Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,429 articles

NEWSHackread4 months ago

Gcore Helps Ucom Safeguard Public Live Broadcast Infrastructure During Armenia’s Parliamentary Elections

Luxembourg, Luxembourg, 19th June 2026, CyberNewswire

NEWSThe Hacker News4 months ago

CISA Warns Fortinet Customers as FortiBleed Hits 86,644 FortiGate Devices

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday urged Fortinet customers with FortiGate appliances to…

NEWSHackread4 months ago

Nintendo America Employee Data Exposed After Shadowbyt3$ Targets TinyPulse

Nintendo America employee records were exposed via TinyPulse after Shadowbyt3 claimed theft of HR files, tax forms, bank data, and…

NEWSHackread4 months ago

eFAQ Publishes Investigation Into Alleged Scam Activity and Coordinated Reputation Attacks

New York, USA, 19th June 2026, CyberNewswire

NEWSBleeping Computer4 months ago

Every AI Agent Is an Identity. Most Organizations Don't Treat Them That Way

AI agents can access data, trigger workflows, deploy code, and interact with critical business systems, often with little oversigh…

NEWScriticalThe Register4 months ago

Everything's bigger and better in Texas – even data breaches

Hunting and fishing license incident catches 3M residents

NEWSBleeping Computer4 months ago

Webinar: How attackers bypass MFA and how defenders can respond

Modern phishing attacks, including Device Code phishing, can undermine MFA protections and grant attackers access to corporate acc…

NEWSThe Hacker News4 months ago

From Assistive to Agentic: The AI Shift That's Redefining Threat Management

Introduction The average enterprise security team has 40 or more security tools, giving a lot of visibility into internal telemet…

NEWSBleeping Computer4 months ago

Microsoft: June 2026 Windows updates break Recycle Bin prompts

Microsoft has confirmed a confusing Windows bug that causes different filenames to appear in the confirmation dialog when deleting…

NEWShighSecurityWeek4 months ago

CryptoBandits Malware Doubles as a Backdoor, Abuses Tor

CryptoBandits uses a local SOCKS5 proxy for traffic routing, blending data theft with remote code execution. The post CryptoBandit…

NEWSThe Register4 months ago

Britain's privacy watchdog quits after 'poor judgment' admission

John Edwards says his position had become 'untenable' following investigation into conduct including inappropriate attempts at hum…

NEWSThe Register4 months ago

Rights groups brand Home Office's AI age guesser for asylum-seekers as biased and inaccurate

Campaigners say tech is unable to reliably distinguish between kids and adults at the boundary where use is planned

NEWShighInfosecurity Magazine4 months ago

AWS Unveils 'Continuum,' an AI-Powered Vulnerability Management Platform

Working with frontier AI models, this new platform aims to help discovering, prioritizing, validating and remediating code vulnera…

NEWSSecurityWeek4 months ago

FortiBleed: 86,000 Fortinet Device Credentials Compromised

The large-scale credential theft campaign hit roughly half of the internet-accessible Fortinet firewalls and VPNs. The post FortiB…

NEWScriticalBleeping Computer4 months ago

CISA: Splunk Enterprise flaw actively exploited, patch by Sunday

CISA has urged U.S. federal agencies to secure their systems by Sunday against a critical Splunk Enterprise vulnerability that is…

NEWSThe Hacker News4 months ago

Forget Data Leakage: Shadow AI's Real Threat Is Access Control

The first wave of enterprise AI concern was straightforward. It was simply employees pasting sensitive data into public AI tools.…

NEWShighInfosecurity Magazine4 months ago

Operation Endgame Disrupts Malware Network Linked to Major Ransomware Gang

SocGholish malware has been removed from 15,000 sites associated with Evil Corp hackers

NEWShighHackread4 months ago

FIFA World Cup 2026: Hackers Target Football Fans With Fake Tickets Sites

Cybersecurity experts warn that active hacking networks are using fake hotel bookings, cloned websites, and live chat features to…

NEWSSecurityWeek4 months ago

Cybersecurity Firms Impacted by Klue Supply Chain Attack

The hackers exfiltrated data from Salesforce instances of Klue customers, such as Huntress and Recorded Future. The post Cybersecu…

NEWSThe Hacker News4 months ago

Salesforce Disables Klue App Integration After OAuth Token Abuse Exposes Customer Data

Salesforce has revealed that it disabled the Klue Battlecards app integration within its platform in response to a security incide…

NEWSInfosecurity Magazine4 months ago

Confidence Lacks in Threat Detection Across Non-Email Channels like Slack and Teams

Half of cybersecurity leaders lack confidence in detecting threats on Slack, Teams and other non-email platforms, despite growing…

NEWSBleeping Computer4 months ago

NY man charged after harassing college student with AI-generated nudes

A New York man faces cyberstalking charges after allegedly sharing AI-generated nude images and fabricated racist messages using f…

NEWSSecurityWeek4 months ago

Cisco to Acquire WideField Security to Boost Splunk’s Agentic SOC

WideField will accelerate Agentic SOC capabilities by expanding the lens on threat investigation to include identity, credentials,…

NEWSBleeping Computer4 months ago

CISA warns Fortinet users to secure devices after FortiBleed leak

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) urged Fortinet customers to secure their devices after nearly 74,…

NEWSSecurityWeek4 months ago

15,000 WordPress Websites Cleaned Up in SocGholish Botnet Takedown

Law enforcement and private partners took down 106 SocGholish C&C servers and domains as part of Operation Endgame. The post 15,00…

NEWSCVE-2025-20701The Hacker News4 months ago

Apple Patches Beats Studio Buds Flaw Letting Nearby Attackers Spy via Microphone

Apple has updated its Beats Studio Buds wireless earbuds to patch a high-severity vulnerability that could be exploited by nearby…

NEWShighCVE-2026-202539.8 CRITICALSecurityWeek4 months ago

Splunk Enterprise Vulnerability Exploited in Attacks Days After Disclosure

CISA has given federal agencies only three days to patch CVE-2026-20253, which can be exploited for unauthenticated remote code ex…

NEWSBleeping Computer4 months ago

Gentlemen ransomware uses multiple EDR killers to disable defenses

The Gentlemen ransomware-as-a-service (RaaS) is actively developing and maintaining a suite of endpoint detection and response (ED…

NEWSWired Security4 months ago

How the Peter Thiel-Linked Dialog Club Secretly Ranks Its Members

Leaked files show the invite-only network grades members by their money and fame, shaping who’s in, who’s out, and who pays.

NEWSCyberScoop4 months ago

Authorities disrupt Evil Corp’s SocGholish botnet

Cybersecurity firms, researchers and officials took down 106 servers and remediated nearly 15,000 sites that were infected with th…