Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,729 articles

NEWSThe Register3 months ago

UK government investment arm cops to 40-hour leak of officials' contact details

Employee failed to follow security policy, leaving internal management file open to the public

NEWSThe Hacker News3 months ago

Chinese Threat Actor Uses Leaked DarkSword Kit to Deploy GHOSTBLADE on iOS

An unknown Chinese-threat actor has been observed running a campaign targeting Apple iOS devices by leveraging a publicly leaked v…

NEWScriticalSecurityWeek3 months ago

Recent SonicWall Vulnerabilities Exploited in Ransomware Attacks

The INC Ransomware gang has been targeting vulnerable SMA1000 appliances for root access and lateral movement. The post Recent Son…

NEWSWired Security3 months ago

ICE Collected Nearly 1 Million People’s DNA Last Year—Including Young Children

Internal documents show ICE's DNA collection has skyrocketed in the second Trump administration. Now hundreds of thousands of peop…

NEWSInfosecurity Magazine3 months ago

Korea’s Largest Telco KT Fined $38m After Femtocell Campaign

Korean telco KT has been fined $39m for a year-long breach linked to femtocell compromise

NEWShighSecurityWeek3 months ago

Russian State APT Linked to Recent Public Wi-Fi Gateway Hacking

Midnight Blizzard has been stealing Microsoft account credentials via compromised Wi-Fi networks at hospitality organizations. The…

NEWSThe Hacker News3 months ago

PNLD Breach Exposes U.K. Police and Government Contact Details on Dark Web

The Police National Legal Database (PNLD) has confirmed that police, government and customer contact information was compromised a…

NEWSSecurityWeek3 months ago

US Water Cyberattacks Extend Beyond Minnesota to at Least 6 Other States

Michigan, South Dakota, and Georgia are reportedly on the list of states whose water systems have been targeted by Iran-linked hac…

NEWShighInfosecurity Magazine3 months ago

Coldcard Users Lose $89m After Bitcoin Wallet Is Hacked

A hacker has drained nearly $89m from Coldcard Bitcoin wallets after exploiting a legacy bug

NEWSCVE-2026-17583The Hacker News3 months ago

Thermo Fisher Patches Flaw That Could Make DNA File Tampering Nearly Undetectable

Thermo Fisher Scientific has patched a flaw in select Applied Biosystems human identification software that could allow data files…

NEWSThe Register3 months ago

AI is 'both the weapon and the target' in latest wave of cyberattacks

CrowdStrike tracks 89% surge in machine-assisted activity as patch windows shrink to 48 hours

NEWSCyberScoop3 months ago

CrowdStrike: AI is now both the weapon and the target in cyberattacks

AI generates 2.5 signals for every human-triggered signal CrowdStrike has to assess. Meanwhile, attackers are using AI to weaponiz…

NEWSCVE-2026-185778.1 HIGHThe Hacker News3 months ago

N-able Says Attackers Take Over N-central Servers After Initial Fix Proves Incomplete

N-able said attackers exploited an authentication bypass in N-central to gain remote administrative access and reach the customer…

NEWSThe Hacker News3 months ago

Hugging Face Diffusers Flaws Could Let Model Repositories Execute Arbitrary Code

Three high-severity security flaws have been disclosed in Hugging Face's Diffusers library that could allow crafted model reposito…

NEWSBleeping Computer3 months ago

OpenAI teases Astra, its next major AI model, after it solves 10 long-standing math problems

OpenAI has revealed Astra, an unreleased model designed to tackle complex, long-running tasks, after an internal version produced…

NEWSBleeping Computer3 months ago

COLDCARD wallet RNG flaw likely linked to $88 million Bitcoin theft

A vulnerability in COLDCARD hardware wallet firmware allowed attackers to steal an estimated $88.6 million in Bitcoin from thousan…

NEWSHackread3 months ago

SabPaisa Partners with AccuKnox for Zero Trust AI-Powered Cloud Security to Secure Its Payments Platform

CALIFORNIA, USA, 2nd August 2026, CyberNewswire

NEWSBleeping Computer3 months ago

Google Chrome may soon block New Tab hijacker extensions by default

Google is preparing a new Chrome security feature that would block policy-installed extensions from hijacking the New Tab page or…

NEWSWired Security3 months ago

8 Best Password Managers (2026), Tested and Reviewed

Keep your logins locked down with our favorite password management apps for PC, Mac, Android, iPhone, and web browsers.

NEWSThe Hacker News3 months ago

Coldcard Hardware Wallet Flaw Linked to $70 Million Bitcoin Theft in 41 Minutes

An attacker drained 1,196 Bitcoin addresses in 41 minutes on July 30, taking 1,082.65 BTC worth about $70.2 million at the time. G…

NEWScriticalBleeping Computer3 months ago

Rails patches critical Active Storage flaw with RCE potential

A critical vulnerability in the Active Storage framework can allow an unauthenticated attacker to read arbitrary files from a Rail…

NEWSSecurityWeek3 months ago

Balance Theory Raises $19 Million to Help Enterprises Manage Cybersecurity Investments

The funding round was led by SYN Ventures, with participation from existing investors DataTribe and TEDCO. The post Balance Theor…

NEWScriticalSecurityWeek3 months ago

Ruby on Rails Patches Critical Vulnerability

The flaw can be exploited by unauthenticated attackers to read arbitrary files and potentially achieve remote code execution (RCE)…

NEWSWired Security3 months ago

7 States’ Water Systems Hit by Cyberattacks Likely Tied to Iran

Plus: The FBI eyes AI-powered tech to detect future crimes, Russia charges Telegram’s founder, xAI sues to stop a state’s “nudific…

NEWShighWired Security3 months ago

Nobody Knows if OpenAI’s and Anthropic’s AI Hacking Sprees Are Illegal

Both major AI labs’ models broke containment, escaped onto the internet, and hacked other companies. If a human had done that, the…

NEWShighThe Hacker News3 months ago

Hackers Poison Adform Script to Swap Crypto Wallet Addresses Across Customer Sites

Attackers modified a JavaScript file served by advertising technology company Adform, turning it into a browser-side tool that rew…

NEWSCVE-2026-4844910.0 CRITICALThe Hacker News3 months ago

Adobe Campaign Classic CVSS 10.0 Flaw Could Run Code Without User Interaction

Adobe has released security updates to address a maximum-severity security flaw in Campaign Classic (ACC), its enterprise-focused…

NEWShighThe Hacker News3 months ago

Hijacked Hotel Wi-Fi Pushes Fake Updates to Deliver Surveillance Malware

A fake browser update served over hijacked hotel Wi-Fi has been used to deliver CornFlake, a remote access trojan (RAT) that can c…

NEWScriticalBleeping Computer3 months ago

Amgen says cloud data breach exposed patient health, proprietary info

Pharmaceutical company Amgen says it suffered a data breach after threat actors stole corporate data and patient information store…

NEWShighBleeping Computer3 months ago

Arch Linux disables AUR package adoption to stop malware flood

The Arch Linux project has temporarily disabled adoption of Arch User Repository (AUR) packages after a surge in malicious takeove…