Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,415 articles

INTERPOL Operation Takes Down Sniper Dz Phishing Platform, Arrests Administrator

An INTERPOL-led operation last month resulted in the disruption of Sniper Dz, a decade-long phishing-as-a-service (PhaaS) platform…

NEWSSecurityWeek4 months ago

Anthropic Disputes Fable 5 AI Jailbreak

An AI hacker claims to have achieved a prompt-based jailbreak shortly after Fable 5’s launch, but Anthropic says it’s not a real j…

NEWScriticalBleeping Computer4 months ago

CISA orders feds to patch actively exploited Ivanti flaw by Sunday

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) ordered government agencies to patch an actively exploited Ivanti…

NEWSBleeping Computer4 months ago

Over 73,000 French govt employees affected in Tchap messenger breach

The French government revealed that a recent breach of its Tchap encrypted messaging platform affects the accounts of over 73,000…

NEWScriticalCVE-2026-352739.8 CRITICALSecurityWeek4 months ago

Google Confirms Exploitation of Oracle PeopleSoft Zero-Day by ShinyHunters

Oracle has mitigated CVE-2026-35273, but it has not publicly confirmed the vulnerability’s in-the-wild exploitation. The post Goog…

NEWSThe Hacker News4 months ago

Europol Disrupts AudiA6 Crypto Laundering Service Used by Ransomware Gangs

Authorities in Europe have disrupted AudiA6, a cryptocurrency laundering service used by ransomware gangs and cybercriminal networ…

NEWSBleeping Computer4 months ago

Japanese energy firm loses drive with data of 10.9 million clients

Kyushu Electric Power Co., Inc. has disclosed a physical security incident that affects private data of more than 10 million custo…

NEWScriticalBleeping Computer4 months ago

Maine breach portal abused to publish fake data breach disclosures

In an unusual misinformation campaign, fraudulent data breach disclosures were submitted to Maine's official breach portal and pub…

NEWScriticalCVE-2026-352739.8 CRITICALThe Hacker News4 months ago

ShinyHunters Exploits Oracle PeopleSoft Zero-Day (CVE-2026-35273) to Breach Universities

The ShinyHunters extortion crew exploited an unpatched flaw in Oracle PeopleSoft to break into enterprise systems, steal data, and…

NEWSHackread4 months ago

ShinyHunters Leak 40GB of University of Nottingham Student Data

ShinyHunters hackers leak 40GB of University of Nottingham personal and financial data, allegedly impacting 450,000 students and s…

NEWSWired Security4 months ago

Grok Is Still Hosting Sexualized Deepfakes of Famous Women

A WIRED investigation found dozens of “nudified” deepfake images and videos on Grok's website, including nonconsensual depictions…

NEWScriticalCVE-2026-352739.8 CRITICALBleeping Computer4 months ago

Oracle mitigates PeopleSoft zero-day exploited in data theft attacks

Oracle is warning about a critical PeopleSoft Suite zero-day vulnerability tracked as CVE-2026-35273 that allows unauthenticated r…

NEWScriticalThe Register4 months ago

ShinyHunters claims it hacked 100 orgs by exploiting an Oracle PeopleSoft 0-day

University of Nottingham is first of many, Shiny tells The Reg

NEWScriticalThe Register4 months ago

Microsoft's worst 'Nightmare' unleashes BitLocker bypass 0-day

Another day, another Windows exploit code

NEWSThe Hacker News4 months ago

New Attacks Trick OpenClaw AI Agent Into Running Code and Leaking Secrets

Two security teams have shown, in separate research published this week, that OpenClaw, the popular self-hosted AI agent, can be d…

NEWShighThe Hacker News4 months ago

New GreatXML Exploit Bypasses Windows BitLocker via Recovery Partition XML Files

Security researcher Chaotic Eclipse (aka Nightmare-Eclipse and MSNightmare) has released a new Windows BitLocker bypass dubbed Gre…

NEWSCyberScoop4 months ago

Russian national charged in connection with Void Blizzard espionage campaign

Denis Obrezko accused of orchestrating cyberattacks that compromised at least 11 U.S. companies as part of the Kremlin-linked grou…

NEWSThe Hacker News4 months ago

The Gentlemen Ransomware Claims 478 Victims, Can Spread Like a Worm

A new analysis of The Gentlemen operation has revealed that the financially motivated threat group initially operated as an affili…

NEWShighHackread4 months ago

Decade-Long SniperDz Phishing Network Disrupted in Operation Ramz

Group-IB, INTERPOL and Algerian Police dismantle decade-old SniperDZ phishing network used to steal credentials, with its alleged…

NEWSWired Security4 months ago

Drug Sites Hijacked Spotify’s Search Ranking Through Fake Podcasts

A joint congressional report describes a spam operation that turned tens of thousands of fake podcasts into search-engine bait for…

NEWSThe Register4 months ago

2.4M+ VRChat users’ data accessed following cloud breach

No disclosure via official channels, no offer of identity theft monitoring, no problem

NEWSBleeping Computer4 months ago

Authorities dismantle 'AudiA6' ransomware crypto-laundering service

Law enforcement has dismantled the “AudiA6” cryptocurrency service allegedly used by ransomware actors and other cybercriminals to…

NEWSSecurity Magazine4 months ago

2.4M Impacted by VRChat Breach

An online virtual world platform experienced a data breach.

NEWSSecurity Magazine4 months ago

Identity Crimes Have Become Multi-Layered

Research shows identity crimes are increasingly leading to multiple fraud instances rather than creating isolated events.

NEWSInfosecurity Magazine4 months ago

CISA Orders Agencies to Patch by Risk, Not Severity

New CISA directive tells federal agencies to patch by real-world risk, not CVSS severity scores

NEWSHackread4 months ago

Criminal IP at Infosecurity Europe 2026: Introducing AITEM, the Next Chapter of Attack Surface Management

Torrance, United States / California, 11th June 2026, CyberNewswire

NEWSBleeping Computer4 months ago

Why AI-driven threats are exposing the limits of MSP security stacks

AI-driven attacks are exposing the limits of fragmented MSP security stacks and slow response workflows. Kaseya breaks down why in…

NEWShighInfosecurity Magazine4 months ago

Cybercriminals Use Fake AI Guides and Dev Tools to Spread AsyncRAT Malware

Fake AI guides hide a multi-stage chain that drops AsyncRAT, with signs of AI-assisted coding

NEWScriticalCVE-2026-352739.8 CRITICALSecurityWeek4 months ago

Oracle Addresses PeopleSoft Vulnerability Amid Reports of Zero-Day Attacks

Oracle has released mitigations for CVE-2026-35273, but it has not said whether it’s a zero-day exploited in ShinyHunters attacks.…

NEWSSecurityWeek4 months ago

Alert Fatigue Is Becoming a Security Threat of Its Own

As alert volumes outpace human capacity, organizations are turning to AI, automation, and deeper context to separate real threats…