Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,730 articles

OpenAI Agent Used Exposed Credentials Across Four Services During Hugging Face Breach

OpenAI on Tuesday revealed the rogue artificial intelligence (AI) agent that escaped its sealed evaluation environment and broke i…

NEWShighSecurityWeek3 months ago

ShinyHunters Claims Ernst & Young Hack

Ernst & Young previously confirmed that personal and financial information was stolen from a third-party management platform. The…

NEWSThe Hacker News3 months ago

Two Compromised joyfill npm Packages Run RAT When Imported Into Node.js

Beta release versions of two npm packages in the @joyfill namespace have been compromised to deliver a remote access trojan (RAT)…

NEWSThe Register3 months ago

America bans imported robots due to supply chain and security risks

Docs point to China’s Unitree as prime example of the foreign clanker threat

NEWShighWired Security3 months ago

OpenAI’s Rogue AI Agent Hacked More Than Just Hugging Face

In a new disclosure, OpenAI says its agent used exposed logins to gain access to at least four “publicly available services” in it…

NEWSWired Security3 months ago

A Typo Landed an Innocent Gamer in Prison for 18 Months

How much could a single underscore in a username really matter? Just ask Brandon Klayme, who served 18 months in prison before rea…

NEWSThe Register3 months ago

MCP gets an enterprise makeover

Now happy to run on K8s and conventional networks, with an easier-to-live-with lifecycle

NEWScriticalThe Register3 months ago

Looks like JFrog's 0-days let OpenAI's models hack Hugging Face

The vendor won't confirm or deny

NEWSBleeping Computer3 months ago

CubePilot drone software dev hit by DNS hijacking to intercept traffic

CubePilot, an Australian firm that designs flight controllers for drones (UAVs), announced a severe operational disruption caused…

NEWSCyberScoop3 months ago

Here’s what Anthropic found when it turned Mythos loose on encryption algorithms

Claude Mythos exposed mathematical weaknesses in a post-quantum candidate and a simplified version of AES, marking a major breakth…

NEWScriticalBleeping Computer3 months ago

OpenAI models used Artifactory zero-days to escape to the internet

JFrog has confirmed that OpenAI models exploited zero-day vulnerabilities in self-hosted Artifactory servers to help escape an iso…

NEWSThe Register3 months ago

Microsoft and Wiz mind-meld agents catch more than 90% of bugs

Secret to their success: Using the right model for the right security job

NEWSHackread3 months ago

Mate Security Grows Over 500% Since Q3 2025 and Pushes Past $50M in Funding

Mate Security secures $35M in Series A funding after 500% growth, as Fortune 500 demand grows for its agentic AI security operatio…

NEWSCyberScoop3 months ago

Coordinated cyberattack disrupts water utilities in 30+ Minnesota communities

A cyberattack of undetermined origin disrupted water treatment plants in at least 30 communities in Minnesota, according to the st…

NEWSThe Hacker News3 months ago

Claude AI Just Cracked a Post-Quantum Test Scheme and Found a Faster 7-Round AES Attack

Anthropic says Claude Mythos Preview helped derive an end-to-end key-recovery attack against HAWK-256 and a 200- to 800-fold speed…

NEWSBleeping Computer3 months ago

CISA shares advice on isolating vital systems during cyberattacks

The U.S. and Australian governments have released new guidance urging critical infrastructure organizations to prepare to isolate…

NEWScriticalBleeping Computer3 months ago

vBulletin fixes critical pre-auth RCE flaw with public exploit

A critical vulnerability in the vBulletin forum software allows unauthenticated attackers to execute arbitrary PHP code through te…

NEWShighHackread3 months ago

PhantomEnigma Infects Organizations with Malware via Hijacked Government Websites

PhantomEnigma abuses Brazilian government websites and trusted email channels to spread malware, target banks, evade security chec…

NEWSCyberScoop3 months ago

FBI sees Anthropic’s Mythos as a law enforcement challenge

The post FBI sees Anthropic’s Mythos as a law enforcement challenge appeared first on CyberScoop.

NEWScriticalHackread3 months ago

ShinyHunters Claims Ernst & Young (EY) Data Breach, Threatens July 31 Leak

EY confirmed the theft of client tax documents from its third-party support platform. ShinyHunters claims responsibility and is th…

NEWSThe Register3 months ago

DEF CON bans Meta-style 'pervert glasses'

More organizers prohibit camera-equipped specs, even with prescription lenses

NEWShighThe Register3 months ago

AI-found bugs aren't proving any easier to exploit despite the hype

VulnCheck says fewer than 2% of AI-assisted vulnerability discoveries have been weaponized, casting doubt on claims frontier model…

NEWSHackread3 months ago

Aembit Joins Snowflake to Tackle AI’s Next Security Frontier: Trusted Agent Interoperability

Silver Spring, MD, USA, 28th July 2026, CyberNewswire

NEWSInfosecurity Magazine3 months ago

Bugs in Hugging Face Diffusers Bypass Custom Code Safeguard

Three CVEs in Hugging Face diffusers let a malicious model repo run code on any machine that loads it

NEWSCyberScoop3 months ago

AI-assisted security tools are finding more bugs, but the threat level has not changed

Analysis from vulnerability intelligence firm VulnCheck shows AI-discovered flaws aren't being exploited any faster than tradition…

NEWSThe Hacker News3 months ago

Tengu Botnet Reboots Compromised Linux Devices When Defenders Kill Its Process

A new Mirai-derived botnet called Tengu can use a compromised Linux device's hardware watchdog to trigger a reboot when defenders…

NEWSSecurityWeek3 months ago

Cyera Acquiring Oasis Security in $1 Billion Deal

Oasis Security recently raised $120 million in Series B funding for its agentic access management platform. The post Cyera Acquiri…

NEWSSecurity Magazine3 months ago

Security Leaders Weigh in on Open Secure AI Alliance

Recently, a number of organizations announced the establishment of an open secure AI alliance.

NEWScriticalInfosecurity Magazine3 months ago

AI-Assisted Bug Hunt Uncovers Linux Kernel 0-Day in net/sched

AI-assisted research uncovered Linux kernel use-after-free allowing root escalation

NEWSThe Hacker News3 months ago

24,650 Internet-Exposed BMCs Disclose IPMI Password Hashes Before Login

Cybersecurity researchers have sounded an alert after finding more than 36,000 Baseboard Management Controller (BMC) management in…