Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,442 articles

Miasma campaign poisons 20-plus npm packages, hunts for developer secrets

Microsoft says latest attack targets Leo Platform and RStreams packages, harvesting creds and going after more maintainers

NEWSCVE-2026-435038.8 HIGHThe Hacker News4 months ago

New DirtyClone Linux Kernel Flaw Lets Local Users Gain Root via Cloned Packets

DirtyClone is a new Linux kernel privilege escalation in the DirtyFrag family. JFrog Security Research published a working exploit…

NEWSThe Hacker News4 months ago

Guardian Agents: The Next Layer of Identity Governance

AI agents are moving through enterprise environments, inheriting permissions, traversing systems, and executing decisions at machi…

NEWSSecurityWeek4 months ago

Linux Foundation Unveils New Open Source Security Project Akrites

It will provide the tools and channels to report, patch, and disclose open source software vulnerabilities. The post Linux Foundat…

NEWShighThe Hacker News4 months ago

Miasma Malware Targets npm Packages and GitHub Actions in Supply Chain Attack

Cybersecurity researchers have flagged yet another evolution of the supply chain attack linked to the Mini Shai-Hulud, Miasma, and…

NEWScriticalInfosecurity Magazine4 months ago

China-Linked Hackers Strike Asian Critical Infrastructure with TinyRCT Backdoor

A China-linked threat group has been targeting critical infrastructure in Southeast Asia with a new custom backdoor called TinyRCT

NEWShighSecurityWeek4 months ago

$3 Million Reportedly Stolen in Polymarket Hack

The decentralized prediction market said hackers targeted some of its users through a compromise of a third-party vendor. The post…

NEWSHackread4 months ago

A decade of infrastructure development, one new name: Coinspaid Dev

The team behind Coinspaid Solutions steps into the spotlight with a mission to become the engineering voice of blockchain infrastr…

NEWShighThe Hacker News4 months ago

Microsoft Warns of Photo ZIP Phishing Campaign Targeting Hotels with Node.js Implant

An active phishing campaign has been targeting hotel and other hospitality organizations across Europe and Asia since April 2026,…

NEWShighSecurityWeek4 months ago

Russian APT Deploys ‘StockStay’ Backdoor Against Ukrainian Targets

Turla has been using the backdoor against government and military organizations in Ukraine for espionage. The post Russian APT Dep…

NEWSThe Hacker News4 months ago

Russia Used Cellebrite on Jailed Activist's iPhone Months After Sales Cutoff

Russian authorities used Cellebrite's UFED forensic tools to break into the iPhone of detained opposition activist Andrey Pivovaro…

NEWShighCVE-2026-125699.8 CRITICALSecurityWeek4 months ago

First-Ever Exploitation of PTC Windchill Vulnerability Discovered in the Wild

CISA has added the remote code execution flaw CVE-2026-12569 to its Known Exploited Vulnerabilities catalog. The post First-Ever E…

NEWSSecurityWeek4 months ago

New Enterprise-Ready MCP Specification Brings New Security Challenges

A major overhaul of the Model Context Protocol shifts critical security responsibilities from the protocol itself to developers an…

NEWScriticalInfosecurity Magazine4 months ago

CMC Releases Analysis and Guidance for Education Sector After Canvas Data Breach

The UK Cyber Monitoring Centre reviews the Canvas breach affecting 160 UK universities, highlighting data theft risks and financia…

NEWShighThe Hacker News4 months ago

Google Details Turla's New STOCKSTAY Backdoor Used in Ukraine Espionage Attacks

The Russian state-sponsored threat actor known as Turla has been attributed to a previously undocumented .NET backdoor called STOC…

NEWSThe Register4 months ago

Security boss thought MFA would be too much security

One rule for the workers, another for execs

NEWSSecurityWeek4 months ago

Philip Martin Joins Uber as Chief Information Security Officer

Martin brings experience from Coinbase, Palantir, Amazon, and the U.S. Army to lead Uber's cybersecurity and enterprise security o…

NEWSThe Register4 months ago

Chinese cybersecurity company claims it’s built a better-than-Mythos bug finder

Qihoo 360, which the US has banned, says it’s needed as a deterrent to weaponized Anthropic models

NEWSBleeping Computer4 months ago

Anthropic is testing desktop-like Claude Cowork for mobile

Anthropic appears to be testing Claude Cowork support on mobile, allowing you to manage long-running Claude tasks from your phone.…

NEWSBleeping Computer4 months ago

Poland busts SIM-swapping gang tied to millions in crypto theft

Authorities in Poland have arrested four members of an organized cybercrime group accused of breaching telecommunications partners…

NEWShighThe Register4 months ago

Self-destructing Mistic backdoor linked to access broker selling corporate footholds to ransomware gangs

Spotted in intrusions targeting insurance, education, IT, and professional services sectors

NEWSThe Register4 months ago

Ex-Huntress analyst claims company insider fed info to a ransomware crim. Social media drama ensues

Former employee accuses company of prioritizing pending IPO over client security

NEWScriticalCyberScoop4 months ago

FCC passes new cybersecurity rules for emergency systems, undersea cables

The new rules would overhaul national emergency systems to protect against hijacking and update federal security review rules for…

NEWShighBleeping Computer4 months ago

Order-tracking app Shop abused to push callback phishing attacks

Threat actors are increasingly abusing Shop, the order-tracking app from Shopify, by adding fake purchase receipts in users' order…

NEWSBleeping Computer4 months ago

Microsoft quietly extends free Windows 10 ESU support to October 2027

Microsoft has quietly extended its free Windows 10 Extended Security Updates (ESU) program for consumers by an additional year, al…

NEWShighHackread4 months ago

Fake GTA 6 Early Access Websites Target Gamers with Malware and Crypto Scams

GTA 6 scams are luring fans with fake early access, crypto payments and malware downloads. Learn why PC and Android gamers face th…

NEWShighBleeping Computer4 months ago

New macOS malware embeds fake errors to confuse AI analysis tools

A newly discovered macOS malware dubbed "Gaslight" is designed to confuse AI-assisted malware analysis tools by hiding prompt inje…

NEWSCyberScoop4 months ago

Federal court rules Trump election-focused executive order illegal

Provisions setting up federal voter lists for each state and restricting mail ballots through USPS were declared unconstitutional.…

NEWShighSecurity Magazine4 months ago

Cal Water Confirms User Credentials Exploited in Hacking

A Cal Water spokesperson reached out to Security magazine with an update on its investigation.

NEWSSecurity Magazine4 months ago

61% of Healthcare Organizations Predict a 'Fatal' Cyberattack Within 5 Years

A recent report by Omega Systems analyzed cybersecurity incidents within healthcare organizations.