Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,419 articles

OptinMonster WordPress plugin hacked in CDN supply-chain attack

WordPress plugins OptinMonster, TrustPulse, and PushEngage have been compromised in a supply-chain attack impacting Awesome Motive…

NEWScriticalCVE-2026-202626.5 MEDIUMBleeping Computer4 months ago

Cisco fixes SD-WAN vManage flaw exploited in zero-day attacks

Cisco has released security updates to address a vulnerability in the Catalyst SD-WAN Manager, tracked as CVE-2026-20262, that was…

NEWShighInfosecurity Magazine4 months ago

Attackers Hijack Popular WordPress Plugins to Deploy Backdoors

Tampered OptinMonster and sister plugins plant hidden backdoors on 1.2 million WordPress sites

NEWSThe Register4 months ago

Feds snooze as US datacenter law set to lapse with no replacement in site

Federal Data Center Enhancement Act (FDCEA) of 2023 covers standards including security and sustainability

NEWShighThe Hacker News4 months ago

LiteLLM Vulnerability Chain Lets Low-Privilege Users Take Over AI Gateway Servers

A default low-privilege account on a LiteLLM proxy can climb to full admin and run code on the server by chaining three vulnerabil…

NEWScriticalBleeping Computer4 months ago

Council of Europe investigates ShinyHunters data breach claims

The Council of Europe, the continent's oldest intergovernmental body, is probing claims of a data breach made by the ShinyHunters…

NEWSInfosecurity Magazine4 months ago

Adriatic Port Cyber-Attack by Anubis Sparks Warning Over Maritime Security Risks

How the Anubis ransomware group stole and leaked an Italian Adriatic port authority's data

NEWSCyberScoop4 months ago

Cybersecurity experts don’t think Anthropic’s Fable 5 presents a unique cybersecurity threat

Dozens of practitioners said the decision to place export controls on the foreign use of Fable are misguided, and recent jailbreak…

NEWSThe Register4 months ago

Microsoft site throwing warnings after someone forgot to renew cert

Connectivity checker trips browser alarms thanks to lapsed security paperwork

NEWSBleeping Computer4 months ago

FBI: Fraudsters use couriers to steal money in crypto scams

The U.S. Federal Bureau of Investigation (FBI) warned that criminals are using couriers to collect money from victims of cryptocur…

NEWScriticalSecurityWeek4 months ago

Ransomware Attack Shuts Down Mills of Australia’s Second-Largest Sugar Producer

Mackay Sugar was targeted in a cyberattack carried out by a threat group known as The Gentlemen. The post Ransomware Attack Shuts…

NEWScriticalSecurity Magazine4 months ago

Breaking Down the Novo Nordisk Data Breach

Experts break down the risks of Novo Nordisk data breach.

NEWSThe Hacker News4 months ago

One-Click Microsoft 365 Copilot Flaw Could Have Let Attackers Steal Emails, Files, and MFA Codes

A single click on a trusted Microsoft link could have let an attacker pull emails, calendar details, and indexed files out of Micr…

NEWScriticalSecurity Magazine4 months ago

Maine Data Breach Reporting Portal Abused, Taken Offline

Two organizations had false data breach notices filed against them, causing the Office of the Maine Attorney General to remove its…

NEWShighSecurityWeek4 months ago

Chinese Hackers Target Medical, Military, and AI Research in North America

Google’s Threat Intelligence Group has been tracking the cyberespionage group as UNC6508 since early 2025. The post Chinese Hacker…

NEWSBleeping Computer4 months ago

Vibe coders are gonna vibe code: How CISOs are tackling code sprawl

Employees are increasingly building automations, agents, and apps with AI tools outside traditional security oversight. Tines expl…

NEWSThe Register4 months ago

PRC-linked spies hid inside medical and military networks for more than a year, snooping through Gmail and stealing data

Google says the intruders were on the hunt for everything from drone tech to pathogens

NEWShighBleeping Computer4 months ago

Chinese hackers breach REDCap servers, steal medical research

A China-linked espionage campaign targeted exposed REDCap servers to deploy the InfiniteRed malware and steal sensitive data from…

NEWScriticalThe Hacker News4 months ago

⚡ Weekly Recap: Chrome 0-Day, UniFi Exploits, macOS Stealers, VPN Flaw and More

Stuff broke again. Not in a movie way. An old tool was left exposed. An abandoned package was abused. A deprecated feature was sti…

NEWSHackread4 months ago

Feds Seize CFAKE and SOCFAKE Over Explicit Deepfakes of Famous Women

Both CFAKE and SOCFAKE (CFAKE.com and SOCFAKE.com) were seized after prosecutors said they hosted nonconsensual nude digital forge…

NEWSThe Register4 months ago

Arch Linux locks down AUR signups amid wave of malicious commits

Community repo freezes new accounts after attackers swamp it with poisoned package updates

NEWSSecurityWeek4 months ago

NewCore Emerges From Stealth Mode With $66 Million in Funding

The startup has built a security-first identity platform to protect humans, machines, and AI agents. The post NewCore Emerges From…

NEWSBleeping Computer4 months ago

New attack turned Microsoft 365 Copilot into 1-click data theft tool

A critical vulnerability chain dubbed SearchLeak in Microsoft 365 Copilot Enterprise could allow attackers to steal sensitive data…

NEWScriticalBleeping Computer4 months ago

Infinite Campus data breach affects 137,000 school staff accounts

The ShinyHunters extortion gang stole personal information from more than 137,000 school staff accounts in a Salesforce data theft…

NEWShighBleeping Computer4 months ago

Webinar: How behavioral AI stops phishing and account takeovers

Modern phishing, BEC, and account takeover attacks increasingly bypass traditional email defenses and create operational strain fo…

NEWShighHackread4 months ago

Handala Hacking Group Claims Breach of California Water Service

The Handala hacking group claims it has targeted California Water Service, leaking 5GB of customer database and GPS network files…

NEWSSecurityWeek4 months ago

Ukrainian Man Pleads Guilty in US to Conti Ransomware Charges

Oleksii Oleksiyovych Lytvynenko admitted to working on the development of a loader for the Conti gang. The post Ukrainian Man Plea…

NEWSThe Hacker News4 months ago

The Onboarding Password Mistake That Creates Unnecessary Risk

Employee onboarding is a busy time for IT teams. New starters need devices, accounts, access permissions, and passwords, all deliv…

NEWShighSecurityWeek4 months ago

Ozempic Maker Novo Nordisk Says Hackers Breached IT Systems

The pharmaceutical giant says the attackers gained access to personal data stored on the compromised systems. The post Ozempic Ma…

NEWShighSecurityWeek4 months ago

French Government Messaging Platform Breached by Mysterious ‘Misere’ Hacker

French officials say roughly 73,000 government accounts were affected, while the threat actor claims to have stolen messages and u…