Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,453 articles

TFG London cyberattack disrupts systems at Hobbs and Whistles retailers

TFG London detected a cybersecurity incident that impacted IT systems used by the Phase Eight, Hobbs, and Whistles premium fashion…

NEWSThe Hacker News12 days ago

GitHub Tightens npm Publishing After Flaw Left 1,500+ Packages Vulnerable to Hijacking

GitHub has taken the step of expiring unvalidated npm trusted publishing configurations 48 hours after creation after researchers…

NEWSCyberScoop12 days ago

West African scammers targeted in joint international government-industry operation

Participants said it was the largest joint scam operation to date and the first focused on the region. The post West African scamm…

NEWShighSecurityWeek12 days ago

Meta Says Hackers Took Code, Personal Data of 1,500 in GitHub Breach

Most of the affected individuals are Meta employees in the United States and they are being offered credit monitoring services. Th…

NEWSSecurity Magazine12 days ago

Nearly 1 in 3 Organizations Face IT Support Microsoft Teams Schemes

Microsoft Teams was a recurring initial access vector in the first half of 2026.

NEWShighHackread12 days ago

MS Teams Phishing, ClickFix and Shai-Hulud npm Attacks Dominate Threat Report

Ontinue’s 1H 2026 threat report shows attackers increasingly abusing Microsoft Teams, npm packages, device-code logins and blockch…

NEWScriticalBleeping Computer12 days ago

Ivanti warns of Connect Secure zero-day exploited in attacks

Ivanti urged customers on Tuesday to immediately patch an actively exploited zero-day vulnerability in the Ivanti Connect Secure (…

NEWSCVE-2026-105445Bleeping Computer12 days ago

Docker Hub flaw let attackers impersonate users, tamper with images

Docker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers access another user's container r…

NEWSHackread12 days ago

SerpApi Expands Beyond Search Results with New Extract API

New API enables developers to extract structured content, discover website pages, and perform bounded crawling, all within the Ser…

NEWShighBleeping Computer12 days ago

The MFA Gaps Attackers are Still Exploiting

Attackers continue exploiting gaps in MFA coverage, using stolen credentials to access VPNs, RDP, and Windows systems that still r…

NEWSInfosecurity Magazine12 days ago

European Retail Firms Confirm Cyber Incidents

Several Europe-based retail firms have confirmed experiencing cyber incidents, while H&M said it is “investigating” such claims

NEWSBleeping Computer12 days ago

SAP warns of maximum severity OAuth2 SSRF security flaw

SAP has addressed 20 security flaws across multiple products in its October 2026 security updates, including a maximum-severity vu…

NEWSInfosecurity Magazine12 days ago

Defenders Reluctant to Deploy Agentic AI as a Cybersecurity Tool

Flashpoint research suggests that only 25% of security teams have actively deployed AI, with many concerned about AI Agents’ negat…

NEWSThe Hacker News12 days ago

Xandr Fined a Record €8.6 Million for Relaying Grindr Data Revealing Sexual Orientation

The Norwegian Data Protection Authority (DPA) has fined Xandr, an advertising unit owned by Microsoft, €8.6 million ($9.62 million…

NEWSHackread12 days ago

Criminal IP to Showcase Threat Intelligence and AITEM at Security Days Fall 2026 Tokyo

Torrance, California, 13th October 2026, CyberNewswire

NEWSSecurity Magazine12 days ago

14M Credentials Re-Exposed by AI Development Company

A cybersecurity researcher discovered a publicly accessible database with credentials from previous breaches.

NEWSThe Register12 days ago

Cyberattacks crank French supermarket refrigeration systems up to 50°C

Stock spoiled at hundreds of stores as manufacturer says affected equipment ran outdated firmware

NEWSSecurityWeek12 days ago

Small AI Models May Soon Be Able to Self-Replicate on IoT Devices, Anthropic Warns

Experiments show cheap TV boxes can run capable AI models, and small models may soon be able to spread across such devices on thei…

NEWSThe Hacker News12 days ago

[Webinar] How to Stop AI-Driven Privilege Escalation With Runtime Identity Controls

The dangerous part of a stolen identity isn't always the initial login. It's what an attacker can do with that access next. With…

NEWSHackread12 days ago

Powering Proactive Defense: How MSSPs Can Strengthen Threat Hunting Against Ransomware

Disclosure: This article was provided by ANY.RUN. The information and analysis presented are based on their research and findings.

NEWScriticalThe Register13 days ago

'123456' password linked to Denmark data breach affecting 8.8M people

Local media reports three weakly protected accounts at small IT biz whose access to national register was abused

NEWSSecurityWeek13 days ago

XWorm RAT Evolves Into Surveillance Platform

Expanded plugin count allows the malware to monitor users’ location, stream live audio, and interact with authenticated browser se…

NEWSThe Hacker News13 days ago

LG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local Network

Three vulnerabilities in LG's webOS can be chained to give an attacker on the same local network root access to certain smart TVs…

NEWSSecurityWeek13 days ago

AI Turns Familiar Cyberattacks Into a Race Against Time

IBM’s Steve Wallin talks to SecurityWeek on the effect of AI-driven attacks on enterprise defenses. The post AI Turns Familiar Cyb…

NEWSSecurityWeek13 days ago

$86 Million Crypto Heist Linked to Ledger Signer Hardware Implant

A small circuit board hidden under the signers’ screens read user data and transmitted it to the attackers. The post $86 Million C…

NEWSThe Hacker News13 days ago

Product Walkthrough: Bitdefender AI Visibility and Control

A user opens a browser tab, pastes data into a chat assistant, and nothing is installed. A developer adds a coding assistant as a…

NEWShighHackread13 days ago

Amazon Fire TV Cube Rooted Using Four-Year-Old Arm Mali Vulnerability

A four-year-old Arm Mali GPU vulnerability can be used to root the third-generation Amazon Fire TV Cube, but…

NEWSThe Register13 days ago

Owner of fashion brands Hobbs and Whistles joins autumn pwned collection

Several IT systems remain offline and orders face delays as TFG London becomes latest retailer to suffer cyberattack

NEWSInfosecurity Magazine13 days ago

UK Government Announces Sweeping New AI Security Plans

The government is planning tweaks to legislation, new incident response and more to head of AI security threats

NEWSSecurityWeek13 days ago

Cyberattack Prompts Ahold Delhaize to Disconnect Systems

The company says it took some of its systems offline to contain a security issue within its network. The post Cyberattack Prompts…