Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,730 articles

OpenAI confirms ChatGPT is down worldwide

ChatGPT, the famous artificial intelligence chatbot that allows users to converse with various personalities and topics, has conne…

NEWSThe Hacker News3 months ago

Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git

Security researcher Yuhang Wu at depthfirst has published a working proof-of-concept (PoC) exploit that executes commands as git o…

NEWSSecurityWeek3 months ago

Rockwell Patches Code Execution Flaws in Arena Simulation Software

A researcher has explained how an attacker could exploit these vulnerabilities to target industrial organizations. The post Rockwe…

NEWSThe Register3 months ago

Pope's official prayer app commits cardinal sin, leaks 700K+ users' info

(Security) hole-ier than thou

NEWSCyberScoop3 months ago

Industry’s message on CIRCIA: Please ask us fewer questions about cyberattacks

The administration set a target date of September for CISA to finalize the rule, but where the agency is headed remains a mystery…

NEWSThe Register3 months ago

Europol flags 4,340 'horrific' URLs linked to The Com

Stop the spread (of online recruiting and propaganda)

NEWScriticalBleeping Computer3 months ago

OnTrac notifies customers of data breach after network hack

OnTrac parcel delivery company is informing that hackers breached its corporate network and may have accessed personal details bel…

NEWSCyberScoop3 months ago

Despite multiple takedowns, botnets continue to grow

Roughly 1 in 4 of those compromised IPs are based in the United States, Lumen’s Black Lotus Labs said. Botnets like IPIDEA have al…

NEWSBleeping Computer3 months ago

Hermes AI agent used to automate attack on Thai Finance Ministry

A threat actor used the open-source Hermes AI agent in unattended "YOLO" mode to automate post-exploitation activity during an all…

NEWShighBleeping Computer3 months ago

Hackers hijack hotel Wi-Fi DNS to steal Microsoft 365 accounts

Hackers are changing the DNS settings on Wi-Fi devices at hotels and conference centers to redirect users to fake Microsoft 365 lo…

NEWShighSecurity Magazine3 months ago

CISA, FBI Issue Warning of Ongoing Cyber Exploitation from Iran

An alert issued earlier this year was updated, providing more guidance on Iranian-linked cyber activity.

NEWSBleeping Computer3 months ago

Microsoft blames massive Microsoft 365 outage on maintenance bug

Microsoft says a bug in its automated network maintenance request system caused Thursday's massive outage by mistakenly removing I…

NEWSCyberScoop3 months ago

Microsoft, tech companies throw weight behind spread of open-source AI

Other signatories of the letter include Meta, Palantir, Perplexity, Mistral, NVIDIA, Mozilla, The Linux Foundation, Hugging Face,…

NEWSSecurity Magazine3 months ago

AI Without Guardrails Is Driving a New Era of Cybercrime

The risk of guardrail-free AI isn’t a future concern — it’s a current-day threat.

NEWShighThe Hacker News3 months ago

BlueNoroff Zoom Phishing Kit Profiles Crypto Wallets Before Malware Delivery

The North Korean threat actors behind the ClickFix-style campaigns that employ typosquatted Zoom and Microsoft Teams domains have…

NEWShighSecurityWeek3 months ago

In Other News: Dolphin X AI-Powered Malware, Car Anti-Theft Device Hack, 400 Linux Kernel Flaws

Noteworthy stories that might have slipped under the radar: Siemens ROX II industrial switch vulnerabilities, Russian Zimbra webma…

NEWShighThe Hacker News3 months ago

Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller

Researchers H0j3n and Aniq Fakhrul published a working exploit on July 24 that lets a low-privileged Active Directory user obtain…

NEWScriticalBleeping Computer3 months ago

Chick-fil-A data breach affects more than 13,000 customers

Chick-fil-A has confirmed that over 13,000 customers had their accounts breached in a wave of credential stuffing attacks targetin…

NEWSBleeping Computer3 months ago

Slopsquatting, Phantom Domains, and HalluSquatting Are the Same AI Attack

Slopsquatting, phantom squatting, and HalluSquatting all exploit the same late-binding attack pattern, where AI coding agents trus…

NEWSBleeping Computer3 months ago

Europol flags 4,340 URLs for removal in 'The Com' crackdown

Europol has flagged 4,340 URLs for removal during a multi-week operation targeting online content linked to "The Com," a loosely o…

NEWSThe Register3 months ago

Uncle Sam tells overseas cybercrooks their visas are canceled

Policy targets online scammers, sextortionists, and potentially their immediate families

NEWSSecurityWeek3 months ago

AegisAI Raises $36 Million for AI-Powered Email Security

The company has raised a total of $49 million in funding, including from Battery Ventures, Accel and Foundation Capital. The post…

NEWSInfosecurity Magazine3 months ago

Hotel Wi-Fi Routers Compromised to Steal Corporate Login Credentials From Visitors

Researchers at ReliaQuest warned of widespread DNS poisoning attacks targeting the hospitality sector as part of a cyber espionage…

NEWShighThe Hacker News3 months ago

ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link

Cybersecurity researchers have disclosed a critical vulnerability in OpenAI's ChatGPT Workspace Agents that could have allowed a s…

NEWSCVE-2026-321949.8 CRITICALThe Hacker News3 months ago

Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers

A crafted SVG submitted to Bing's image search ran commands as NT AUTHORITY\SYSTEM on Microsoft's production image-processing work…

NEWSThe Hacker News3 months ago

Seeing AI Agents Is Not Enough. Security Teams Must Enforce What They Can Do

AI agent security is moving through a familiar maturity curve: adoption, then visibility, and finally, control. But what we've col…

NEWShighSecurityWeek3 months ago

Industry Reactions to OpenAI Models Hacking Hugging Face: Feedback Friday

Industry professionals debate whether it represents a lab containment failure or an unprecedented agentic capability milestone. Th…

NEWShighBleeping Computer3 months ago

Man gets six years for hacking 750 women's Snapchat accounts

An Illinois man was sentenced on Tuesday to 76 months in prison and three years of supervised release for hacking the Snapchat acc…

NEWSHackread3 months ago

Tego AI Discloses Second Claude Flaw in a Week: Hidden Link Silently Sends Files to Attackers

Tel Aviv, Israel, 24th July 2026, CyberNewswire

NEWShighInfosecurity Magazine3 months ago

ChatGPT Among Top 10 Most Impersonated Brands in Phishing Attacks, Says Check Point

OpenAI’s chatbot tool ChatGPT ranked among the top 10 most impersonated brands in phishing attacks for the first time