Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,442 articles

New Attack Abuses Claude Code and Harmless-Looking Repositories to Hijack Developer Machines

Indirect prompts hidden in a repository can lead to Claude Code spawning a reverse shell on the developer’s machine. The post New…

NEWSSecurityWeek4 months ago

Straiker Raises $64 Million for AI Security Platform

The startup’s platform can identify AI agents and provide visibility into their access, behavior, and risks. The post Straiker Rai…

NEWSBleeping Computer4 months ago

Agentic AI Has an Identity Problem and Attackers Know It

AI agents can access data, trigger workflows, and take action across enterprise systems. Token Security explains why governing the…

NEWScriticalCVE-2026-4855810.0 CRITICALBleeping Computer4 months ago

Critical SimpleHelp flaw exploited to deploy new stealer malware

Hackers are exploiting a recently disclosed critical vulnerability (CVE-2026-48558) in SimpleHelp to deploy Djinn Stealer, a previ…

NEWScriticalCVE-2026-468179.8 CRITICALBleeping Computer4 months ago

Hackers now exploit critical Oracle E-Business flaw in attacks

Attackers have begun exploiting a critical vulnerability (CVE-2026-46817) in the Oracle E-Business Suite (EBS) financial applicati…

NEWShighThe Register4 months ago

AI may be good at finding security vulnerabilities, but it can't beat human stupidity

You don't need Mythos or GPT-5.5-Cyber to find a vuln to exploit when the world's password habits are so sloppy

NEWShighSecurityWeek4 months ago

Insurance Regulators Group NAIC Hit in Oracle PeopleSoft Hack

The ShinyHunters extortion group claims to have stolen 3.1 TB of data from the organization. The post Insurance Regulators Group N…

NEWSHackread4 months ago

Cybersecurity Firm Cyberbit Shuts Down Israel Operations

Cyberbit is closing its Israeli operations and laying off local staff as the former Elbit Systems spin-off grows mainly in the US…

NEWSThe Register4 months ago

Microsoft keeps Windows Server 2022 hotpatching alive into 2027

In the Azure Edition, of course

NEWSBleeping Computer4 months ago

Webinar: Why business email compromise attacks keep succeeding

Business email compromise attacks increasingly rely on convincing impersonation rather than malware, making them harder for employ…

NEWShighThe Hacker News4 months ago

236,000 DCloud Uni-App Sites Used in Crypto Scams, Phishing, and Wallet Drainers

New findings unearthed by Infoblox show that more than 236,000 websites are using investment scam templates built using a legitima…

NEWSThe Hacker News4 months ago

Why Post-Quantum Cryptography Starts With Credentials

Today’s encrypted data, such as credentials, may no longer remain confidential in the future because the public-key cryptography p…

NEWShighThe Hacker News4 months ago

Gamaredon Expands Ukraine Attacks with New Malware and Cloud Service Abuse

A Russian advanced persistent threat (APT) group has continued to evolve and expand its malware arsenal as part of its ongoing cyb…

NEWSBleeping Computer4 months ago

US seizes hundreds of FIFA World Cup illegal streaming domains

The U.S. Justice Department's Criminal Division has seized nearly 400 web domains used for illegally streaming matches at the FIFA…

NEWShighSecurityWeek4 months ago

‘DirtyClone’ Linux Kernel Vulnerability Leads to Root Access

A variant of DirtyFrag, the flaw allows unprivileged local users to manipulate the Linux page cache and gain root privileges. The…

NEWSThe Register4 months ago

Nissan says Oracle PeopleSoft break-in may have spilled payroll records, SSNs

Carmaker points finger at an 'unknown' flaw as customer fallout continues

NEWSSecurityWeek4 months ago

OpenAI and Anthropic Limit New AI Models to Trump-Approved Customers During Cybersecurity Review

ChatGPT maker OpenAI said Friday it is restricting the release of its new artificial intelligence model at the request of Presiden…

NEWShighWired Security4 months ago

Top Google Security Staff Warn Search Data Could Be Hacked if EU Rules Change

Europe’s pro-competition proposals could see Google Search and Android systems opened up. The company claims there are serious pri…

NEWScriticalInfosecurity Magazine4 months ago

US Federal Insurance Regulator Confirms Data Breach Via Oracle Flaw

An attacker has exploited a zero day in Oracle Peoplesoft to gain access to the IT systems of the NAIC, the standard-setting assoc…

NEWShighHackread4 months ago

Bluekit Phishing Kit Uses Browser-in-the-Middle Attacks to Evade Detection

A new phishing-as-a-service (PHaaS) platform called Bluekit is letting cybercriminals steal user accounts using a tricky method. W…

NEWShighSecurityWeek4 months ago

US Offers $10 Million Bounty for Russian State Hackers as Messaging App Attacks Evolve

UNC5792 and UNC4221 have been targeting US government officials, military leaders, and allied personnel. The post US Offers $10 Mi…

NEWShighInfosecurity Magazine4 months ago

Russian Hackers Accused of Destructive Cyber-Attack on Jaguar Land Rover

Experts warn the Jaguar Land Rover breach bears hallmarks of Kremlin-backed hackers, citing novel ransomware, strategic timing and…

NEWSCyberScoop4 months ago

What the post-quantum executive order really demands of CISOs

ith federal PQC deadlines set for 2030 and 2031, CISOs face a multi-year transformation program that most organizations have not y…

NEWShighThe Hacker News4 months ago

Microsoft Removes 119 Edge Extensions That Hid Malware in Images and Fonts

Microsoft has shut down a long-running malicious extension operation on the Edge Add-ons store that hid its payloads inside ordina…

NEWShighInfosecurity Magazine4 months ago

FBI Sounds Alarm Over Russian Intelligence Signal Phishing

The FBI claims Russian spies are targeting Signal backup keys

NEWSSecurityWeek4 months ago

OpenAI Unveils GPT-5.6 Sol as Its Most Advanced Cybersecurity AI

The company says Sol matches competing systems like Mythos Preview while using only a third of the output tokens. The post OpenAI…

NEWScriticalCVE-2026-552008.1 HIGHThe Hacker News4 months ago

Public PoC Released for Critical libssh2 CVE-2026-55200 Client-Side SSH Flaw

A public proof-of-concept is now out for CVE-2026-55200, a critical flaw in libssh2 that lets a malicious or compromised SSH serve…

NEWSThe Hacker News4 months ago

Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer

Cybersecurity researchers have uncovered two hijacked npm packages and a cluster of Go packages that are designed to deploy a Pyth…

NEWSHackread4 months ago

Top Cyber Range Providers: A Comparison of 15 Leading Platforms

Compare 15 cyber range platforms across live-fire exercises, AI testing, SOC training, OT realism, deployment options, pricing mod…

NEWShighHackread4 months ago

Anonymous-Linked Hacktivist Aubrey Cottle Jailed Over Texas GOP Cyberattack

Canadian hacktivist Aubrey Cottle, known as Kirtaner and once linked to Anonymous, gets 18 months for a 2021 Texas GOP website cyb…