Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

3,754 articles

NEWScriticalCVE-2026-823299.8 CRITICALSecurityWeek8 days ago

Critical JFrog Artifactory Vulnerability Reportedly Exploited in the Wild

Exploitation of the authentication bypass vulnerability CVE-2026-82329 started just days after its public disclosure. The post Cri…

NEWSInfosecurity Magazine8 days ago

Financial Stability Board Sounds the Alarm Over Frontier AI Risks

The Financial Stability Board has warned G20 banking leaders about the cyber risks of frontier AI

NEWSBleeping Computer8 days ago

Five Venezuelans plead guilty to ATM jackpotting attacks in US

Five Venezuelan nationals pleaded guilty to attempting to empty automated teller machines (ATMs) using malware in a series of ATM…

NEWScriticalSecurityWeek8 days ago

9.5 Million Impacted by Aesto Health Data Breach

Hackers stole personal and health information from the healthcare technology company’s AWS infrastructure. The post 9.5 Million Im…

NEWSThe Hacker News8 days ago

Attackers Steal METR API Key and Consume AI Credits Worth About $600,000

METR (short for Model Evaluation and Threat Research and pronounced "Meter"), a research non-profit that evaluates frontier artifi…

NEWScriticalSecurityWeek8 days ago

WatchGuard Patches Critical Vulnerabilities

Three critical issues in the Fireware OS iked process could allow unauthenticated attackers to execute arbitrary code remotely. Th…

NEWShighThe Hacker News8 days ago

Russia-Aligned UAC-0099 Plants Nuclear Weapon Prompt in Malware to Disrupt AI Analysis

Cybersecurity researchers have disclosed a new technique dubbed GuardBreaker that's been put to use by a Russia-aligned threat act…

NEWScriticalInfosecurity Magazine8 days ago

Healthcare Giant McKesson Investigates Data Breach Incident

ShinyHunters claims to have stolen 284 million records from McKesson

NEWScriticalBleeping Computer8 days ago

Recently patched PaperCut zero-days used in data theft attacks

Two security vulnerabilities in the PaperCut NG and MF print management software, patched last week after being exploited as zero-…

NEWScriticalCVE-2026-07689.8 CRITICALThe Hacker News8 days ago

Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity

Threat actors are exploiting two critical flaws impacting Langflow and Ruby on Rails, according to new findings from VulnCheck. T…

NEWShighCVE-2026-82078SecurityWeek8 days ago

PaperCut Exploitation Escalates to Active Intrusions

CISA has added the vulnerabilities tracked as CVE-2026-82078 and CVE-2026-81578 to its KEV catalog. The post PaperCut Exploitation…

NEWSSecurity Magazine8 days ago

Security Leaders Share Advice for Insider Threat Awareness Day

This Insider Threat Awareness Day, security leaders share their thoughts alongside advice on how to reduce insider threats.

NEWSThe Register9 days ago

Healthcare cyberattacks hit pacemakers and millions of patient records

McKesson admits breach as ShinyHunters demands $55.2M

NEWSCyberScoop9 days ago

McKesson copes with fallout from data theft extortion attack

The major healthcare sector vendor did not identify the attackers, but ShinyHunters, a prolific group increasingly targeting the s…

NEWShighBleeping Computer9 days ago

Cronos blockchain restarts after $74 million Tectonic exploit

The Cronos blockchain network has resumed trading activity after a price-manipulation attack on the Tectonic cryptocurrency lendin…

NEWSThe Register9 days ago

OpenClaw 2.0 pours glitter on slow-burning security dumpster fire

Making installation easier and putting a new wrapper on the interface while leaving most of the security to users is a recipe for…

NEWSBleeping Computer9 days ago

Microsoft warns of TerminalFix attacks deploying reverse tunnels

A new ClickFix variant dubbed TerminalFix uses fake Cloudflare CAPTCHA prompts on compromised websites to trick victims into runni…

NEWSCyberScoop9 days ago

‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help

The six-month program will be overseen by the Office of the National Cyber Director and Texas Cyber Command to “find out what work…

NEWShighThe Register9 days ago

Attack hides malware in PNGs and drops custom reverse tunnel on victims' machines

Next-level ClickFix wave sets off multi-stage attack chain

NEWSThe Hacker News9 days ago

North Korean Job Fraud Expands Beyond IT Into Healthcare and Sales

Threat actors with ties to the Democratic People's Republic of Korea (aka DPRK or North Korea) have been observed seeking job oppo…

NEWSSecurity Magazine9 days ago

Only 33% of AI Agents Provisioned With Least-Privilege Access

Only 33% of AI agents are provisioned with least-privileged access, yet 94% are confident their agents don't have more access than…

NEWSBleeping Computer9 days ago

Microsoft Exchange Online outage causes email failures, auth issues

Microsoft is investigating a widespread service issue causing authentication issues and email delays and failures for Exchange Onl…

NEWSBleeping Computer9 days ago

OpenAI confirms ChatGPT outage as users report errors

ChatGPT Work is experiencing a partial outage, and users across multiple subscription plans may be unable to start or continue tas…

NEWSThe Register9 days ago

Anthropic cracks down on hijacked user accounts mining AI tokens

Commodity malware steals authenticated sessions, letting thieves freeload on victims' paid usage

NEWSSecurity Magazine9 days ago

Bureau of Alcohol, Tobacco, Firearms and Explosives Discloses Cyber Incident

The bureau confirmed an incident after the Qilin ransomware group claimed a breach.

NEWSSecurity Magazine9 days ago

Hasbro Breach Exposes Employee Information

Hasbro experienced a data breach in March.

NEWShighBleeping Computer9 days ago

Chinese Fire Ant hackers turn Cisco routers into spying platforms

The researchers discovered Fire Ant's new tactic after finding an active GRE (Generic Routing Encapsulation) tunnel interface on a…

NEWShighSecurityWeek9 days ago

Nightmare Eclipse Drops ‘HardBreacher’ Kaspersky Product Exploit

Kaspersky told SecurityWeek that it patched the vulnerability affecting its Endpoint Security product. The post Nightmare Eclipse…

NEWSBleeping Computer9 days ago

File servers are here to stay. Here’s how to manage them securely

File servers remain a critical part of many IT environments, but managing access securely can become complex as permissions accumu…

NEWScriticalSecurityWeek9 days ago

ServiceNow Patches 3 Critical Code Injection Vulnerabilities

Attackers could exploit the security defects to execute arbitrary code and access or tamper with data. The post ServiceNow Patches…