Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,429 articles

Dream Raises $260 Million at $3 Billion Valuation

The Israeli startup provides sovereign AI and cyber defenses for governments and critical infrastructure. The post Dream Raises $2…

NEWScriticalBleeping Computer4 months ago

F5 issues out-of-band patches for critical NGINX vulnerabilities

Cybersecurity company F5 has released out-of-band security updates to address multiple NGINX web server vulnerabilities, including…

NEWShighInfosecurity Magazine4 months ago

LATAM Infrastructure Hit by Fortinet and Ivanti Exploits

CloudSEK maps Operation Escaneo, a campaign hitting Latin American infrastructure via perimeter bugs

NEWSWired Security4 months ago

How to Watch the Knicks Parade on NYC Traffic Surveillance Cameras

Artist Morry Kolman will be livestreaming feeds of the NBA champions’ ticker-tape parade from NYC’s traffic cameras—and this time,…

NEWSThe Hacker News4 months ago

The Scripts on Your Checkout Page Are Now a PCI DSS Problem

An independent PCI assessor tested Reflectiz against the new PCI DSS rules. Here is the verdict: See the full QSA assessment here…

NEWScriticalSecurityWeek4 months ago

Atlassian, Splunk Patch Critical Vulnerabilities

Splunk patched an OS command injection in AI Toolkit, while Atlassian fixed dozens of flaws in third-party dependencies. The post…

NEWSSecurityWeek4 months ago

Rokarolla Banking Trojan Targets 200 Applications

The Android malware allows its operators to take control of infected devices and harvest sensitive information. The post Rokarolla…

NEWScriticalSecurityWeek4 months ago

Critical Command Execution Vulnerability Patched in Cisco ISE

Insufficient validation of user input allows an attacker to gain access to the underlying OS and elevate their privileges to root.…

NEWSBleeping Computer4 months ago

Microsoft fixes Windows Server 2016 security update failures

Microsoft has fixed a known issue causing the June 2026 security updates to fail on Windows Server 2016 systems that weren't up to…

NEWSHackread4 months ago

Agentjacking: Researchers Show How One Fake Bug Report Can Hijack AI Coding Agents

Tenet researchers reveal how fake Sentry bug reports can trick AI coding agents into running code, exposing a new Agentjacking ris…

NEWScriticalSecurityWeek4 months ago

F5 Patches Critical, High-Severity NGINX Vulnerabilities

Critical flaws in NGINX could allow remote, unauthenticated attackers to cause a restart and potentially execute arbitrary code. T…

NEWScriticalInfosecurity Magazine4 months ago

Hostile States Behind 75% of Cyber-Attacks on UK Critical Infrastructure, NCSC Warns

Richard Horne, the NCSC CEO, said three-quarters of cyber-attacks targeting UK critical infrastructure came from nation-state acto…

NEWSSecurityWeek4 months ago

SailPoint to Acquire Entro in Reported $200 Million Deal

Israel-based Entro specializes in non-human identity and credential security solutions, and it will enable SailPoint to enhance it…

NEWSInfosecurity Magazine4 months ago

Cybercrime Surges in APAC as Digitalization Takes Hold

Interpol claims cybercrime accounts for third of crime in over half of Asia and South Pacific countries

NEWScriticalSecurityWeek4 months ago

Kodak Admits Data Breach After ShinyHunters Hack Claims

Kodak told SecurityWeek it believes there is no threat to its systems or operations as a result of the cybersecurity incident. The…

NEWSThe Register4 months ago

Welcome to your new telco job – here's sudo access to a database with full customer info stored in the clear

It happened at a major US telco in the early 2000s

NEWSWired Security4 months ago

The UK Will Scan Asylum-Seekers’ Faces for Age Checks—Despite Knowing the Tech Is Flawed

Internal Home Office tests of age-verification technology show the risks of life-altering errors. It’s moving forward anyway.

NEWSThe Register4 months ago

Cyber offenses now account for around a third of all crime across Asia and South Pacific

Latest Interpol review shows how scams continue to dominate, and AI-enabled attackers prove too hot to handle for cash-strapped re…

NEWSBleeping Computer4 months ago

Leak confirms OpenAI is testing a ChatGPT for Science subscription

OpenAI appears to be testing a new subscription and experience for science use cases, but it's unclear if it'll be available to ev…

NEWSBleeping Computer4 months ago

Google to use UK and EU user IP addresses for ad personalization

From August 3, 2026, Google will use IP addresses from UK, EEA and Switzerland users for ad measurement and personalization. It la…

NEWSThe Hacker News4 months ago

Crypto Clipper Campaign Abuses Fake Reviews, AI Narrators, and VirusTotal Comments

An unknown threat actor has been observed leveraging paid or promoted posts on legitimate news websites to drum up buzz for their…

NEWScriticalCVE-2026-506567.8 HIGHThe Hacker News4 months ago

Microsoft Confirms RoguePlanet Defender Zero-Day, Says Patch is in Development

Microsoft has formally disclosed that it's working to release a patch to address a Defender zero-day codenamed RoguePlanet. The v…

NEWSThe Register4 months ago

Massive password-stealing attack hits 75k Fortinet firewalls

Why are you even reading this?! Rotate your passwords!!

NEWSSecurity Magazine4 months ago

Kodak Confirms Breach Following Claims 2.2M Records Stolen

This breach may include internal corporate data and the personal information of customers.

NEWSHackread4 months ago

FortiBleed Attack Exposes Fortinet Firewall Credentials in 194 Countries

Researchers say FortiBleed used stolen and tested credentials to access exposed Fortinet firewalls, putting major organizations an…

NEWShighThe Hacker News4 months ago

Junior Hacker Used Tailscale and OpenSSH to Keep Access After His C2 Went Offline

A French-speaking attacker broke into a small French automotive business, planted a keylogger, and stole banking and email credent…

NEWScriticalCyberScoop4 months ago

Attackers hit pair of critical Fortinet vulnerabilities the vendor disclosed in April

Multiple firms have observed active exploitation of the FortiSandbox defects, and warn that the attacks originate from multiple so…

NEWSBleeping Computer4 months ago

FortiBleed leak exposes Fortinet VPN credentials for 73,000 devices.

A newly discovered data leak dubbed "FortiBleed" has exposed what appears to be a collection of Fortinet and FortiGate VPN credent…

NEWSInfosecurity Magazine4 months ago

North Korean Hiring Fraud Runs on AI and US Laptop Farms

Nisos infiltrated a North Korean IT-worker fraud cell running on AI interviews and a US laptop farm

NEWSThe Register4 months ago

Digital sovereignty needs an operating model

PARTNER CONTENT Europe wants control over its own technology, but what does that look like?