Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

2,131 articles

ThreatsDay: Game Cheat Spyware, 24-Hour Ransomware, Chrome Sync Stalking + 12 More Stories

A lot of this week’s trouble starts with something that looks close enough. A familiar repo. A useful installer. A harmless sync…

NEWSThe Register10 days ago

C'mon, just copy this text string and paste it into your macOS Terminal – it'll fix your computer, honest

Newly documented stealer ClickLock comes for the more trusting Mac user with spot of social engineering

NEWSSecurityWeek10 days ago

Legacy Systems, Real-World Impacts: The Reality of OT Security

Legacy systems, safety concerns, and critical infrastructure risks make OT vulnerability disclosure one of cybersecurity's most ch…

NEWShighInfosecurity Magazine10 days ago

Phishing Campaign Hides Lua Loader as TrueType Font File

Global phishing campaign disguised a Lua loader as a font file to deploy RATs and infostealers

NEWSBleeping Computer10 days ago

AI Agents Broke the Security Playbook. Here's What Replaces It.

Traditional security workflows were built for environments that changed at human speed. Token Security explains why AI agents requ…

NEWScriticalBleeping Computer10 days ago

23andMe to pay $18 million in new genetics data breach settlement

Genetic testing company 23andMe has agreed to pay $18 million to settle claims from a coalition of 43 attorneys general that it fa…

NEWSThe Hacker News10 days ago

n8n Token Exchange Flaw Could Let Attackers Log In as Users From Another Issuer

n8n, the workflow automation platform, handed out the wrong accounts at login. On Enterprise instances configured to trust more th…

NEWSInfosecurity Magazine10 days ago

Modular macOS Stealer Uses Kill Loops to Force Password Entry

New ClickLock macOS stealer locked victims out of their own system until they surrendered a password

NEWSInfosecurity Magazine10 days ago

Single Prompt Enables ChatGPT to Execute Full Cyber-Attack Chain, Researchers Claim

Cybersecurity researchers tested Open AI GPT 5.5’s offensive cyber capabilities – and the results showed how effective a frontier…

NEWShighSecurityWeek10 days ago

Two Scattered Spider Hackers Sentenced to Jail in UK

Thalha Jubair and Owen Flowers were prosecuted over a 2024 cyberattack targeting Transport for London (TfL). The post Two Scattere…

NEWSSecurityWeek10 days ago

AI Data Centers Are Being Built Faster Than They Can Be Secured

AI infrastructure introduces new security risks that traditional data center designs were never built to handle. The post AI Data…

NEWShighThe Hacker News10 days ago

New TELEPUZ Malware Spreads via ClickFix to Steal Data and Run Commands

Cybersecurity researchers have called attention to a new modular malware called TELEPUZ that's been spreading via websites infecte…

NEWSThe Register10 days ago

Brit Scattered Spider duo handed tickets to prison over Transport for London attack

Sentencing bookends the biggest cybercrime conviction in UK history

NEWSSecurityWeek10 days ago

‘ClickLock Stealer’ Bypasses macOS Security With Social Engineering, Process Killing

The new macOS malware has targeted at least 100 users to steal their passwords and cryptocurrency. The post ‘ClickLock Stealer’ B…

NEWSThe Hacker News10 days ago

New ClickLock macOS Stealer Kills Apps Every 210ms Until Victims Type Their Password

ClickLock Stealer, a new macOS infostealer, answers a victim's refusal by killing their apps on a loop until they hand over the lo…

NEWShighBleeping Computer10 days ago

Scattered Spider members behind TfL hack get five years in prison

Two leading members of the Scattered Spider cybercrime collective were sentenced to five years and six months in prison each for h…

NEWScriticalBleeping Computer10 days ago

Windows 11 24H2 Home and Pro reach end of support in 90 days

Microsoft announced on Wednesday that systems running Windows 10 Enterprise LTSB 2016 and Home and Pro editions of Windows 11 24H2…

NEWSThe Hacker News10 days ago

20+ Hijacked Government Websites Became an Attack Channel

More than 20 Brazilian government websites were hijacked and turned into malware delivery channels in an active PhantomEnigma camp…

NEWSInfosecurity Magazine10 days ago

"Selfish Bravado" Behind TfL Cyber-Attack, Judge Says as Pair Jailed

The perpetrators of the 2024 TfL cyber-attack have been jailed for five and a half years each after pleading guilty to Computer Mi…

NEWShighHackread10 days ago

OkoBot Malware Uses ClickFix, Hidden Browser Extensions to Steal Crypto Data

Kaspersky says OkoBot targets crypto users through fake software, stealing wallet files, seed phrases and passwords while recordin…

NEWSThe Hacker News10 days ago

New Agent Data Injection Attack Can Make AI Agents Misclick or Run Attacker Commands

Ask an AI agent to summarize the reviews on a product page, and a single planted review can make it click "Buy Now" instead. Ask a…

NEWSThe Register10 days ago

Windows 10 refuses to die, and the security bill is coming due

One in six machines still run the old OS as migration stalls and patch deadlines creep closer

NEWSSecurityWeek10 days ago

Oak Emerges From Stealth Mode With $60 Million in Funding

The startup has built an AI-powered Identity Operating System that governs all identities across an organization’s environment. Th…

NEWShighThe Hacker News10 days ago

Daxin Resurfaces in Taiwan Alongside Stupig Pre-Login SYSTEM Backdoor

An advanced malware previously attributed to a China-linked threat actor has resurfaced after more than four years within a Taiwan…

NEWScriticalBleeping Computer10 days ago

CISA orders feds to patch actively exploited Oracle flaw by Saturday

CISA has ordered federal agencies to secure their systems by Saturday against ongoing attacks exploiting a critical vulnerability…

NEWScriticalSecurityWeek10 days ago

Splunk, Zoom Patch Critical Vulnerabilities

The flaws could allow attackers to access credentials and data, take over accounts, and escalate their privileges. The post Splunk…

NEWShighBleeping Computer10 days ago

Russian hackers trojanize WebEx, Zoom apps to push Starland malware

A financially motivated Russian threat actor tracked as UAT-11795 is using trojanized software to steal credentials and cryptocurr…

NEWSThe Hacker News10 days ago

AI Can Find Bugs, But Human Knowledge Still Proves Them

Artificial intelligence (AI) is changing offensive security, but it has not changed the standard that matters most: a finding has…

NEWSThe Register10 days ago

Telegram shortlinks knocked offline over sanctioned VPN connection

t.me borked for a day until platform proved it had no ties to service favored by cybercriminals

NEWSBleeping Computer10 days ago

New Spirals ransomware encrypts victim network in under 24 hours

A new ransomware actor called Spirals completed a corporate intrusion, from initial access to data theft and encryption, in less t…

Attack & News

ThreatsDay: Game Cheat Spyware, 24-Hour Ransomware, Chrome Sync Stalking + 12 More Stories

C'mon, just copy this text string and paste it into your macOS Terminal – it'll fix your computer, honest

Legacy Systems, Real-World Impacts: The Reality of OT Security

Phishing Campaign Hides Lua Loader as TrueType Font File

AI Agents Broke the Security Playbook. Here's What Replaces It.

23andMe to pay $18 million in new genetics data breach settlement

n8n Token Exchange Flaw Could Let Attackers Log In as Users From Another Issuer

Modular macOS Stealer Uses Kill Loops to Force Password Entry

Single Prompt Enables ChatGPT to Execute Full Cyber-Attack Chain, Researchers Claim

Two Scattered Spider Hackers Sentenced to Jail in UK

AI Data Centers Are Being Built Faster Than They Can Be Secured

New TELEPUZ Malware Spreads via ClickFix to Steal Data and Run Commands

Brit Scattered Spider duo handed tickets to prison over Transport for London attack

‘ClickLock Stealer’ Bypasses macOS Security With Social Engineering, Process Killing

New ClickLock macOS Stealer Kills Apps Every 210ms Until Victims Type Their Password

Scattered Spider members behind TfL hack get five years in prison

Windows 11 24H2 Home and Pro reach end of support in 90 days

20+ Hijacked Government Websites Became an Attack Channel

"Selfish Bravado" Behind TfL Cyber-Attack, Judge Says as Pair Jailed

OkoBot Malware Uses ClickFix, Hidden Browser Extensions to Steal Crypto Data

New Agent Data Injection Attack Can Make AI Agents Misclick or Run Attacker Commands

Windows 10 refuses to die, and the security bill is coming due

Oak Emerges From Stealth Mode With $60 Million in Funding

Daxin Resurfaces in Taiwan Alongside Stupig Pre-Login SYSTEM Backdoor

CISA orders feds to patch actively exploited Oracle flaw by Saturday

Splunk, Zoom Patch Critical Vulnerabilities

Russian hackers trojanize WebEx, Zoom apps to push Starland malware

AI Can Find Bugs, But Human Knowledge Still Proves Them

Telegram shortlinks knocked offline over sanctioned VPN connection

New Spirals ransomware encrypts victim network in under 24 hours

20+ Hijacked Government Websites Became an Attack Channel