Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,453 articles

Is AI pentesting as good as a human pentester?

AI pentesting can uncover vulnerabilities missed by human testers, but it also has limitations in consistency, risk assessment, an…

NEWSThe Register10 days ago

Bank of America had to bring in 1,000 contractors to patch all the bugs Mythos identified

CEO said the workers were hired in Q2 and are still helping today

NEWSInfosecurity Magazine10 days ago

France: Internet-Exposed Danfoss Controllers Drop 71% After Cyber-Attack

France-based operators of Danfoss refrigeration controllers have sharply reduced their internet exposure after the October 11 cybe…

NEWSBleeping Computer10 days ago

Microsoft: Windows Server 2022 reached end of mainstream support

Microsoft announced that Windows Server 2022 has reached the end of mainstream support and will remain in extended support until O…

NEWSInfosecurity Magazine10 days ago

New Aoki Infostealer Targets AI Coding Assistant Credentials

Symantec warned that Aoki can steal API keys and tokens from a number of popular AI coding assistants, including Claude and Gemini

NEWSThe Hacker News10 days ago

NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks

NGINX released versions 1.30.6 and 1.31.7 on October 14 to fix five vulnerabilities, one of them present in every release since Ma…

NEWSSecurityWeek10 days ago

Supermarket Refrigeration Attack Widens to Copeland, Dixell Controllers

Roughly 700 French supermarkets were hit by the cyberattacks, for which no group has claimed responsibility. The post Supermarket…

NEWSThe Register10 days ago

X purges 13,000 accounts linked to suspected meddling ahead of US midterms

Platform points to Iran, Russia, and China but provides no public evidence for attribution

NEWScriticalThe Hacker News10 days ago

Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing

Next.js released an out-of-band security update on October 14 that fixes two critical flaws allowing unauthenticated remote code e…

NEWSHackread10 days ago

Anthropic Warns Small AI Models Could Power Self-Spreading AI Worms

Anthropic finds small AI models can set up inference servers across different hardware, raising concerns about future AI…

NEWScriticalThe Hacker News10 days ago

Drupal Patches Critical Core RCE Flaw with No-Login Path via Contributed Modules

Drupal core has a critical flaw in its Field UI module that could let an attacker run code on the site's server, and fixes were sh…

NEWSBleeping Computer10 days ago

Police arrests 95 suspects in international CSAM crackdown action

Law enforcement authorities from 17 countries in Latin America and Europe have arrested 95 suspects in an INTERPOL-coordinated ope…

NEWSThe Hacker News10 days ago

Fake AI Attacks Spread Across US Companies: How MSSPs Can Stop Incidents Early

Attackers are impersonating popular AI products to distribute malware, steal browser sessions, and compromise business accounts. A…

NEWShighCVE-2026-350298.8 HIGHInfosecurity Magazine10 days ago

Warning Over High-Risk Vulnerabilities in Widely Used LLM Gateway Tool

CVE-2026-35029 and CVE-2026-59823 affect LiteLLM, which is commonly used by enterprises to connect their AI applications to provid…

NEWSSecurityWeek10 days ago

CikaBika Bot RAT Uses Discord for C&C

Delivered via phishing, the malware provides reconnaissance, remote execution, and data exfiltration capabilities. The post CikaBi…

NEWShighThe Register10 days ago

Legal Aid Agency hackers made off with records dating back to 1978

Nearly 50 years of data caught up in breach, with probation service records also among the haul

NEWSThe Hacker News10 days ago

Why AI Confidence Is Not Validation

AI is already part of digital forensics and incident response work, with or without a policy in place to govern it. The issue is t…

NEWSThe Hacker News10 days ago

India Mandates Registered Caller Name Display on 4G and Newer Networks From November 1

The Indian government has directed telecom service providers (TSPs) in the country to mandatorily display callers' registered name…

NEWShighHackread10 days ago

Microsoft Seizes YAM Store and Phishing Kit Domains Linked to 1B Malicious Messages

Microsoft and Health-ISAC seize domains linked to YAM Store, CoGUI and Iron Man, services that enabled over 1…

NEWShighThe Register10 days ago

US Air Force pilots used malware-laden USB drives to plan Afghanistan missions

The term military intelligence seems like an oxymoron in this case

NEWSSecurityWeek10 days ago

Novel Android RAT ‘Hirudo’ Replaces Banking Apps With Trojanized Copies

The Hirudo malware combines elements of a traditional banking trojan and a full-featured RAT. The post Novel Android RAT ‘Hirudo’…

NEWSCyberScoop10 days ago

AdFection: How mercenary spyware invades victims’ devices through targeted advertising

Researchers say the attacks have serious implications for the online advertising world, and regulators. The post AdFection: How me…

NEWShighInfosecurity Magazine10 days ago

Microsoft Disrupts Global Yam Store Network Behind One Billion Phishing Messages

Microsoft and partners reveal a major Chinese-language phishing network centered around the Yam Store marketplace

NEWSWired Security10 days ago

‘Nightmare Scenario’: Zero-Click Spyware Is Infecting Phones via Targeted Ads

Researchers at The Citizen Lab have for the first time released technical evidence of sophisticated mercenary spyware being distri…

NEWScriticalSecurityWeek10 days ago

CenterPoint Energy Data Breach Impacts 1 Million Texans

Personal information such as names, addresses, Social Security numbers, and driver’s license numbers was compromised. The post Cen…

NEWSThe Register10 days ago

UK keeps AI safeguards in the maybe pile for Cyber Security BIll

Officials say amendments remain under consideration despite minister's pledge to act

NEWSBleeping Computer10 days ago

Microsoft fixes bug causing Windows black screens, Explorer crashes

Microsoft has resolved a known issue that was causing black screens, desktop loading issues, and Explorer crashes after installing…

NEWSThe Hacker News10 days ago

GhostAction Compromises About 1,900 GitHub Accounts, Targets Over 30,000 Repositories

The credential-theft campaign known as GhostAction has ramped up, targeting more than 30,000 repositories across 3,000 users and o…

NEWSInfosecurity Magazine10 days ago

ICO Reprimands Met Over Third-Party Data Leak

The ICO has handed the Metropolitan Police a reprimand and enforcement notice after privacy failings linked to the Auror platform

NEWSSecurityWeek10 days ago

CISO Conversations: James Robinson – Many Jobs, One Journey to Netskope CISO

James Robinson never planned a cybersecurity career — seven companies and one deputy CISO role later, he leads security at Netskop…