Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,429 articles

New Exploit Bypasses Apple’s Boot Defenses, Affects Millions of iPhones

The vulnerability exploited by the Usbliter8 exploit cannot be patched and a PoC exploit has been released by researchers. The pos…

NEWShighThe Register4 months ago

Gizmodo readers hit with ClickFix malware prompts after account compromise

Infosec buffs say Windows users could have been infected with a nasty trojan, while Mac users got off lightly

NEWSSecurityWeek4 months ago

Fortinet Responds to FortiBleed Campaign

A database of over 86,000 confirmed working credentials was created during the credential-harvesting campaign. The post Fortinet R…

NEWSWired Security4 months ago

World Cup Scams Are Getting Harder to Spot

From fake tickets to cloned websites, AI is magnifying World Cup scams. Can fans distinguish between what’s real and what’s not?

NEWSInfosecurity Magazine4 months ago

UK Information Commissioner Resigns After Workplace Investigation

The UK’s data protection regulator the information commissioner has resigned after his position became “untenable”

NEWSThe Hacker News4 months ago

Canada’s Spy Agency Used First-of-Its-Kind Warrant to Clean Botnet-Infected Devices

Canada's spy service got a judge's permission to reach into infected servers, home routers, and IoT gear sitting on Canadian soil…

NEWShighSecurityWeek4 months ago

More Cybersecurity Firms Disclose Impact From Klue Hack

HackerOne, Huntress, Jamf, OneTrust, Recorded Future, Snyk, and Tanium are among the affected Klue customers. The post More Cybers…

NEWSInfosecurity Magazine4 months ago

NCSC Urges Fortinet Customers to Tackle FortiBleed Fallout

The NCSC has released guidance for Fortinet customers impacted by the FortiBleed threat campaign

NEWShighThe Hacker News4 months ago

AryStinger Malware Infects 4,300 Legacy Routers to Build Reconnaissance Proxy Network

A new malware family is turning forgotten home routers into a distributed reconnaissance and proxy network, not the DDoS botnet th…

NEWShighThe Hacker News4 months ago

INTERPOL Warns Phishing, Ransomware, and AI Scams Are Rising Across Asia-Pacific

A new report from INTERPOL has revealed a "dramatic increase" in cybercrime in Asia and the South Pacific, fueled by rapid digital…

NEWScriticalSecurityWeek4 months ago

Texas Parks & Wildlife Data Breach Affects 3 Million Individuals

Hackers stole personal information after breaching the systems of a third-party license vendor serving TPWD. The post Texas Parks…

NEWSBleeping Computer4 months ago

AryStinger botnet infected thousands of D-Link routers worldwide

A previously undocumented malware botnet named AryStinger has compromised more than 4,000 outdated routers to turn them into proxi…

NEWScriticalWired Security4 months ago

A Critical Deadline Is Approaching for Windows and Linux Security

The cryptographic keys that secure your computer's boot sequence will start to expire on June 24. Here's what that means for you.

NEWSBleeping Computer4 months ago

New Prinz Eugen ransomware prioritizes recent files for encryption

A new ransomware operation named 'Prinz Eugen' prioritizes recently modified files for encryption and leaves no ransom note on the…

NEWSThe Register4 months ago

Why Amazon hates 'human-in-the-loop' AI governance

VP Eric Brandwine explains people aren't all that great, actually

NEWShighBleeping Computer4 months ago

Microsoft links Mastra AI supply chain attack to North Korean hackers

Microsoft has attributed a recent Mastra AI supply chain attack that compromised more than 140 npm packages to the North Korean ha…

NEWSHackread4 months ago

MDR Provider Comparison: Time to Discover and Respond to Threats

A detailed MDR provider comparison covering tiers, response speed, coverage, threat intelligence, pricing, and breach warranties t…

NEWShighCVE-2026-40207.5 HIGHThe Hacker News4 months ago

Hackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API Keys

Threat actors are exploiting a recently patched security flaw impacting Gravity SMTP, a WordPress plugin that's installed on about…

NEWSSecurityWeek4 months ago

French President Urges US to Share Cutting-Edge AI and Democracies to Cooperate on Regulation

French President Emmanuel Macron urged the world’s wealthy democracies to work together on regulating advanced AI systems. The pos…

NEWShighWired Security4 months ago

Hackers Claim to Leak Stolen Madison Square Garden Data

Plus: Gay bars in San Francisco using face scanners, France quits Palantir, Apple plans to change its private email and more.

NEWShighBleeping Computer4 months ago

Klue OAuth breach victim list grows as Icarus hackers claim attack

Market intelligence platform Klue has publicly confirmed a recent security incident that allowed threat actors to steal OAuth toke…

NEWShighBleeping Computer4 months ago

Hackers exploit info disclosure bug in Gravity SMTP WordPress plugin

Threat actors are exploiting an unauthenticated information disclosure vulnerability in the WordPress plugin Gravity SMTP, active…

NEWShighThe Hacker News4 months ago

Unpatchable 'usbliter8' Exploit Breaks Apple A12 and A13 SecureROM Boot Chain

Security researchers at Paradigm Shift have published a working exploit, dubbed usbliter8, that achieves arbitrary code execution…

NEWSThe Hacker News4 months ago

The Gentlemen RaaS Uses GentleKiller EDR Framework Targeting 400 Security Processes

The Gentlemen ransomware-as-a-service (RaaS) operation is actively developing and maintaining a suite of endpoint detection and re…

NEWSHackread4 months ago

Meteor 3.0 Migration Helped Rocket.Chat Move Off End-of-Life Node.js Runtime

Meteor 3.0 helped Rocket.Chat move from Node.js 14 to Node.js 20, cutting runtime debt after Fibers removal and reducing supply-ch…

NEWScriticalBleeping Computer4 months ago

Texas govt data breach exposes over 3 million driver’s licenses

The Texas Parks and Wildlife Department (TPWD) disclosed a data breach at its license system vendor that exposed personal informat…

NEWShighThe Register4 months ago

Researchers drop checkm8-style BootROM exploit for A12 and A13 iPhones

Owners of affected iPhones can stop checking for patches now: the fix for this SecureROM bug comes in a new handset

NEWSThe Hacker News4 months ago

AutoJack Attack Lets One Web Page Hijack AI Agent for Host Code Execution

Microsoft researchers have detailed an exploit chain, named AutoJack, that turns an AI browsing agent into a delivery vehicle for…

NEWSSecurityWeek4 months ago

In Other News: Apple Patches Beats Eavesdropping Flaw, DOT Closes Delta CrowdStrike Probe, AWS Continuum

Other noteworthy stories that might have slipped under the radar: Android TV botnet Popa linked to Israeli firm, Velvet Ant mainta…

NEWSThe Hacker News4 months ago

Operation Endgame Disrupts SocGholish Servers, Cleans 14,971 WordPress Sites

Dutch law enforcement authorities, along with counterparts from Canada , Germany, and the U.S., have disrupted malicious infrast…