Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,451 articles

Federal agencies recommend cyber controls, independent testing for frontier AI systems

While voluntary, the document marks the federal government’s most detailed cybersecurity guidance for securing sandbox environment…

NEWScriticalCVE-2026-10384910.0 CRITICALBleeping Computer9 days ago

Critical BlockStrap flaw lets hackers run code on Magento servers

Researchers warn that hackers could soon exploit a maximum-severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Co…

NEWSWired Security9 days ago

Chicago-Area Cops Helped HSI Spy on Minnesota Anti-ICE Activists

Despite Illinois’ sanctuary laws, local police in and around Chicago helped ICE investigative agents track activists engaged in Fi…

NEWShighThe Hacker News9 days ago

Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug

A local privilege escalation exploit published today gains root on OpenBSD 7.9 by chaining a roughly 37-year-old integer overflow…

NEWSHackread9 days ago

Claude Code Desktop Flaw Let Malicious HTML Steal Developer Credentials

Noma Labs found a high-severity Claude Code Desktop flaw that let malicious HTML files steal local credentials and…

NEWSBleeping Computer9 days ago

Zero-click attacks used targeted ads to deliver Candiru spyware

Candiru spyware was delivered to devices at Al Jazeera Media Network via targeted online advertisements in a zero-click attack tha…

NEWScriticalCyberScoop9 days ago

Prolific Chinese espionage group exploits BeyondTrust zero-day

Researchers said the first known attack by Armory Castle, also known as UNC5221, occurred almost seven weeks ago. The threat group…

NEWShighThe Hacker News9 days ago

Attackers Tampered with AOMEI Backupper's Update Servers for Minutes to Deliver a Backdoor

Attackers repeatedly changed the files that AOMEI Backupper fetches from the vendor's own update servers, in windows of five to te…

NEWShighThe Hacker News9 days ago

UAT-11985 Uses Fake Event Invites to Target Taiwan Research Affiliates With Google AitM Phishing

Cybersecurity researchers have disclosed details of an advanced persistent threat (APT) spear-phishing campaign that has targeted…

NEWShighSecurity Magazine9 days ago

AI Hacking Breach Hits 16 Financial Institutions, Leaks 100,000 Records

The financial sector was recently targeted by an AI hacking attack.

NEWSThe Register9 days ago

Networking problems after the October 2026 Windows update? NTLM might be to blame

Legacy protocol is going to be axed, and enforcement by default will highlight how migration is going

NEWSCyberScoop9 days ago

Cybersecurity incident at BAE Systems disrupts US bankruptcy court system

The outage has stopped official bankruptcy notices nationwide since Oct. 9, with no cause or restoration date announced. The post…

NEWSSecurity Magazine9 days ago

OpenAI Claims Model Helped Solve Insider Threat Concern

OpenAI claims it used its own model to mediate an insider threat concern, but some are questioning the details of this incident.

NEWShighSecurityWeek9 days ago

In Other News: ICS-Sniper Attack, Hacking XWorm Malware Operators, $250k Chrome Exploit

Noteworthy stories that might have slipped under the radar: BofA adds 1,000 patching contractors, KGB RAT pairs data theft with ju…

NEWSThe Hacker News9 days ago

OpenAI Research Model Spent 3rd-Party Test ETH Without Permission to Deploy Smart Contract

OpenAI has disclosed seven new incidents in which its artificial intelligence (AI) models exhibited misaligned behavior, including…

NEWSBleeping Computer9 days ago

Employees using personal ChatGPT at work? Here's what IT admins need to do

Employees using personal ChatGPT accounts at work can expose sensitive company data, even when their organization provides an appr…

NEWSThe Register9 days ago

Attack on BAE-managed system disrupts US bankruptcy courts

Legal eagles still plodding along with some operations, but paper and e-notices delayed until further notice

NEWSInfosecurity Magazine9 days ago

Ransomware Gangs Increasingly Turn to Threats of Physical Violence to Extort Payments

New report warns that threats of violence against employees of organizations hit by ransomware are on the rise as attackers find n…

NEWSHackread9 days ago

MDR vs EDR vs SOC: What You’re Actually Buying in 2026

MDR vs EDR vs SOC explained for 2026, covering tools, monitoring, incident response, staffing and how each option supports CMMC co…

NEWScriticalBleeping Computer9 days ago

Burger King Japan data breach exposes 11 million customer records

Burger King Japan, the Japanese subsidiary of global fast-food giant Burger King, disclosed a major data breach after attackers ac…

NEWSSecurityWeek9 days ago

BAE Systems Security Incident Stalls Notices From US Bankruptcy Courts

A cyber incident affecting contractor BAE Systems has knocked out the Bankruptcy Noticing Center, halting notices nationwide for a…

NEWSThe Hacker News9 days ago

AI Decision Models and Their Impact on AI SOC Platforms

In the space of a month, a new category of AI model went from nonexistent to everywhere. TypeSafe AI released Jev on September 15…

NEWScriticalCVE-2026-1027649.8 CRITICALSecurityWeek9 days ago

Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day

Armory Castle exploited CVE-2026-102764 for initial access, deployed custom tools, and deleted logs and artifacts. The post Chines…

NEWShighSecurityWeek9 days ago

OpenAI Models Hacked Data Portals, Raided a Crypto Wallet to Finish Tasks

Left without funds for a coding task, an OpenAI model spent test crypto from a stranger’s wallet and left it out of its report. Th…

NEWScriticalInfosecurity Magazine9 days ago

China Espionage Actor Actively Targeting Critical BeyondTrust Flaw, Google Warns

The suspected PRC-aligned group Armory Castle has been observed exploiting the newly disclosed flaw for long-term persistence

NEWScriticalHackread9 days ago

Burger King Japan Data Breach Impacts 11.18 Million App Member Records

The Burger King Japan data breach occurred between October 2 and 7, exposing emails, birth dates and other…

NEWScriticalSecurityWeek9 days ago

F5, Juniper Networks Patch Critical Vulnerabilities

Successful exploitation of some of these issues could lead to remote code execution and full device takeover. The post F5, Juniper…

NEWSThe Register9 days ago

Thief snatches school snapper's SD cards in smash & grab

UK school admits data protection bungle as children's data at risk

NEWSInfosecurity Magazine9 days ago

Cyber Incident at BAE Systems Disrupts US Federal Bankruptcy Noticing

Several services of the US Bankruptcy Noticing Center are unavailable due to a cyber incident affecting defense contractor BAE Sys…

NEWSBleeping Computer9 days ago

Microsoft: October Windows update may break Smart App Control

Microsoft says some users may have trouble turning on Smart App Control after installing this month's KB5127648 Windows 11 securit…