Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,442 articles

NEWScriticalThe Register4 months ago

Oracle E-Business Suite was under attack via critical flaw before the public exploit code was even released

Attackers appear to have reverse-engineered Big Red's patch

NEWScriticalCVE-2026-456598.8 HIGHSecurityWeek4 months ago

CISA Warns of Actively Exploited Microsoft SharePoint Vulnerability

CISA says threat actors are exploiting a recently patched SharePoint remote code execution vulnerability (CVE-2026-45659). The po…

NEWSHackread4 months ago

Sysdig Details JADEPUFFER, the First Documented Agentic Ransomware Operation

A new Sysdig report traces how an LLM agent abused a Langflow flaw, stole credentials, reached production MySQL, and destroyed Nac…

NEWSInfosecurity Magazine4 months ago

NCSC Shares Tips on How to Make a Pen Tester’s Job Harder

The NCSC has shared best practice advice from pen testers which could help improve system resilience

NEWScriticalThe Hacker News4 months ago

AI Agent Exploits Langflow RCE to Automate Database Ransomware Attack

Security firm Sysdig says it has found what it believes is the first ransomware attack run from start to finish by an AI agent. I…

NEWShighBleeping Computer4 months ago

Alleged Scattered Spider hacker extradited to the United States

A dual United States and Estonian citizen has been extradited to the U.S. to face charges alleging he was a member of the Scattere…

NEWSInfosecurity Magazine4 months ago

Alleged Scattered Spider Member Extradited to US

A teenager accused of hacking as part of Scattered Spider has been arrested

NEWSThe Hacker News4 months ago

FortiBleed Credential Theft Linked to INC and Lynx Ransomware Operations

The recently discovered financially-motivated FortiBleed campaign has been attributed to INC and Lynx ransomware operations, indic…

NEWShighThe Hacker News4 months ago

New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos

Attackers are hiding a data-stealing trojan inside fake exploit code aimed at the people who hunt bugs for a living. The malware,…

NEWShighThe Register4 months ago

Hackers shoveled snow for company, were rewarded with network admin access

Fortunately, they were professional red teamers. Unfortunately, they pwned the network

NEWShighCVE-2026-456598.8 HIGHThe Hacker News4 months ago

SharePoint RCE CVE-2026-45659 Added to CISA KEV After Active Exploitation

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a high-severity flaw impacting Microsoft Share…

NEWScriticalBleeping Computer4 months ago

Medtronic notifies customers impacted by ShinyHunters data breach

Healthcare device firm Medtronic is notifying affected customers about a data breach that exposed their personal data to an unauth…

NEWSSecurity Magazine4 months ago

Card Data Theft Remains Top Concern for US Consumers

According to a recent survey by Capco, the fraud types that most concern US consumers are card and card data theft (46%), identity…

NEWShighThe Register4 months ago

EvilTokens device-code phishing kit totally more evil than we all thought

It's a 'complete BEC operations environment,' Talos researcher says

NEWSBleeping Computer4 months ago

FortiBleed credential-theft campaign linked to Lynx ransomware

The massive FortiBleed credential theft campaign has been linked to the INC and Lynx ransomware operations, suggesting the stolen…

NEWSThe Register4 months ago

Claude Sonnet 5.0 heads straight down the middle of the road to dodge controversy

Safer, cheaper, and nothing to do with cybersecurity

NEWShighBleeping Computer4 months ago

Kubota says hackers had month-long access to network systems

Kubota North America Corporation disclosed that hackers had access to some of its network systems for more than a month earlier th…

NEWSHackread4 months ago

The Cost of Non-Compliance: Why AI Governance Is the New Enterprise Imperative

AI governance helps enterprises control tool use, reduce compliance risk, protect customer data, and avoid fines as teams adopt AI…

NEWShighBleeping Computer4 months ago

ChocoPoc malware delivered via trojanized exploits on GitHub

Multiple weaponized proof-of-concept (PoC) exploits on GitHub delivered a Python-based remote access trojan (RAT) called ChocoPoC…

NEWShighBleeping Computer4 months ago

New ChocoPoC malware targets researchers via trojanized PoC exploits

Multiple weaponized proof-of-concept (PoC) exploits on GitHub were found delivering a Python-based remote access trojan (RAT) name…

NEWSThe Register4 months ago

Somebody told DeepSeek to build in-browser ransomware and it gleefully complied

'The original incomplete DeepSeek sample can be transformed into a fully functional attack with minimal effort,' Check Point resea…

NEWSThe Hacker News4 months ago

Unpatched Argo CD Repo-Server Flaw Could Let Attackers Take Over Kubernetes Clusters

Argo CD, a widely used tool for deploying software to Kubernetes, has an unpatched flaw in its repo-server component that lets an…

NEWShighThe Hacker News4 months ago

19-Year-Old Scattered Spider Suspect Extradited to Face U.S. Hacking Charges

A teenager accused of belonging to the hacking group Scattered Spider has been extradited from Finland to face U.S. charges of con…

NEWScriticalCyberScoop4 months ago

Researchers spot exploitation of another critical Oracle defect

The defect impacts a popular collection of business applications that attackers have hit before in widespread attack sprees. The p…

NEWSHackread4 months ago

Ransomware-Proof Backup: 7 Strategies for Enterprise IT Teams

Ransomware-proof backup planning helps IT teams protect clean data copies, isolate storage, test recovery, and keep operations run…

NEWSSecurityWeek4 months ago

Microsoft Adds New Teams Controls to Block Unauthorized AI Bots From Meetings

Microsoft's new Teams admin policy requires organizer approval for external AI bots, giving organizations greater visibility and c…

NEWSThe Hacker News4 months ago

SEO-Poisoned Software Sites Abuse ScreenConnect to Deploy AsyncRAT

Unknown threat actors are leveraging the ScreenConnect remote access tool as a way to deploy and execute AsyncRAT. Kaspersky said…

NEWShighBleeping Computer4 months ago

DHS confirms hackers breached HSIN info-sharing platform

The Department of Homeland Security is investigating a cyberattack that compromised the Homeland Security Information Network (HSI…

NEWShighThe Hacker News4 months ago

VEIL#DROP Malware Chain Uses Blogger Platform to Deliver PureLogs Stealer

Cybersecurity researchers have flagged a new multi-stage malware delivery attack chain that uses social engineering and Blogger pa…

NEWSThe Register4 months ago

Red teamers turned Claude Desktop into a double agent to do their evil bidding

People trust their AI assistants and it's easy to abuse this trust