Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,419 articles

NEWScriticalInfosecurity Magazine5 months ago

Palo Alto Warns High-Severity Bug Is Being Actively Exploited

A vulnerability in Palo Alto Networks’ PAN-OS software is being exploited in attacks

NEWSInfosecurity Magazine5 months ago

Infosecurity Europe: OWASP Forms New Agentic Research Council

OWASP’s new Agentic Research Council will aim to connect academic work to operational realities on agentic AI security

NEWShighWired Security5 months ago

Cybercrime Crew Claims It Hacked Mike Lindell’s MyPillow

Plus: A ransomware group is now stealing data in person, BusPatrol wants to hand its license plate surveillance data to the cops,…

NEWSThe Register5 months ago

Lone attacker published 14 malicious npm packages mimicking popular OpenSearch, Elasticsearch libraries

And then Microsoft busted them all

NEWSWired Security5 months ago

The White House’s Aliens.gov Site Brags That ICE Arrested More Than 700 US Citizens

The website, which compares human beings to extraterrestrials, touts arrest numbers from the Trump administration’s sweeping immig…

NEWSThe Register5 months ago

ICE to keep an eye on your eyes under $25M biometric scanner deal

And you thought a face recognition app was intrusive?

NEWScriticalThe Register5 months ago

No fix yet for critical RCE bug in open-source Git service Gogs - exploit module is out

Researcher reported the vuln in March. Maintainers haven't responded to his messages since

NEWScriticalThe Register5 months ago

23andMe inherits lawsuit over 'disturbing' DNA data breach

California AG claims genetics biz downplayed 2023 mega-leak while paying ransom to attacker

NEWSSecurity Magazine5 months ago

Risks of Robinhood Using AI Agents to Trade, Make Purchases

Robinhood is enabling AI agents to trade and make credit card purchases on behalf of users.

NEWSThe Register5 months ago

Dutch cops wrest 17M devices from mystery botnet's clutches

Hosting provider pulled the plug after police traced 200 servers to the Netherlands

NEWSInfosecurity Magazine5 months ago

Silent Ransom Group Uses In-Person IT Impersonation to Breach Systems

Threat actors from the Silent Ransom Group, aka Luna Moth, are escalating attacks by impersonating IT staff in phone calls and eve…

NEWSThe Register5 months ago

ChatGPT blindly trusts browser content, turning the page into a payload

You and me go ChatGPhish-ing in the dark

NEWSThe Register5 months ago

Russia-linked threat group put ChatGPT to work from lure to payload

Researchers say 'GREYVIBE' crew used AI tools throughout a campaign targeting Ukrainian military and government

NEWSThe Register5 months ago

ShinyHunters adds Charter to trophy shelf after 4.9M customer records leak

Telco giant says no sensitive data was taken, though names, addresses, phones, and emails are now out there

NEWSInfosecurity Magazine5 months ago

Infosecurity Europe: CyCOS Project Expands to Support UK SMEs as CIISec Takes Over

From a research-driven pilot, the Cybersecurity Communities of Support (CyCOS) is about to be handed over to CIISec

NEWShighInfosecurity Magazine5 months ago

Chinese Hackers Exploit Iran War to Target Maritime and Energy Companies

ESET’s 2026 APT Activity Report suggests China-backed APTs are using instability in the region to target victims, as well as conti…

NEWShighInfosecurity Magazine5 months ago

AI-Generated npm Malware Leaks Its Own GitHub Token

Sloppy AI-generated npm infostealer leaked its own GitHub token, exposing the operator

NEWSThe Register5 months ago

Troops’ phones gave away location data to foreign adversaries

Lawmakers push DoD to tighten smartphone controls after adversaries exploited commercial tracking data

NEWScriticalThe Register5 months ago

Disgruntled 0-day hunter 'humiliated' by Microsoft pledges 'bone shattering drop' as Redmond calls cops

Six 0-days, three under active exploitation, more to come on July 14?

NEWSThe Register5 months ago

Snowflake buys Natoma to help freeze out rogue agents

It is the database titan’s sixth acquisition announcement since June 2025

NEWSSecurity Magazine5 months ago

As Summer Closes In, the Travel Sector Is Unprepared

In the last 12 months, 92% of agencies experienced some form of cyber threat. Yet, only 20% plan to establish an incident response…

NEWSWired Security5 months ago

The Pentagon Knew Enemies Could Track Troops’ Phones for Years. Now They Are

The US military has long known that cheap fixes could stop location data from exposing its troops. It adopted almost none—and now…

NEWSThe Register5 months ago

Microsoft tests the 15-character limit of Windows Server admins' patience

May security update trips over hostnames of a very specific length

NEWSInfosecurity Magazine5 months ago

Attackers Move Past Typosquatting to Realistic Package Impersonation

Most malicious open source packages now mimic real code rather than rely on typosquatting

NEWSSecurity Magazine5 months ago

AI Agent Conducted a Cyberattack on Its Own — It Took Less Than One Hour

Security magazine speaks to a researcher about an observed cyberattack driven entirely by AI.

NEWScriticalSecurity Magazine5 months ago

6M Impacted by Carnival Cruise Data Breach

The incident was caused by a social engineering attack targeting an employee device.

NEWScriticalInfosecurity Magazine5 months ago

Microsoft Condemns "Uncoordinated" Zero Day Disclosures

Microsoft warned the disclosure of several unpatched vulnerabilities without notice has put “customers at unnecessary risk”

NEWSInfosecurity Magazine5 months ago

New Threat Actor Jinx-0164 Targets Crypto Developers on macOS

New actor Jinx-0164 hit crypto developers with fake recruiter lures and macOS malware

NEWSInfosecurity Magazine5 months ago

Infosecurity Europe: Cybersecurity Staff Prefer CISOs With Real Attack Response Experience, Study Reveals

ISC2 survey of cybersecurity professionals suggests that staff want their information security leaders to have experienced reactin…

NEWShighWired Security5 months ago

Scammers Are Using Your Real Hotel Reservations to Trick You With Spear-Phishing Attacks

Customer data from more than 350 hotels around the world may have been accessed as part of realistic reservation-hijacking scams.