Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,730 articles

Apple Patches 87 Vulnerabilities in iOS, 155 in macOS Tahoe

Apple announced that dozens of vulnerabilities have been patched in each of its operating systems. The post Apple Patches 87 Vulne…

NEWSBleeping Computer3 months ago

Is Your SSO Protected Against Modern Credential Attacks?

A compromised SSO login can provide attackers with access to multiple enterprise applications and services. Specops Software expla…

NEWSThe Register3 months ago

Charity bank pulls online services over security fears

Customer funds safe, but 14,000 organizations may have to phone in time-sensitive payments

NEWScriticalThe Hacker News3 months ago

JFrog Confirms OpenAI Models Exploited Artifactory Zero-Day Before Hugging Face Breach

JFrog has confirmed that OpenAI models exploited a zero-day in self-hosted Artifactory while trying to reach the open internet fro…

NEWSHackread3 months ago

From Payments to Portfolios: How Financial Super Apps Rewrite Economics of Global Investing

See how stablecoins, tokenized stocks and fractional investing lower costs and expand global access to US markets through modern f…

NEWSSecurityWeek3 months ago

OT Security Startup Frenos Raises $1.52 Million

The company will use the fresh investment to grow its customer success and AI R&D teams. The post OT Security Startup Frenos Raise…

NEWShighInfosecurity Magazine3 months ago

Phishing Dominates as Initial Entry Method for Cyber-Attacks, as Hackers Hone Evasion Techniques

Analysis of real-life incident response cases by Cisco Talos warns that phishing remains a powerful method of initial compromise

NEWScriticalCVE-2026-53921The Hacker News3 months ago

Critical OpenWrt DHCPv6 Flaw Could Let Unauthenticated Attackers Run Code as Root

OpenWrt has shipped version 24.10.8 to close a critical DHCPv6 stack overflow and a wider set of remotely triggerable flaws in net…

NEWSThe Register3 months ago

Uncle Sam needs you to fight for 6G leadership and security, lest Beijing get there first

Washington rallies allies to shape next-generation networks after spending 18 months rattling them

NEWSInfosecurity Magazine3 months ago

Microsoft Launches Flurry of AI Security Initiatives to Combat AI-Enabled Threats

Microsoft has launched a new agentic security system for cyber defenders as well as its first cyber-focused AI model

NEWSBleeping Computer3 months ago

Over 24,000 exposed server BMCs leak password hash via decades-old flaw

More than 24,000 internet-exposed servers are leaking authentication password hashes due to a 20-year-old vulnerability in their B…

NEWSThe Hacker News3 months ago

Nimbus Manticore Deploys NightLedger and Turns Victim Systems Into Covert Relays

The Iranian state-backed hacking group tracked as Nimbus Manticore (aka GalaxyGato, Mirage Kitten, Smoke Sandstorm, Subtle Snail,…

NEWSHackread3 months ago

Confidential Computing on CPU and GPU Systems: How AI Data Centers Protect Data in Use

Modern AI runs on shared, high-performance infrastructure that processes enormous volumes of sensitive data and valuable model wei…

NEWSSecurityWeek3 months ago

Microsoft Unveils MAI-Cyber-1-Flash, Its First Cybersecurity AI Model

The company claims MAI-Cyber-1-Flash tops Anthropic’s Mythos and OpenAI’s GPT-5.6 Sol in CyberGym testing. The post Microsoft Unve…

NEWScriticalInfosecurity Magazine3 months ago

Coca-Cola Reveals Subsidiary Fairlife Suffered Data Breach

Coca Cola claims data was stolen from its Fairlife business after a recent ransomware attack

NEWShighSecurityWeek3 months ago

Hacker Conversations: Tal Kollander’s Journey From Black Hat to Hack Blocker

Tal Kollander’s history divides neatly into two halves: first as an active hacker and then as the block that stops hacks. The post…

NEWSSecurityWeek3 months ago

Act Security Emerges from Stealth to Fight the Patch Problem

Act Security tackles the spiraling patch problem caused by AI’s ability to find new vulnerabilities in existing cloud environments…

NEWShighHackread3 months ago

Fake IT Calls on Microsoft Teams Lead to GoGRPC Backdoor Infections

Fake helpdesk callers use Microsoft Teams and Quick Assist to access employee computers, where attackers install new GoGRPC backdo…

NEWSSecurityWeek3 months ago

Hush Security Raises $30 Million for AI Agent Governance

The startup will invest in expanding engineering and sales teams, accelerating ecosystem support, and expanding corporate partners…

NEWSInfosecurity Magazine3 months ago

NVIDIA’s Open Secure AI Alliance Is Missing Some Big Names

NVIDIA has launched a new Open Secure AI Alliance to build an “open defense stack for agents”

NEWScriticalThe Register3 months ago

Arista patches actively exploited VeloCloud bug as CISA puts admins on the clock

Unauthenticated command injection scores perfect 10 and may expose managed Edge devices

NEWScriticalBleeping Computer3 months ago

Data breach at medical billing firm MCBS affects 1.26 million people

Healthcare billing company Medical Computer Business Services (MCBS) has disclosed that a 2025 network breach exposed the sensitiv…

NEWSInfosecurity Magazine3 months ago

New CREST AI Standards to Deliver AI-Enabled Pentesting Accreditation

CREST’s new AI standards are optional add-on requirements for cybersecurity service providers wishing to demonstrate responsible A…

NEWSSecurityWeek3 months ago

Google Adopts New Threat Actor Naming System

The new two-word naming convention uses a memorable term utilized in public reporting and a cluster-categorization word. The post…

NEWScriticalCVE-2026-630779.8 CRITICALThe Hacker News3 months ago

Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging In

JetBrains is urging customers of on-premise versions of TeamCity to update to the latest version following the discovery of a crit…

NEWShighCVE-2026-532647.8 HIGHThe Hacker News3 months ago

Researcher Says AI Helped Develop Linux Traffic-Control Race Into Root Exploit

STAR Labs has published a Linux kernel exploit that turns an ordinary local user into root on the CentOS Stream 9 build it targete…

NEWShighSecurityWeek3 months ago

Unpatched Fastjson Vulnerability Exploited in Attacks

The critical remote code execution bug can be exploited without authentication, under the library’s stock default configurations.…

NEWScriticalSecurityWeek3 months ago

Critical Arista VeloCloud Orchestrator Vulnerability Exploited as Zero-Day

Impacting on-premises deployments, the OS command injection allows attackers to access privileged internal functionality. The post…

NEWSThe Hacker News3 months ago

Microsoft Says New Cybersecurity AI Model Helps MDASH Hit 95.95% at Half the Cost

Microsoft has launched its first cybersecurity-specific model inside MDASH, its multi-model vulnerability identification and remed…

NEWSWired Security3 months ago

Hugging Face Has a Deepfake Nudes Problem

Researchers tested top image editing models on Hugging Face and found they could easily create explicit deepfakes—and 1,000 image…