Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

2,131 articles

NEWSInfosecurity Magazine11 days ago

Eleven Vulnerable UEFI Shims Enable Secure Boot Bypass

Eleven forgotten Microsoft-signed UEFI shims can bypass Secure Boot on almost any machine

NEWShighThe Register11 days ago

Microsoft cancels Patch Tuesday for some Dell users over surprise shutdowns, overheating devices

Mega hardware vendor reports problems - but Windows maker isn't yet naming affected models

NEWSHackread11 days ago

Pulse Security Debuts Operational Management Platform Built for Security Leaders

San Francisco, United States, 15th July 2026, CyberNewswire

NEWScriticalCVE-2026-157184.3 MEDIUMThe Hacker News11 days ago

Firefox, Chrome, Adobe, and VMware Updates Fix Multiple Critical Security Flaws

Mozilla has released updates to address two critical flaws in Firefox for which it warned that exploit code has been published. T…

NEWSHackread11 days ago

Insignary Launches Clarity On-Demand: SBOMs, No Annual Commitment Required

Toronto, Canada, 15th July 2026, CyberNewswire

NEWShighSecurityWeek11 days ago

Windows Bind Link Attacks Can Hide Malware From EDR Tools

Bitdefender researchers show how Windows bind links can create conflicting filesystem views to hide malware from endpoint security…

NEWScriticalThe Register11 days ago

LegacyHive: 'Bone-shattering' zero-day from Microsoft's serial tormentor not the haymaker that was promised

Experts say it’s a useful post-compromise tool, for those with the brain cells required to put it together

NEWSSecurityWeek11 days ago

Virtual Event Today: Cloud & Data Security Summit

Attendees will be able to interact with leading solution providers and other end users facing similar challenges in securing a var…

NEWScriticalInfosecurity Magazine11 days ago

Compromised Logins Surge as the Most Common Entry Point for Ransomware Attacks

Research of incidents by Sophos finds that phishing, brute force attacks and other identity-based threats have surpassed software…

NEWSHackread11 days ago

PromptFiction Flaw Auto-Submitted Hidden Prompts in Claude Desktop

A one-click Claude Desktop flaw allowed attackers to submit concealed instructions without review, exposing chats and enabling cod…

NEWShighInfosecurity Magazine11 days ago

Progress Restores ShareFile Storage Zones Access After Vulnerability Exploit Concerns

Progress has restored access to its ShareFile Storage Zones Controller after a four-day suspension triggered by a credible externa…

NEWSSecurityWeek11 days ago

US Charges Russian Individuals and Firms for Running Cybercrime Services

The suspects and their companies were previously sanctioned by the United States and its allies. The post US Charges Russian Indiv…

NEWScriticalHackread11 days ago

Microsoft’s July 2026 Patch Tuesday fixes 622 flaws and 2 exploited zero-days

Microsoft’s July 2026 Patch Tuesday fixes 622 CVEs, including exploited AD FS and SharePoint flaws, plus the disclosed BitLocker b…

NEWSThe Hacker News11 days ago

SASE Has An AI Blind Spot. Inspecting Packets Is No Longer Enough.

For years, routing traffic through cloud proxies was good enough. Then work moved to the browser, AI entered the workflow, and the…

NEWScriticalThe Hacker News11 days ago

Researcher Drops New Windows Zero-Day PoC Hours After Microsoft Patch Tuesday

Security researcher Chaotic Eclipse (aka Nightmare-Eclipse) has released a new proof-of-concept (PoC) exploit called LegacyHive.…

NEWSThe Hacker News11 days ago

New Webinar: Closing the Approval Gap in AI-Era Ad Tech

A single approved marketing tag can quietly load fourth-party code your security team has never seen, granting full access to your…

NEWShighSecurityWeek11 days ago

Vulnerabilities Patched by Fortinet, Ivanti, ServiceNow

A critical security defect in the ServiceNow AI platform could allow remote attackers to execute arbitrary code. The post Vulnerab…

NEWSThe Hacker News11 days ago

Cursor Flaw Lets Malicious Cloned Repositories Trigger Windows Code Execution

Open a repository in Cursor on Windows and, if a file named git.exe is sitting in the project root, Cursor runs it. No click, no a…

NEWShighSecurityWeek11 days ago

White House Launches AI-Driven ‘Gold Eagle’ Vulnerability Coordination Initiative

The new program stems from an AI-focused Executive Order signed by President Trump on June 2. The post White House Launches AI-Dri…

NEWScriticalSecurityWeek11 days ago

Progress Confirms Zero-Day Vulnerability Behind ShareFile Disruption

The company has rolled out a fix and is restoring access for Storage Zones Controller customers who apply it. The post Progress Co…

NEWScriticalBleeping Computer11 days ago

CISA warns admins to patch actively exploited SharePoint flaws

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned Tuesday that attackers are actively exploiting three vulne…

NEWShighInfosecurity Magazine11 days ago

Microsoft Patches 570 CVEs in Record Patch Tuesday

Microsoft released fixes for a record 570 CVEs in its July Patch Tuesday update, as experts warn AI is dramatically accelerating v…

NEWShighSecurityWeek11 days ago

ICS Patch Tuesday: Vulnerabilities Fixed by Siemens, Schneider, Rockwell

The industrial giants fixed dozens of vulnerabilities across their ICS products, with advisories also released by CISA and VDE CER…

NEWShighThe Hacker News11 days ago

Compromised AsyncAPI npm Packages Deliver Multi-Stage Botnet Malware

Four compromised npm packages in the @asyncapi namespace have been observed distributing a multi-stage botnet loader, according to…

NEWShighSecurity Magazine11 days ago

74% of Organizations Remediate Vulnerabilities Within a Week

The majority of organizations remediate vulnerabilities within a week; Supply chain threats surge throughout 2025.

NEWSInfosecurity Magazine11 days ago

Government Updates UK’s National Risk Register with Cyber Warnings

The UK government is warning of the potential impact of catastrophic cyber-attacks

NEWSBleeping Computer11 days ago

Microsoft: Some Dell PCs shut down after recent Windows updates

Microsoft is blocking this month's Windows 11 security updates on some Dell devices because they are causing shutdowns and perform…

NEWSBleeping Computer11 days ago

US charges alleged operators of Russian bulletproof hosting service

U.S. federal prosecutors have unsealed charges against three Russian nationals, accusing them of providing bulletproof hosting (BP…

NEWScriticalSecurityWeek11 days ago

Critical Vulnerabilities Patched With Fresh Chrome 150, Firefox 152 Updates

Public exploit code targeting the Firefox flaws exists, but no in-the-wild exploitation has been observed. The post Critical Vulne…

NEWScriticalCVE-2026-1540910.0 CRITICALThe Hacker News11 days ago

Two SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin Commands

SonicWall has warned of active exploitation of two zero-day vulnerabilities impacting Secure Mobile Access (SMA) 1000 series appli…