Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

3,754 articles

NEWShighSecurity Magazine9 days ago

Security Leaders Weigh in on Recent PaperCut Vulnerabilities

On August 27, PaperCut announced that hackers were exploiting a vulnerability to access sensitive information.

NEWShighThe Hacker News9 days ago

⚡ Weekly Recap: Chinese Spy Proxy, AI Agents Go Off-Task, Router Backdoors and More

The boring parts caused most of the trouble. A router shipped ready to listen. A fake check turned the user into the installer. T…

NEWScriticalBleeping Computer9 days ago

Berlin confirms data theft after Rhysida ransomware attack claims

Berlin's city administration has confirmed that cybercriminals are attempting to extort the city after the Rhysida ransomware gang…

NEWScriticalSecurityWeek9 days ago

McKesson Confirms Data Breach as Attacker Deadline Looms

The ShinyHunters extortion group has claimed the theft of 284 million records from the company’s systems. The post McKesson Confir…

NEWSSecurityWeek9 days ago

What the Hugging Face Incident Teaches Security Leaders About AI Agent Access

Security teams must treat autonomous agents as highly privileged identities. The post What the Hugging Face Incident Teaches Secur…

NEWShighThe Hacker News9 days ago

ValleyRAT Backdoor Hides in Signed Adware That Users Add to Antivirus Exclusions

The threat actor known as Silver Fox has been observed distributing the ValleyRAT backdoor disguised as a signed Chinese adware ap…

NEWShighSecurityWeek9 days ago

Anthropic Warns Claude Users of Infostealer Malware Infections

The AI giant is logging customers out of their accounts and removing payment data to prevent unauthorized Claude usage. The post A…

NEWSThe Hacker News9 days ago

Aurora Ransomware Operators Use Cursor AI in Attacks Against 10 Targets

Threat actors associated with Aurora (aka Aur0ra) ransomware have been observed using SpaceX's artificial intelligence (AI)-powere…

NEWSThe Hacker News9 days ago

Securing Claude Code: The New Compliance API, Local Visibility, and Identity Governance

Claude Code reads files, runs shell commands, invokes MCP tools, and acts through the credentials available on a developer’s machi…

NEWScriticalSecurityWeek9 days ago

Critical Ruby on Rails Vulnerability in Attackers’ Crosshairs

Named KindaRails2Shell, the arbitrary file read flaw allows attackers to extract secrets and execute arbitrary code remotely. The…

NEWSSecurityWeek9 days ago

Boston Scientific Still Recovering From Cyberattack

The company has called in CrowdStrike and others to investigate the attack that caused global network disruption. The post Boston…

NEWScriticalSecurityWeek9 days ago

Extortion Group Claims Manchester Airports Group Data Breach

FulcrumSec says it stole over 80 GB of data from Manchester Airports Group and plans to leak it online. The post Extortion Group C…

NEWSBleeping Computer9 days ago

Microsoft says Windows 11 KB5120998 update resets mouse settings

Microsoft has confirmed that mouse settings are being reverted on Windows 11 systems after installing the KB5120998 August 2026 no…

NEWSCyberScoop9 days ago

The AI Kill Switch Act is repeating the Clipper Chip’s mistakes

Mandating ‘kill switches’ for AI agents would threaten the security of America’s critical infrastructure and undercut U.S. AI lead…

NEWSWired Security9 days ago

ATM Flaws Reveal Key Weaknesses in the Software Supply Chain

A security researcher discovered nine vulnerabilities impacting ATM encryption and authentication software. But the problems exten…

NEWSBleeping Computer9 days ago

Nigerians extradited to US for sextortion, deaths of two teens

Two Nigerian men extradited to the U.S. on Thursday have been charged with involvement in sextortion schemes that resulted in the…

NEWSSecurityWeek9 days ago

Judge Says Pentagon’s Measures Against Anthropic Were ‘Illegal and Baseless’

The ruling is part of Anthropic's legal battle against the Pentagon after the government labeled the company as a supply chain ris…

NEWSThe Hacker News9 days ago

China-Linked Fire Ant Hijacks Cisco Routers to Steal Credentials and Blind Security Logs

A China-nexus cyber espionage actor tracked as Fire Ant has expanded a long-running campaign beyond VMware hypervisors to compromi…

NEWSSecurityWeek9 days ago

Berlin Won’t Pay Extortion Group Claiming Data Theft

The Rhysida ransomware group has claimed the exfiltration of over 5TB of data, including personal information and credentials. The…

NEWSBleeping Computer9 days ago

Microsoft asks users to ignore 'Antivirus is turned off' errors

Microsoft asked customers this week to ignore incorrect alerts that Defender Antivirus has been turned off after installing the la…

NEWShighThe Hacker News9 days ago

DoJ Corrects China Hacking Claim, Says U.S. Agencies Were Targets, Not Victims

The U.S. Department of Justice (DoJ) on Friday corrected a previously issued press statement that several of its agencies were vic…

NEWShighCVE-2026-82078SecurityWeek9 days ago

More Details Emerge on Exploited PaperCut Vulnerabilities

PaperCut has released a second emergency patch for the exploited vulnerabilities, which are now tracked as CVE-2026-82078 and CVE-…

NEWShighBleeping Computer10 days ago

FulcrumSec claims Manchester Airports hack, theft of 86 GB of data

FulcrumSec claims it stole 86 GB of data from Manchester Airports Group. BleepingComputer validated one traveller's record, while…

NEWShighBleeping Computer10 days ago

Anthropic warns infostealer malware is hijacking Claude sessions to drain usage

Anthropic is warning some Claude users that infostealer malware on their PCs has stolen active Claude login sessions, allowing att…

NEWSBleeping Computer10 days ago

Chrome Web Store extensions caught stealing crypto, browser data

Multiple extensions for Google Chrome and Microsoft Edge delivered a malware framework that deployed modules to steal cryptocurren…

NEWSThe Register10 days ago

Turns out Brits would quite like their private messages to stay private

Polling finds two-thirds don't trust this government, or any future one, with access to their encrypted chats

NEWShighThe Hacker News10 days ago

TerminalFix Uses Fake Cloudflare CAPTCHAs to Deploy Reverse-Tunnel Backdoor

Microsoft has disclosed details of a new ClickFix variant, dubbed TerminalFix, that aims to trick users into running a malicious c…

NEWSBleeping Computer11 days ago

Anthropic is cutting Claude Code's current weekly limits by 17%

Anthropic is permanently increasing Claude Code's standard weekly usage limits by 25% for Pro, Max, Team, and seat-based Enterpris…

NEWScriticalCVE-2026-765819.8 CRITICALThe Hacker News11 days ago

Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE

Multiple critical security flaws have been disclosed in WordPress plugins and themes, including WPMU DEV Dashboard, Avada, Transla…

NEWSBleeping Computer11 days ago

Brave browser adds email aliases to help users evade tracking

The latest version of the Brave browser, 1.94, introduces a feature called 'Email Aliases' that allows users to generate disposabl…