Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,442 articles

NEWSThe Register4 months ago

Dev says Google warned him about account hijack – then charged him $11,000 anyway

Left hand, meet right hand

NEWSThe Register4 months ago

Startup sues Palo Alto Networks' Koi Security, saying an AI-hallucinated report falsely linked it to Chinese espionage

MeetingTV wants to see the evidence

NEWSHackread4 months ago

VMware Licensing Changes and Their Impact on Infrastructure Modernization

Explore how VMware licensing changes are influencing infrastructure modernization, cloud strategy, and AI readiness, and what ente…

NEWSKrebs on Security4 months ago

FBI Seizes NetNut Proxy Platform, Popa Botnet

The Federal Bureau of Investigation (FBI) said today it worked with industry partners to seize hundreds of domains associated with…

NEWSThe Hacker News4 months ago

Google Disrupts NetNut Residential Proxy Network Spanning 2 Million Home Devices

Google has significantly degraded NetNut, one of the biggest networks that turns home devices into rented relays for other people'…

NEWSCVE-2025-57777.5 HIGHThe Hacker News4 months ago

Ransomware Groups Turn to Citrix Bleed 2, BYOVD, and Supply Chain Credentials

Threat actors associated with the Anubis ransomware operation have been observed exploiting the Citrix Bleed 2 (CVE-2025-5777) vul…

NEWScriticalThe Register4 months ago

Smooth AI criminal drives 'first' end-to-end agentic ransomware attack

Don't count on the LLM to return your data - even if you pay up

NEWSHackread4 months ago

FortiBleed Credential Theft Connected to INC and Lynx Ransomware

FortiBleed, the Fortinet credential theft campaign, is now connected to INC Ransom and Lynx, with a Nextcloud zero-day vulnerabili…

NEWSThe Register4 months ago

Ctrl+Alt+Oops: FortiBleed criminal's logins stitch two gangs together

Researchers scoured logs, finding opsec fail for at least one person who was working with INC and Lynx simultaneously

NEWSCyberScoop4 months ago

Alleged longstanding member of Scattered Spider extradited to US

Peter Stokes boasted on social media about the luxurious globetrotting life he enjoyed while he was still a child. The post Allege…

NEWSThe Hacker News4 months ago

ThreatsDay: AI Compute Hijacking, Apple Email Flaw, BlueHammer Ransomware + 14 Stories

This week’s security news is mostly about weak spots. Browsers, bots, sandboxes, AI systems, and email flows all show the same pr…

NEWSBleeping Computer4 months ago

Google loses final appeal to overturn €4.1 billion EU fine

Court of Justice of the European Union (CJEU) has dismissed Google's final appeal against a €4.1 billion ($4.7 billion) antitrust…

NEWShighSecurityWeek4 months ago

New CitrixBleed Vulnerability Exploited Immediately After Public Disclosure

Hackers are targeting NetScaler appliances using public PoC code to retrieve arbitrary memory content in the HTTP response. The po…

NEWShighThe Register4 months ago

Microsoft said exploitation was 'less likely' ... but CISA just added SharePoint RCE to KEV list

Attackers need little more than a valid SharePoint account to execute code on vulnerable on-prem servers

NEWSBleeping Computer4 months ago

ConsentFix and ClickFix: How Microsoft 365 Accounts are Hijacked in 3 Seconds

ConsentFix and ClickFix attacks steal Microsoft 365 tokens in seconds using fake prompts and OAuth flows. Learn how these MFA bypa…

NEWSSecurityWeek4 months ago

How to Conduct a Successful Audit of AI-Driven Software Development

As AI-generated code becomes commonplace, CISOs need new audit strategies to measure developer practices, govern AI tool usage, an…

NEWShighThe Hacker News4 months ago

ToddyCat-Linked Umbrij Malware Abuses OAuth to Access Gmail via Google API

The threat actor known as ToddyCat has been attributed to a new malware called Umbrij that's designed to gain surreptitious access…

NEWSThe Register4 months ago

Pacemaker manufacturer Medtronic warns patients cybercrooks may have swiped health data

Company that also makes insulin pumps and other devices tells users what was exposed months after ShinyHunters attack

NEWScriticalInfosecurity Magazine4 months ago

Researcher Behind 'Exploitarium' Explains Release of Undisclosed Zero-Day Exploits

Infosecurity spoke with the researcher who dumped over 30 proof-of-concept exploits without disclosing the vulnerabilities first

NEWScriticalSecurityWeek4 months ago

FortiBleed Campaign Linked to INC, Lynx Ransomware Attacks

Researchers say credentials harvested from hundreds of thousands of FortiGate firewalls are being used to facilitate ransomware at…

NEWSBleeping Computer4 months ago

Microsoft fixes bug that removed Copilot buttons in Outlook

Microsoft has fixed a known issue causing the Copilot Chat or Copilot buttons in Classic Outlook to disappear for Windows users wi…

NEWShighInfosecurity Magazine4 months ago

Cybercriminals Pose as Interpol in Phishing Emails to Infect Victims With Ransomware

Bitdefender researchers warned of curious ransomware campaign which has targeted businesses around the world

NEWSThe Register4 months ago

India gives WhatsApp three days to defend username rollout amid security fears

Government of the messenger's largest market demands a pause while Meta explains how it plans to stop impersonators

NEWShighBleeping Computer4 months ago

Cisco finally confirms attackers exploiting Unified CM flaw

Cisco confirmed that attackers are now exploiting a Unified Communications Manager (Unified CM) vulnerability patched in early Jun…

NEWSThe Hacker News4 months ago

Identity Lifecycle Management Wasn't Built for AI Agents

Identity lifecycle management was architected around a person with an employment record, a manager, and a departure date. AI agent…

NEWSSecurityWeek4 months ago

Trump Administration Lifts Restrictions on Anthropic’s Claude Models After Cybersecurity Alarm

Anthropic said Tuesday night that its AI model called Claude Fable 5 is now widely available. The post Trump Administration Lifts…

NEWScriticalBleeping Computer4 months ago

CISA: Microsoft SharePoint RCE flaw now actively exploited

CISA warned on Wednesday that attackers have begun exploiting a high-severity Microsoft SharePoint remote code execution vulnerabi…

NEWShighSecurityWeek4 months ago

Cisco Confirms In-the-Wild Exploitation of Unified CM Vulnerability

A PoC exploit has been available since public disclosure, and the first exploitation attempts were observed last week. The post Ci…

NEWSBleeping Computer4 months ago

Opera rolls out Paste Protect feature to fight ClickFix attacks

Opera has introduced Paste Protect, a security feature designed to block ClickFix-style attacks that trick users into executing ma…

NEWSSecurityWeek4 months ago

‘BioShocking’ Attack Tricks AI Browsers Into Stealing Credentials

Researchers show how context manipulation can cause agentic browsers to abandon safety guardrails and exfiltrate sensitive credent…