Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,730 articles

NEWSThe Register3 months ago

Jailed Flock vandal wipes out three cameras, racks up thousands in damages

A lesson for aspiring vandals: Take out all the cameras, not just the ones that flout your ideals

NEWShighThe Hacker News3 months ago

ThreatsDay: AI-Powered Hacking, 370 Chrome Flaws, SonicWall Attacks, DNS Hijacking + 22 More Stories

A lot of security still comes down to trusting the wrong screen. This week, that screen might be a login page, an install guide,…

NEWSCyberScoop3 months ago

We know how to protect our troops from telecom attacks. We’re just not doing it.

The post We know how to protect our troops from telecom attacks. We’re just not doing it. appeared first on CyberScoop.

NEWSHackread3 months ago

Microsoft Fixes CosmosEscape Flaw That Could Allow Any Cosmos DB Takeover

Cybersecurity researchers at Wiz found CosmosEscape in Azure's Gremlin API, exposing a master key that could access any Cosmos DB…

NEWScriticalBleeping Computer3 months ago

Analog Devices discloses data breach, says operations unaffected

American semiconductor company Analog Devices announced that an unauthorized party accessed some of its systems and exfiltrated ce…

NEWSCyberScoop3 months ago

Ghanaian national sentenced to 7 years in prison for stealing $10M from romance scam victims

Derrick Van Yeboah impersonated fake romantic partners and directly interacted with victims for more than nine years. The post Gha…

NEWSInfosecurity Magazine3 months ago

Cryptominer Abuses Linux PAM to Hide From SOC Analysts

Cryptomining crew abandoned root to impersonate low-privileged Linux users and evade SOC alerts

NEWShighSecurity Magazine3 months ago

AI Applications Contain Security Vulnerabilities, According to Report

A report by BreachLock analyzed cybersecurity readiness in the age of AI.

NEWSSecurity Magazine3 months ago

Majority of Organizations Unsure if They Could Detect AI Attack

A report by Onapsis analyzed the results from a study on artificial intelligence (AI) security and enterprise resource planning (E…

NEWSBleeping Computer3 months ago

After the Break-In: What Attackers Do Once They're Already Inside

Attackers rarely stop after gaining initial access. Huntress analyzes a real-world intrusion to show how threat actors establish p…

NEWShighInfosecurity Magazine3 months ago

AiTM Phishing Becomes Top Initial Access Threat to Law Firms

AiTM phishing is now the top entry point into law firms, with identity behind 56% of threats

NEWSSecurityWeek3 months ago

DataBahn Raises $40 Million for Agentic Data Pipeline Management

The company will accelerate investments in R&D and product innovation to expand its agentic data control plane. The post DataBahn…

NEWSThe Hacker News3 months ago

Azure Cosmos DB Flaw Exposed Platform-Wide Key That Could Access Any Database

A now-patched vulnerability in Azure Cosmos DB could have let an attacker escape the service's Gremlin query sandbox and obtain fu…

NEWSSecurityWeek3 months ago

Discern Security Raises $13 Million in Series A Funding

The company will invest in accelerating the development and adoption of its agentic platform. The post Discern Security Raises $13…

NEWSInfosecurity Magazine3 months ago

AI and Automation Fall Short of Sysadmin Expectations

Action1 report finds sysadmins overestimated their use of AI in predictions made two years ago

NEWSSecurityWeek3 months ago

Cantina Emerges From Stealth With $8 Million in Funding

The startup’s community-powered agentic security platform helps proactively identify, prioritize, and remediate vulnerabilities. T…

NEWSSecurityWeek3 months ago

Onyx Security Raises $113 Million to Control AI Agents in the Enterprise

The Series B funding round brings the total raised by Onyx Security to $153 million. The post Onyx Security Raises $113 Million t…

NEWSSecurityWeek3 months ago

‘DangleGeddon’: AI Could Weaponize Forgotten DNS Records at Global Scale

Researchers warn that AI could turn dangling DNS takeovers into a nation-state weapon capable of disrupting governments, banks and…

NEWShighInfosecurity Magazine3 months ago

Teams-Themed Phishing Campaign Abused Legitimate Microsoft Login Pages

Check Point researchers detail phishing attack as an example of attackers dropping fake Microsoft login pages in favor of abusing…

NEWSThe Hacker News3 months ago

Microsoft Copilot for Word Can Copy Hidden Prompts Into New Documents

Hidden instructions in a Word document can make Microsoft 365 Copilot rewrite figures in a report, then copy the same instructions…

NEWSThe Hacker News3 months ago

The Network Has Become the Control Plane for AI Security

Network firewalls are the workhorses of modern cybersecurity. They are trusted to protect the network, blocking malicious traffic…

NEWScriticalSecurityWeek3 months ago

Semiconductor Firm Analog Devices Discloses Data Breach

Hackers were detected on Analog Devices systems in June, and an investigation found that they stole files. The post Semiconductor…

NEWShighThe Hacker News3 months ago

Hackers Exploit AnySign4PC via Hacked Korean Sites to Install Backdoors Without Prompts

South Korean authorities and four security firms have disclosed a state-sponsored campaign that compromised trusted domestic websi…

NEWSThe Hacker News3 months ago

SilverFox Targets Japanese Manufacturer with 3-Driver BYOVD Chain and ValleyRAT

The Chinese cybercrime group known as Silver Fox has been observed using new drivers as part of bring your own vulnerable driver (…

NEWShighWired Security3 months ago

OpenAI’s Hacking Debacle Was a Human Mistake

If the generative AI giant had followed well-known security best practices, it’s likely that its AI agent would never have escaped…

NEWSThe Register3 months ago

Russian spies take their half-click email attack from Zimbra to Outlook

Opening a booby-trapped message unleashes a browser implant that can survive password changes and device rebuilds

NEWSWired Security3 months ago

A Civilian Plane Crashed in New Mexico. Was the Military’s Tech to Blame?

Drone warfare is making the skies more dangerous, even for airplanes far from the battlefield.

NEWScriticalSecurityWeek3 months ago

Critical Ruflo Flaw Lets Attackers Spawn Rogue AI Swarms

Unauthenticated attackers could send HTTP requests to an exposed endpoint to execute commands inside the MCP bridge container. The…

NEWSWired Security3 months ago

AI Scammers Are Better at Building Trust Than Humans

Researchers pitted a person against a Claude agent and found that, after a week of texting, the AI chatbot was more effective at c…

NEWSSecurityWeek3 months ago

1 in 5 Data Center Assets Are Within Easy Reach of Attackers

Claroty has analyzed 750,000 cyber-physical systems across some of the world’s largest data center facilities. The post 1 in 5 Dat…