Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,730 articles

NEWSCVE-2026-275779.9 CRITICALThe Hacker News3 months ago

n8n Sandbox Escape Lets Workflow Editors Run OS Commands as the n8n Process

n8n has patched a high-severity expression-sandbox escape that could let an authenticated workflow editor execute operating-system…

NEWSCyberScoop3 months ago

Sen. Wyden urges feds to discard older, insecure, public-facing VPNs

In a letter first reported by CyberScoop, Ron Wyden, D-Ore., said ‘devastating’ attacks on the federal government have accumulated…

NEWShighSecurityWeek3 months ago

MedusaHVNC Malware Uses Hidden Windows Desktops to Evade Detection

The malware-as-a-service operation launches legitimate browsers on an invisible desktop, giving attackers persistent and covert re…

NEWSThe Hacker News3 months ago

Operation BlueDash Deploys Level RMM and ScreenConnect via Fake Teams Update

Cybersecurity researchers have flagged a Microsoft Teams-themed phishing campaign that employs "secure document" lures to deliver…

NEWSSecurityWeek3 months ago

Nvidia and Tech Giants Launch AI Security Alliance

The Nvidia-led coalition aims to give defenders more open tools for testing, auditing and protecting AI models and agents. The pos…

NEWShighInfosecurity Magazine3 months ago

SourTrade Malvertising Campaign Secretly Builds Malware in the Browser

Impersonating well-known cryptocurrency and trading sites, SourTrade has developed a novel technique to drop infostealers to victi…

NEWScriticalSecurityWeek3 months ago

Coca-Cola Confirms Data Breach After Fairlife Ransomware Attack

The Anubis cybercrime group has taken credit for the attack and is threatening to leak data. The post Coca-Cola Confirms Data Brea…

NEWSHackread3 months ago

Insight Partners and Glilot Capital Co-Lead $20M Investment in Way Security

Way Security raises $20M from Insight Partners and Glilot Capital to automate costly IAM operations with AI and help enterprises g…

NEWShighSecurityWeek3 months ago

Beelzebub Raises $3.4 Million for Hacker-Trapping Platform

The company plans to expand its research team, open new offices in Rome and San Francisco, and acquire new clients. The post Beelz…

NEWSSecurityWeek3 months ago

What’s Hiding in Your Mobile Apps? Lookout MSEC Aims to Find Out

The new Mobile Security Exposure Center creates SBOMs for enterprise mobile apps to uncover vulnerable components, dependencies an…

NEWSHackread3 months ago

Google Indexed Claude AI Shared Chats Before Results Were Removed

Google Search indexed public Claude AI chat links, letting people find shared conversations through the site query before those li…

NEWShighThe Hacker News3 months ago

Cruciferra Crypter Uses BYOVD and Process Ghosting to Hide Windows Malware

The China-linked cybercrime group behind the use of income tax-related phishing lures targeting Indian taxpayers, tax professional…

NEWShighSecurityWeek3 months ago

Hacked Public Wi-Fi Gateways Used to Harvest Corporate Credentials

A threat actor has been using the compromised appliances to target the Microsoft 365 accounts of traveling corporate employees. Th…

NEWShighSecurityWeek3 months ago

Anthropic’s Opus 5 Nears Mythos 5 on Finding Bugs, but Falls Short on Exploits

Binary-based vulnerability scanning, penetration testing, and exploit generation are blocked in Opus 5. The post Anthropic’s Opus…

NEWSInfosecurity Magazine3 months ago

Ransomware Groups Increasingly Deploy EDR Kill Techniques

Halcyon’s latest quarterly ransomware report showed that while ransomware attacks are declining, obfuscation techniques are gettin…

NEWScriticalSecurityWeek3 months ago

DentaQuest Data Breach Potentially Impacts Over 23 Million People

In May 2026, hackers stole personal and dental health information from DentaQuest’s computer network. The post DentaQuest Data Bre…

NEWSThe Hacker News3 months ago

TELESHIM Abuses Telegram for C2 in Attacks Against Middle East Governments

Cybersecurity researchers have flagged fresh malicious cyber activity by a threat actor with ties to East Asia targeting governmen…

NEWSThe Hacker News3 months ago

GitHub Adds 3-Day Dependabot Cooldown to Limit Poisoned Package Adoption

GitHub has announced a new cooldown mechanism in Dependabot, allowing the tool to wait at least three days after a release is publ…

NEWSThe Register3 months ago

Google goes it alone with a new cybercrime crew taxonomy

So much for Microsoft and CrowdStrike’s plans for consistent names across the industry

NEWScriticalSecurityWeek3 months ago

MCBS Data Breach Affects 1.2 Million Individuals

The PEAR ransomware group claimed to have stolen 3 TB of information from the medical business management company. The post MCBS D…

NEWSBleeping Computer3 months ago

GitHub, PyPI add time-absed defenses against supply chain attacks

GitHub and PyPI (Python Package Index) have introduced a time-based mechanism in the Dependabot dependency management tool to prot…

NEWSBleeping Computer3 months ago

Steam forum ClickFix attacks infect gamers with XMRig cryptominers

Steam discussion forums are being abused in ClickFix attacks that pretend to be fixes for game and computer problems but actually…

NEWShighThe Hacker News3 months ago

Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable

A malvertising operation dubbed SourTrade is making victims' browsers build the final Windows executable themselves, using a legit…

NEWShighBleeping Computer3 months ago

Malicious sites use JavaScript to build malware in browser memory

A massive malvertising campaign is using fake Solana, Luno, and TradingView webpages with malicious JavaScript that instructs brow…

NEWSBleeping Computer3 months ago

ShinyHunters data leaks fuel $2,000 sextortion email scam

Threat actors are using email addresses exposed in data breaches leaked by the ShinyHunters extortion group to send sextortion ema…

NEWShighCVE-2026-167239.0 CRITICALThe Hacker News3 months ago

Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available

Security firms ThreatBook and Imperva say attackers are targeting a critical flaw in Fastjson, Alibaba's JSON library for Java. In…

NEWShighWired Security3 months ago

The OpenAI Models That Hacked Hugging Face Were ‘Active on the Internet’ for Days

Plus: Russian hackers are trying to steal US nuclear scientists’ emails, the State Department bans known scammers from entering th…

NEWShighThe Hacker News3 months ago

CTM360 Research Reveals How Insurance Phishing Has Evolved Into Real-Time Account Hijacking

For years, phishing campaigns targeting financial institutions followed the same playbook. Victims were tricked into entering user…

NEWSThe Hacker News3 months ago

Cl0p Affiliates Target Internet-Exposed PTC Windchill and FlexPLM with Unauthenticated RCE

Threat actors linked to the Cl0p (aka Chubby Scorpius, FIN11, Graceful Spider, and Lace Tempest) ransomware campaign are exploitin…

NEWSThe Hacker News3 months ago

DevMan RaaS Portal Centralizes Payload Builds, Victim Management, and Affiliate Payouts

The operators of the DevMan ransomware-as-a-service (RaaS) scheme are maintaining a dedicated web platform that offers affiliates…