Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,050 articles

NEWShighCVE-2026-116458.8 HIGHInfosecurity Magazine4 months ago

Google Releases Patch for Chrome Vulnerability Exploited in the Wild

The flaw, CVE-2026-11645, can allow a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page

NEWSThe Hacker News4 months ago

New FROST Attack Lets Websites Track What Sites and Apps You Open via SSD Timing

A malicious website can work out which sites you visit and which apps you open, using nothing but JavaScript and the timing of you…

NEWScriticalSecurityWeek4 months ago

Check Point VPN Zero-Day Exploited in Qilin Ransomware Attacks

The authentication bypass vulnerability allows attackers to establish VPN connections without a valid password. The post Check Poi…

NEWScriticalInfosecurity Magazine4 months ago

Check Point Warns Critical Auth Bypass Bug Exploited in the Wild

Check Point says a critical vulnerability in its Remote Access VPN and Mobile Access solutions has been exploited by Qilin

NEWSThe Register4 months ago

Qilin NHS breach tally grows as Essex trust confirms stolen records

Two years on from ransomware attack, hospitals are still trying to identify and warn patients

NEWSThe Hacker News4 months ago

Hades PyPI Attack: 19 Packages Poisoned to Auto-Run Bun Credential Stealer

The Miasma supply chain campaign has sparked a fresh attack wave called Hades, this time involving 37 malicious wheel artifacts ac…

NEWSInfosecurity Magazine4 months ago

Infosecurity Europe: Why JLR’s CISO Enforced In-Person Password Resets Following Cyber-Attack

Speaking at Infosecurity Europe, Ashish Shrestha, former CISO at Jaguar Land Rover revealed why he wanted over 30,000 employees to…

NEWScriticalBleeping Computer4 months ago

CISA gives feds 3 days to patch Check Point VPN bug exploited as zero-day

CISA has ordered U.S. government agencies to secure their Check Point Remote Access VPN and Mobile Access deployments against a cr…

NEWShighInfosecurity Magazine4 months ago

WhatsApp Discovers NSO Group-Linked Spearphishing Attempts

Meta’s WhatsApp demands contempt ruling after users report NSO Group-linked phishing

NEWScriticalBleeping Computer4 months ago

Google patches new Chrome zero-day flaw exploited in the wild

Google has released emergency updates to patch another Chrome zero-day vulnerability that has been exploited in the wild, the fift…

NEWShighCVE-2026-422718.8 HIGHThe Hacker News4 months ago

LiteLLM Flaw CVE-2026-42271 Exploited in the Wild, Chains to Unauthenticated RCE

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a high-severity flaw impacting BerriAI LiteLLM to…

NEWSHackread4 months ago

WhatsApp Says It Blocked Pegasus Spyware Campaign Linked to NSO

WhatsApp says it blocked Israeli firm NSO’s Pegasus spyware activity and is asking a US court to treat the targeting as an injunct…

NEWSThe Register4 months ago

Norks blast 250+ fake job offers to developers over 6 weeks to try and snarf creds and crypto

When an unsolicited job offer sounds too good to be true …

NEWShighBleeping Computer4 months ago

NFCShare Android malware spreads via fake banking app updates on GitHub

New variants of the NFCShare Android malware are being distributed as fake updates for legitimate banking apps hosted on GitHub. […

NEWScriticalBleeping Computer4 months ago

SoFi confirms third-party data breach at Hong Kong subsidiary

SoFi Hong Kong is warning that it suffered a data breach after hackers gained access to a database at a third-party vendor contain…

NEWSBleeping Computer4 months ago

New Apple feature automatically changes your compromised passwords

At WWDC 26, Apple announced an Apple Intelligence-powered feature that can automatically fix weak and compromised passwords. This…

NEWSBleeping Computer4 months ago

New Shai-Hulud attack trojanizes 19 science-focused PyPI packages

Hackers compromised 19 packages on the PyPI, collectively downloaded hundreds of thousands of times, in a new Shai-Hulud supply-ch…

NEWShighCVE-2026-231117.8 HIGHThe Hacker News4 months ago

One-Character Linux Kernel Flaw Enables Local Root Access, Exploits Now Public

Security researchers have published a detailed, working exploit for a Linux kernel use-after-free that lets an unprivileged local…

NEWSSecurity Magazine4 months ago

Did Handala Disrupt Israeli Radar Systems?

On the same day Israel and Iran exchanged missile strikes, Iranian-linked hacker group Handala claimed to disrupt Israeli radar sy…

NEWSSecurity Magazine4 months ago

Whistleblower Accuses IBM, AT&T of Covering Up Breaches

A whistleblower accused IBM and AT&T of covering up data breaches.

NEWShighHackread4 months ago

Operation FlutterBridge Uses Fake Google Ads to Spread macOS Backdoor

Operation FlutterBridge uses fake Google ads and shell companies to deploy FlutterShell, a new macOS backdoor targeting unsuspecti…

NEWShighBleeping Computer4 months ago

WhatsApp says it disrupted new NSO spyware phishing attacks

WhatsApp has detected and stopped spear-phishing campaigns allegedly conducted by the NSO Group after investigating user reports o…

NEWSSecurity Magazine4 months ago

LinkedIn, Indeed and Upwork Leveraged for Chinese Spying Threat

Five Eyes warns that China is targeting individuals in order to access sensitive or classified information.

NEWSWired Security4 months ago

Meta Deletes Face-Recognition System From Its Smart Glasses App After WIRED Report

The code WIRED identified is gone from the latest version of Meta AI, the companion app for the company’s smart glasses. Meta won’…

NEWSCyberScoop4 months ago

Meta accuses NSO Group of defying spyware injunction, files contempt of court complaint

The company said it spotted a spearphishing campaign linked to the Israeli spyware maker targeting WhatsApp users, despite a court…

NEWScriticalThe Register4 months ago

Ransomware crims got a month-long head start on Check Point VPN 0-day that now has a fix

Scumbags, including a Qilin ransomware affiliate, began hitting this hole May 7

NEWShighThe Hacker News4 months ago

Meta Blocks NSO Group's New WhatsApp Phishing Attack, Files Contempt Order

Meta on Monday said it detected and blocked spear-phishing attempts linked to Israeli spyware vendor NSO Group. In addition, the…

NEWShighHackread4 months ago

Hackers Clone Ghidra, dnSpy and Other Tool Sites to Spread Malware

Hackers are cloning Ghidra, dnSpy, ILSpy and other free tool sites to spread Malware like RemusStealer, crypto clippers and loader…

NEWSThe Register4 months ago

Ransomware sends Illinois high school on an early summer vacation

Meanwhile, 13 schools in Wales affected by separate attack

NEWShighInfosecurity Magazine4 months ago

North Korean Hackers Use Fake Coding Tasks to Steal Crypto

North Korean actor UNK_DeadDrop targeted developers with fake coding tasks to steal crypto