Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

3,757 articles

Key Reasons Why Identity Fabric Matters in 2026

An Identity Fabric knits fragmented identity systems into a coherent layer that observes how identities behave across applications…

NEWShighThe Register12 days ago

CISA: Most exploited vulnerabilities should have been eradicated decades ago

Organizational culture and systemic gaps in Secure by Design adoption blamed for sorry state of affairs

NEWSThe Hacker News12 days ago

Three CVSS 10.0 ServiceNow Flaws Could Let Unauthenticated Attackers Execute Code and SQL

ServiceNow has released patches for four security flaws impacting the ServiceNow AI Platform, three of them rated 10.0 on the CVSS…

NEWSSecurityWeek12 days ago

Tech, Cybersecurity Giants Unite Behind OpenAI-Led Cyber Defense Pledge

Nearly 130 tech and cybersecurity companies back a collective call to boost cyber defenses as AI-enabled attacks grow more sophist…

NEWSThe Register12 days ago

Industry that built the problem offers to sell you the solution

100+ tech giants warn AI attacks are coming, skip the part where they pay for defenses

NEWSCVE-2026-742329.8 CRITICALThe Hacker News12 days ago

China-Made ZBT Routers Ship With Two Implants Giving Unauthenticated Attackers Root Access

VulnCheck has disclosed two previously undocumented factory implants in firmware for routers built by Shenzhen Zhibotong Electroni…

NEWSSecurityWeek12 days ago

Think You’ve Eliminated Chinese AI? Check the Model’s Lineage, Cisco Says

New research shows that country-of-origin labels can obscure an AI model’s upstream dependencies, inherited behaviors and potentia…

NEWShighBleeping Computer12 days ago

ServiceNow warns of three max severity security vulnerabilities

ServiceNow released security patches for three new maximum-severity AI Platform vulnerabilities that can be exploited in code inje…

NEWScriticalCVE-2026-65643The Hacker News12 days ago

Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server

cPanel has released patches for a security flaw affecting domain parking and addon domain functionality in cPanel and WebHost Mana…

NEWSInfosecurity Magazine12 days ago

Window to Tackle Surge in AI-Enabled Cyber Attacks Narrowing, Tech Giants Warn

More than 100 companies, including OpenAI, Anthropic, Google and Microsoft, have urged collective action to unlock the power of AI…

NEWSBleeping Computer12 days ago

Windows 11 KB5120998 update released with 35 changes and fixes

Microsoft released the KB5120998 preview cumulative update for Windows 11 versions 25H2 and 24H2, which comes with 35 changes, inc…

NEWSWired Security12 days ago

How an Atlanta Suburb Ended Up Sharing Flock Data With More Than 2,000 Organizations

Alpharetta, Georgia, cops share data with thousands of Flock users, ranging from federal agencies to a fish and wildlife commissio…

NEWScriticalSecurityWeek12 days ago

PaperCut Releases Emergency Patch for Exploited Zero-Day

A CVE identifier has not yet been assigned, but PaperCut is urging NG/MF users to install patches and implement mitigations. The p…

NEWScriticalThe Hacker News12 days ago

PaperCut Zero-Day Exploited in Attacks, Affecting All NG and MF Versions

PaperCut has alerted customers that bad actors are actively exploiting a vulnerability impacting all versions of its PaperCut NG a…

NEWShighThe Hacker News12 days ago

APT28-Linked HOOKEDGE Backdoor Targets European Government and Diplomatic Organizations

Cybersecurity researchers have flagged a fresh set of campaigns targeting government and diplomatic organizations in Romania, Spai…

NEWSInfosecurity Magazine12 days ago

Threat Actors Abuse Cursor Agent AI to Assist Ransomware Operations

Aurora ransomware operators are abusing SpaceX’s Cursor Agent AI tool to conduct tasks such as reconnaissance and exploitation act…

NEWScriticalThe Register12 days ago

Print management outfit PaperCut is under 0-day attack, and it’s drawing customers’ blood

The fix is either an unvalidated and unofficial emergency patch or taking the server offline

NEWSSecurity Magazine12 days ago

Report Finds AI Security Fails to Match AI Usage

A report by Guardrail Technologies analyzed how S&P 500 companies document their AI usage alongside their AI cybersecurity measure…

NEWSThe Register12 days ago

Australian cops cuff alleged TeamPCP masterminds

Alleged crew behind the Shai-Hulud worm and other supply chain attacks nabbed with help from the FBI

NEWSBleeping Computer13 days ago

Nearly 700 rogue AI agents coordinated in the Hugging Face attack

New details about the July attack on Hugging Face reveal that hundreds of AI agents driven by OpenAI's internal IM1 model coordina…

NEWShighThe Register13 days ago

CRPx0 hacking service for dummies claims victim count more than quintupled

It's 'built to be operated by a human with no technical background'

NEWSThe Register13 days ago

AI girlfriend review site's secrets were exposed to the world for three weeks

Even testing and staging sites need protection from prying eyes

NEWScriticalThe Hacker News13 days ago

OpenAI Says Reward Hacking Drove AI Agents to Exploit Zero-Days and Breach Hugging Face

OpenAI on Wednesday revealed that reward hacking was a key driver behind the artificial intelligence (AI)-powered hack of Hugging…

NEWSCyberScoop13 days ago

Unit 42 warns AI has shifted balance of power from defenders to attackers

Palo Alto Networks’ threat intelligence team said the early waves of threats riding on agentic AI models have broken in the wild,…

NEWSCyberScoop13 days ago

100-plus companies call for ‘global surge’ in AI-powered cyber defense

OpenAI, Anthropic, Google, Microsoft, and others say there’s a narrow “defenders’ window” to strengthen security before AI-powered…

NEWSWired Security13 days ago

A Georgia Cop Used Flock to Track 2 Other Cops: His Ex and Her Friend

After an affair with a fellow police officer ended, a Georgia cop used Flock to track her movements—and those of a man whose vehic…

NEWSCyberScoop13 days ago

Former sexual abuse victims say Grok used their images, videos to train deepfake capabilities

Elon Musk claimed he was aware of “literally zero” CSAM content created through Grok. A new lawsuit from thousands of real victims…

NEWSThe Register13 days ago

Omarchy distro gains serious backing

Polarizing opinions while tech heavyweights put up $10M

NEWScriticalBleeping Computer13 days ago

PaperCut warns of NG, MF flaw exploited in zero-day attacks

PaperCut is warning that hackers are actively exploiting a vulnerability in all versions of its PaperCut NG and PaperCut MF print…

NEWShighBleeping Computer13 days ago

Manchester Airports Group says hackers stole travelers' data

The Manchester Airports Group (MAG) disclosed that hackers breached its systems and stole customer data, including Wi-Fi sign-ups…