Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,725 articles

NEWSThe Register3 months ago

London cops handed victim's new address and number to her stalker, watchdog says

Met ordered to improve safeguards after two preventable data breaches

NEWSHackread3 months ago

New Research: The Confidence Gap Between CISOs and Their Boards Is Real, and It’s Measurable

Las Vegas, United States, 5th August 2026, CyberNewswire

NEWSSecurityWeek3 months ago

The Fourth Battlefield: The Growing Role of Cyber Operations in Global Conflict

CrowdStrike co-founder Dmitri Alperovitch discusses how cyber operations support kinetic warfare, signal coming conflicts, and res…

NEWSCyberScoop3 months ago

Open-source software’s archenemy TeamPCP goes back further than anyone thought

Oligo Security uncovered evidence of a long operational history, including multiple previous attacks it traced to the same attacke…

NEWShighSecurityWeek3 months ago

New Attack Methods Enable Malware to Hijack Passkey-Protected Accounts

Palo Alto Networks researchers have demonstrated attacks against Google’s synced passkey implementation. The post New Attack Metho…

NEWSHackread3 months ago

Uppsala Security Becomes First Blockchain Intelligence Company to Join Cyber Threat Alliance

SIngapore, Singapore, 5th August 2026, CyberNewswire

NEWSCVE-2026-645317.8 HIGHThe Hacker News3 months ago

New OVSwrap Linux Kernel Flaw Lets Local Users Gain Root via Open vSwitch

A memory corruption flaw in the Linux kernel's Open vSwitch datapath gives ordinary local users a path to root on a broad set of d…

NEWSThe Hacker News3 months ago

Kali365 Weaponizes Microsoft Authentication Against US Companies: New Enterprise Risk

Kali365 is turning a legitimate Microsoft login into a gateway to corporate data. The phishing kit targets US organizations with…

NEWScriticalSecurityWeek3 months ago

311,000 Impacted by Brown Health Medical Group-MA Data Breach

Hackers stole personal information, medical records, and financial information from the organization’s server. The post 311,000 Im…

NEWSSecurityWeek3 months ago

Cybersecurity Alliance Drafts SAFE Guidelines for Sharing AI Incident Data

The guidelines are the work of the recently launched Open Secure AI Alliance, which now includes 120 organizations. The post Cyber…

NEWSThe Register3 months ago

UK charities count the cost of Beacon CRM cyberattack

Database backups likely stolen, potentially exposing donor, supporter, and service user details

NEWScriticalCVE-2026-59774The Hacker News3 months ago

Critical Gitea Flaw Let Unauthenticated Attackers Read Server Files via Org-Mode Markup

An unauthenticated attacker can read any file the service account can access on Gitea, the self-hosted Git platform, in versions 1…

NEWSInfosecurity Magazine3 months ago

Prompt Injection Remains Biggest LLM Risk, Despite Limited Incidents

Prompt injection remains the most dangerous security threat to LLMs, according to OWASP’s latest Top 10 LLM Applications list

NEWSThe Hacker News3 months ago

Leaked n8n API Tokens Exposed Live Instances to Credential Theft

GitGuardian researchers found 321 n8n instances accepting API tokens exposed in public GitHub commits and demonstrated four ways a…

NEWSSecurityWeek3 months ago

AI Security Institute Reports Anthropic and OpenAI Models Going Rogue Against Organizations

In one instance, an unsanctioned model attempted to inject malicious code into an open source repository. The post AI Security Ins…

NEWSHackread3 months ago

Brazil Health Surveillance Database Exposed 79GB of Sensitive Records

Brazil's SISVISA health surveillance system left 102,215 files totaling 79GB open online, including tax IDs and identity documents…

NEWSInfosecurity Magazine3 months ago

ChainDrop Worm Hits 400+ npm Packages with Two Billion Monthly Installs

A new npm worm has compromised packages with over two billion monthly installs

NEWShighSecurityWeek3 months ago

CISA Warns of Exploited Langflow, N-central, and Tomcat Vulnerabilities

The flaws can be exploited for remote code execution, authentication bypass, and EncryptInterceptor bypass. The post CISA Warns of…

NEWSThe Hacker News3 months ago

Open VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Data

A cluster of 77 extensions on the Open VSX marketplace has been found to impersonate legitimate developer tools while transmitting…

NEWSCyberScoop3 months ago

AI is getting better at election facts, but voters shouldn’t rely on it

AI chatbots are avoiding some of the obvious errors that plagued earlier models, but they still fall short giving voters the full…

NEWSSecurity Magazine3 months ago

Mobile Application Security Fails to Match Levels of AI Use

Organizations face mobile app security struggles.

NEWSSecurityWeek3 months ago

Over 400 NPM Packages Infected in ChainDrop Supply Chain Attack

The malware was designed to steal and exfiltrate secrets, and to propagate itself via stolen NPM and GitHub credentials. The post…

NEWSInfosecurity Magazine3 months ago

Frontier Models Engage in Unsanctioned Behavior During Testing

Anthropic and OpenAI models attacked “real people and organizations” during AI Security Institute tests

NEWShighInfosecurity Magazine3 months ago

Fake Bank of America Phishing Scam Installs Remote Access Malware

Cybercriminals are using a fake Bank of America phishing campaign to trick users into downloading a malicious script that installs…

NEWShighThe Hacker News3 months ago

Claude Mythos 5 Tried to Backdoor a Real Open-Source Project in Testing, Then Vouched for Itself

An agent running Anthropic's Claude Mythos 5 spent 34 hours trying to get a malware dropper merged into a real open-source project…

NEWScriticalCVE-2026-91989.8 CRITICALThe Hacker News3 months ago

CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited

The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on August 5, 2026, added three flaws to its Known Exploited Vuln…

NEWShighHackread3 months ago

Kali365 Exploits Microsoft Device Login to Access US Corporate Data

Learn how Kali365 has been abusing Microsoft device login to gain OAuth tokens, targeting US firms, and how SOC teams can detect,…

NEWSSecurityWeek3 months ago

Water Sector Cyberattacks Reportedly Hit at Least 12 States

Georgia has been confirmed as one of the attacked states after Clayton County reported a pump station disruption. The post Water S…

NEWShighThe Hacker News3 months ago

QuickFox Supply Chain Attack Delivers FDMTP Backdoor via Trojanized Windows Installer

Cybersecurity researchers have disclosed what has been described as a "long-standing supply chain attack" on QuickFox, a virtual p…

NEWSCyberScoop3 months ago

National cyber director lays out White House plans to secure AI without writing new rules

The Trump administration executive order on artificial intelligence tried to strike the balance between responsible use, security…