Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,730 articles

Russian Hackers Used a Zimbra Zero-Day to Steal Emails Without Link Clicks

Russian hackers from the TA488 group exploited a Zimbra webmail flaw triggered when emails were opened or previewed, stealing cred…

NEWShighThe Hacker News3 months ago

Hacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry

Someone installed a popular AI assistant on a rented server, switched off the setting that makes it ask permission before running…

NEWShighHackread3 months ago

New Dolphin X Malware Uses AI Profiler to Rank High-Value Victims

Dolphin X malware targets more than 300 apps and includes an AI Profiler that scores infected Windows PCs to help criminals identi…

NEWShighThe Hacker News3 months ago

Golden Chickens Resurfaces With Four New Malware Families and Modular Implants

The threat actors behind the Golden Chickens malware-as-a-service (MaaS) ecosystem have resurfaced with four new malware families,…

NEWSWired Security3 months ago

Satellite Images Reveal How Suspected Scam Compounds Appear Out of Nowhere

Analysis of satellite images of Myanmar shows dozens of alleged scam compounds have appeared in recent months, despite a purported…

NEWScriticalInfosecurity Magazine3 months ago

Ransomware Attacks Targeting Universities on the Rise

Comparitech’s analysis of incidents in the first half of 2026 finds that the emergence of The Gentlemen ransomware has resulted in…

NEWSThe Hacker News3 months ago

NodeBB Patches Eight AI-Found Flaws Exposing Admin Access and Private Chats

Eight security flaws in NodeBB went public on Wednesday, along with the code to exploit them. Aikido Security rates all eight as h…

NEWSBleeping Computer3 months ago

Clop ransomware targets Windchill, FlexPLM in data theft attacks

The Clop ransomware gang (also tracked as Cl0p) is targeting Internet-exposed PTC Windchill and FlexPLM instances in a new data th…

NEWScriticalThe Hacker News3 months ago

Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers Say

Redis shipped seven security releases on July 23 after researchers published authenticated RCE PoCs for stock Redis 6.2.22, 7.4.9,…

NEWSThe Hacker News3 months ago

Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in UAC-0099 Attacks

The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of a new campaign that involves the use of a malicious progra…

NEWScriticalSecurityWeek3 months ago

Data Breach Confirmed After Australian Energy Giant Origin Is Hacked

A hacker claims to have stolen the information of 2 million Origin Energy customers and is threatening to leak it. The post Data…

NEWSThe Register3 months ago

OpenAI-Hugging Face attack doesn't mean agents are evil – unless you tell them to be

Attack models gonna attack

NEWSThe Register3 months ago

Researchers replace downloaded macOS apps with evil twins, Apple shrugs

Gatekeeper has one job and it's not doing it for some software

NEWShighBleeping Computer3 months ago

New Dolphin X malware uses AI to rank high-value targets

A new Dolphin X remote access trojan claims to use an AI-powered profiling feature to score and rank infected users, helping cyber…

NEWScriticalBleeping Computer3 months ago

Australian energy provider Origin says data breach exposes client data

Origin Energy has confirmed that an unauthorized party accessed and subsequently leaked customer data online, exposing sensitive p…

NEWSCyberScoop3 months ago

Rubio restricts visas for sextortionists, cyber scammers

The move stems from a Trump executive order as the administration continues to pursue cyber-enabled fraud and other crimes. The po…

NEWShighBleeping Computer3 months ago

Fake Claude app promoted by Bing ads pushes SectopRAT malware

A malvertising campaign on the Bing search service is pushing a fake Claude desktop app installer hosted on a legitimate Claude.ai…

NEWScriticalThe Hacker News3 months ago

Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes

A Russian state-supported espionage group spent months reading Western mailboxes through a then-unknown flaw in Zimbra's webmail c…

NEWSWired Security3 months ago

For Taylor Swift, Madison Square Garden’s Controversial Cameras Briefly Went Dark

MSG’s sprawling surveillance system can monitor guests down to the second. Its owners made an exception for the pop star’s rehears…

NEWShighCyberScoop3 months ago

Russian espionage group using novel Zimbra exploit to steal sensitive data from Western countries

Laundry Bear exploited a zero-day vulnerability for five months before it was patched in July 2025, and the group is still activel…

NEWShighBleeping Computer3 months ago

Russian hackers exploit Zimbra zero-click flaw for email theft

CISA is warning that the Russian state-sponsored hacking group Laundry Bear, also known as Void Blizzard, is targeting organizatio…

NEWSThe Register3 months ago

Year-long Russian attacks infect users as soon as they look at an email

Phishing for dummies

NEWShighBleeping Computer3 months ago

Hackers abuse Notepad++ plugins to stealthily install malware

Ukraine's CERT has uncovered attacks distributing an archive containing the legitimate Notepad++ application and a malicious utili…

NEWSThe Register3 months ago

Millions of California-bought cars can be hijacked via Bluetooth

Aftermarket dealer-installed KARR/SWDS security systems all use the same secure key, say UCSD researchers

NEWShighInfosecurity Magazine3 months ago

Russian Hackers Exploit New ‘Zero-Click’ Attack Against Western Organizations

International agencies issue joint alert over state-backed campaign exploiting a critical vulnerability in the Zimbra Collaboratio…

NEWSBleeping Computer3 months ago

Microsoft 365 outage affects Teams, SharePoint and other services

Microsoft Teams and several Microsoft 365 services are experiencing an ongoing outage, with users reporting problems accessing Tea…

NEWSThe Register3 months ago

Oracle drops 1,449 security patches like it's the new normal

Experts say the era of AI bug hunting is here, so defenders will simply have to adapt to busier workloads

NEWSHackread3 months ago

What Is Cryptocurrency and How Does It Actually Work?

Learn how cryptocurrency works, from blockchains and wallets to private keys, custody, and secure transactions, with practical sec…

NEWSHackread3 months ago

Blockchain Life Returns to Dubai — Featuring the Debut of AI Future

Dubai, UAE, 23rd July 2026, CyberNewswire

NEWSSecurityWeek3 months ago

OpenAI Fixes ChatGPT Agent Flaw That Could Let Attackers Forge an AI Insider

AgentForger allows an attacker to create, insert and remotely control an invisible autonomous AI agent inside a victim organizatio…