Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,436 articles

Exploitable CI/CD Vulnerabilities Expose Millions of Repositories to Hijacking

The security defects allow unauthenticated users to take control of the open source software supply chain. The post Exploitable CI…

NEWShighBleeping Computer4 months ago

Stealthy Mistic backdoor linked to ransomware access broker KongTuke

A new backdoor dubbed Mistic has been observed in financially motivated attacks targeting organizations in the insurance, educatio…

NEWSSecurityWeek4 months ago

BeyondTrust, LastPass Impacted by Klue-Salesforce Incident

Over a dozen Klue customers have confirmed that hackers stole data from their Salesforce instances. The post BeyondTrust, LastPass…

NEWSInfosecurity Magazine4 months ago

AI Is Making Attacks Cheaper, Faster and More Covert, Says ReliaQuest

New ReliaQuest study reveals the six ways AI is practically being used in attacks today

NEWSCyberScoop4 months ago

Open-source security is posing challenges governments can’t easily solve

A diffuse landscape, fruitful targets, companies not stepping up, AI’s influence and flagging U.S. government efforts all figure i…

NEWSThe Hacker News4 months ago

DoJ Seizes Huione Cloud Account Tied to Cyber Scam Money Laundering

The U.S. Department of Justice (DoJ) on Tuesday announced the seizure of a cloud computing account put to use by subsidiaries of C…

NEWSInfosecurity Magazine4 months ago

UK Museums Face Cybersecurity Risks, MPs Warn

Public Accounts Committee (PAC) warns that museums and galleries aren’t getting enough government support on cyber

NEWSSecurityWeek4 months ago

Webinar Today: Modern Exposure Validation in the AI Era

The exploit timeline collapsed. Make sure your validation didn't. The post Webinar Today: Modern Exposure Validation in the AI Era…

NEWSHackread4 months ago

Best Crypto Payment Solutions for E-Commerce Businesses

Compare crypto payment gateways for ecommerce, including checkout tools, stablecoin payments, fiat settlement, plugins, APIs and b…

NEWShighCVE-2026-202308.6 HIGHThe Hacker News4 months ago

Cisco Unified CM Flaw Exploited After PoC Reveals File-Write Path to Root

Threat actors have begun to exploit a recently disclosed critical security flaw impacting Cisco Unified Communications Manager (Un…

NEWShighCVE-2026-202308.6 HIGHSecurityWeek4 months ago

Hackers Exploiting Cisco Unified CM Vulnerability

Cisco noted that a PoC had been available for CVE-2026-20230 when it announced patches in early June. The post Hackers Exploiting…

NEWSThe Register4 months ago

You have got to be KDDI-ng – Japanese telco exposes 14.2 million managed email credentials

Five ISPs and plenty of users await their fate

NEWShighSecurityWeek4 months ago

Anthropic’s Mythos Model Found Vulnerabilities in Classified US Government Systems, Official Says

Come vulnerabilities were found within hours, but that does not mean the model was able to exploit them within that time, the offi…

NEWShighCVE-2026-202308.6 HIGHBleeping Computer4 months ago

Cisco Unified CM flaw CVE-2026-20230 now exploited in attacks

A high-severity SSRF vulnerability, tracked as CVE-2026-20230, in Cisco Unified Communications Manager Server is now being exploit…

NEWShighBleeping Computer4 months ago

Tata Electronics confirms cyberattack as hackers leak data

Tata Electronics has confirmed in a statement to BleepingComputer that it was the target of a cyberattack that impacted parts of i…

NEWSBleeping Computer4 months ago

Windows 11 KB5095093 update rolls out new Point-in-Time restore feature

Microsoft has released the KB5095093 preview cumulative update for Windows 11 24H2 and 25H2, which fixes numerous bugs and begin…

NEWScriticalBleeping Computer4 months ago

Healthtech firm Xolis suffers data breach impacting 1.4 million people

Healthcare technology company Xsolis says that sensitive data belonging to nearly 1.4 million individuals was compromised in a phi…

NEWSHackread4 months ago

Internet Society Foundation Opens Global Call for Common Good Cyber Fund to Strengthen Cybersecurity

DC, United States, 23rd June 2026, CyberNewswire

NEWShighWired Security4 months ago

Dialog Claims It Was Hacked. A Misconfigured Website Left Its Members Exposed

The private events group, cofounded by Peter Thiel, says a “criminal” hacker is behind a breach that exposed members’ personal det…

NEWSCyberScoop4 months ago

Justice Department seizes infrastructure used by cyber scam and criminal marketplace

lso Tuesday, the Treasury Department took action against the same Cambodian company, Huione Group, and affiliates. The post Justi…

NEWSBleeping Computer4 months ago

New macOS ClickFix attack silently mounts DMGs to push infostealer

A new macOS ClickFix campaign is using Terminal commands to silently download, mount, and launch info-stealing malware from malici…

NEWScriticalHackread4 months ago

LastPass Confirms Customer Data Breach After Klue OAuth Token Theft

LastPass has confirmed it was affected by the Klue supply chain incident, saying an unauthorised actor used stolen…

NEWSThe Hacker News4 months ago

FortiBleed Targeted FortiGate Firewalls in 110 Million-Credential Harvesting Operation

A Russian-speaking initial access broker (IAB) driven by financial gain is assessed to be behind a large-scale credential-harvesti…

NEWSThe Register4 months ago

Mythos discovers 'Squidbleed,' a memory leak that's gone undetected since Clinton era

Plus more blasts from the past: NetWare, FTP, and HTTP

NEWSSecurityWeek4 months ago

Dragos Unveils AI for OT Security

Named EmberAI, the new capability is built on Dragos’ massive operational technology cybersecurity dataset. The post Dragos Unveil…

NEWSHackread4 months ago

‘Cordyceps’ CI/CD Flaw Exposes Microsoft, Google, Apache Repos to Pipeline Hijacking

Novee Security reveals Cordyceps, a CI/CD vulnerability in GitHub Actions workflows that let anonymous users poison builds and exp…

NEWShighKrebs on Security4 months ago

Scattered Spider Hackers Plead Guilty on Day 1 of Trial

Two men pleaded guilty in the United Kingdom this week to criminal charges stemming from an August 2024 cyberattack that crippled…

NEWSHackread4 months ago

The Rise of AI-Powered Academic Fraud: Beyond Traditional Plagiarism

AI has changed academic fraud. It now creates original-looking work, fake sources, and hidden misconduct that schools must learn t…

NEWSSecurityWeek4 months ago

Data Exposure Flaws Threaten Dify AI Platform Used by 1 Million Apps

Attackers could abuse Dify's multi-tenant cloud service to read private chats, preview other tenants' documents, and reach interna…

NEWShighBleeping Computer4 months ago

Scattered Spider members plead guilty to hacking Transport for London

Two members of the 'Scattered Spider' cybercrime group pleaded guilty to hacking the Transport for London (TfL) systems in 2024. […