Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,441 articles

Upwind Security Brings AI Visibility to the Endpoint, Unifying Cloud and Device Security

Upwind’s AI Sensor links endpoint activity with cloud context, helping teams track MCP connections, AI actions, identities and dev…

NEWShighBleeping Computer4 months ago

Bluekit phishing kit adopts browser-in-the-middle for login theft

The Bluekit phishing-as-a-service platform continues to evolve with nearly 70 new hostnames identified over the past week and by a…

NEWSCyberScoop4 months ago

Russia uses Cellebrite to break into human rights activist’s phone, even after cancellation of contract

The phone-cracking firm broke off from its deal with Russia, but Citizen Lab said that didn’t stop authorities from surveilling An…

NEWShighCyberScoop4 months ago

Minnesota man known as ‘Snoopy’ sentenced in DraftKings hack

Nathan Austad, who sold access to compromised accounts through a criminal storefront, is the third and final defendant sentenced i…

NEWShighInfosecurity Magazine4 months ago

Cisco Vulnerability Exploited Months Before Disclosure, Google Warns

A high-severity flaw in Cisco Catalyst SD-WAN Manager disclosed in early June was exploited as early as March

NEWSThe Hacker News4 months ago

Chrome Ad Blocker with 10M+ Installs Found with Dormant Script Injection Capability

An analysis of a popular Google Chrome ad block extension for YouTube has uncovered the ability to execute arbitrary JavaScript co…

NEWSBleeping Computer4 months ago

The Four Elevations of Effective Fraud Prevention

Fraudsters don't attack just one transaction. They target accounts, platforms, and entire ecosystems. IPQS explains the four eleva…

NEWSInfosecurity Magazine4 months ago

Twenty Million US IP Connections Used by Proxy Services

Digital Citizens Alliance report claims that millions of Americans may have unwittingly had IP connections used by cybercriminals

NEWSSecurityWeek4 months ago

Runlayer Raises $30 Million in Series A Funding

The startup’s platform functions as a secure control layer, aiming to secure AI tools across enterprises. The post Runlayer Raises…

NEWSThe Hacker News4 months ago

ThreatsDay Bulletin: Smart TV Proxyware, 24-Year curl Bug, AI Crime Forums + 13 More Stories

It’s dumb out there again. This week has the usual smell of prod on fire and nobody wanting to admit who left the door open — old…

NEWSBleeping Computer4 months ago

Webinar: Why account takeovers remain one of the hardest threats to stop

Account takeover attacks continue to challenge security teams because attackers often operate through legitimate accounts and trus…

NEWShighSecurityWeek4 months ago

Cal Water Finds No Evidence of OT Activity After Hackers Claimed They Could Disrupt Water Supply

Mandiant has helped the California water utility investigate the cyberattack launched by Iranian hacker group Handala. The post Ca…

NEWShighSecurity Magazine4 months ago

Hackers Exposed Knicks, Madison Square Garden Data

Security leaders discuss the release of Knicks and Madison Square Garden customer and corporate data.

NEWShighInfosecurity Magazine4 months ago

Trust in Automated AI Vulnerability Scanning Collapses to 9%, New Study Finds

Cobalt study finds 20-percentage-point drop in number of organizations relying solely on AI automation for testing

NEWScriticalHackread4 months ago

Suspected Cyberattack Sends Fake Emergency Alert to Phones Across Brazil

Brazil’s alert system was taken offline after a fake emergency alert reached phones, with officials investigating a suspected cybe…

NEWSInfosecurity Magazine4 months ago

New CISA Guide Helps Agencies Adopt SASE For Zero Trust

New CISA guidance shows federal agencies how to use SASE to move from legacy TIC 2.0 to zero trust

NEWShighCVE-2025-670389.8 CRITICALSecurityWeek4 months ago

Lantronix Serial-to-IP Converter Flaw Exploited in Attacks After OT Threat Warning

The exploited flaw, CVE-2025-67038, is one of the vulnerabilities disclosed in April as part of the BRIDGE:BREAK research project.…

NEWSThe Hacker News4 months ago

Surviving the Mythos Era: Richard Bejtlich on the Case for NDR

Despite the abundance of telemetry at analysts’ disposal, many security operations teams struggle to answer a few basic questions…

NEWShighSecurityWeek4 months ago

GitLab Patches Code Execution, Information Disclosure Vulnerabilities

The latest GitLab CE/EE updates address 13 vulnerabilities, including three high-severity defects. The post GitLab Patches Code Ex…

NEWSInfosecurity Magazine4 months ago

macOS Flaw Lets Standard Users Disable EDR and MDM

macos-xpc-flaw-disable-edr-mdm-standard-user-xm-cyber

NEWScriticalInfosecurity Magazine4 months ago

Major Increase in Ransomware Attacks Targeting Europe, Warns New Report

Analysis of ransomware incidents by researchers at Black Kite found that attacks have risen by over 50% in the last year, with sup…

NEWSWired Security4 months ago

British Police Built a Sprawling Crime-Prediction Machine. Some Results Couldn’t Be Trusted

As UK police embrace the AI revolution, a WIRED investigation reveals the messy inside story of one region’s experiment with predi…

NEWShighSecurityWeek4 months ago

25-Year-Old Vulnerability Patched in Curl

The latest version of the open source data transfer tool resolves 18 medium and low-severity vulnerabilities. The post 25-Year-Old…

NEWShighThe Hacker News4 months ago

New Gaslight macOS Malware Uses Prompt Injection to Disrupt AI-Assisted Analysis

A previously undocumented Rust-based macOS implant and information stealer has been found to embed a prompt injection payload desi…

NEWSSecurityWeek4 months ago

SecurityWeek ICS Cybersecurity Conference Heads to Nashville for Special 25-Year Anniversary Edition

The 2026 Industrial Control Systems (ICS) Cybersecurity Conference takes place October 6-8, 2026, at the W Nashville. The post Sec…

NEWSCyberScoop4 months ago

Why patch directives only go so far

Six weeks of undetected access through a compromised VPN exposes why patching isn't a solution for the organizations already breac…

NEWShighThe Hacker News4 months ago

New Mistic Backdoor Linked to KongTuke in ClickFix and ModeloRAT Campaigns

A new, stealthy backdoor named Mistic has been deployed as part of suspected financially motivated attacks aimed at multiple organ…

NEWSSecurityWeek4 months ago

NIST Opens Updated IoT Security Guidance to Public Review

The guidance aims to establish product cybersecurity requirements for IoT devices integrated into federal agencies’ networks. The…

NEWShighSecurityWeek4 months ago

Chrome 149 Update Resolves 18 Severe Vulnerabilities

More than half of the bugs are use-after-free defects, which can potentially lead to remote code execution. The post Chrome 149 Up…

NEWSThe Register4 months ago

UK school’s network left wide open for invasion, student found

And the admin password was right in the Active Directory description field