Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,730 articles

Arch Linux disables AUR package adoption to stop malware flood

The Arch Linux project has temporarily disabled adoption of Arch User Repository (AUR) packages after a surge in malicious takeove…

NEWSBleeping Computer3 months ago

Online ad firm Adform’s script compromised to steal cryptocurrency

Online advertising firm Adform suffered a supply-chain attack that delivered cryptocurrency-stealing scripts to websites using its…

NEWSCyberScoop3 months ago

Trump blames Minnesota for cyberattacks on water sector, drawing pushback from cyber world

The president went against his intelligence agencies’ conclusions about Iran being the likely suspect in the campaign. The post Tr…

NEWShighHackread3 months ago

Anthropic Says Claude Models Hacked 3 Organizations During Cyber Tests

Anthropic found Claude accessed systems at three real businesses after a testing error gave its AI models live internet access dur…

NEWSBleeping Computer3 months ago

OpenAI says its new GPT 5.6 models are becoming more cost-efficient

OpenAI says it has reduced the price of two GPT-5.6 models, cutting Luna's API price by 80% and Terra's by 20% as it works to make…

NEWShighThe Hacker News3 months ago

Suspected Chinese-Speaking Hackers Target Central Asian Governments With OctLurk and SilkLurk

A Chinese-speaking threat actor is suspected to be behind a fresh wave of cyber attacks targeting government organizations mainly…

NEWShighBleeping Computer3 months ago

Hacker uses DeepSeek AI to autonomously attack vulnerable servers

A Chinese-speaking threat actor is using the DeepSeek AI model and the open-source Hermes Agent to conduct autonomous cyberattacks…

NEWSHackread3 months ago

How Status Labs Helps Brands Get Cited in ChatGPT: The Data Behind AI Search Visibility

Disclosure: This article was created in collaboration with Status Labs.

NEWSBleeping Computer3 months ago

CISA warns of cyberattacks disrupting U.S. water utilities

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of a significant increase in attacks targeting interne…

NEWShighThe Hacker News3 months ago

HollowFrame Loader Deploys Matryoshka Backdoor in Spear-Phishing Attack on Law Firm

Cybersecurity researchers have shed light on a previously undocumented Go-based loader framework called HollowFrame and a Rust-bas…

NEWSThe Register3 months ago

The most famous brand in physical security got pwned by ShinyHunters

Hopefully the company secures houses better than it locks down SaaS systems

NEWShighSecurityWeek3 months ago

In Other News: OpenAI Open Source Tool, AWS Links Hacks to North Korea, Mythos Crypto Research

Noteworthy stories that might have slipped under the radar: parcel delivery company OnTrac hacked, Adobe patches, UK Department fo…

NEWShighSecurityWeek3 months ago

Cyberattacks on Minnesota Water Systems Investigated as Officials Warn About Iranian Hackers

Iran has the “geopolitical motivations” and a recent history of targeting water systems, experts pointed out. The post Cyberattack…

NEWSThe Register3 months ago

Anthropic and OpenAI are competing to see whose agents can go rogue harder

Whoever wins, we lose

NEWShighInfosecurity Magazine3 months ago

Chinese Hacker Uses DeepSeek AI to Orchestrate Vulnerability Exploits

A Chinese-speaking threat actor has been using DeepSeek’s AI models to orchestrate cyber-attacks targeting Asian organizations

NEWSThe Hacker News3 months ago

Cheap Android TV Boxes Pose as Phones and Turn Owners’ Broadband Into Proxies

Bitsight says some cheap Android TV boxes have shipped with apps that rewrite their hardware identity to mimic Samsung, Huawei, Xi…

NEWShighBleeping Computer3 months ago

ESET tracks rise in malicious AI skills and adaptable malware

Attackers are adapting established techniques to AI platforms, emerging technologies, and changing user behavior. ESET's new threa…

NEWSThe Register3 months ago

Charities remain locked out of CAF Bank online accounts

A week into shutdown, 14,000 customers still have no restoration date and some are struggling to pay staff

NEWScriticalHackread3 months ago

Wordfence Finds Critical Backdoor in ARVE WordPress Plugin

A backdoored ARVE WordPress Plugin release could grant attackers administrator access with one token, but WordPress.org blocked au…

NEWSThe Hacker News3 months ago

Three Recent Chrome Releases Fix 1,442 Flaws, More Than Prior 23 Updates Combined

Google on Thursday announced that it fixed a whopping 1,072 security bugs in Chrome versions 149 and 150, surpassing the total num…

NEWSHackread3 months ago

XRP Volatility Surges as Cybersecurity Threats and Market Changes Raise New Concerns

XRP volatility drives faster crypto trading as AI tools gain traction, while phishing, exchange attacks and automation risks test…

NEWSThe Hacker News3 months ago

Researchers Report 84 Flaws in 4G and 5G Cores, Including a Session Hijacking Flaw

An academic study has disclosed a "widespread class" of security vulnerabilities impacting 4G and 5G core networks that, if succes…

NEWShighThe Hacker News3 months ago

6 Reasons Why Device Code Phishing is the Fastest-Growing Threat of 2026

Device code phishing - the abuse of the OAuth 2.0 device authorization grant to steal access tokens - has evolved from a niche red…

NEWShighThe Hacker News3 months ago

Chinese Hacker Commands DeepSeek via Telegram to Launch Autonomous Attacks

Palo Alto Networks' Unit 42 says a Chinese-speaking threat actor used DeepSeek through the open-source Hermes Agent framework to l…

NEWSSecurityWeek3 months ago

Google AI Uncovers 13-Year-Old Chrome Flaw Amid Record Patching Pace

The internet giant has built an agent harness to find vulnerabilities across Chrome’s codebase. The post Google AI Uncovers 13-Yea…

NEWSCyberScoop3 months ago

What the Hugging Face breach reveals about defense in the age of agentic AI

We almost never get both sides of an intrusion. This time we did. Last month, Hugging Face disclosed a breach into part of its pro…

NEWSWired Security3 months ago

The New Defcon Badges Pack a Unique Open Source Chip That Doubles as a Security Key

Created by legendary hardware hacker Andrew “bunnie” Huang, the badges for this year’s famed security conference aim to push the b…

NEWShighSecurityWeek3 months ago

EU to Crack Down on AI Deepfakes, Illicit Imagery and Hacking With New Team in Brussels

When the AI Act comes into force, AI companies will be required to make clear to consumers with labels or digital watermarks that…

NEWSInfosecurity Magazine3 months ago

AWS Blames North Korean Group for Axios and Other npm Supply Chain Attacks

AWS has linked North Korea to the axios campaign to other attacks on npm libraries

NEWShighSecurityWeek3 months ago

Prompted by OpenAI Disclosure, Anthropic Finds Its Own Models Hacked 3 Organizations

A security company’s systems were hacked after it installed a malicious Python package deployed by Claude. The post Prompted by O…