Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,728 articles

Varonis Agent IBAC keeps AI agents within their intended boundaries

AI agents need broad access to be useful, but traditional access controls cannot determine whether an action aligns with a user's…

NEWSSecurityWeek3 months ago

Weaponized Email AI Assistants Could Help Attackers Hijack Accounts

Researchers demonstrate how attackers could abuse built-in email chatbots to evade detection, impersonate trusted employees, compr…

NEWSSecurityWeek3 months ago

Zenity Raises $125 Million in Series C Funding

The AI security company will invest in product innovation, global expansion, and customer experience. The post Zenity Raises $125…

NEWSThe Hacker News3 months ago

Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code Hooks

A credential-stealing npm worm that first appeared in keyv@6.0.0 spread beyond the Keyv and Cacheable namespaces into hundreds of…

NEWSInfosecurity Magazine3 months ago

Cybercriminals Bypass AI Safety Controls by Splitting Malicious Tasks Across Multiple Sessions

Talos read attacker prompt logs and found guardrails fell to task splitting and ownership claims

NEWSCyberScoop3 months ago

Senate set to debate package of bills on privacy, AI and kids safety

Headlined by the Kids Online Safety Act, a key committee will look to clear major legislation governing how minors interact with t…

NEWSThe Hacker News3 months ago

Fake Adobe and Zoom Updates Install ScreenConnect for Persistent Remote Access

Cybersecurity researchers have disclosed details of an active, multi-wave campaign that employs social engineering lures themed ar…

NEWSThe Register3 months ago

Tennessee congressional hopeful accused of shooting license plate cameras

Cops arrest budding politician for allegedly dealing with Flock's expansion the American way

NEWSHackread3 months ago

2026 Cybersecurity Excellence Awards: Community Choice Winners Selected Through 80,000 Votes

Las Vegas, Nevada, 4th August 2026, CyberNewswire

NEWShighSecurityWeek3 months ago

TP-Link Omada ZTP Vulnerabilities Chain Into Full Network Takeover

Forescout researchers have found 15 new vulnerabilities in the TP-Link Omada networking ecosystem. The post TP-Link Omada ZTP Vuln…

NEWSSecurityWeek3 months ago

Obsidian Security Raises $85 Million at $1.1 Billion Valuation

Obsidian Security has developed a platform for governing AI agents across third-party applications. The post Obsidian Security Rai…

NEWSCVE-2026-17583Hackread3 months ago

Thermo Fisher Patches Forensic DNA File Tampering Flaw in Its Software

Thermo Fisher patched CVE-2026-17583 in five supported DNA analysis products by adding digital signatures that help laboratories d…

NEWSInfosecurity Magazine3 months ago

Cloud and SaaS Environments Now Top Targets for Attackers

Cloud and SaaS are now the preferred operating environments for threat actors, amid a continued shift to identity attacks

NEWShighThe Hacker News3 months ago

When Vibe Hacking Turns AI into the Junior Hacker Every Adversary Always Wanted

The cybersecurity industry has spent decades assuming that offensive capability scales with technical expertise. That assumption…

NEWSThe Register3 months ago

CAF Bank reopens online service but warns of further outages

Customers told traffic may be limited at certain times following more than ten days offline

NEWSThe Hacker News3 months ago

Google Deletes 3 ADK AI Workflows After Malicious GitHub Issue Could Trigger Privileged Agent

Google deleted three AI agent workflows from its Agent Development Kit (ADK) Python repository. Pillar Security showed that a publ…

NEWSSecurityWeek3 months ago

Gemini Agent-to-Agent Attack Method Exposed Secrets, Enabled Pull Request Tampering

A crafted prompt to a low-privilege Google ADK agent could be used to pass a malicious hand-off comment to a privileged agent. The…

NEWScriticalCVE-2026-58048The Hacker News3 months ago

New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database Root

cPanel has patched a flaw that let an authenticated hosting customer execute SQL in the database's root context, crossing the priv…

NEWSCyberScoop3 months ago

How companies could share cyber risks without exposing their secrets

A cryptographic technique could let companies prove they're vulnerable to critical flaws without revealing the sensitive data that…

NEWSInfosecurity Magazine3 months ago

AI Accounts for Over Half of Cybercrime in Africa, Says Interpol

Interpol claims AI is driving a surge in cybercrime in Africa, with related losses doubling

NEWShighSecurityWeek3 months ago

Decades-Old BMC Vulnerability Exposes Thousands of Data Centers to Attacks

Over 24,000 internet-accessible server-management interfaces disclose authentication hashes before login. The post Decades-Old BMC…

NEWSThe Hacker News3 months ago

DOUBLECUP Uses ClickFix and Cached PNGs to Deliver CountLoader and DeviceManager RAT

A new Russian loader-as-a-service (LaaS) codenamed DOUBLECUP has been using ClickFix lures as a way to stage malware-laced PNG ima…

NEWScriticalInfosecurity Magazine3 months ago

UK’s Police National Legal Database Reveals Data Breach

The UK’s Police National Legal Database and Ask the Police service have been breached

NEWScriticalSecurityWeek3 months ago

150,000 Impacted by Madera Community Hospital Data Breach

An extortion group stole personal, financial, and medical information from the hospital’s network. The post 150,000 Impacted by Ma…

NEWShighCVE-2026-185778.1 HIGHThe Hacker News3 months ago

CISA Adds Exploited N-able N-central Flaw to KEV After Customer Compromises

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a high-severity security flaw impacting N-able N-…

NEWSSecurityWeek3 months ago

Microsoft Bug Bounty Program: $20 Million Paid to 500 Researchers

The biggest single reward paid out by Microsoft between July 1, 2025, and June 30, 2026, was $200,000. The post Microsoft Bug Boun…

NEWSThe Register3 months ago

Cloudflare has mostly ditched third party security tools, suggests not trying that at home

Automates bug bounty triage with Sonnet for $58 a month, CSO says Mythos would cost $200k

NEWSSecurityWeek3 months ago

New York Awards $9 Million to Strengthen Cybersecurity at 153 Water Systems

The grants will help local governments assess and improve cyber defenses amid a multistate campaign targeting water and wastewater…

NEWShighBleeping Computer3 months ago

Hotel Wi-Fi attacks use custom malware to breach Microsoft 365 accounts

Microsoft has linked a global campaign targeting hospitality Wi-Fi networks to the Russian threat actor Midnight Blizzard, also kn…

NEWShighBleeping Computer3 months ago

New Pass-ta-key attacks let malware hijack Google-synced passkeys

Security researchers have discovered three attacks that allow malware on already-compromised Windows devices to abuse Google Passw…