Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,424 articles

NEWScriticalCVE-2026-489079.8 CRITICALThe Hacker News4 months ago

CISA Warns of Actively Exploited Joomla JCE Flaw Allowing PHP Code Execution

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a maximum-severity security flaw impacting Widge…

NEWSThe Register4 months ago

Cyberattack sees crops kept in the ground

Bitter harvest for Australia's Mackay Sugar, attacked in peak cane crushing season

NEWSBleeping Computer4 months ago

Malicious JetBrains Marketplace plugins steal AI API keys from developers

At least 15 malicious plugins found on the JetBrains Marketplace were designed to steal AI API keys from developers. [...]

NEWSCyberScoop4 months ago

Lawmakers leary about Trump administration’s Anthropic order

Some panned it, some said they needed more information, but caution figured into all of the responses. The post Lawmakers leary ab…

NEWSCyberScoop4 months ago

AI’s constant patching treadmill can be a security problem

The breakneck speed of model releases may be creating short, silent security gaps as developers must choose between performance an…

NEWSWired Security4 months ago

Leak Exposes Members of Peter Thiel’s Secretive ‘Dialog’ Society

More than 200 of the world's elites registered for a retreat whose agenda runs from panels on cult-building and sex to prepping fo…

NEWSThe Register4 months ago

Python dev saved from disaster by intuition...and AI

I'm sorry, Dave. I can't install that repo that will totally hose your system.

NEWShighBleeping Computer4 months ago

New Rokarolla Android malware targets 217 banking, crypto apps

A new Android banking trojan named Rokarolla is targeting 217 banking and cryptocurrency applications using an extensive set of 13…

NEWSThe Hacker News4 months ago

Google Vertex AI SDK Flaw Let Attackers Hijack Model Uploads via Bucket Squatting

A flaw in the Google Cloud Vertex AI SDK for Python let an attacker with no access to a victim's project hijack the victim's machi…

NEWShighBleeping Computer4 months ago

Steam Workshop abused to spread malware via Wallpaper Engine app

Threat actors are abusing Steam Workshop, Valve's community hub for downloading game-related content, to push various malware hidd…

NEWScriticalThe Register4 months ago

Three critical Fortinet sandbox bugs splattered by unknown attackers

All have patches, so make sure you upgrade to a fixed version

NEWSWired Security4 months ago

‘Dangerous’ AI Models Are Coming No Matter What

The US government crackdown on Anthropic’s Claude Fable 5 and Mythos 5 hides a glaring truth: AI models with advanced hacking capa…

NEWShighThe Hacker News4 months ago

ClickFix Campaigns Expand Malware Delivery With New Loaders and Fake Update Lures

Cybersecurity researchers have flagged multiple ClickFix campaigns that deliver three malware loaders called BabaDeda Loader, Lore…

NEWSSecurity Magazine4 months ago

Error in Breach Notice Leaves Victims Confused, Skeptical

Patients received notices after a hospital data breach — but the letters looked like scams.

NEWSSecurity Magazine4 months ago

Trump Signs National Security Memo to Bolster Military, Intelligence System Cybersecurity

President Trump signed a new National Security Presidential Memorandum to support the nation’s National Security Systems (NSS).

NEWSHackread4 months ago

Amos Stealer Targets macOS Keychain Files and Browser Passwords

Amos Stealer targets macOS users through fake downloads, stealing Keychain files, browser passwords, cookies, and developer config…

NEWSCyberScoop4 months ago

A case for how to shape ‘ingredient lists’ for AI models

AI bills of materials (AIBOMs), modeled on standards that worked for software, could transform how policymakers understand and reg…

NEWShighSecurity Magazine4 months ago

Update on the Cal Water Hacking Incident

Cal Water has responded following the claims of a cybersecurity incident.

NEWShighSecurityWeek4 months ago

iRhythm Confirms Data Stolen in Hack

The digital health company said it learned of the breach on June 8 and the attackers demanded a ransom. The post iRhythm Confirms…

NEWSHackread4 months ago

Aembit Extends IAM for Agentic AI to Microsoft Copilot Studio

Las Vegas, USA / Nevada, 16th June 2026, CyberNewswire

NEWSThe Register4 months ago

Crooks found a new way to collaborate using Teams – by hiding command-and-control traffic

Custom malware routed communications through legitimate Microsoft services, making malicious activity look like routine corporate…

NEWSBleeping Computer4 months ago

UK to require ID or face scan before you can make social media accounts

Opening a new social media account in the UK will soon mean proving you're over 16 with an ID upload or a facial age scan, under a…

NEWShighInfosecurity Magazine4 months ago

SprySOCKS Backdoor Expands From Linux to Windows

China-linked SprySOCKS backdoor gains stealthy Windows variants and 30-plus C2 commands

NEWShighSecurityWeek4 months ago

Hacker Conversations: Isira Adithya, the Evolution of an Ethical Hacker

From building LED bulbs to graduating college and buying a house with money earned from bug bounties. The post Hacker Conversation…

NEWShighBleeping Computer4 months ago

GhostTree Attack Abused Recursive Windows Junctions to Hide Malware

GhostTree uses recursive NTFS junctions to generate vast numbers of valid Windows file paths. Varonis explains how the technique c…

NEWSBleeping Computer4 months ago

FTC warns of record $3.5 billion losses to imposter scams in 2025

The U.S. Federal Trade Commission (FTC) warned that Americans lost $3.5 billion to imposter scams in 2025, with reported losses ne…

NEWSSecurityWeek4 months ago

Magnitude Emerges From Stealth Mode With $10 Million in Funding

The company is enhancing third-party risk management (TPRM) through autonomous AI agents. The post Magnitude Emerges From Stealth…

NEWSSecurityWeek4 months ago

AI and Cybersecurity – Everything You Wanted to Know, But Were Afraid to Ask

From defending networks to enabling attacks, artificial intelligence is changing every aspect of cybersecurity. Here's what dozens…

NEWSInfosecurity Magazine4 months ago

Rokarolla Trojan Combines Banking Fraud With Device Surveillance

Rokarolla Android trojan steals banking logins and spies on victims while blocking fraud alerts

NEWShighThe Hacker News4 months ago

New Rokarolla Android Malware Steals PINs, SMS Codes, and Crypto Wallet Funds

Security researchers at Zimperium's zLabs have documented a new Android banking trojan, Rokarolla, that targets 217 banking and cr…