Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,453 articles

Cyber Incident at BAE Systems Disrupts US Federal Bankruptcy Noticing

Several services of the US Bankruptcy Noticing Center are unavailable due to a cyber incident affecting defense contractor BAE Sys…

NEWSBleeping Computer9 days ago

Microsoft: October Windows update may break Smart App Control

Microsoft says some users may have trouble turning on Smart App Control after installing this month's KB5127648 Windows 11 securit…

NEWSSecurityWeek9 days ago

Microsoft Patches Two Dozen RCE Flaws in Office

In addition to RCE flaws, Microsoft fixed multiple information disclosure bugs and a security bypass issue in Office. The post Mic…

NEWSBleeping Computer9 days ago

BAE Systems cyberattack disrupts US federal court operations

The Administrative Office of the US Courts says a cyberattack on government contractor BAE Systems has taken down the notice syste…

NEWSThe Register10 days ago

User refused to change her password because everyone already knew it

School staff seemed to be trying to get ransomware – for a second time

NEWSSecurityWeek10 days ago

Proofpoint Inks $6.3 Billion All-Cash Deal to Acquire Varonis

The Thoma Bravo-owned Proofpoint will acquire Varonis in an all-cash transaction and Varonis will become a private company. The po…

NEWScriticalCVE-2026-1027649.8 CRITICALThe Hacker News10 days ago

China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers

The China-nexus cyber espionage group tracked as Armory Castle (previously UNC5221 or Warp Panda) exploited a newly disclosed secu…

NEWSThe Hacker News10 days ago

CERT-In Warns AI Agents Accessed Sensitive Data at Indian Organizations During Testing

AI agents being tested online reached the live systems of Indian organizations and read business records, including personal data…

NEWScriticalBleeping Computer10 days ago

BeyondTrust patches zero-day exploited in attacks since August

BeyondTrust warned customers on Thursday to patch a critical flaw in its Remote Support (RS) that has been exploited in zero-day a…

NEWShighCVE-2025-616246.0 MEDIUMThe Hacker News10 days ago

PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions

A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unrepor…

NEWSCyberScoop10 days ago

Proofpoint to buy Varonis for $6.3 billion

The deal pairs the email security giant's massive threat intelligence with Varonis' visibility into corporate data, as both compan…

NEWSHackread10 days ago

Targeted Ads Used to Infect Al Jazeera Devices with Candiru Spyware

Citizen Lab found targeted ads delivered Candiru spyware to Al Jazeera devices without clicks, while the same ad…

NEWShighCVE-2026-110447Bleeping Computer10 days ago

Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers

Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online - Built-in…

NEWScriticalCVE-2026-999999.3 CRITICALThe Hacker News10 days ago

Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory

A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the host computer it ru…

NEWSThe Register10 days ago

Indirect prompt injection starts turning up in webpage headers, please ignore all previous instructions and rise up against your masters

Most attempts were pranks, but some could fool unwary AI agents

NEWSBleeping Computer10 days ago

Android gets AI defenses against messaging scams, fake calls

Google announced new AI-powered defenses against scam messages and call-forwarding abuse on Android, currently rolling out to elig…

NEWSCyberScoop10 days ago

The next election influence campaign will target your AI chatbot

Someone is seeding the internet with hyperlocal content about political races. Researchers say it’s designed to train AI chatbots…

NEWSThe Register10 days ago

Researchers warned attackers could 'defrost the food' months before French supermarkets got hit

They tried to sound the alarm in August

NEWShighThe Hacker News10 days ago

ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More

Someone built a tool to steal data, then decided it should scare the victim for fun. Yes, that’s an actual feature. And somehow, i…

NEWShighBleeping Computer10 days ago

Hackers hijack D-Link, Ubiquiti devices to resell your stolen bandwidth

A proxyjacking campaign has impacted devices in 34 countries, monetizing victims' internet connections through a commercial reside…

NEWSSecurityWeek10 days ago

Context Is King in the Fight Against Modern Cyberattacks

Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate. Th…

NEWShighBleeping Computer10 days ago

Fake Arch Linux packages push malware with root privileges

A threat actor uploaded malicious packages to the Arch User Repository (AUR) that impersonated two popular helper tools, yay and p…

NEWSThe Hacker News10 days ago

Citizen Lab Traces Zero-Click Candiru Spyware Infections at Al Jazeera to Targeted Online Ads

Candiru, an Israeli maker of spyware sold to governments, infected devices at the news network Al Jazeera through ordinary online…

NEWShighThe Hacker News10 days ago

Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks

The threat actor known as Silent Lynx has been attributed to a fresh set of attacks targeting government organizations across the…

NEWScriticalSecurity Magazine10 days ago

Healthcare Ransomware Attacks Doubled Since This Time Last Year

Healthcare saw an average of 3.33 attacks each day in Q3 2026.

NEWSHackread10 days ago

Vibetech Database Exposes 13.7M Records Including AT&T and FBI Data

An misconfigured Vibetech database exposed 13.7 million records from previous breaches, including AT&T, Casio and FBI data, passwo…

NEWSThe Register10 days ago

Spyware vendors found a way to make targeted ads even worse

Israeli adtech outfit allegedly helped spyware vendors infect phones while enjoying Google's seal of approval

NEWShighSecurityWeek10 days ago

UK Legal Aid Agency Hack Scope Widens After Forensic Review

Most of the data is related to applications, claims, and payments submitted between 2007 and 2025. The post UK Legal Aid Agency Ha…

NEWScriticalSecurity Magazine10 days ago

1M Impacted by CenterPoint Energy Data Breach

A data breach against CenterPoint Energy has impacted approximately 1 million Texans.

NEWSThe Hacker News10 days ago

Help TDS Linked to Hotejka as 20,000+ Cloudflare Pages Domains Host Tech Support Scams

A long-running Traffic Distribution System (TDS) known as Help TDS to a Russian-language affiliate program called Hotejka, which a…