Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,453 articles

UK Legal Aid Agency: Hackers stole records dating back to 1978

The Legal Aid Agency (LAA), an executive agency of the UK's Ministry of Justice that manages the country's Public Defender Service…

NEWSThe Register11 days ago

Metropolitan Police's unchecked use of shoplifting platform lands force in trouble with data watchdog

Officers unlawfully uploaded 179 people's details to Auror without required privacy checks or corporate approval

NEWScriticalCVE-2026-1057409.9 CRITICALThe Hacker News11 days ago

Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts

Threat actors are exploiting a critical security flaw in Langflow, according to an alert from Previdian. Langflow is an open-sour…

NEWScriticalSecurityWeek11 days ago

Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution

The company says it’s aware of limited exploitation against customers’ firewalls, and it has made IoCs available. The post Palo Al…

NEWShighCVE-2026-1051337.3 HIGHThe Hacker News11 days ago

AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches

Singapore-based Ahsay Backup has released security updates to address two security flaws in AhsayCBS that have been exploited by b…

NEWShighSecurityWeek11 days ago

Cisco Warns of Exploited Secure Email Gateway Vulnerability

Unauthenticated, remote attackers could write arbitrary files to the operating system and execute commands with root privileges. T…

NEWSThe Register11 days ago

Jev and other decision models can still be tricked with prompt injection

Never making type errors does not mean never making errors

NEWShighCVE-2026-03227.2 HIGHThe Hacker News11 days ago

Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation

Palo Alto Networks on Wednesday issued security updates for a high-severity flaw in PAN-OS software that has come under active exp…

NEWShighCVE-2026-03227.2 HIGHBleeping Computer11 days ago

Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks

Palo Alto Networks has released security updates for a high-severity PAN-OS RCE zero-day, tracked as CVE-2026-0322, that has been…

NEWSCyberScoop11 days ago

Authorities charge alleged OLVX cybercrime marketplace operator in North Macedonia

Officials disrupted the cybercrime marketplace in April and arrested the alleged 20-year-old operator at that time. Illicit sales…

NEWScriticalThe Register11 days ago

Cisco make-me-root email bug exploited as a 0-day by unknown crims

Both Switchzilla and CISA sound the alarm

NEWSHackread11 days ago

What Your IP Address Reveals Every Time You Visit a Website

Your IP address can reveal your location, ISP, connection type, and VPN use to websites, ad networks, and trackers before a page e…

NEWSHackread11 days ago

Private Instagram Downloaders Are Parsers, Not Privacy Bypass Tools

Disclosure: This article was produced in partnership with FastDL. Hackread.com reviewed and edited the content before publication.…

NEWSBleeping Computer11 days ago

FBI raids DPRK IT worker laptop farms in Texas, US nationals arrested

The U.S. Department of Justice (DoJ) has disrupted the Famous Chollima threat group's operations by arresting two suspects, chargi…

NEWShighThe Register11 days ago

Security researchers spent 6 days doing their Chromework, built 1B user exploit

Xbow earned a $250K bug bounty and all the AI model got was a lousy t-shirt

NEWSSecurity Magazine11 days ago

AI Agents Could Gain Ability to Self-Replicate

Anthropic says small AI models may be able to clone themselves and spread across internet-connected devices within a matter of mon…

NEWScriticalThe Hacker News11 days ago

Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability

Attackers are exploiting a critical flaw in Cisco Secure Email Gateway that lets a sender with no login write files to the applian…

NEWShighSecurity Magazine11 days ago

Newly Exploited Vulnerability in Ivanti Connect Secure

CISA is urging organizations to update Ivanti Connect Secure (ICS) appliances/deployments.

NEWSBleeping Computer11 days ago

Ledger asks sellers across Asia to halt sales after supply-chain attack

Ledger has asked resellers and distributors of its wallets in Indonesia, Singapore, Thailand, the Philippines, Vietnam, Malaysia,…

NEWScriticalCyberScoop11 days ago

Microsoft drops an actively exploited zero-day among record high of 1,413 vulnerabilities

In its October Patch Tuesday, the tech giant addressed more defects in one month than any annual total on record. Nearly 4 in 5 vu…

NEWScriticalThe Hacker News11 days ago

Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App

Attackers exploited a flaw in an optional Nextcloud app, Collabora Online - Built-in CODE Server, to plant web shells on Nextcloud…

NEWScriticalBleeping Computer11 days ago

Cisco patches new Secure Email Gateway zero-day exploited in attacks

Cisco has patched another actively exploited zero-day flaw in its Secure Email Gateway (SEG) that lets remote unauthenticated atta…

NEWScriticalThe Register11 days ago

Ivanti patches Connect Secure zero-day after researchers confirm in-the-wild attacks

Vendor promises fix for separate privilege-escalation flaw in the coming weeks

NEWShighThe Hacker News11 days ago

Microsoft Disrupts 3 Phishing Kits Linked to Over 1 Billion Scam Messages

Microsoft and Health-ISAC, along with the Japan Cybercrime Control Center (JC3) and a coalition of private sector companies, such…

NEWSThe Hacker News11 days ago

U.S. Shuts Down Over 40 Laptop Farms, Charges 14 in North Korean IT Worker Fraud

The U.S. Department of Justice (DoJ) on Tuesday charged 14 people and seized about 187 computers as part of its ongoing efforts to…

NEWSSecurityWeek11 days ago

AI Agents Navigate Unfamiliar OT Systems and Move Equipment in Minutes, Booz Allen Finds

In Booz Allen’s isolated OT lab, AI models met every objective across eight scenarios and reached an industrial control network fr…

NEWShighSecurityWeek11 days ago

ICS Patch Tuesday: Siemens Issues 17 Advisories, Rockwell Fixes ArmorBlock Takeover Flaw

ABB previously published an advisory warning about possible probing of a dynovaPRO vulnerability. The post ICS Patch Tuesday: Sie…

NEWSCyberScoop11 days ago

Senators press Trump admin to rally federal government around AI safety, security

The letter argues federal agencies should more rigorously test AI models for security threats and sandbox evasion, set new safety…

NEWSBleeping Computer11 days ago

Microsoft fixes VPN issues caused by September Windows updates

Microsoft has resolved a known issue that caused Always On VPN connection issues after installing the September 2026 Windows 11 se…

NEWSKrebs on Security11 days ago

U.K. Sanctions Cryptomus for RU Money Laundering

The United Kingdom has issued economic sanctions against Cryptomus, a chameleonic cryptocurrency platform that experts say serves…