Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,725 articles

A Security Pro Hacked North Korean Hackers. He Found They’d Breached Hundreds of Networks Worldwide

For nearly two years, researcher Vangelis Stykas has maintained access to North Korean hackers’ servers. His work shows they pulle…

NEWSWired Security3 months ago

OpenAI’s Browser Could Be Hijacked to Spam Your WhatsApp Contacts

Researchers at security firm Zenity found more than a dozen flaws in AI browsers—and managed to get OpenAI’s Atlas to make an unau…

NEWSBleeping Computer3 months ago

Ransom Cartel ransomware creator sentenced to 16 years in prison

Maksim Silnikau, the creator and administrator of the Ransom Cartel ransomware operation, was sentenced to 16 years in prison for…

NEWSBleeping Computer3 months ago

Canadian pleads guilty to Snowflake cloud data-theft attacks

A Canadian man pleaded guilty today to his role in accessing company accounts at cloud storage provider Snowflake and stealing dat…

NEWSThe Register3 months ago

Prompt injection isn't the bug, AI agent frameworks are

Check Point researchers tried to break the frameworks enterprises use to build AI apps. Now they're telling Black Hat attendees wh…

NEWShighCyberScoop3 months ago

Snowflake hacker pleads guilty, faces up to 32 years in prison

Connor Moucka obtained almost $500,000 for playing a key role in one of the most widespread and damaging cyberattack sprees on rec…

NEWSWired Security3 months ago

DHS Wants Protesters’ Signal Group Chats

A lawsuit accuses Homeland Security of violating protesters’ free-speech rights—but the agency is using it to try to get access to…

NEWShighBleeping Computer3 months ago

Hackers run khunt post-exploitation toolkit from Oracle database

Hackers exploited a SQL injection vulnerability to install a post-exploitation toolkit directly inside an Oracle database that was…

NEWShighWired Security3 months ago

The Most Dangerous AI Hacking Techniques Still Have Humans in the Loop

Security researcher James Kettle tried to push the limit of AI’s hacking abilities—and discovered how effective it can be when com…

NEWShighSecurityWeek3 months ago

How a $50,000 Exploit Chain Turned Bixby Against Samsung Phones

The chain involved the exploitation of several vulnerabilities in the Samsung Members and Samsung Account applications. The post H…

NEWSCyberScoop3 months ago

Tom Cotton prods Treasury for tax code tweaks to modernize OT

The Senate Intel Committee chair wrote to Treasury Secretary Scott Bessent about changes to spur investment in aging technology to…

NEWShighHackread3 months ago

OctLurk and SilkLurk Windows Backdoors Target Governments in 6 Countries

Kaspersky links OctLurk and SilkLurk to cyberespionage attacks stealing passwords, emails and files from government systems in six…

NEWShighThe Hacker News3 months ago

Over 250 ClickFix Domains Use Browser Fingerprinting to Hide macOS Malware Lures

A macOS ClickFix operation spanning more than 250 front-end domains now fingerprints visitors before deciding whether to show them…

NEWSThe Hacker News3 months ago

OpenAI Disrupts Poipet Scam Network Using ChatGPT Across Multiple Fraud Schemes

OpenAI said it disrupted a Cambodia-based scam operation that used its generative artificial intelligence (AI) chatbot ChatGPT to…

NEWShighBleeping Computer3 months ago

COLDCARD security audit phishing attack installs remote access tool

A phishing campaign is exploiting fears surrounding the recently disclosed COLDCARD wallet vulnerability and suspected $88.6 milli…

NEWSWired Security3 months ago

DHS Is Hiring Bounty Hunters to Find and Photograph Deported People’s Homes Abroad

Homeland Security told immigrants that leaving the US would wipe out fines it claims they owe. Now it wants private investigators…

NEWSHackread3 months ago

5 Best AI Detection & Response Platforms for 2026

Compare AI detection & response platforms for 2026, including Dash, Lakera, Operant AI, HiddenLayer and Prisma AIRS, for runtime t…

NEWSThe Register3 months ago

IBM's agentic AI platform is under active attack - patch now

A critical Langflow flaw allowing RCE on default deployments is being exploited, says the CISA

NEWSWired Security3 months ago

Meta Ran Ads That Contained AI-Generated Child Sexual Abuse Imagery

More than 50 offending image and video ads were published across Facebook, Instagram, Messenger, or Threads, according to Meta’s a…

NEWShighBleeping Computer3 months ago

CISA warns of hackers exploiting Langflow, N-central, Apache Tomcat flaws

The U.S. Cybersecurity and Infrastructure Security Agency is giving federal agencies three days to mitigate vulnerabilities in IBM…

NEWSThe Hacker News3 months ago

Poison Claude Sells Discounted Claude Access While Its Operator Sees Every Customer Prompt

Cybersecurity researchers have discovered more than half-a-dozen services advertisements for illegal access to artificial intellig…

NEWSInfosecurity Magazine3 months ago

Fake Open VSX Extensions Harvest Private Repo and CI Data

77 counterfeit Open VSX extensions beaconed to one domain, 19 harvesting git and CI identity

NEWSThe Hacker News3 months ago

Paperclip AI Flaws Let Attackers Run Host Commands via Malicious Agent Imports

Two security flaws in Paperclip could let attackers execute commands on a network server or a developer's computer. Paperclip is a…

NEWShighBleeping Computer3 months ago

Google Blogger locks hundreds of blogs in malware false positive

Google has locked hundreds of Blogger websites after a false positive claimed they violated its "Malware and Similar Malicious Con…

NEWSSecurityWeek3 months ago

Black Hat USA 2026 – Summary of Vendor Announcements (Part 3)

Many companies are showcasing their products and services this week at the 2026 edition of the Black Hat conference in Las Vegas.…

NEWShighHackread3 months ago

“I’m Allowed”: Hackers Use Simple Claims to Bypass AI Guardrails

Cisco Talos found hackers using simple authorization claims to bypass AI guardrails, build DDoS attack tools, steal credentials an…

NEWSInfosecurity Magazine3 months ago

Paperclip AI Flaws Let Unauthenticated Attackers Run Commands

3 Paperclip flaws exposed data & allowed unauthenticated command execution in two deployment modes

NEWScriticalThe Hacker News3 months ago

Veeam, Terraform MCP, Django Patch Critical Flaws, Led by CVSS 10.0 Cross-Tenant Bug

HashiCorp, Veeam, and the Django Software Foundation have patched 11 vulnerabilities across Terraform MCP Server, Veeam Service Pr…

NEWShighBleeping Computer3 months ago

How AI-powered phishing killed blocklists for good

AI is helping attackers create disposable phishing infrastructure and rapidly evolving toolkits that blocklists cannot track fast…

NEWSThe Hacker News3 months ago

Trojanized npm Packages Decode C2 IP From Ethereum Recipient Addresses

Cybersecurity researchers have flagged an evolution of the EtherHiding blockchain-based command-and-control (C2) technique that co…