Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

2,131 articles

NEWScriticalCVE-2026-1540910.0 CRITICALSecurityWeek11 days ago

SonicWall Issues Urgent SMA Patch Warning for Two Zero-Day Exploits

SonicWall SMA1000 zero-day vulnerabilities CVE-2026-15409 and CVE-2026-15410 can be exploited for remote code execution. The post…

NEWSSecurity Magazine11 days ago

AI Agents Expected to Handle a Third of Marketing Decisions Within 2 Years

A recent report by Kana analyzed the adoption of AI systems.

NEWSCyberScoop12 days ago

White House details ‘Gold Eagle’ clearinghouse for AI cyber threats

The White House said the clearinghouse has already started to receive intelligence on vulnerabilities and prioritize patches. The…

NEWScriticalCVE-2026-1540910.0 CRITICALBleeping Computer12 days ago

SonicWall warns of SMA1000 flaws exploited in zero-day attacks, patch now

SonicWall warns that threat actors have been exploiting two SMA1000 vulnerabilities, tracked as CVE-2026-15409 and CVE-2026-15410,…

NEWShighThe Register12 days ago

Patchpocalypse Now: Microsoft tops last month's record with 622 Patch Tuesday CVEs

Remember when last month's 206 CVEs seemed eye-watering? Yeah, those were the days

NEWScriticalThe Hacker News12 days ago

Microsoft Patches Record 622 Flaws, Including Two Zero-Days Under Active Attack

Microsoft shipped its largest Patch Tuesday on record today, and two of the fixes close holes that attackers are already exploitin…

NEWSBleeping Computer12 days ago

Spanish Police take down €140 million cyber fraud ring, arrest four

The Spanish Police dismantled a cybercrime and money-laundering organization that made €140 million ($160 million) from investment…

NEWShighCyberScoop12 days ago

Microsoft discloses ‘the mother of all’ vulnerability loads, tripling June’s previous record

The company forewarned customers and defenders that a flood of defects would be uncovered by AI. It delivered with a striking expo…

NEWSKrebs on Security12 days ago

Microsoft Patches a Record 570 Security Flaws

Microsoft Corp. today released software updates to plug at least 570 security holes in its Windows operating systems and other sof…

NEWShighBleeping Computer12 days ago

Nearly 300 GitHub repos pose as legit software to push malware

A threat actor has published hundreds of fake GitHub repositories impersonating legitimate software and security projects to distr…

NEWScriticalSecurityWeek12 days ago

Microsoft Patches Record 622 Vulnerabilities, Including Two Exploited Zero-Days

Two flaws in Active Directory and SharePoint Server have been exploited as zero-days, and a BitLocker bug was publicly disclosed.…

NEWSBleeping Computer12 days ago

Microsoft releases Windows 10 KB5099539 extended security update

Microsoft has released the Windows 10 KB5099539 extended security update, which includes the July 2026 Patch Tuesday security upda…

NEWScriticalSecurityWeek12 days ago

Synopsys Finds No Evidence of Data Breach Amid Bosch Hack Claims

The D1R cybercrime group claimed to have stolen valuable data from Synopsys and Bosch, threatening to leak it unless a ransom is p…

NEWSCVE-2026-447479.9 CRITICALThe Hacker News12 days ago

SAP Patches CVSS 9.9 NetWeaver ABAP Flaw That Could Expose or Modify Data

SAP has rolled out updates to address multiple vulnerabilities as part of its July 2026 security updates, including a critical fla…

NEWScriticalBleeping Computer12 days ago

Microsoft July 2026 Patch Tuesday fixes massive 570 flaws, 3 zero-days

Today is Microsoft's July 2026 Patch Tuesday, and with it comes security updates for a record-breaking 570 flaws, including two ze…

NEWSBleeping Computer12 days ago

Windows 11 KB5101650 & KB5099414 cumulative updates released

Microsoft has released Windows 11 KB5101650 and KB5099414 cumulative updates for versions 25H2/24H2 and 23H2 to fix security vulne…

NEWSHackread12 days ago

Upwind Finds Coordinated Supply Chain Campaign Compromising Multiple AsyncAPI npm Packages

Upwind links compromised AsyncAPI npm packages to a coordinated supply chain attack spanning repositories, publishing pipelines, a…

NEWSThe Hacker News12 days ago

Researchers Say Claude for Chrome Flaw Lets Rogue Extensions Trigger Gmail Reads

Any other browser extension that can run a script on claude.ai can still trigger Claude for Chrome tasks aimed at your Gmail, your…

NEWScriticalSecurityWeek12 days ago

Adobe Patches Critical ColdFusion Vulnerabilities

The ColdFusion security defects could allow attackers to execute arbitrary code or elevate their privileges. The post Adobe Patche…

NEWSThe Hacker News12 days ago

LabubaRAT Masquerades as NVIDIA Software to Control Windows Hosts

Cybersecurity researchers have flagged a previously undocumented Rust-based remote access trojan (RAT) codenamed LabubaRAT that ma…

NEWSHackread12 days ago

Tego AI Finds Claude Tag Slack Integration Can Trigger Unauthorized Enterprise Actions

Tel Aviv, Israel, 14th July 2026, CyberNewswire

NEWSThe Register12 days ago

Welsh Doxbin admin jailed for egging on swatters from behind a screen

Callum Dare encouraged others to carry out dangerous hoaxes, made mini-movies from the footage

NEWScriticalBleeping Computer12 days ago

Progress confirms ShareFile zero-day flaw behind Storage Zone shutdown

Progress Software has confirmed that a high-severity zero-day vulnerability is behind the emergency shutdown of ShareFile Storage…

NEWSCyberScoop12 days ago

Treasury sanctions First VPN Service, others for abetting ransomware gangs

The designations hit 1VPNS, its alleged Ukrainian administrator and a Belarusian who allegedly sold “cryptors” to disguise ransomw…

NEWSBleeping Computer12 days ago

LastPass, Bitwarden users targeted with fake security alerts

LastPass is warning users about an ongoing phishing campaign that is using fake security notices to direct them to fraudulent webs…

NEWSInfosecurity Magazine12 days ago

US: Pentagon Suspends CMMC Phase II Requirements for Defense Contractors

The US Department of Defense announced the immediate suspension of the CMMC Phase II requirements until further review

NEWShighBleeping Computer12 days ago

You Don't Have to Run an Exploit to Know If You're Vulnerable

Many vulnerabilities cannot be safely validated with live exploits, either because no exploit exists or the affected systems are t…

NEWShighSecurityWeek12 days ago

7 Severe Vulnerabilities Patched in VMware Avi Load Balancer

The flaws can be exploited for authentication bypass, remote code execution, privilege escalation, and directory traversal. The po…

NEWSThe Hacker News12 days ago

RabbitMQ Flaws Could Leak OAuth Secrets and Expose Cross-Tenant Queue Metadata

Cybersecurity researchers have disclosed details of two access control-related flaws impacting the RabbitMQ message broker service…

NEWSSecurityWeek12 days ago

Unpatched Claude for Chrome Flaw Lets Extensions Read Gmail, Calendar

A ClaudeBleed-linked vulnerability reportedly persists across eight patches, exposing potentially sensitive data to other extensio…