Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,429 articles

Webinar Today: How Modern Breaches Bypass MFA and Evade Detection

Attendees will learn how attackers evade conventional detection methods, why legacy MFA alone is no longer sufficient, and how org…

NEWSBleeping Computer4 months ago

Why Account Takeovers Are Rising and How to Stop Them

Account takeovers are rising as attackers bypass traditional defenses through phishing, session hijacking, and MFA fatigue. Specop…

NEWShighInfosecurity Magazine4 months ago

Serverless Phishing Kit on GitHub Targets Mexican Banks

GitBait phishing kit abuses GitHub Pages and the SheetBest API to steal Mexican banking credentials

NEWSThe Register4 months ago

Cisco adds another SD-WAN box to max-severity bug advisory

Updated at the time? No sweat. Check those logs, though

NEWSThe Register4 months ago

Homebrew 6.0 released with new security mechanism, Linux sandbox and more

Homebrew was "less vulnerable 10 years ago than npm is today," project lead tells us

NEWSInfosecurity Magazine4 months ago

Sensitive Enterprise Data Uploads to AI Models Double in a Year

The rise of AI-assistants and applications in the enterprise has seen a 93% increase in employees attempting to upload sensitive d…

NEWSBleeping Computer4 months ago

India's Telegram ban hit the UAE too. Here's how to get around it

India has banned Telegram until June 22 after the app was used to circulate leaked exam papers. CEO Pavel Durov accuses telecom Re…

NEWShighHackread4 months ago

SpyCloud Report Finds Phishing Attacks Surge as Employee Data Is Exposed at 86% of Fortune 100 Companies

Austin, TX, USA, 17th June 2026, CyberNewswire

NEWSSecurityWeek4 months ago

1Password Acquires Apono in Reported $250M-$300M Deal

Apono specializes in just-in-time access governance technology for humans, machines, and AI agents. The post 1Password Acquires Ap…

NEWSInfosecurity Magazine4 months ago

AI Threats and Alert Fatigue Challenge Cybersecurity Teams

Filigran survey at Infosecurity Europe 2026 reveals AI-powered attacks as the top concern, with false positives, alert fatigue and…

NEWSHackread4 months ago

152 Chrome Live Wallpaper Extensions Hid Ad Tracking and Fake Search Clicks

Socket says the extensions worked as wallpaper tools, but also logged user data, disguised install traffic as Google clicks, and f…

NEWSHackread4 months ago

Heimdal Survey: Executives Four Times More Confident About AI Risk Than the Teams Managing It

London, United Kingdom, 17th June 2026, CyberNewswire

NEWSSecurityWeek4 months ago

Tenet Security Emerges From Stealth With $6 Million Seed Funding

Tenet aims to detect and stop dangerous AI agentic behavior in real time. The post Tenet Security Emerges From Stealth With $6 Mil…

NEWSThe Hacker News4 months ago

Adversarial Exposure Validation Turns Security Visibility into Confident Prioritization

For security teams, the findings never stop, but confidence in knowing which ones matter is becoming harder to maintain. The prob…

NEWSBleeping Computer4 months ago

Microsoft confirms Office apps launch issues after June updates

Microsoft is investigating a new issue preventing third-party applications from launching Microsoft Office applications or opening…

NEWShighSecurityWeek4 months ago

Rockwell Automation Patches Vulnerabilities in ICS Controllers and Software

The industrial automation giant has fixed security holes in Logix, CompactLogix, Flex, RSLinx, and FactoryTalk products. The post…

NEWSHackread4 months ago

ESET MDR vs Sophos MDR: Compared Time to discover and respond to a threat

A detailed ESET MDR vs Sophos MDR comparison covering tiers, response speed, coverage, threat intelligence, pricing, and breach wa…

NEWSThe Register4 months ago

Helpdesk scammers are making house calls to make their lies feel more real

15-year-old among six arrested after Dutch cops target suspected bank fraud call center

NEWScriticalSecurityWeek4 months ago

Microsoft Teams Relay Servers Abused in DragonForce Ransomware Attack

The attackers deployed a new Go-based backdoor that uses Microsoft Teams servers for command-and-control. The post Microsoft Teams…

NEWSThe Hacker News4 months ago

The Top 10 Attack Surface Exposures in 2026

Breaches don't always start with a zero-day. An exposed admin panel can get brute-forced, or credentials reused from a previous at…

NEWSBleeping Computer4 months ago

CISA orders feds to patch max severity Joomla plugin flaw by Friday

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch a maximum-severity flaw in…

NEWSInfosecurity Magazine4 months ago

EU Security Experts to Support Ukrainian Organizations in Case of Cyber-Attacks

Ukraine has been added to the EU Cybersecurity Reserve, which provides incident response services against large-scale incidents

NEWScriticalSecurityWeek4 months ago

Microsoft Working on Patch for ‘RoguePlanet’ Zero-Day

The public PoC code exploits a race condition in Microsoft Defender to spawn a command prompt with System privileges. The post Mic…

NEWSThe Hacker News4 months ago

Malicious JetBrains Plugins Steal AI API Keys as Chrome Extensions Capture Chatbot Chats

Cybersecurity researchers have flagged a "coordinated malware campaign" on the JetBrains Marketplace that has published no less th…

NEWSInfosecurity Magazine4 months ago

Fifteen JetBrains Marketplace Plugins Found Stealing API Keys

Aikido Security has discovered at least 15 IDE plugins on the JetBrains Marketplace

NEWSSecurityWeek4 months ago

Oracle’s Second Monthly Security Updates Deliver 245 Patches

Oracle has released its June 2026 Critical Security Patch Update to fix vulnerabilities in Communications, EBS, Enterprise Manager…

NEWScriticalSecurity Magazine4 months ago

Organizations’ Emergency Response Fails to Match Confidence Levels

Organizations overestimate their emergency response; Almost 50% of organizations faced a lateral movement attack in the last year.

NEWSInfosecurity Magazine4 months ago

Staffing Is Top SOC Challenge Even as AI Proliferates, Says SANS

SANS Institute study finds few SOCs have built AI into defined workflows, despite widespread adoption

NEWScriticalBleeping Computer4 months ago

Microsoft working on Defender patch for RoguePlanet zero-day

Microsoft confirmed that it's working on a security patch for a Defender zero-day vulnerability named "RoguePlanet," disclosed one…

NEWScriticalSecurityWeek4 months ago

Chrome and Firefox Updated to Patch Critical, High-Severity Vulnerabilities

The browser updates address multiple memory safety bugs that could potentially lead to remote code execution. The post Chrome and…