Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,429 articles

Congress tees up No FAKES Act, aiming at AI-generated deepfakes

While preventing third parties from profiting off unauthorized deepfakes of artists and performers is a bipartisan concern, some b…

NEWSHackread4 months ago

MacBook Neo vs Windows Laptops for Cybersecurity Tasks

There is no one-size-fits-all cybersecurity laptop. We’ll examine real-world work scenarios, tool compatibility, and trade-offs th…

NEWShighHackread4 months ago

Operation Endgame Disrupts SocGholish Malware Infrastructure

International law enforcement dismantled TA569's SocGholish infrastructure, taking down over 100 C2 servers and remediating nearly…

NEWSBleeping Computer4 months ago

Nintendo confirms data stolen in WebMD subsidiary cyberattack

Nintendo of America has confirmed to BleepingComputer that threat actors stole survey data from the third-party TinyPulse service…

NEWSKrebs on Security4 months ago

‘Popa’ Botnet Linked to Publicly-Traded Israeli Firm

For the past four years, a sprawling Android-based botnet called Popa has forced millions of consumer TV boxes to relay Internet t…

NEWScriticalCVE-2026-425308.1 HIGHThe Hacker News4 months ago

F5 Patches Two Critical NGINX Open Source Flaws Enabling Remote Code Execution

F5 has released security updates to address two critical security flaws in NGINX Open Source that could be exploited to achieve co…

NEWSSecurityWeek4 months ago

Majority of Internet-Accessible REDCap Servers Outdated

These servers are regularly targeted by China-linked UNC6508 for initial access and backdoor deployment. The post Majority of Inte…

NEWShighBleeping Computer4 months ago

USB worm spreads crypto-stealing malware via Windows shortcut files

Threat actors targeting cryptocurrency wallets have been distributing clipboard-stealing malware with self-spreading capabilities…

NEWShighSecurity Magazine4 months ago

Chinese Hackers Targeting AI, Cyber and National Defense Research

The campaign was undetected for more than one year.

NEWSHackread4 months ago

What Businesses Should Know Before Migrating Their CMS

Plan your CMS migration with clean content audits, SEO safeguards, tested data transfer, integrations, staff training, and a safe…

NEWShighThe Hacker News4 months ago

ThreatsDay Bulletin: Claude Chat Abuse, NastyC2 npm Packages, Device-Code Phishing + 25 More Stories

The internet did not break this week. It got used exactly as designed, which is worse. Searches were siphoned through shady brows…

NEWSCyberScoop4 months ago

How software development’s speed obsession enabled TeamPCP’s chaos crusade

The threat group’s remarkable success targeting open-source software was inevitable and fueled by the industry’s decision to prior…

NEWSCyberScoop4 months ago

Accenture shells out $4.18B on three companies in big industrial cybersecurity push

The consulting giant’s majority stake in Dragos, along with the purchase runZero and NetRise, marks its first major push into oper…

NEWSThe Register4 months ago

Google told researcher 'Nice catch!' Then denied bug bounty for flaw it still hasn't fixed

EXCLUSIVE 'Working as intended' for the win … again

NEWSInfosecurity Magazine4 months ago

Fake GitHub Stars and AI Videos Mask a Crypto Clipper

A Rust crypto clipper hides behind fake GitHub stars and AI-narrated YouTube videos

NEWSInfosecurity Magazine4 months ago

ICO Cautions Healthcare Worker After Princess of Wales Incident

Hospital insider escapes criminal prosecution after attempting to sell royal’s medical records

NEWShighThe Hacker News4 months ago

Microsoft Details Windows Clipper Malware Campaign Using USB LNK Worm and Tor-Based C2

Microsoft has disclosed details of a Windows-based cryptocurrency clipper campaign that has targeted users since February 2026. "…

NEWSBleeping Computer4 months ago

Klue OAuth breach linked to 'Icarus' Salesforce data theft attacks

Market intelligence platform Klue suffered a OAuth breach that enabled the "Icarus" threat actors to steal Salesforce CRM data fro…

NEWSThe Hacker News4 months ago

INC Ransomware Emerges as Major RaaS Threat in 2026 with 830+ Victims Since 2023

Cybersecurity researchers have charted the evolution of INC from an nascent ransomware-as-a-service (RaaS) operation to one of the…

NEWSBleeping Computer4 months ago

5 reasons Microsoft 365 backup isn’t enough for business data protection

Microsoft 365 helps keep services running, but protecting and recovering business data remains your responsibility. Acronis breaks…

NEWShighThe Hacker News4 months ago

DragonForce Hackers Abuse Microsoft Teams Relays to Hide Backdoor.Turn C2 Traffic

Threat actors associated with the DragonForce ransomware have been observed using a custom Go-based remote access trojan (RAT) cal…

NEWSBleeping Computer4 months ago

Police cleans nearly 15,000 SocGholish-infected sites tied to Evil Corp

International law enforcement agencies cleaned nearly 15,000 malware-infected WordPress websites and took down more than 100 serve…

NEWSSecurityWeek4 months ago

Accenture to Acquire Majority Stake in Dragos, All of runZero, NetRise in $4.1 Billion OT Cybersecurity Push

The deal values industrial cybersecurity giant Dragos at $3.25 billion, and runZero and NetRise will operate under Dragos. The pos…

NEWShighBleeping Computer4 months ago

ShapedPlugin update flow hacked to infect WordPress sites

Multiple WordPress plugins from ShapedPlugin were compromised in a supply chain attack that distributed infected releases to payin…

NEWShighHackread4 months ago

DragonForce Ransomware Abused Microsoft Teams to Hide Malware Activity

DragonForce ransomware abused Microsoft Teams relay systems to hide a custom backdoor, steal files and encrypt systems at a US ser…

NEWSInfosecurity Magazine4 months ago

Cybercriminals Are Worried About AI Taking Their Jobs Too

Analysis of chatter on underground forums by Sophos finds that hackers fear AI could take work away from them

NEWShighSecurityWeek4 months ago

No Exploits Required

Four decades of incident response experience suggest that exploits are often the symptom, not the root cause, of today’s cybersecu…

NEWShighBleeping Computer4 months ago

Apple fixes Beats Studio Buds flaw that let hackers spy on conversations

Apple has released security updates to patch a high-severity flaw affecting the Beats Studio Buds wireless earbuds that could allo…

NEWSBleeping Computer4 months ago

Telegram admits it couldn't police exam-leak channels, India tells court

India's government has told the Delhi High Court that Telegram was warned about two weeks before it was blocked, and that the plat…

NEWSThe Hacker News4 months ago

Orphaned AI Agents: How to Find Hidden Access Risks Inside Your Network

If an autonomous AI agent interacts with your company's core intellectual property today, can your security team instantly name th…