Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,453 articles

NEWSSecurity Magazine11 days ago

Refrigeration System Cyberattack Impacts 700+ Retailers

Security leaders discuss the cyberattack that impacted more than 700 retailers.

NEWSSecurityWeek11 days ago

Harmonic Security Raises $50 Million for Workforce AI Protection

The cybersecurity startup plans to expand engineering and go-to-market teams in the US and UK. The post Harmonic Security Raises $…

NEWSBleeping Computer11 days ago

The Blind Spots of Agentic Pentesting and How to Close Them

AI-powered penetration testing can uncover complex attack paths, but safety restrictions and network limitations leave many assets…

NEWShighInfosecurity Magazine11 days ago

ROMULUS Malware Server Leverages ClickFix to Deliver Multiple Payloads

Researchers at Forescout said the discovery shows how ClickFix is evolving from a delivery technique into full-blown cyber-crimina…

NEWSSecurityWeek11 days ago

Virtual Event Today: Zero Trust Strategies Summit

This summit is laser-focused on the next generation of Zero Trust and Identity security, moving beyond theory to deliver actionabl…

NEWShighBleeping Computer11 days ago

Global takedown hits network behind 1 billion phishing messages

A massive cybercriminal ecosystem facilitating more than a billion malicious messages targeting over 75,000 organizations across 1…

NEWShighCyberScoop11 days ago

Microsoft and partners disrupt vast Chinese-language phishing kit ecosystem

In less than 10 months, cybercriminals used the arsenal of customized, targeted phishing kits to send more than 1 billion maliciou…

NEWShighSecurityWeek11 days ago

Microsoft Disrupts Chinese-Language Phishing Market Behind 1B+ Messages

Backed by a federal court order, Microsoft and Health-ISAC seized domains powering YAM Store, CoGUI, and Iron Man. The post Micros…

NEWScriticalBleeping Computer11 days ago

CISA warns admins to immediately fix Ivanti flaw exploited as zero-day

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) urged security teams to immediately patch an Ivanti Connect Secur…

NEWShighCVE-2026-1049358.6 HIGHThe Hacker News11 days ago

CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday urged organizations to take steps to immediately updat…

NEWSHackread11 days ago

FLock.io Unveils Edge Decision Model, Built on Qwen, for Enhanced Data Privacy

Built on Qwen3.5-2B, the System One model executes sub-31ms local inference, allowing enterprises to run automated classifications…

NEWSThe Hacker News11 days ago

curl Patches HTTP/2 Upload Flaw After PoC Demonstrates Client-Side Code Execution

A flaw in how curl handles HTTP/2 uploads lets a malicious server receiving an upload corrupt the client's memory, and the researc…

NEWSThe Hacker News11 days ago

How to Run a Deepfake Readiness Drill Before a Cloned Voice Calls Your Team

Cloned voices and synthetic video calls now show up in payment fraud, help desk resets, and access requests. A structured drill sh…

NEWShighBleeping Computer11 days ago

Hirudo Android malware replaces banking apps to evade security checks

A new Android malware called Hirudo steals bank account credentials by replacing legitimate banking apps with modified versions th…

NEWShighThe Hacker News11 days ago

Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days

A team at security firm XBOW chained three then-unknown Google Chrome bugs into a single attack that runs code on a Windows comput…

NEWSThe Hacker News11 days ago

Hirudo Android Trojan Uses Patched Banking Apps to Bypass Their Built-In Security Checks

Cybersecurity researchers have disclosed details of a new Android banking trojan called Hirudo that works by replacing legitimate…

NEWScriticalThe Hacker News11 days ago

An AI Agent Found a Critical OTP Bypass in Production. The Attack Was the Easy Part.

The bug was simple: the login let you choose where your sign-in code went. Proving it on a live website was the hard part. TL;DR…

NEWSSecurityWeek11 days ago

US Arrests Two in Crackdown on North Korean IT Worker Laptop Farms

Investigators stormed 40 locations in Texas and seized 187 laptops used by North Korean IT workers to hide their location. The pos…

NEWSBleeping Computer11 days ago

Microsoft: Recent Windows updates may trigger Remote Desktop failures

Microsoft has confirmed that non-admin users may be unable to connect to devices via Remote Desktop after installing recent Window…

NEWSInfosecurity Magazine11 days ago

Passkey Authentications Double but Adoption Remains Slow

Dashlane data finds that passkey adoption is growing but not quickly enough

NEWSHackread11 days ago

Check Point Reports LiteLLM Flaws Enabling Admin Takeover and API Key Theft

Check Point Research found two LiteLLM vulnerabilities that could let low-privilege users execute code, access sensitive files, hi…

NEWSThe Register11 days ago

OpenAI engineer charged after boardroom bug found wrapped in toilet paper

FBI alleges covert recorder was plugged into a TV, with a second device later discovered in the employee's bag

NEWSInfosecurity Magazine12 days ago

French Supermarket Cyber-Attack Impacts More Refrigeration Controllers

At least two French supermarkets using temperature regulation devices from Dixell Electronics also experienced food stock disrupti…

NEWShighInfosecurity Magazine12 days ago

Microsoft Breaks Patch Tuesday Record Again with 1400+ CVEs

Microsoft issued its largest ever round of security updates in the October Patch Tuesday

NEWShighHackread12 days ago

Microsoft Fixes 1,413 Vulnerabilities in Record October Patch Tuesday Update

Microsoft addressed 1,413 security vulnerabilities in its October 2026 Patch Tuesday update, making it the company’s largest month…

NEWScriticalInfosecurity Magazine12 days ago

Billion-Dollar Companies Twice as Likely to Leave Critical Vulnerabilities Unpatched

New Chainguard research reveals larger companies struggle to patch vulnerabilities due to business priorities and operational disr…

NEWSCVE-2026-745808.8 HIGHThe Hacker News12 days ago

AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host

A flaw in Linux's vhost subsystem lets a local user read and write kernel memory at will and become root across nearly a decade of…

NEWSSecurityWeek12 days ago

Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise

Mozilla has introduced Firefox Enterprise for organizations with strict compliance, governance, and security requirements. The pos…

NEWShighSecurityWeek12 days ago

Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products

Critical-severity flaws could lead to authentication bypass, code execution, and sensitive authentication information leaks. The p…

NEWScriticalCVE-2026-969518.8 HIGHSecurityWeek12 days ago

Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day

The most important is CVE-2026-96951, a security feature bypass flaw in Windows that has been exploited in the wild. The post Micr…