Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,442 articles

Massive Password Spray Campaign Targeting Azure CLI

Hackers were seen making over 81 million login attempts originating from systems associated with hosting provider LSHIY. The post…

NEWSBleeping Computer4 months ago

Adobe patches seven max severity ColdFusion, Campaign flaws

Adobe has released security patches for seven maximum-severity vulnerabilities in the ColdFusion web app development platform and…

NEWShighThe Hacker News4 months ago

Phantom Squatting Uses AI-Hallucinated Domains for Phishing and Malware

Large language models keep inventing web addresses that do not exist. Attackers have started buying those made-up domains before a…

NEWSThe Hacker News4 months ago

Anthropic Restores Claude Fable 5 After U.S. Lifts Jailbreak-Linked Export Controls

Anthropic is putting Claude Fable 5 back online worldwide. On June 30, the U.S. Commerce Department lifted the export controls it…

NEWShighSecurityWeek4 months ago

Google Patches 382 Chrome Vulnerabilities

Fifteen of the newly patched flaws have been rated ‘critical’ and 67 have been rated ‘high severity’. The post Google Patches 382…

NEWSThe Hacker News4 months ago

Azure CLI Password Spray Hits at Least 78 Microsoft Accounts in 81M+ Attempts

Cybersecurity researchers have warned of a "massive, ongoing, automated password spray attack" aimed at Microsoft's Azure command-…

NEWShighThe Hacker News4 months ago

Researcher Analyzes 3,000 Live ClickFix Payloads, Exposing API-Driven Malware Delivery

ClickFix, the trick that fools people into running malware by hand, has quietly grown a back office. New research shows the malic…

NEWSSecurity Magazine4 months ago

Nearly Half of Organizations Lack "Full" Visibility Into Employee AI Usage

A recent report by Bitdefender analyzed employee AI tool usage.

NEWSCVE-2026-84517.5 HIGHThe Hacker News4 months ago

Citrix Patches Six NetScaler Flaws Allowing File Read and Denial-of-Service

Citrix on Tuesday released security updates to address multiple flaws in NetScaler ADC (formerly Citrix ADC) and NetScaler Gateway…

NEWSBleeping Computer4 months ago

Anthropic to restore Claude Fable access on Wednesday

Anthropic has confirmed that the Department of Commerce has lifted export controls on Claude's two most powerful models, Fable 5 a…

NEWSBleeping Computer4 months ago

Anthropic rolls out Sonnet 5 with near-Opus 4.8 performance at a lower price

Anthropic is now rolling out Sonnet 5, and it's almost as good as the Opus range, but it is designed to be cheaper than the compan…

NEWSBleeping Computer4 months ago

New BioShocking attack manipulates AI browser into data theft

A new prompt injection attack dubbed "BioShocking" could trick AI-powered browsers into treating real-world risky actions as part…

NEWSCyberScoop4 months ago

Citrix patches a new NetScaler flaw with echoes of CitrixBleed

The bulletin includes six NetScaler issues, but attention is centered on a high-severity flaw with similarities to earlier activel…

NEWSBleeping Computer4 months ago

Microsoft accelerates quantum-safe roadmap as risks grow

Microsoft announced today that it is accelerating its quantum-safe security roadmap, saying advances in quantum computing are brin…

NEWShighBleeping Computer4 months ago

Malicious PyPI packages give hackers control of Telegram bot servers

A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram forks t…

NEWSCyberScoop4 months ago

Trump budget boss Russell Vought open to re-staffing CISA

DHS Secretary Markwayne Mullin has been floating the idea of adding back 600 CISA personnel after deep Trump administration cuts.…

NEWSThe Register4 months ago

Infosec professionals sour on automated pentesting tools

29% of security pros were open to fully autonomous pentesting last year; now only 9% are

NEWSThe Hacker News4 months ago

Microsoft Warns Poisoned MCP Tool Descriptions Can Make AI Agents Leak Data

New Microsoft research shows how attackers can hijack AI agents that act on a user's behalf, using nothing more than a poisoned to…

NEWSThe Hacker News4 months ago

RustDuck Botnet Rebuilds in Rust to Hijack Routers and Servers for DDoS

A new two-stage malware family called RustDuck is hijacking home routers, IP cameras, Android boxes, and poorly secured servers, t…

NEWSHackread4 months ago

New EvilTokens Attack Exposes Browser Visibility Gap in Enterprise SOCs

EvilTokens phishing hides takeover clues until browser execution leaving SOC teams needing deeper visibility to validate threats f…

NEWSThe Register4 months ago

Huntress CEO says threat hunter used 'poor judgment' in alerting ransomware crim about law enforcement probe

Ex-employee claims this 'meets the definition of an insider threat'

NEWSHackread4 months ago

Modern Enterprises: How to Evaluate the Security and Compliance of Office Software

Learn how modern businesses can judge office software for ISO 27001 certification, GDPR-aligned data handling, encryption, and saf…

NEWScriticalInfosecurity Magazine4 months ago

Nissan Discloses Employee Data Breach Linked to Oracle Zero-Day

Nissan says employees' data was stolen via the Oracle PeopleSoft zero-day campaign

NEWShighCVE-2026-330179.8 CRITICALThe Hacker News4 months ago

Langflow RCE Exploited to Deploy Monero Miner on Exposed AI App Endpoints

Threat actors are continuing to exploit a critical Langflow vulnerability as part of fresh attacks designed to deliver a Monero cr…

NEWSBleeping Computer4 months ago

Fake Perplexity extension on Chrome Web Store tracked searches

A malicious extension in the Chrome Web Store is masquerading as the Perplexity AI answer engine, intercepting search traffic and…

NEWSThe Hacker News4 months ago

Silent Swap Crypto Clipper Uses Fake Google Notes Extension to Replace Wallet Addresses

Cybersecurity researchers have flagged an active browser extension campaign that is designed to steal cryptocurrency by stealthily…

NEWScriticalInfosecurity Magazine4 months ago

Critical SimpleHelp Vulnerability Exploited For Malware Delivery

Attackers exploited a critical SimpleHelp RMM bug to deploy TaskWeaver and Djinn Stealer malware

NEWScriticalCyberScoop4 months ago

DHS to unveil replacement council for critical infrastructure cybersecurity

The Department of Homeland Security is bringing back a key cybersecurity information sharing effort with critical infrastructure,…

NEWShighHackread4 months ago

Hackers Use Fake FIFA World Cup 2026 T-Shirt Offers to Spread Voidrift Malware

A fake FIFA World Cup 2026 T-shirt giveaway scam is spreading Voidrift malware through personalized emails using company logos and…

NEWSHackread4 months ago

NDSS Symposium Heads to Seoul in 2027 to Expand Global Cybersecurity Collaboration

DC, United States, 30th June 2026, CyberNewswire