Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

3,754 articles

Hasbro Data Breach Exposed Employee Personal Information

A cyberattack caused disruptions at the toy and game giant earlier this year and the company is now disclosing a data breach. The…

NEWSWired Security11 days ago

The Cybersecurity Apocalypse Is Coming in ‘Months,’ AI Giants Warn

Plus: Hackers target over 100 US water systems, ICE puts in an order for robot dogs, and you’ll never guess what “MrChildPorn” was…

NEWSBleeping Computer12 days ago

McKesson discloses breach after ShinyHunters claims patient data theft

Healthcare and pharmaceutical distribution giant McKesson has disclosed a cybersecurity incident involving unauthorized access to…

NEWShighThe Hacker News12 days ago

Berlin Refuses to Pay Hackers Who Stole Data From the City's State Network

Berlin's state government has confirmed that it is the target of an extortion attempt following the August compromise of the city'…

NEWSThe Register12 days ago

Researcher shows how Claude Code can be tricked simply by asking it to summarize a website

More prompt-injection hijinks from wunderwuzzi

NEWShighThe Hacker News12 days ago

Cosmos EVM Flaw Exploited After Cosmos Labs Knew Every Blockchain Running It Was Vulnerable

Cosmos Labs has warned that a critical balance-handling flaw in the shared Cosmos EVM module was exploited to drain funds from six…

NEWSCyberScoop12 days ago

ATF confirms cyberattack hit system containing info on its investigation targets

The prolific ransomware group Qilin claimed responsibility for the attack. ATF insists the incident was limited to a standalone sy…

NEWScriticalBleeping Computer12 days ago

PaperCut releases second emergency patch for exploited flaws

PaperCut has released a second emergency security update for two actively exploited vulnerabilities in its PaperCut NG and MF prin…

NEWSWired Security12 days ago

Microsoft Teams Has Become a Haven for Scammers in China

Fraudsters are exploiting enterprise chat apps like Teams and Webex to trick Chinese victims into transferring large sums of money…

NEWShighBleeping Computer12 days ago

GiveWP WordPress donation plugin flaw lets hackers execute server commands

A maximum-severity vulnerability in the GiveWP plugin for WordPress allows an unauthenticated attacker to execute arbitrary comman…

NEWSThe Hacker News12 days ago

Attackers Chain Two PaperCut Flaws to Execute Code Without Authentication

Malicious actors are exploiting a newly patched security flaw in PaperCut NG and MF to execute arbitrary code on susceptible insta…

NEWSSecurity Magazine12 days ago

Meta Pays $18B Settlement, Plans Platform Changes

Meta will be making adjustments to its platforms following an $18 billion settlement.

NEWSBleeping Computer12 days ago

68-year-old imprisoned after making $1.3 million by pirating IPTV services

A 68-year-old has been sentenced in the U.K. to more than six years in prison for operating an illegal IPTV (Internet Protocol Tel…

NEWSThe Hacker News12 days ago

Android 17 Adds OS-Wide ECH to Hide Website Visits From Network Providers

Google on Thursday announced new network security protections in Android 17 to bolster connection privacy, address cellular vulner…

NEWSSecurity Magazine12 days ago

Security Leaders Discuss OpenAI’s Call for Collaboration on Cyber Defense

100 technology firms released an open letter calling for “collective action” for cyber defense.

NEWShighCVE-2023-491059.8 CRITICALThe Hacker News12 days ago

ownCloud Flaw Exploited to Steal Nuclear Records From Philippine Research Body

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a critical security flaw impacting ownCloud to…

NEWShighSecurityWeek12 days ago

In Other News: Log4j RCE Scare, Minimus Shutdown, Iranian Hacker Sanctions

Noteworthy stories that might have slipped under the radar: Manchester Airports Group cyberattack, Carhartt breach data was partly…

NEWSThe Hacker News12 days ago

19 Chrome and Edge Extensions Found With Wallet-Stealing and Crypto-Draining Code

Cybersecurity researchers have discovered a cluster of 18 Google Chrome and one Microsoft Edge extensions that were published over…

NEWSThe Register12 days ago

US government snitch-finder pleads guilty to leaking state secrets to foreign spies

The IT specialist began contacting a foreign government within days of being assigned to the DIA’s Insider Threat Division

NEWShighBleeping Computer12 days ago

AI Is Accelerating Vulnerability Discovery. Can Defenders Keep Up?

AI is accelerating vulnerability discovery, putting pressure on systems built to enrich, prioritize, and remediate flaws at a slow…

NEWSSecurityWeek12 days ago

ATF Confirms Cyber Incident After Ransomware Group Claims Attack

The Bureau of Alcohol, Tobacco, Firearms and Explosives has described it as a ‘major incident’ and it’s conducting an investigatio…

NEWShighInfosecurity Magazine12 days ago

Fake Voicemail SVG Attachments Fuel Large-Scale Phishing Campaign

A large-scale phishing campaign used fake voicemail SVG attachments to bypass email defenses, targeting 5527 organizations with ov…

NEWSBleeping Computer12 days ago

Over 8,300 Gitea servers vulnerable to code execution attacks

Over 8,300 Internet-exposed Gitea instances are still unpatched against a critical security flaw exploited in ongoing remote code…

NEWShighCVE-2026-533627.8 HIGHSecurityWeek12 days ago

OpenAI Agents Exploited Linux Kernel Flaw on Company’s Own Systems

CISA has added the exploited flaw, CVE-2026-53362, to its KEV catalog, alongside a JFrog vulnerability exploited by OpenAI agents.…

NEWSCVE-2026-766398.8 HIGHThe Hacker News12 days ago

Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over Bluetooth

Security researcher Olivier Laflamme has disclosed two independent root remote code execution (RCE) chains affecting the Unitree G…

NEWSSecurity Magazine12 days ago

Manchester Airports Breach Impacts 8.7M

8.7 million customers’ data was accessed in an airport breach, most information being emails and Wi-Fi sign ups.

NEWScriticalBleeping Computer12 days ago

Toy-making giant Hasbro disclose data breach affecting employees

Hasbro, one of the world's largest toy and game companies, has disclosed that attackers have accessed the personal and financial i…

NEWSThe Hacker News12 days ago

Key Reasons Why Identity Fabric Matters in 2026

An Identity Fabric knits fragmented identity systems into a coherent layer that observes how identities behave across applications…

NEWShighThe Register12 days ago

CISA: Most exploited vulnerabilities should have been eradicated decades ago

Organizational culture and systemic gaps in Secure by Design adoption blamed for sorry state of affairs

NEWSThe Hacker News12 days ago

Three CVSS 10.0 ServiceNow Flaws Could Let Unauthenticated Attackers Execute Code and SQL

ServiceNow has released patches for four security flaws impacting the ServiceNow AI Platform, three of them rated 10.0 on the CVSS…