Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,419 articles

Trump Signs Executive Order for Oversight of AI Models, Security Experts Discuss

President Trump has signed an executive order requesting AI companies to show models to the federal government. Security experts d…

NEWShighSecurity Magazine5 months ago

Hackers Tricked Instagram’s AI Chatbot to Hijack Accounts

Hackers deceived Instagram’s AI chatbot, prompting it to provide access to user accounts.

NEWSInfosecurity Magazine5 months ago

Infosecurity Europe: NCSC Urges Immediate Action to Boost Resilience as Uncertainty Persists

NCSC director of operations, Paul Chichester, says it’s time to future-proof cybersecurity today

NEWSInfosecurity Magazine5 months ago

Infosecurity Europe: Cybersecurity Teams Which Don’t Leverage AI are "Doomed to Fail"

Humans still need to be part of cyber defense, but refusing to deploy AI is no longer optional against AI-enhanced cyber threats,…

NEWSThe Register5 months ago

Russian spy agency says foreign spies turned officials' smartphones into surveillance devices

FSB claims large-scale snoop op compromised phones of senior officials, but gives no technical evidence to back allegations

NEWSInfosecurity Magazine5 months ago

Infosecurity Europe: Bayer Reinvents Security Awareness Training to Counter AI Threats

Bayer’s security awareness training now focuses on psychological approaches rather than technical methods for detecting social eng…

NEWScriticalThe Register5 months ago

Microsoft reaches for olive branch after public dustup with 0-day researcher

Following days of criticism from the security community, Redmond dials back rhetoric, insists vulnerability hunters not in its leg…

NEWSThe Register5 months ago

Claude celebrates Anthropic's stock market float with blockbuster ... outage

Chatbot has no respect for timing of its maker's financial announcement

NEWSInfosecurity Magazine5 months ago

Threat Actor Uses AI to Build EDR Evasion Tools

A threat actor used AI coding tools to build and test EDR evasion malware, Sophos finds

NEWSThe Register5 months ago

Northern Ireland cops issue PSA after official phone number spoofed by scammers

If you’re going to impersonate an officer, perhaps choose a more sophisticated way to nick cash than asking for gift cards…

NEWSWired Security5 months ago

The Manhattan Institute Helped Kill DEI. Now It’s Coming for Protests

The right-wing think tank is actively pushing “civil terrorism”—increasing penalties for minor crimes committed while people engag…

NEWSInfosecurity Magazine5 months ago

Infosecurity Europe: UK Firms Prioritize AI Threat Preparedness as Cyber Risks Evolve

UK organizations are prioritizing AI-driven cybersecurity as 43% cite AI-powered attacks as their top risk, prompting significant…

NEWSInfosecurity Magazine5 months ago

Attackers Hijack Red Hat npm Scope to Steal Cloud Secrets

Attackers backdoored 32 packages in Red Hat's official npm scope to steal cloud and CI secrets

NEWSInfosecurity Magazine5 months ago

Infosecurity Europe: Business Leaders Lack Understanding of Threat Intelligence, Study Warns

A new Silobreaker and SANS Institute paper examines the ‘Intelligence-Stakeholder Gap’ and what organizations must do to achieve b…

NEWShighThe Register5 months ago

Shai-Hulud malware worms Red Hat npm package versions downloaded 80K times a week

TeamPCP? Or copycat malware dev?

NEWShighThe Register5 months ago

Election interlopers register 5K+ domains, hope to catch some voting phish

Hacking voting machines is so 2017. Phishing, impersonation pose the real election risks

NEWShighKrebs on Security5 months ago

Hackers Used Meta’s AI Support Bot to Seize Instagram Accounts

The Instagram accounts for the Obama White House and the Chief Master Sergeant of the U.S. Space Force were briefly defaced with p…

NEWSSecurity Magazine5 months ago

The First World Cup in the Agentic Era

This year, the World Cup is facing a cyber threat that, historically, it hasn’t seen as often: malicious AI agents.

NEWSSecurity Magazine5 months ago

US Troops in Active War Zones Tracked with Commercial Location Data

Foreign adversaries are exploiting commercial location data to track U.S. servicemembers in active war zones.

NEWShighThe Register5 months ago

GTA cheat service Atlas Menu hacked as attacker alleges screenshot spying

A database containing 64,000 user records was published to GitHub after an attacker claimed to have compromised all Atlas systems

NEWScriticalInfosecurity Magazine5 months ago

Critical Flowise Flaw Gives Attackers Full Server Control

Obsidian publishes PoC for a 1-click Flowise RCE that can fully compromise self-hosted servers

NEWSInfosecurity Magazine5 months ago

Infosecurity Europe: Tabletop Exercise to Test How CISOs Respond to Major Supermarket Cyber-Attack

Semperis is set to bring ‘Enter the War Room: A Tabletop Experience’ to Infosecurity Europe to help cybersecurity leaders prepare…

NEWShighThe Register5 months ago

Palo Alto VPN bug graduates from advisory to active exploitation

Rapid7: Attackers exploit authentication bypass flaw in the wild, meaning more emergency patching for PAN-OS users

NEWSInfosecurity Magazine5 months ago

Infosecurity Europe: AI SOCs Will Still Need SOC Analysts, Security Vendors Say

Top cybersecurity vendors said AI won't replace entry-level – only routine ticket-taking and triage

NEWSThe Register5 months ago

Password manager Dashlane suspends customer accounts amid brute-force attacks

Engineers' weekends ruined as Dashlane's automatic protections kicked in

NEWSInfosecurity Magazine5 months ago

FSB Group Gamaredon Hides Worm in Windows Data Streams

FSB-linked Gamaredon concealed a fileless worm in NTFS data streams to spy on Ukraine targets

NEWSThe Register5 months ago

Putin sends submarines to survey Britain's subsea cables. UK deploys Royal Navy, mobilizes parliamentary draftsmen

Proposed legislation threatens fines and prison for reckless damage. Russian Prez must be shaking in his boots

NEWSWired Security5 months ago

The Romance Scammer Who Made a Small Fortune Posing as a WWE Superstar

In this excerpt from WIRED Book Club pick The Yahoo Boys, journalist Carlos Barragán traces one scammer’s journey from flop to for…

NEWShighInfosecurity Magazine5 months ago

Attackers Abuse Shared Content for ChatGPT Phishing Campaign

Push Security says threat actors are delivering malware hosted on chatgpt.com/s/ domain

NEWSWired Security5 months ago

Websites Can Now Spy on You Through Your Hard Drive

Thanks to the newly detailed FROST technique, telltale SSD activity can be measured in the browser using simple JavaScript.