Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,730 articles

NEWShighInfosecurity Magazine3 months ago

Google Releases Patches for 370 Vulnerabilities in Chrome 151

The new version of Chrome, 151, comes with 370 vulnerability patches, including for seven critical flaws

NEWSInfosecurity Magazine3 months ago

NCSC Calls on Vendors to Embed ‘Forensic Observability’ in Network Devices

The UK’s National Cyber Security Centre wants network device makers to improve forensic observability

NEWSSecurityWeek3 months ago

US and Allies Update SBOM Guidance

Five years after the initial release, the refresh introduces new elements, removes others, and updates terminology. The post US an…

NEWShighSecurityWeek3 months ago

Chrome 151 Patches 370 Vulnerabilities

The major browser update resolves roughly 80 critical- and high-severity security defects. The post Chrome 151 Patches 370 Vulnera…

NEWShighThe Hacker News3 months ago

Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation

The Russian threat actors recently linked to the exploitation of a now-patched vulnerability in Zimbra have been observed exploiti…

NEWSThe Hacker News3 months ago

FCC Blocks New Foreign-Produced Robots and Power Inverters Over Cyber Risks

The Federal Communications Commission (FCC) added foreign-produced mobile robots and networked power inverters to its Covered List…

NEWSThe Register3 months ago

Headteacher had the most guessable username-password combo you could imagine

Schools often don't prioritize or understand cybersecurity

NEWScriticalCVE-2026-203165.3 MEDIUMSecurityWeek3 months ago

Cisco Secure FMC Zero-Day Exploited in the Wild

The vulnerability tracked as CVE-2026-20316 can be exploited by a remote, unauthenticated attacker to log into affected devices.…

NEWSThe Register3 months ago

Excuses like 'AI did it' don't exist in the eyes of the law

If your AI goes rogue, better have a good lawyer

NEWSThe Hacker News3 months ago

Amazon Links Debug and Chalk npm Hijack to North Korea’s Sapphire Sleet

Amazon has tied the September 2025 hijack of the npm packages debug and chalk to North Korea. For ten months, the incident sat in…

NEWScriticalCVE-2026-203165.3 MEDIUMThe Hacker News3 months ago

Cisco FMC Zero-Day Actively Exploited, Static Credentials Could Expose Sensitive Data

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a newly disclosed security flaw impacting Cisc…

NEWSHackread3 months ago

LeakNet Claims 11TB of Data Stolen in NYC Health + Hospitals Breach

LeakNet claims it stole 11TB of NYC Health + Hospitals data containing sensitive medical, financial and biometric records linked t…

NEWScriticalBleeping Computer3 months ago

Russian hackers exploit Exchange OWA zero-day for long-term mailbox access

The Russian state-sponsored hacking group Laundry Bear, also known as Void Blizzard, is exploiting an Exchange Outlook Web Access…

NEWScriticalCVE-2026-203165.3 MEDIUMBleeping Computer3 months ago

Cisco warns of FMC static credential flaw exploited in zero-day attacks

Cisco is warning that a high-severity Secure Firewall Management Center (FMC) static credential vulnerability, tracked as CVE-2026…

NEWShighCyberScoop3 months ago

A little-known npm package was North Korea’s warm-up act for the axios hack

Amazon's threat intelligence team traced domain records from the open-source software hack to a smaller, earlier compromise by the…

NEWSBleeping Computer3 months ago

Anthropic confirms Claude is down worldwide

[...]

NEWSCyberScoop3 months ago

Supply chain challenges loom large in quantum race, White House official says

Brad Blakestad, director of the National Quantum Coordination Office, also said encryption and measuring progress would pose chall…

NEWSThe Register3 months ago

Closed models refuse to help researcher swat Linux bug

"I'm sorry, Dave. I'm afraid I can't do that" is an effective sales pitch for open source

NEWScriticalCVE-2026-66066The Hacker News3 months ago

Critical Rails Flaw Could Let Unauthenticated Attackers Read Server Files via Image Uploads

Ruby on Rails has released fixes for a critical Active Storage vulnerability that could let unauthenticated attackers read arbitra…

NEWSBleeping Computer3 months ago

Health-ISAC warns of rising ShinyHunters data theft attacks on healthcare

Health-ISAC, a cybersecurity information-sharing organization for the health sector, is warning healthcare and medical technology…

NEWSHackread3 months ago

Why Authentication UX Deserves More Attention on B2B Platforms

Better authentication UX helps B2B platforms reduce security fatigue, simplify account recovery, protect sensitive data, and keep…

NEWSThe Register3 months ago

Word worm crawls into Copilot, spreads chaos

Researcher says months of coordination with Microsoft have yet to produce a robust mitigation

NEWSCyberScoop3 months ago

Huntress warns about attack spree that hit 30 SonicWall customers in 2 days

Unknown attackers broke into 92 unique SonicWall user accounts with legitimate credentials, researchers said. The post Huntress wa…

NEWSBleeping Computer3 months ago

OpenAI agent used exposed credentials at 4 services in Hugging Face breach

In a new update, OpenAI says its AI models also used publicly exposed credentials to compromise accounts on four third-party servi…

NEWShighInfosecurity Magazine3 months ago

LogoKit Phishing Kit Screenshots Victim Sites in Real Time

LogoKit now builds per-victim phishing pages using live screenshots of the target's real website

NEWSCVE-2026-5972610.0 CRITICALThe Hacker News3 months ago

Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory

Cybersecurity researchers have flagged a maximum-severity security flaw in Ruflo, an open-source agent meta-harness for Anthropic…

NEWScriticalCVE-2026-59309The Hacker News3 months ago

Three Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM Escape

Broadcom has released security updates to address multiple security flaws impacting VMware ESX, vCenter, Workstation, and Fusion,…

NEWSInfosecurity Magazine3 months ago

Russian-Alligned TA488 Returns With Persistent Outlook Web Access Attack

TA488 returned with OWA half-click exploit deploying OWAReaper implant that survived re-imaging

NEWSHackread3 months ago

CVSS 10.0 RufRoot Flaw Allowed Attackers to Hijack Ruflo Without Logging In

Ruflo fixed a CVSS 10.0 flaw that exposed its MCP bridge without any authentication, putting AI provider keys, stored chats and pe…

NEWShighBleeping Computer3 months ago

Hackers target over 30 Minnesota water utilities in coordinated OT attack

The Minnesota IT Services (MNIT) agency activated its cybersecurity incident response capabilities across the entire state after h…