Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,730 articles

Your AI Agents Are Guessing at Scale: Permissions Decide the Damage

AI agents are designed to improvise as they complete tasks, making broad permissions a growing security risk. Token Security expla…

NEWSBleeping Computer3 months ago

Windows 11 KB5101684 update released with 42 changes and fixes

Microsoft has released the KB5101684 preview cumulative update for Windows 11 24H2 and 25H2, which 42 bug fixes and additional f…

NEWSThe Register3 months ago

Iran-linked CyberAv3ngers suspected in attacks on Minnesota water systems

More than 30 facilities disrupted in 'coordinated cyberattack,' though officials have yet to name a culprit

NEWSThe Hacker News3 months ago

Coordinated Cyberattack Targets 30+ Minnesota Water Systems as One Plant Goes Offline

A coordinated cyberattack targeted operational technology at more than 30 Minnesota community water systems on July 26 and 27, tri…

NEWSThe Hacker News3 months ago

Nine-Year Fraud Campaign Clones Russian Company Sites to Steal Advance Payments

Cybersecurity researchers have disclosed details of a large-scale fraud campaign that involves creating lookalike websites of majo…

NEWSSecurityWeek3 months ago

US Bans Foreign-Made Humanoid Robots, Targeting China Over National Security

The agency said imports of advanced robots pose cybersecurity and other national security risks. The post US Bans Foreign-Made Hum…

NEWSHackread3 months ago

Sweet Security Brings Autonomous Protection to the AI Enterprise with New Blocking Capabilities

Las Vegas, USA, 29th July 2026, CyberNewswire

NEWSSecurityWeek3 months ago

Mate Security Raises $35 Million for Agentic SOC

The startup will use the investment to expand its customer support, sales, and R&D teams. The post Mate Security Raises $35 Millio…

NEWSSecurityWeek3 months ago

ThreatLocker Raises $190 Million in Series F Funding

The company was previously valued at $1.6 billion, and the latest raise has significantly increased that valuation. The post Threa…

NEWSThe Hacker News3 months ago

Mythos Asks the Right Question. It Doesn't Answer It.

AI is compressing exploit timelines. The real question isn't whether your vulnerability management playbook needs to change, it's…

NEWSCVE-2026-107024.3 MEDIUMThe Hacker News3 months ago

Researchers Show a Single Malicious Webpage Visit Can Compromise Tor Browser

Nebula Security says a patched Firefox JIT flaw could be triggered by simply visiting a malicious webpage and was also used to com…

NEWScriticalSecurityWeek3 months ago

Critical VM Escape Vulnerability Patched in VMware ESXi

A total of five vulnerabilities have been patched in VMware ESXi, vCenter, Workstation, and Fusion. The post Critical VM Escape Vu…

NEWSThe Hacker News3 months ago

73% of Organizations Say They Are Not Fully Ready for a Major Cyberattack

Most organizations have incident response plans, security tools, and technical teams in place. Yet new research suggests that many…

NEWSBleeping Computer3 months ago

These near-mint ASUS Chromebook refurbs are only $145

Buying a new computer in 2026 is a unique experience. Rather than deal with incredibly high tech prices, more shoppers are opting…

NEWSThe Hacker News3 months ago

Russia Charges Telegram Founder Pavel Durov With Aiding Terrorist Activity

The Federal Security Service of the Russian Federation (FSB) on Wednesday said it charged Telegram founder Pavel Durov for alleged…

NEWScriticalInfosecurity Magazine3 months ago

The Average Cost of a Data Breach Rises to $5 Million

IBM Cost of a Data Breach Report warns that the global average cost of a data breach has reached a record high of $4.99m – and AI-…

NEWScriticalSecurityWeek3 months ago

US, Australia Release OT Isolation Guidance for Critical Infrastructure

The guidance details steps organizations can take to isolate vital OT and supporting systems, and operate in isolation for an exte…

NEWShighInfosecurity Magazine3 months ago

Just 1% of AI-Discovered Vulnerabilities Exploited in the Wild, Research Shows

For now, the use of AI benefits vulnerability research more than vulnerability exploitation, a VulnCheck researcher said

NEWSSecurityWeek3 months ago

OpenAI’s Rogue AI Ventured Beyond Hugging Face

Hugging Face has published an anatomy of the attack and OpenAI has shared additional information from its investigation. The post…

NEWSCyberScoop3 months ago

OpenAI’s rogue AI agent shows why we need federal rules for autonomous systems

The Hugging Face breach shows there is a gap in federal policy. The frameworks to govern autonomous AI already exist—there just ne…

NEWSInfosecurity Magazine3 months ago

Researchers Warn of AI-Enhanced Phone Fraud Ecosystem

AI is dramatically reducing the barriers to entry for scam phone farm operators, Human Security warns

NEWSSecurityWeek3 months ago

Spur Raises $200 Million for IP Intelligence Platform

The IP intelligence company will use the fresh investment to accelerate and scale its operations. The post Spur Raises $200 Millio…

NEWSHackread3 months ago

22-Year-Old IPMI Flaw Exposes 24,000 Servers to Offline Password Cracking

Researchers found 24,650 public BMC interfaces leaking IPMI password hashes, exposing servers to offline password cracking through…

NEWSWired Security3 months ago

ICE’s New Detention Center Contracts Declare State Laws ‘Shall Not Apply’

One day after a federal judge ordered an ICE detention center opened to state health inspectors, the agency posted new contract te…

NEWShighCVE-2026-162329.1 CRITICALThe Hacker News3 months ago

Public PoC Released for Exploited Check Point SmartConsole Authentication Bypass

Cybersecurity researchers have shared additional technical details about a recently patched critical security flaw impacting Check…

NEWScriticalSecurityWeek3 months ago

JFrog Zero-Days Exploited in OpenAI-Hugging Face Hack

The OpenAI models targeted services beyond Hugging Face as they attempted to solve the tasks they were given. The post JFrog Zero-…

NEWSInfosecurity Magazine3 months ago

NCSC Publishes Guidance to Aid Incident Response and Recovery

The National Cyber Security Centre has released a detailed framework to assist with incident response and recovery

NEWSSecurityWeek3 months ago

Dozens of Minnesota Water Utilities Targeted in Coordinated OT Attacks

State and federal agencies respond after intrusions disrupt automated controls at municipal water and wastewater utilities. The po…

NEWSCVE-2026-600049.8 CRITICALThe Hacker News3 months ago

New Gitea RCE Lets Repository Writers Plant a Git Hook to Run Shell Commands

Gitea, the self-hosted Git platform, has patched a critical remote code execution vulnerability. A user with ordinary repository w…

NEWSThe Hacker News3 months ago

Flying Eagle Android RAT Traces Found on 170 Servers as Source Code Circulates

Source code for the Flying Eagle Android remote access trojan (RAT) framework is circulating through criminal Telegram channels. H…