Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,729 articles

New Pass-ta-key attacks let malware hijack Google-synced passkeys

Security researchers have discovered three attacks that allow malware on already-compromised Windows devices to abuse Google Passw…

NEWShighCyberScoop3 months ago

Public interest coalition urges Congress to investigate OpenAI, Hugging Face hack

The post Public interest coalition urges Congress to investigate OpenAI, Hugging Face hack appeared first on CyberScoop.

NEWSThe Register3 months ago

Google dev kit spurs first-ever agent-on-agent violence

Poisoned pull requests contain prompt injection that allows one to control another

NEWShighBleeping Computer3 months ago

New DOUBLECUP ClickFix service hides malware in browser cache images

A new Russian loader-as-a-service named DOUBLECUP uses ClickFix attacks to hide malicious code in PNG images cached by victims' br…

NEWShighBleeping Computer3 months ago

Fake Roblox Xeno script launcher pushes infostealer, RAT malware

Fake Xeno Executor installers are infecting unsuspecting Roblox players with malware that provides remote access and steals sensit…

NEWSThe Hacker News3 months ago

18 Malicious npm Packages Deliver Cross-Platform RAT to Alibaba Tool Users

Cybersecurity researchers have discovered a new set of malicious npm packages that target users of Alibaba developer tools with a…

NEWSHackread3 months ago

COLDCARD Seed Generation Flaw Linked to Nearly $89 Million Bitcoin Theft

Galaxy Research linked a suspected Bitcoin theft of 1,367.05 BTC to weak COLDCARD seeds. Coinkite says updates cannot repair seeds…

NEWSThe Register3 months ago

AI slop pollutes the CVE pipeline with fake vulns

With NIST still buried under its backlog, expect AI-generated bogus reports to continue

NEWShighCVE-2026-185778.1 HIGHBleeping Computer3 months ago

N-able warns of N-central auth bypass flaw exploited in attacks

N-able is warning customers that hackers are exploiting an authentication bypass vulnerability (CVE-2026-18577) affecting both hos…

NEWShighThe Hacker News3 months ago

Google Password Manager Attacks Could Let Malware Hijack Passkey-Protected Accounts

Malware running as an ordinary user on a Windows machine can sign into a victim's passkey-protected accounts without a fingerprint…

NEWShighThe Hacker News3 months ago

INC Ransomware Emerges as Dominant Actor Exploiting SonicWall SMA 1000 Flaws

The INC Ransomware operation has emerged as the "dominant threat actor" exploiting the recently disclosed security flaws in SonicW…

NEWSSecurityWeek3 months ago

Black Hat USA 2026 – Summary of Vendor Announcements (Part 1)

Many companies are showcasing their products and services this week at the 2026 edition of the Black Hat conference in Las Vegas.…

NEWShighThe Register3 months ago

Russian spies turn public Wi-Fi into malware delivery systems

Keyloggers, audio-visual surveillance, and token theft on CaptivePortal's agenda as hospitality sector put on alert

NEWSSecurityWeek3 months ago

Visa to Acquire Fraud Intelligence Firm BioCatch for $2.4 Billion

The payments giant says BioCatch’s behavioral and device intelligence will help financial institutions combat account takeovers, s…

NEWSSecurityWeek3 months ago

Cyberattack Hits Liechtenstein’s Register of People Behind Companies and Foundations

The list of people behind companies, foundations and trusteeships is part of efforts to combat money laundering and terror financi…

NEWSHackread3 months ago

Why Bitcoin Businesses Are Moving to Dedicated VPS Infrastructure

A Bitcoin business rarely runs a simple website. Payment processors, exchanges, wallet services, blockchain analytics products and…

NEWShighBleeping Computer3 months ago

ExfilSquad hackers leak info of over 100,000 UK police officers, staff

A cyberattack on the U.K.'s Police National Legal Database (PNLD) has compromised contact data of more than 100,000 police officer…

NEWShighInfosecurity Magazine3 months ago

China-Linked Threat Actors Weaponize New Vulnerabilities in Under a Day

Chinese actors exploited the critical React2Shell exploit inside a day, while 88% of exploited vulnerabilities in H1 2026 were com…

NEWShighBleeping Computer3 months ago

Inside the Underground Business of the Android BTMOB RAT malware

Flare researchers analyzed thousands of underground posts to examine how the BTMOB Android malware operation evolved into a fragme…

NEWSInfosecurity Magazine3 months ago

Midnight Blizzard Targets Travelers via Captive Portals

Russian actor Storm-2945 hijacked hotel captive portals to push fake updates and steal tokens

NEWSHackread3 months ago

H96 Android TV Boxes Used for Ad Fraud and Residential Proxies

Bitsight found Fuyao software on H96 Android TV boxes, letting operators fake ad clicks and route proxy traffic through their owne…

NEWSThe Hacker News3 months ago

⚡ Weekly Recap: Rogue AI Models, $88M Bitcoin Theft, Water-System Attacks and Dangling DNS Hijacks

This week kept coming back to permission. A model crossed a boundary. A wallet trusted bad randomness. Webmail kept an intruder ar…

NEWSThe Register3 months ago

Water system cyberattacks spread to Georgia, Michigan amid US-Iran conflict

Trump rejects Tehran theory, blames 'grossly incompetent' governor of Minnesota instead

NEWScriticalSecurityWeek3 months ago

River Bank Says Hackers Deleted Data Stolen in Ransomware Attack

The bank holding company was hacked in June, but the investigation into the incident continues. The post River Bank Says Hackers D…

NEWSSecurityWeek3 months ago

Horizon3 Raises $250 Million to Fund Continuing Growth

Venture financing has become an essential factor in growing new business in today’s fast moving economy. Horizon3’s latest funding…

NEWShighCVE-2026-185778.1 HIGHSecurityWeek3 months ago

N‑able Patches Vulnerability Exploited to Hack N-central Servers

The N‑central vulnerability CVE-2026-18577 has been exploited in the wild after threat actors found a patch bypass. The post N‑abl…

NEWShighHackread3 months ago

Hackers Exploit N-able N-central Flaw After Initial Fix Falls Short

N-able says attackers bypassed N-central authentication, reached managed client devices and installed Cloudflare tunnels that surv…

NEWScriticalSecurityWeek3 months ago

Brinks Home Discloses Data Breach as Hackers Leak Files

The physical security firm says its alarm monitoring and system functionality have not been affected. The post Brinks Home Disclos…

NEWSThe Hacker News3 months ago

FOMO in the SOC: Where AI Platforms like Claude Actually Fit

AI is moving incredibly fast, and every security leader is feeling the pressure to keep up. AI platforms like Claude, Codex and C…

NEWSInfosecurity Magazine3 months ago

HollowFrame Loader Uses Fake Python DLL to Evade Defender

New HollowFrame loader hid Go code in a fake Python DLL after pre-staging Defender exclusions