific multi-touch gesture bypasses an authentication prompt, allowing anyone to send messages

NEWScriticalBleeping Computer9 days ago

Windows Server 2022 reach end of mainstream support in 90 days

Microsoft announced that Windows Server 2022 will reach the mainstream end date in October 2026, but will switch to extended suppo…

NEWSSecurityWeek9 days ago

Cyberattack Disrupts Operations of Japanese Frozen Food Giant Nichirei

The company disconnected its systems on July 13 and is starting to gradually restore operations. The post Cyberattack Disrupts Ope…

NEWSInfosecurity Magazine9 days ago

The Gentlemen Overtakes Qilin as Most Prolific Ransomware Threat

Analysis of ransomware incidents by ReliaQuest indicates a shift in the ransomware landscape

NEWSThe Hacker News9 days ago

ACR Stealer Uses ClickFix Lures to Steal Browser Tokens and Microsoft 365 Files

ACR Stealer, an infostealer in circulation since 2024, is walking out of enterprise networks with saved browser passwords, live se…

NEWShighThe Hacker News9 days ago

New GoSerpent Malware Targets Southeast Asian Governments and Diplomats for Espionage

Cybersecurity researchers have discovered a previously undocumented malware called GoSerpent that has been put to use in cyber att…

NEWSSecurityWeek9 days ago

Risk Ledger Raises $32 Million in Series B Funding

The British firm has built a collaborative platform to help organizations address supply chain security risks. The post Risk Ledge…

NEWSBleeping Computer9 days ago

US charges two over laundering $43 million from investment fraud

U.S. prosecutors on Thursday charged a New York man and woman for their roles in a large-scale crime ring that laundered money sto…

NEWShighSecurityWeek9 days ago

Fresh SharePoint Vulnerability Exploited Soon After Disclosure

The critical-severity security defect allows remote, authenticated attackers to execute arbitrary code on the server. The post Fre…

NEWScriticalBleeping Computer9 days ago

CISA urges immediate action on actively exploited Fortinet flaws

CISA on Thursday ordered government agencies to prioritize patching two actively exploited vulnerabilities in the Fortinet FortiSa…

NEWScriticalCVE-2026-586449.8 CRITICALThe Hacker News9 days ago

CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a newly patched security flaw impacting Microso…

NEWScriticalSecurityWeek9 days ago

Coca-Cola Suspends US Fairlife Production Due to Ransomware Attack

The company says the incident has not affected product quality and safety, nor Fairlife’s Canada production. The post Coca-Cola Su…

NEWSSecurity Magazine9 days ago

Majority of Organizations Agree That Many GRC AI Tools Aren't Ready

A report by Drata recently analyzed survey responses from security and IT professionals on AI adoption trends.

NEWSThe Register9 days ago

South Korea making its own security-centric AI model

Adapting existing local LLM project for security and sovereignty purposes and hopes to one day match Mythos

NEWSThe Register9 days ago

OpenAI admits GPT-5.6 occasionally deletes files – but it's an 'honest mistake'

Data purges deemed an example of 'misaligned behavior' that upstart is working to avoid

NEWShighBleeping Computer9 days ago

New ClickLock macOS malware traps users into revealing login password

A new macOS information-stealing malware dubbed ClickLock terminates all visible processes to force users into entering their syst…

NEWScriticalBleeping Computer9 days ago

Coca-Cola says Fairlife ransomware attack halts US dairy production

The Coca-Cola Company disclosed today that a ransomware attack impacting its Fairlife dairy subsidiary has disrupted operations, t…

NEWSThe Register9 days ago

Researcher poisons open-weight AI model for under $100

Models demand trust without offering verification

NEWSBleeping Computer10 days ago

Claude Chrome extension flaw lets malicious extensions trigger AI actions

A flaw in Anthropic's Claude for Chrome browser extension could allow a malicious extension to trigger predefined AI actions by si…

NEWSCyberScoop10 days ago

Program to rotate cyber personnel through federal agencies saw little use

The number of people who got approval to be in the Federal Rotational Cyber Workforce program was in the single digits, GAO found.…

NEWSBleeping Computer10 days ago

New OkoBot framework deploys 20 payloads to steal data, crypto

A new malicious framework called OkoBot is delivering more than 20 payloads in attacks focused on stealing cryptocurrency wallet s…

NEWSCyberScoop10 days ago

Russian trio indicted for allegedly running bulletproof hosting providers that spurred cybercrime

Officials accused three Russian nationals, Media Land and ML.Cloud of supporting cyberattacks spanning 21 U.S. states and other co…

NEWShighThe Hacker News10 days ago

Two Scattered Spider Hackers Get 5.5 Years Each for £29 Million TfL Hack

Owen Flowers, 18, and Thalha Jubair, 20, were each sentenced to five and a half years at Woolwich Crown Court on Thursday, 16 July…

NEWSHackread10 days ago

Two Scattered Spider Members Sentenced to 5.6 Years Over TfL Cyberattack

Nearly two years after a cyberattack disrupted Transport for London’s (TfL) online services and exposed customer data, two…