Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

2,132 articles

Hackers backdoor Jscrambler npm package with infostealer malware

The Jscrambler client-side web security company disclosed that a threat actor published a malicious version of its npm package tha…

NEWShighBleeping Computer13 days ago

New CrashStealer malware poses as Apple crash reporting tool

A new macOS information-stealing malware called CrashStealer pretends to be Apple's crash-reporting tool to steal credentials, key…

NEWShighThe Hacker News13 days ago

CrashStealer macOS Malware Uses Notarized Dropper to Pass Gatekeeper Checks

Cybersecurity researchers have flagged a new macOS information stealer called CrashStealer that's capable of harvesting sensitive…

NEWSThe Hacker News13 days ago

Google and Microsoft Pull ModHeader With 1.6 Million Installs After Dormant Collector Found

Google and Microsoft have pulled ModHeader, a popular header-editing extension with roughly 1.6 million installs across Chrome and…

NEWSCyberScoop13 days ago

Europe strikes out against Russia’s Turla over espionage, ‘destructive attacks’

The EU, its members and the U.K. took action against Russian government officials and others while attributing the winter cyberatt…

NEWSThe Register13 days ago

EU and UK officially blame Russian spies for cyberattack on Poland's power grid

Sweeping sanctions and condemnation follow op that could have left half a million without power in the depths of winter

NEWShighInfosecurity Magazine13 days ago

Open Directory Exposes Three Evilginx Phishing Operators

Misconfigured server exposed three phishing operators running Evilginx forks to bypass MFA

NEWShighCyberScoop13 days ago

Officials once again warn defenders that Russian hackers are targeting network devices

State-sponsored attackers are targeting critical infrastructure networks in defense, communications, energy, finance, government a…

NEWScriticalBleeping Computer13 days ago

CISA warns of actively exploited RCE flaws in Joomla extensions

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that attackers are exploiting vulnerabilities in the i…

NEWSThe Hacker News13 days ago

⚡ Weekly Recap: ShareFile Threat, Citrix Bleed 2 Ransomware, AI Coding Attacks, and More

Somewhere right now, a security tool is quietly finding bugs faster than any human can fix them. That's supposed to be the good ne…

NEWSKrebs on Security13 days ago

Lessons Learned from CISA’s Recent GitHub Leak

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a postmortem on a data leak in which a contractor published…

NEWSInfosecurity Magazine13 days ago

Pakistani Police Systems Hit by Chinese and Indian Espionage

Chinese and Indian spies converged on the same Balochistan police force, SentinelLabs found

NEWShighSecurityWeek13 days ago

Hacker Conversations: Jesse McGraw (GhostExodus), From Blackhat Hacker to Redemption

Once a notorious blackhat hacker, McGraw shares his journey from high school hacking and prison to redemption as a cybersecurity a…

NEWShighBleeping Computer13 days ago

Lidl discloses online shop breach after service provider hack

German discount supermarket chain Lidl notified customers in Germany, Belgium, and the Netherlands that attackers stole their pers…

NEWSBleeping Computer13 days ago

Breach at the Beach: Play the Ultimate Entra ID CTF

Learn how attackers abuse Entra ID through a free hands-on Capture the Flag. Varonis created the Breach at the Beach CTF to teach…

NEWSHackread13 days ago

Torq and Criminal IP Partner to Deliver Decision-Ready Threat Intelligence for Autonomous SOC Operations

Torrance, California, USA, 13th July 2026, CyberNewswire

NEWSThe Hacker News13 days ago

New MemGhost Attack Plants Persistent False Memories in AI Agents Through One Email

Give an AI assistant a memory and access to your inbox, and you hand an attacker a way to rewrite what it thinks it knows about yo…

NEWSBleeping Computer13 days ago

UK charges suspects linked to Russian Coms call spoofing platform

UK authorities charged five people following a National Crime Agency (NCA) investigation into Russian Coms, a major caller ID spoo…

NEWSThe Hacker News13 days ago

Forg365 PhaaS Targets Microsoft 365 with Device Code and AitM Session Theft

A new phishing-as-a-service (PhaaS) operation called Forg365 is using a combination of device code phishing, adversary-in-the-midd…

NEWSInfosecurity Magazine13 days ago

Novel OAuth Client ID Spoofing Technique Targets Cloud Environments

New research reveals cyber-attackers can spoof OAuth Client IDs in Microsoft Entra ID, creating a stealthy path into cloud environ…

NEWSSecurityWeek13 days ago

Cybersecurity M&A Roundup: 37 Deals Announced in June 2026

Significant cybersecurity M&A deals announced by 1Password, Accenture, Cisco, F5, Rubrik, and SailPoint. The post Cybersecurity M&…

NEWSInfosecurity Magazine13 days ago

Progress Software Warns of "External Security Threat" to ShareFile

Progress Software, the provider of the popular file-sharing and data storage solutions, has urged customers to shut down the serve…

NEWSThe Register13 days ago

World Cup grudge attackers may have scored Argentine FA access via year-old infostealer infection

Footie fans? Overreacting? There's a first time for everything

NEWShighSecurityWeek13 days ago

RabbitMQ Vulnerability Threatens Enterprise Systems

Unauthenticated attackers could obtain the broker's confidential OAuth client secret, allowing them to take control of the broker.…

NEWSThe Hacker News13 days ago

Meta Files Patent for AI That Can Listen All Day and Track How You're Feeling

Meta has filed a patent application for an AI that listens to your voice throughout the day, works out how it thinks you are feeli…

NEWSThe Hacker News13 days ago

Thinking Fast and Slow in the SOC: The Case for Combining Autonomous AI with Analyst Copilots

A few days ago, I was sitting with the CISO of a Fortune 50 company, walking through how his security team was thinking about AI a…

NEWShighBleeping Computer13 days ago

EU sanctions Russian GRU military hackers over cyberattacks

The European Union and the United Kingdom jointly sanctioned dozens of Russian individuals and entities and accused Russia of coor…

NEWShighHackread13 days ago

Siggen Backdoor Hits Windows Developers Via Infected Visual Studio Projects

Dr.Web details Siggen Windows backdoor that uses Steam for C2, steals credentials and crypto data and infects Visual Studio projec…

NEWSThe Hacker News13 days ago

Attacker Uses Suspected AI-Generated PowerShell Script to Map Active Directory

Cybersecurity researchers have flagged an intrusion in which an unknown threat actor leveraged a vibe-coded PowerShell script for…

NEWShighInfosecurity Magazine13 days ago

Russian State Hackers Target Vulnerable Routers Worldwide, Joint Advisory Warns

Cybersecurity agencies from 12 countries have warned that Russian state-backed hackers are actively targeting vulnerable routers u…