Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,440 articles

NEWScriticalCVE-2026-202457.8 HIGHThe Hacker News4 months ago

Cisco Catalyst SD-WAN Zero-Day CVE-2026-20245 Exploited to Gain Root Access

An unknown threat actor exploited a recently disclosed high-severity security flaw impacting Cisco Catalyst SD-WAN as a zero-day a…

NEWScriticalThe Register4 months ago

Nation-state actors cracked critical Australian infrastructure to ‘cripple it at a time of their choosing’

To defuse another attack, Oz spies called foreign counterparts to tell them an op was a bust

NEWSBleeping Computer4 months ago

Google releases new privacy controls for activity history, personalization

Google is rolling out new privacy controls for Search services and Google Play, giving you more control over saved history and per…

NEWShighCVE-2026-202308.6 HIGHThe Register4 months ago

The hits keep on coming for Cisco vulnerabilities

CVE-2026-20230 under exploitation, while an earlier SD-WAN 0-day looks even worse than we thought

NEWShighBleeping Computer4 months ago

DraftKings hacker 'Snoopy' sentenced to 18 months in prison

A 21-year-old using the alias "Snoopy" was sentenced to 18 months in prison for his role in hacking DraftKings accounts in the Nov…

NEWScriticalCVE-2026-202457.8 HIGHBleeping Computer4 months ago

Mandiant reveals how Cisco SD-WAN zero-day attacks gained root access

New details have been revealed on how hackers exploited a Cisco Catalyst SD-WAN vulnerability tracked as CVE-2026-20245 in zero-da…

NEWShighBleeping Computer4 months ago

Malicious Edge extension abuses Native Messaging as bridge to malware

A malicious Microsoft Edge extension dubbed 'Edgecution' has been used in a ransomware attack to escape the browser sandbox and de…

NEWShighHackread4 months ago

Operation Endgame Disrupts StealC, Amadey and SocGholish Malware Networks

Operation Endgame disrupts StealC malware infrastructure, seizing millions of stolen credentials and targeting servers used in glo…

NEWScriticalCyberScoop4 months ago

Malicious hackers exploit Cisco zero-day for highest access level at communications service provider

Mandiant detailed the incident in a blog post Wednesday, but it’s unclear who was behind it or if they managed to get broad visibi…

NEWShighThe Register4 months ago

Microsoft uses AI to link two malware operations in racketeering suit

200+ C2 servers linked to StealC and Amadey shut down

NEWSSecurityWeek4 months ago

When Information Becomes the Attack Surface – Understanding AI Agent Traps

From hidden content injections to cognitive state poisoning, attackers are turning trusted data sources into traps for autonomous…

NEWScriticalCVE-2025-670389.8 CRITICALThe Hacker News4 months ago

CISA Warns Critical Lantronix EDS5000 Flaw Is Being Actively Exploited

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday warned of active exploitation of a critical security f…

NEWSInfosecurity Magazine4 months ago

Researchers Trick AI Browsers Into Leaking Credentials

LayerX tricked AI browsers including ChatGPT Atlas and Comet into bypassing their guardrails

NEWShighThe Hacker News4 months ago

Amadey and StealC Malware Network Disrupted, 27M Stolen Credentials Recovered

A coordinated law enforcement operation, in partnership with private sector companies, including Bitdefender, Bitsight, ESET, and…

NEWSInfosecurity Magazine4 months ago

Europol-Led Operation Endgame Takes Down StealC and Amadey Infostealers

Operation Endgame seized around 50 domains and nearly 200 active IP-based servers associated with the infostealers

NEWShighHackread4 months ago

New GhostShell Hacking Group Targets Ukraine’s Drone Defense Sector

Researchers warn GhostShell is using fake drone documents to target Ukrainian defence teams, stealing passwords and sensitive data…

NEWShighSecurityWeek4 months ago

Microsoft and Allies Smash Shared Infrastructure of Amadey and StealC Malware

Hundreds of C&C servers were disrupted in an operation involving law enforcement and several cybersecurity companies. The post Mic…

NEWShighBleeping Computer4 months ago

CISA warns of max severity Ubiquiti flaws exploited in attacks

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of hackers actively exploiting flaws in Ubiquity UniFi…

NEWShighBleeping Computer4 months ago

Amadey, StealC malware operations disrupted in Operation Endgame action

Microsoft, Europol, and international partners have disrupted infrastructure used by the Amadey and StealC malware operations as p…

NEWSSecurityWeek4 months ago

Exclusive: Meet AIVEX, a New Triage Model Built to Reduce Supply Chain Threat and Risk

The new framework seeks to help security teams identify which software supply chain vulnerabilities pose the greatest operational,…

NEWSBleeping Computer4 months ago

Securing the service desk: Why social engineering attacks keep succeeding

Service desks have become a favored target for attackers seeking password resets, MFA changes, and access to corporate accounts. S…

NEWShighInfosecurity Magazine4 months ago

macOS Backdoor Uses Prompt Injection to Evade AI Triage

SentinelLabs found a North Korea-linked macOS backdoor using prompt injection on AI triage tools

NEWSSecurityWeek4 months ago

macOS Weaknesses Chained to Silently Disable Endpoint Security Agents

A standard non-admin account is sufficient to conduct an attack that exploits legitimate OS behavior rather than software vulnerab…

NEWSHackread4 months ago

Fake npm Packages Impersonate PostCSS Tool to Steal Chrome Passwords

JFrog warns of malicious npm packages that mimic PostCSS tooling, drop a Windows RAT, and target Chrome-stored passwords through a…

NEWShighSecurityWeek4 months ago

Third DraftKings Hacker Sentenced to 18 Months in Prison

Nathan Austad has been ordered to pay roughly $1.8 million in forfeiture and restitution, and the sentence also includes 3 years o…

NEWSThe Hacker News4 months ago

Cordyceps CI/CD Flaws Expose 300+ GitHub Repositories to Supply-Chain Attacks

Cybersecurity researchers have flagged a new class of CI/CD workflow weakness that allows attackers to hijack workflows and compro…

NEWSInfosecurity Magazine4 months ago

KDDI Breach Affects Six Japanese ISPs, Exposes 14.2 Email Credentials

Customers of the affected Japanese email services are “strongly advised” to change their email passwords

NEWScriticalSecurityWeek4 months ago

Critical Ubiquiti Vulnerabilities in Attackers’ Crosshairs

The flaws allow remote, unauthenticated attackers to make system changes, access underlying accounts, and inject commands. The pos…

NEWSCyberScoop4 months ago

In a first, a court takedown goes after two cybercrime tools at once

Microsoft, with law enforcement and industry partners, disrupted more than 200 command and control servers for Amadey and StealC,…

NEWSInfosecurity Magazine4 months ago

Iran-Linked MuddyWater Poses as Ransomware Gang to Mask Cyber Espionage

An NCC Group report warns state-backed hackers are attempting to hide activity by posing as ransomware groups and deploying commer…