Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,418 articles

US, France, and Italian authorities shut down massive deepfake porn site

The website specialized in non-consensual sexual images of famous women, including politicians, first ladies, royalty, journalists…

NEWSBleeping Computer4 months ago

phpBB forum fixes auth bypass bug lurking for a decade

A 10-year-old authentication bypass vulnerability discovered in the phpBB forum software allows an attacker to log in as any user,…

NEWShighThe Hacker News4 months ago

China-Linked Hackers Backdoored Linux Login Software to Hide for Nearly a Decade

Instead of hiding on the laptops and servers defenders watch most closely, a China-nexus group spent close to a decade hidden insi…

NEWShighHackread4 months ago

Atomic Arch Campaign Hijacks 20+ Linux AUR Packages to Deliver Malware

Over 20 Linux packages were compromised in the Atomic Arch campaign, which abuses AUR ownership transfers to drop rootkit-like mal…

NEWSBleeping Computer4 months ago

Ukrainian national pleads guilty to role in Conti ransomware operation

A Ukrainian national extradited from Ireland to the United States last year has pleaded guilty to conspiracy charges tied to the C…

NEWSCyberScoop4 months ago

Conti ransomware group member pleads guilty, faces up to 20 years in prison

Oleksii Lytvynenko, a 44-year-old Ukrainian national, admitted to joining the prolific cybercrime group in 2021. Officials said he…

NEWSBleeping Computer4 months ago

Over 400 Arch Linux packages compromised to push rootkit, infostealer

More than 400 packages in the Arch User Repository (AUR) are distributing a Linux rootkit and infostealer malware targeting creden…

NEWSSecurityWeek4 months ago

In Other News: Google Security Layoffs, AudiA6 Takedown, $400 Million Coupang Fine

Other noteworthy stories that might have slipped under the radar: ICS device exposure remains flat as attack surface widens, Micro…

NEWShighCyberScoop4 months ago

ShinyHunters is actively extorting universities after exploiting an unpatched Oracle flaw

Oracle still hasn't patched the vulnerability the group has been using in its attacks since late May. The post ShinyHunters is act…

NEWShighSecurity Magazine4 months ago

Security Experts Discuss Validity of Handala’s Cal Water Hacking Claim

Handala claims to have the ability to disrupt U.S. water supply, but what is the truth?

NEWSSecurity Magazine4 months ago

Security Experts Discuss the Claude Fable 5 Launch

The model does not come without risks. Security experts share their perspective on this launch.

NEWScriticalHackread4 months ago

ShinyHunters Target Universities in Oracle PeopleSoft Zero-Day Attack

Google says ShinyHunters exploited Oracle PeopleSoft zero-day to steal data from 100+ organisations, with universities making up m…

NEWSBleeping Computer4 months ago

Early Warning Signs of Supply-Chain Attacks Live in the Dark Web

GitHub access sales, leaked repositories, and stolen API keys can all become supply-chain attack footholds. Flare explores how und…

NEWSInfosecurity Magazine4 months ago

Ransomware Payment Crypto Laundering Platform Taken Out by FBI and Europol

Domain of dark web money laundering platform AudiA6 seized and suspects arrested in joint operation by the FBI, Europol and others

NEWSThe Register4 months ago

Novo Nordisk reports cyberattack as UK gives Wegovy pill the nod

Clinical trial participant data stolen, but pharma giant says exposed records were pseudonymized

NEWSHackread4 months ago

The SpaceX Pre-IPO Market: How Crypto Rails Are Opening Synthetic Access

SpaceX Pre-IPO demand is growing as crypto exchanges offer synthetic exposure to its reported $1.75T valuation without direct equi…

NEWSThe Register4 months ago

Microsoft has mostly repaired a flaw in Surface hardware that allowed unprotected devices to be bricked by a single packet

And it was Microsoft Copilot that unwittingly revealed the longstanding vulnerability

NEWSInfosecurity Magazine4 months ago

GitHub to Update npm to Thwart Software Supply Chain Attacks

NPM, part of GitHub, announced a new version of the npm package manager with several security improvements, including disabling in…

NEWSSecurityWeek4 months ago

Industry Reactions to Claude Fable 5: Feedback Friday

Industry professionals comment on various aspects of Fable 5, including dual-use capabilities, safeguards, and tiered access. The…

NEWShighThe Register4 months ago

Google fires sueball at alleged Chinese phishers over AI-powered fraud ops

Telegram-based 'Outsider Enterprise' accused of sending millions of scam texts and impersonating trusted brands

NEWSThe Hacker News4 months ago

Agentjacking Attack Tricks AI Coding Agents Into Running Malicious Code

Cybersecurity researchers have described what they say is a new class of attack that can trick artificial intelligence (AI) coding…

NEWSCyberScoop4 months ago

CyberCorps is adapting to AI. The budget isn’t keeping up.

CyberCorps is evolving to tackle AI threats. But budget cuts could derail it before the work even starts. The post CyberCorps is a…

NEWSBleeping Computer4 months ago

Microsoft fixes Windows update failures linked to WUSA installer

Microsoft has fixed a known issue that caused Windows updates released since May 2025 to fail when installed via the Windows Updat…

NEWShighSecurityWeek4 months ago

Iranian Cyber Group Handala Claims Cal Water Hack

The hackers published 5GB of data, including customer personal information and credentials for the RTKBase platform. The post Iran…

NEWSThe Hacker News4 months ago

Rethinking MDR as Attackers and Defenders Embrace AI

For most of the past decade, managed detection and response was the answer to a real problem. Security teams couldn't staff around…

NEWShighInfosecurity Magazine4 months ago

Over 80% of Sports Organizations Targeted by Hackers in the Last Year

As the FIFA World Cup 2026 kicks off, a new Darktrace report warns that sports teams and bodies are a major target for cyber crimi…

NEWSThe Register4 months ago

Plymouth council exposes hundreds in latest local government email gaffe

Authority admits mass message to home-schooling families revealed recipients' addresses, prompting ICO report and apology

NEWSThe Register4 months ago

UK digital ID gets brain trust to 'challenge' ministers on policy

CEO of Mumsnet among the six-member team

NEWSBleeping Computer4 months ago

Pharma giant Novo Nordisk discloses breach of clinical trials data

Danish pharmaceutical giant Novo Nordisk, the world's largest producer of insulin, disclosed a data breach affecting patient infor…

NEWSHackread4 months ago

Feds Seize AudiA6 and Dark2Web in $389M Crypto Laundering Case

Feds seized AudiA6 and Dark2Web in a major crypto laundering case, arresting two suspects linked to over $389M in alleged illicit…