Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,730 articles

Origin Energy Data Breach Affects 900,000 Australians

The hacker claimed to have stolen the information of 2 million Origin Energy customers after breaching its systems. The post Origi…

NEWShighCVE-2026-1681210.0 CRITICALThe Hacker News3 months ago

Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw

A maximum-severity security flaw impacting on-premises versions of Arista VeloCloud Orchestrator (VCO) has come under active explo…

NEWShighSecurityWeek3 months ago

For Some, So-Called ‘Skynet Day’ Came too Close to Sci-Fi After a Rogue Agent Hacked Into a Startup

Decades after it appeared in “The Terminator,” Skynet looks more like a forecast of the cyber incident in which a rogue AI system…

NEWScriticalBleeping Computer3 months ago

Hackers target US firms in FastJson RCE zero-day attacks

Hackers are actively exploiting a vulnerability in the FastJson open-source Java library, allowing remote code execution without u…

NEWSHackread3 months ago

Too Many AI Tools? How to Create Story Videos In One Workflow With Wondershare Media.io

Wondershare Media.io brings AI story writing, character creation, storyboards, and video generation into one workflow for faster,…

NEWScriticalBleeping Computer3 months ago

Arista patches VeloCloud Orchestrator zero-day exploited in attacks

Arista has patched a maximum-severity command injection vulnerability in on-premises VeloCloud Orchestrator deployments that is be…

NEWSCyberScoop3 months ago

Microsoft debuts AI cybersecurity offerings as competition heats up

It includes the new agentic model MAI-Cyber-1-Flash and the Project Perception platform, with the tech giant claiming it’ll do a b…

NEWSCyberScoop3 months ago

Trump asks Supreme Court to let him curtail mail-in voting ahead of midterms

In a Monday filing, the Justice Department said states sued before agencies even decided how the order would work. The post Trump…

NEWSBleeping Computer3 months ago

New Dysphoria DDoS botnet spreads to 200k devices worldwide

A botnet called Dysphoria has compromised around 200,000 devices across the world and is using them for distributed denial of serv…

NEWShighBleeping Computer3 months ago

New Certighost PoC exploit lets attackers hijack Windows domains

A proof-of-concept exploit for "Certighost," a Windows Active Directory Certificate Services vulnerability, has been released that…

NEWSHackread3 months ago

Microsoft Fixes Certighost Flaw That Allowed Domain Controller Impersonation

Certighost allowed a low-privilege domain user obtain a valid Domain Controller certificate through AD CS. Microsoft patched the i…

NEWSWired Security3 months ago

DHS Official Resigns, Citing ‘War on Immigrants’

The outgoing executive director of the Office of Homeland Security Statistics is one of very few federal officials to speak out ag…

NEWSWired Security3 months ago

Private Claude Chats Exposed in Google and Bing Search Results

The screwup shows how tricky it can be to stop web crawlers from making ostensibly private conversations with AI chatbots entirely…

NEWSThe Register3 months ago

Microsoft's solution to AI security: more AI and more acronyms

MDASH stuffed with MAI-Cyber-1-Flash and a side of GPT-5.4

NEWSThe Hacker News3 months ago

NVIDIA Forms 37-Member Open Secure AI Alliance and Open-Sources NOOA Framework

NVIDIA and 36 other organizations have formed the Open Secure AI Alliance to develop and share open technologies, techniques, and…

NEWSBleeping Computer3 months ago

Apple sued over fake App Store crypto wallet app stealing $1.8M in Bitcoin

Apple is being sued by three people who claim approximately $1.8 million in Bitcoin was stolen after downloading and using a fraud…

NEWShighCyberScoop3 months ago

Google’s solution to hacker name confusion? Yet another naming system

APT-number conventions are out, cryptonyms are in, and security teams now have one more naming system to keep straight. The post G…

NEWSThe Hacker News3 months ago

Dysphoria IoT Botnet Adds Blockchain C2 and Victim Relays After JackSkid Disruption

Dysphoria, an Internet of Things (IoT) botnet line tracked by CNCERT and XLab, has adopted blockchain-based name services and infe…

NEWSHackread3 months ago

Daylight Security Launches Detection Program Visibility

Daylight Security adds Detection Program Visibility to unify detections, map coverage to MITRE ATT&CK, and help MDR customers spot…

NEWSThe Register3 months ago

Tech giants link hands to praise open AI models after OpenAI - Hugging Face attack

The Open Security AI Alliance says the Hugging Face/OpenAI mess proves frontier labs can't be trusted to properly secure sensitive…

NEWScriticalBleeping Computer3 months ago

Coca-Cola confirms data theft in Fairlife ransomware attack

The Coca-Cola Company has confirmed that hackers stole data from its dairy subsidiary, Fairlife, during a ransomware attack earlie…

NEWScriticalBleeping Computer3 months ago

Ernst & Young data breach claimed by ShinyHunters extortion gang

The ShinyHunters extortion gang has claimed responsibility for a recently disclosed Ernst & Young data breach, saying it obtained…

NEWShighHackread3 months ago

Hackers Compromise Hotel Wi-Fi Gateways to Hijack Microsoft 365 Accounts

Compromised hotel Wi-Fi gateways redirect business travelers to fake Microsoft 365 login pages allowing attackers to steal credent…

NEWShighThe Hacker News3 months ago

Public Exploit Released for Patched vBulletin Pre-Auth Code Execution Flaw

Public exploit details released on July 27 show how an unauthenticated request can reach PHP's eval() function inside vBulletin an…

NEWSSecurityWeek3 months ago

New GitHub, PyPI Policies Boost Supply Chain Security

Dependabot gets a three-day cooldown window before opening pull requests, and PyPI rejects file uploads to releases older than 14…

NEWShighThe Hacker News3 months ago

⚡ Weekly Recap: Rogue AI Agents, Check Point Exploit, Slopsquatting, ClickFix Lures and More

Monday starts with the usual promise that everything is under control. Then the logs wake up. This week, trusted tools crossed li…

NEWSBleeping Computer3 months ago

Shadow AI agents are multiplying. Here's how to find and secure them.

Shadow AI agents are rapidly spreading across enterprise platforms, often without IT or security visibility. Nudge Security explai…

NEWSHackread3 months ago

Security Risk Advisors Named a Finalist in CRN’s 2026 Best of the Channel Awards

Philadelphia, Pennsylvania, 27th July 2026, CyberNewswire

NEWSThe Register3 months ago

Microsoft Defender for Endpoint leaves some Linux boxes defenseless after update

One bug disabled the security service on restart, another blocked installation on hardened RHEL systems

NEWShighSecurityWeek3 months ago

PTC Windchill Vulnerability Exploited in Ransomware Campaign

The critical unsafe deserialization flaw allows attackers to execute arbitrary code remotely, without authentication. The post PTC…