Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,730 articles

Critical Flaw Led to Azure Cosmos DB Pwnage

Named CosmosEscape, the vulnerability exposed the primary key for Cosmos DB accounts, granting full read and write access. The pos…

NEWSInfosecurity Magazine3 months ago

Anthropic Reveals Claude Escaped Testing, Breaching Three Companies

Anthropic has revealed that Claude AI models broke free of sandbox to compromise third-party organizations

NEWScriticalSecurityWeek3 months ago

CareCloud Data Breach Impacts Over 350,000

In March 2026, hackers stole personal, financial, and medical information from the company’s AWS environment. The post CareCloud D…

NEWScriticalCVE-2026-630779.8 CRITICALSecurityWeek3 months ago

Critical Code Execution Vulnerability Patched in TeamCity

Tracked as CVE-2026-63077, the security defect can be exploited without authentication via the agent polling protocol. The post Cr…

NEWSThe Hacker News3 months ago

Anthropic Says Claude Mistook the Open Internet for a CTF and Breached Three Organizations

Anthropic on Thursday became the latest artificial intelligence (AI) company to reveal that three of its models, including Claude…

NEWSThe Register3 months ago

Anthropic’s Claude escaped test sandbox to attack three organizations

Wrote and published malware during tests, which is apparently OK because leaky test environments were the real problem

NEWShighWired Security3 months ago

Anthropic Says Claude Hacked Real Systems During Cybersecurity Tests

In a review triggered by OpenAI's Hugging Face incident, Anthropic discovered three of its AI models had breached real organizatio…

NEWShighCyberScoop3 months ago

Anthropic says its AI accidentally hacked three companies during safety tests

Following OpenAI’s own incident, Anthropic reviewed its own evaluations and found three cases of Claude hacking external companies…

NEWShighBleeping Computer3 months ago

Anthropic's Claude breached 3 orgs, uploaded PyPI malware during tests

One of Anthropic's Claude models built and uploaded a malicious Python package to PyPI during a botched security evaluation, where…

NEWSHackread3 months ago

What an SSH Tunnel Actually Does and When You Should Use One

Learn how SSH tunnels securely forward network traffic, when local, remote, and dynamic forwarding help, and why they are best for…

NEWScriticalBleeping Computer3 months ago

South Korea fines telco giant KT $39 million for customer data breach

South Korea's Personal Information Protection Commission (PIPC) has fined telecommunications giant KT Corporation KRW 53.979 billi…

NEWSSecurityWeek3 months ago

CISA Urges Water Sector to Protect OT After Coordinated Attacks on PLCs

CISA is urging water and wastewater utilities to lock down internet-exposed controllers, days after intrusions hit dozens of Minne…

NEWSHackread3 months ago

Top 10 Companies to Hire Power BI Developers in 2026

Compare 10 Power BI development companies for 2026, covering DAX, Microsoft Fabric, data engineering, security, compliance, AI, an…

NEWScriticalBleeping Computer3 months ago

JetBrains warns of critical TeamCity remote code execution flaw

JetBrains is warning of a critical authentication bypass vulnerability affecting TeamCity On-Premises that could be exploited to a…

NEWSWired Security3 months ago

A Leaked Memo Ties Cyberattacks on Minnesota Water Utilities to Iran

A memo obtained by WIRED, issued by the water utilities information sharing group WaterISAC, links dozens of cyberattacks against…

NEWSSecurityWeek3 months ago

Bank of America to Acquire Cybersecurity Firm MDSec

The acquisition will add approximately 65 cybersecurity professionals to Bank of America’s operations in the United Kingdom. The p…

NEWSHackread3 months ago

Top 7 Enterprise IT Asset Management Software for 2027

Compare 7 enterprise IT asset management platforms for 2027, covering security, automation, cost, compliance, lifecycle tracking a…

NEWSCyberScoop3 months ago

Okta’s deal for Permiso aims to close gaps in identity threat detection

Ely Kahn, Okta's chief product officer, told CyberScoop the deal enriches the company's current threat detection tools and gives i…

NEWSSecurityWeek3 months ago

Okta to Acquire Identity Threat Detection Firm Permiso

The deal extends Okta's reach beyond identity management and into the realm of security operations, positioning the company to com…

NEWSCyberScoop3 months ago

CISA issues recommendations to federal agencies on open-source software security

One expert said they were pleased by the guidance, which touches on open-weight AI models, patching and more. The post CISA issues…

NEWShighThe Hacker News3 months ago

DPRK-Linked macOS Malvertising Uses Fake Updates to Deliver Crypto-Stealing Malware

Threat actors with ties to North Korea have been attributed to a sophisticated macOS malvertising campaign that involves redirecti…

NEWShighBleeping Computer3 months ago

Amazon links Debug, Chalk NPM supply-chain attacks to North Korean hackers

Amazon linked multiple high-profile open-source software supply chain attacks targeting the Node Package Manager (npm) ecosystem t…

NEWScriticalBleeping Computer3 months ago

VMware fixes three critical flaws allowing auth bypass, VM escapes

Broadcom has released security updates to fix five vulnerabilities in VMware vCenter, ESX, Workstation, and Fusion, including thre…

NEWSWired Security3 months ago

Chrome Needs Twice-a-Week Patching Thanks to AI Bug Hunting

The two Chrome updates in June patched more bugs than the 23 updates before them. Now, Google is ramping up its patching schedule…

NEWSBleeping Computer3 months ago

Google says AI helped Chrome fix 1,072 security bugs in two releases

Google says artificial intelligence is dramatically increasing the number of security vulnerabilities it can find and fix in Chrom…

NEWSKrebs on Security3 months ago

Read This Before You Buy That TV Streaming Stick

Security experts have been sounding the alarm for years about the risks of using generic TV boxes that promise unlimited content s…

NEWSBleeping Computer3 months ago

ShinyHunters claims Brinks Home breach, threatens to leak stolen data

Residential security company Brinks Home has disclosed that hackers breached some of its systems and are threatening to leak alleg…

NEWSHackread3 months ago

OpenMatter Network Calls on Enterprise Leaders to Rethink AI Security Before the Next Rogue AI Crisis

Melbourne, Florida, 30th July 2026, CyberNewswire

NEWScriticalBleeping Computer3 months ago

Microsoft Teams vishing attacks lead to Chaos ransomware attacks

Threat actors are impersonating IT support staff in Microsoft Teams calls to gain remote access to corporate devices and deploy Ch…

NEWSSecurityWeek3 months ago

Timeless Compliance: Why Better Questions Beat Bigger Frameworks

The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be ans…