Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,442 articles

New BioShocking Attack Tricks AI Browsers Into Leaking User Credentials

Convince an AI browser that it is playing a game, and it can hand over your login details. That is the finding behind BioShocking,…

NEWSInfosecurity Magazine4 months ago

Over 300 UK Firms Hit by Ransomware in a Year

Report Fraud data reveals that more than half of 323 UK ransomware victims last year were SMEs

NEWSCVE-2026-80379.6 CRITICALThe Hacker News4 months ago

Progress Kemp LoadMaster Flaw Could Let Attackers Run Root Commands Pre-Auth

A critical vulnerability in Progress Kemp LoadMaster can let an unauthenticated attacker execute arbitrary commands as root on the…

NEWSCVE-2026-43707The Hacker News4 months ago

Apple Patches 30+ iOS, macOS, Safari Flaws, Including AI-Discovered WebKit Bugs

Apple on Monday released security updates for iOS, macOS, and the Safari web browser to address over three dozen flaws, including…

NEWSSecurityWeek4 months ago

Quantifind Raises $200 Million for AI-Native Risk Intelligence

Quantifind will accelerate international expansion and extend its platform’s localized risk intelligence capabilities. The post Qu…

NEWSThe Register4 months ago

Microsoft builds a bouncer to keep bots out of Teams meetings

Allows ISVs to put their names on the door so desirable bots always get in

NEWShighSecurityWeek4 months ago

New Controller Flaws Expose Highway Signs and Billboards to Remote Hacking

CISA has published an advisory to inform organizations about three vulnerabilities found by a researcher in Daktronics controllers…

NEWScriticalCVE-2026-468179.8 CRITICALThe Hacker News4 months ago

Oracle E-Business Suite Flaw CVE-2026-46817 Actively Exploited in the Wild

A critical security flaw impacting Oracle E-Business Suite has come under active exploitation in the wild, according to Defused Cy…

NEWSThe Register4 months ago

India’s central bank mandated use of .bank domains to enhance trust – but its registry leaked sensitive info

Open API leaked everything an attacker needs to impersonate bank officials

NEWSThe Register4 months ago

Security researchers tricked LLMs into giving them cocaine recipes by abusing role models for prompt injection

If you want a picture of the future of LLM security, imagine Whac-a-Mole meets Groundhog Day

NEWSThe Register4 months ago

Four years into Ukraine invasion, Russia turns influence-ops back to US and Europe

Not today, Putin

NEWSWired Security4 months ago

Meta Contractors Posed as Teens to Prompt Rival Chatbots About Suicide, Sex, and Drugs

Hundreds of contractors working on a project for Meta pretended to be kids in order to see how other chatbots like Gemini and Chat…

NEWSCyberScoop4 months ago

Warner bill would create federally vetted list for secure, trustworthy AI agents

The bill empowers the FTC to create a registry for sellers of AI agent software certifying their privacy and cybersecurity protect…

NEWSHackread4 months ago

212 New Venezuela Earthquake Domains Prompt Donation Scam Warnings

Researchers spotted 212 new domains registered after Venezuela's earthquake, warning donors of donation scam risks and urging them…

NEWScriticalBleeping Computer4 months ago

Nissan discloses employee data breach linked to Oracle zero-day attacks

Nissan is warning that it suffered a data breach affecting current and former employees after threat actors exploited an Oracle Pe…

NEWSBleeping Computer4 months ago

NAIC says public data stolen in ShinyHunters' PeopleSoft breach

The National Association of Insurance Commissioners (NAIC) says the ShinyHunters extortion group stole only publicly available dat…

NEWScriticalThe Register4 months ago

Anonymous researcher drops 0-day 'exploitarium' repo

At least two vulnerabilities are already under attack

NEWSThe Hacker News4 months ago

Malicious Perplexity Chrome Extension Intercepted Searches and Address Bar Input

Microsoft has found a malicious Chrome extension that posed as the AI search engine Perplexity and quietly logged what people sear…

NEWSBleeping Computer4 months ago

WhatsApp rolls out usernames to help users hide their phone number

WhatsApp is finally allowing users to reserve usernames, a privacy feature that lets them hide their phone numbers from people not…

NEWSCyberScoop4 months ago

Supreme Court approves mail-in ballots that arrive after Election Day

The ruling is a victory for election advocates who say the evidence overwhelmingly shows that voter fraud is rare and not tied to…

NEWSCyberScoop4 months ago

Supreme Court delivers ‘major win’ for tech privacy in Chatrie ruling

Dissenting justices who criticized the ruling said it would have “seismic” implications for the Fourth Amendment. The post Supreme…

NEWSBleeping Computer4 months ago

Microsoft extends Windows Server 2022 hotpatching until October 2027

Microsoft has extended Windows Server 2022 hotpatching until October 2027, one year after the mainstream end date of October 2026.…

NEWSThe Hacker News4 months ago

WhatsApp is Finally Getting Usernames to Help Keep Phone Numbers Private

WhatsApp on Monday officially announced the start of global reservations of usernames with an aim to protect the privacy of more t…

NEWSSecurityWeek4 months ago

WhatsApp Rolling Out Username Feature to Bolster Phone Number Privacy

An optional ‘username key’ adds another layer by requiring a secondary credential before someone can message users. The post Whats…

NEWSHackread4 months ago

Amazon Kindle E-Reader: Worth It, and How to Afford More Books?

See whether an Amazon Kindle is worth buying, how it compares with other e-readers, and practical ways to read more books without…

NEWShighBleeping Computer4 months ago

U.S. offers $10 million for hackers targeting WhatsApp, Signal users

The U.S. Department of State is offering up to $10 million for information that helps identify or locate members of the UNC5792 an…

NEWSThe Hacker News4 months ago

Mustang Panda Uses Zoho WorkDrive as Command Channel in Indian Government Attacks

The China-aligned espionage group Mustang Panda is running two campaigns against the Indian government and hydropower targets, dep…

NEWSInfosecurity Magazine4 months ago

OpenAI Reveals GPT-5.6 Sol Cybersecurity Model, Restricts Early Access

OpenAI is previewing its GPT-5.6 Sol model to a vetted few at the US government's request

NEWShighThe Hacker News4 months ago

⚡ Weekly Recap: Linux Kernel Flaws, AI Malware Tricks, Turla Backdoor, Infostealers and More

This week was a reminder that attackers do not always need big tricks. One small mistake, one old access path, one missed patch, a…

NEWSInfosecurity Magazine4 months ago

Telegram-Based Millenium RAT Campaign Infects 60,000 Devices

Group-IB says Millenium RAT, now rewritten in C++, has hit 62,289 devices in 160+ countries