Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,728 articles

Water Sector Cyberattacks Reportedly Hit at Least 12 States

Georgia has been confirmed as one of the attacked states after Clayton County reported a pump station disruption. The post Water S…

NEWShighThe Hacker News3 months ago

QuickFox Supply Chain Attack Delivers FDMTP Backdoor via Trojanized Windows Installer

Cybersecurity researchers have disclosed what has been described as a "long-standing supply chain attack" on QuickFox, a virtual p…

NEWSCyberScoop3 months ago

National cyber director lays out White House plans to secure AI without writing new rules

The Trump administration executive order on artificial intelligence tried to strike the balance between responsible use, security…

NEWShighThe Register3 months ago

AI researchers let models off the leash – then watched as they tried to add malware to a FOSS project

Models used social engineering and collaborated among themselves to solve a security challenge

NEWSBleeping Computer3 months ago

OpenAI, Anthropic AI agents targeted real people and systems in cyber tests

OpenAI and Anthropic have confirmed that their AI models were involved in separate, newly disclosed third-party cybersecurity test…

NEWShighWired Security3 months ago

OK, Well, Rogue AI Agents Are Hacking Again

Rogue AI agents from OpenAI and Anthropic have again been caught trying to disrupt servers and software—and leaving instructions f…

NEWShighCyberScoop3 months ago

AISI, OpenAI report more ‘unsanctioned’ model hacks

Following similar reports by OpenAI and Anthropic, the UK’s top AI testing lab and a private cybersecurity tester say their models…

NEWShighBleeping Computer3 months ago

TP-Link patches Omada ZTP flaws allowing hackers to breach networks

TP-Link has patched 15 vulnerabilities in the zero-touch provisioning (ZTP) mechanism of its Omada network devices that could be c…

NEWSCyberScoop3 months ago

Massive supply-chain attack compromises 440 packages under four hours

Researchers from multiple security firms observed a variant of Mini Shai-Hulud, self-replicating malware linked to TeamPCP, in all…

NEWShighBleeping Computer3 months ago

Phishing service spoofs RingCentral to steal Microsoft 365 accounts

The Greatness phishing-as-a-service (PhaaS) platform has expanded from credential phishing to adversary-in-the-middle attacks and…

NEWSBleeping Computer3 months ago

New XCSSET variant targets macOS devs via compromised Xcode projects

A new version of the XCSSET malware is targeting thousands of macOS users through compromised Xcode projects and GitHub repositori…

NEWSBleeping Computer3 months ago

77 Open VSX extensions found harvesting developer info

77 extensions on the Open VSX marketplace impersonated legitimate developer tools while transmitting information about the systems…

NEWSHackread3 months ago

Shai-Hulud npm Worm Returns, Poisoning Over 1,280 npm Packages

Shai-Hulud npm worm spreads through Keyv and hundreds of packages with 2 billion monthly downloads, stealing npm, GitHub, cloud an…

NEWSCyberScoop3 months ago

Dem senators criticize Trump administration decisionmaking on AI security risks

The five senators said the administration has alternated between being too passive and overstepping, and China stands to benefit a…

NEWShighThe Hacker News3 months ago

Greatness PhaaS Adds Device Code Phishing to Bypass MFA and Steal Tokens

The commercial phishing-as-a-service (PhaaS) toolkit known as Greatness has become the latest crimeware solution to add support fo…

NEWSThe Register3 months ago

Bypassing AI guardrails is so easy a script kiddie can do it

Claiming 'it's my server' was often enough to persuade models to help

NEWSSecurityWeek3 months ago

Black Hat USA 2026 – Summary of Vendor Announcements (Part 2)

Many companies are showcasing their products and services this week at the 2026 edition of the Black Hat conference in Las Vegas.…

NEWShighThe Register3 months ago

This one time, at Hacker Summer Camp …

What to expect as BSides, Black Hat, and DEF CON descend on Las Vegas

NEWSHackread3 months ago

Airlock Digital Unveils Agentic AI Control & Governance to Extend Preventative Endpoint Security

Atlanta, GA, 4th August 2026, CyberNewswire

NEWSSecurityWeek3 months ago

Rethinking AI Security: Why CASB and DLP Need an Interaction-Aware Layer

Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and…

NEWShighThe Register3 months ago

Feds get 3 days to patch N-able God mode flaw under active exploit

Experts warn hotfix not optional. MSPs warned attacker gains 'full administrative access to an N-central console'

NEWSWired Security3 months ago

Landmark Deal Would Officially Add Laser Weapons to US Army Arsenal

Facing a growing drone threat, the Pentagon is poised to sign a first-of-its-kind contract for “Enduring High Energy Lasers”—and m…

NEWSBleeping Computer3 months ago

Massive ChainDrop npm supply-chain attack infects hundreds of packages

Self-propagating malware named 'ChainDrop' has compromised more than 1,300 packages with a combined 2 billion monthly downloads on…

NEWScriticalCyberScoop3 months ago

Prolific ransomware group behind SonicWall zero-day attacks

INC ransomware wasn’t the first group to exploit the zero-days, but it’s been the most assertive and effective in chaining both vu…

NEWSHackread3 months ago

Mallory Unifies Threat Intelligence, Exposure Context, and Response Into One Architecture for Security Teams

Las Vegas, United States, 4th August 2026, CyberNewswire

NEWSSecurityWeek3 months ago

Oligo Raises $60 Million for Runtime Security

The company will use the investment to accelerate product innovation and expand go-to-market operations. The post Oligo Raises $60…

NEWSCyberScoop3 months ago

Lawmakers spring to save ID theft services for OPM breach victims, with expiration looming

Sen. Mark Warner, D-Va., and Del. Eleanor Holmes Norton, D-D.C., hope to make the services permanent before they end next month. T…

NEWSThe Register3 months ago

AI helps Microsoft bug hunters chase a record $20M payday

Broader bounty rules added to a swelling volume of machine-assisted vulnerability reports

NEWSInfosecurity Magazine3 months ago

WhatsApp Scam Hijacks Accounts via Linked Devices Feature

WhatsApp scam abused the Linked devices feature to hijack accounts without stealing any passwords

NEWSSecurityWeek3 months ago

CISO Conversation: Russ Kirby – Passion Is the Antidote to Burnout

Russ Kirby, CISO at Ping Identity, shares how passion, courage, and “good enough” thinking shaped his path from HP to the C-suite—…