Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

2,132 articles

Progress orders emergency ShareFile server shutdown over mystery security threat

Vendor insists there's no evidence of unauthorized access, but it's asking customers to take one of the most drastic precautions a…

NEWScriticalSecurityWeek13 days ago

Zimbra Patches Critical Code Execution Vulnerability

The flaw results in malicious code embedded in crafted emails being executed when the emails are opened. The post Zimbra Patches C…

NEWSSecurityWeek13 days ago

EU Targets Russian Intelligence Officers Accused of Running a Yearslong Cyber Spying Campaign

The move targeted people and entities accused of links to an online spying network that the EU claims targeted governments and car…

NEWSWired Security13 days ago

A Leak of San Francisco Police Drone Footage Exposes the New Reality of Urban Surveillance

The SFPD’s exposure of hours of videos from drone platform Skydio reveals how broadly it’s watching the city from above—and how th…

NEWScriticalBleeping Computer13 days ago

US and allies warn of Russian critical infrastructure attacks

Cybersecurity agencies from the United States and eight other countries have issued a joint warning that Russian state hackers are…

NEWShighInfosecurity Magazine13 days ago

Hacker Extradited from Ukraine Pleads Guilty to Ryuk Ransomware Charges

An Armenian man has pleaded guilty to his role in the infamous Ryuk ransomware operation

NEWShighSecurityWeek13 days ago

Organizations Warned of Exploited Joomla Extension Vulnerabilities

Threat actors have been targeting Balbooa Forms and iCagenda Joomla extension flaws for remote code execution. The post Organizati…

NEWSCyberScoop13 days ago

AI-generated code has made security debt a governance problem

Moving from tool approval to true governance is the only way for CISOs to keep pace with the accelerating velocity of software ris…

NEWShighInfosecurity Magazine13 days ago

Australian Cyber Agency Warns of Global CMS Exploitation Campaign

Australian Cyber Security Centre warns CMS users of mass scanning and exploitation campaign

NEWSSecurityWeek13 days ago

Progress Prompts ShareFile Storage Zone Controller Shutdown Amid Security Concerns

The company notified customers to manually shut down their servers while it is investigating a credible threat. The post Progress…

NEWScriticalSecurityWeek13 days ago

Centers Laboratory Data Breach Affects 540,000 Individuals

The WorldLeaks extortion group claimed to have stolen 720 GB of data from the healthcare testing and laboratory services provider.…

NEWShighThe Hacker News13 days ago

Misconfigured Server Reveals Three Evilginx Phishing Operations Targeting Microsoft 365

An attacker running a live Microsoft 365 phishing operation left a Python web server listening on a public port with directory lis…

NEWSSecurity Magazine13 days ago

Security Leaders Discuss Exposure of 24B Credentials

Researchers discovered 8 terabytes of exposed credentials.

NEWScriticalCVE-2026-489399.8 CRITICALThe Hacker News14 days ago

iCagenda and Balbooa Forms Joomla Flaws Reportedly Exploited as Zero-Days

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two maximum-severity security flaws impacting iCagenda…

NEWSBleeping Computer14 days ago

OpenAI temporarily relaxes GPT-5.6 Sol usage limits

OpenAI is temporarily relaxing GPT-5.6 Sol usage after demand for the company's most powerful model surged over the past 48 hours.…

NEWSBleeping Computer14 days ago

Claude Fable 5 stays free for paid users until July 19 as Anthropic buys more time

Anthropic has just extended access to Claude Fable 5 for paid subscribers until July 19, giving you another week to keep using the…

NEWShighBleeping Computer14 days ago

RedHook Android malware now uses Wireless ADB for shell access

A new version of the RedHook Android malware abuses the Android Wireless Debugging (Wireless ADB) mechanism in a novel way to gain…

NEWSThe Hacker News15 days ago

Compromised jscrambler 8.14.0 npm Release Drops Rust Infostealer During Install

Version 8.14.0 of the jscrambler npm package shipped with a malicious preinstall hook that silently drops and runs a native infost…

NEWShighThe Hacker News15 days ago

Hackers Weaponize Balochistan Police Portal in Multi-Group Espionage Campaigns

Cybersecurity researchers have disclosed details of sustained cyber espionage activity against several Pakistani law enforcement o…

NEWSSecurityWeek15 days ago

Ghost Accounts Abuse GitHub API in Mass Recon Campaign

Multiple campaigns are using ghost accounts to map GitHub organizations, including their repositories and members. The post Ghost…

NEWSBleeping Computer15 days ago

Australia warns of global campaign targeting vulnerable CMS platforms

The Australian Cyber Security Centre (ACSC) issued an alert about a global exploitation campaign targeting vulnerable content mana…

NEWSWired Security15 days ago

AI Found a Root Bug in Linux That Everyone Missed for 15 Years

Plus: The Pentagon is training amateurs to become part of its hacker army, a Flock license plate reader error led to cops surround…

NEWSBleeping Computer15 days ago

'Ghostcommit' hides prompt injection in images to fool AI agents, steal secrets

A PNG hiding a prompt injection could steal your repo's secrets, researchers demonstrate. The technique, dubbed 'Ghostcommit,' sli…

NEWScriticalThe Hacker News15 days ago

Critical Zimbra Flaw Could Let Crafted Emails Run Malicious Code in User Sessions

Zimbra is urging customers to apply updates to address a critical security vulnerability impacting the Classic Web Client that cou…

NEWSBleeping Computer16 days ago

New U-Boot flaws could enable stealthy firmware attacks

Six vulnerabilities in the widely used U-Boot bootloader have been discovered that could allow attackers to execute malicious code…

NEWScriticalCyberScoop16 days ago

Armenian national pleads guilty to Ryuk ransomware attacks

Karen Vardanyan faces up to 15 years in federal prison and agreed to pay nearly $1.2 million in restitution. The post Armenian nat…

NEWSCyberScoop16 days ago

CISA looks to remedy ailments from big May credential leak

A major credential leak spurred the Cybersecurity and Infrastructure Security Agency to strengthen protections for its sensitive m…

NEWSBleeping Computer16 days ago

Ryuk ransomware member pleads guilty in the US, faces 15 years in prison

A 34-year-old Armenian man has pleaded guilty to hacking U.S. companies and deploying the infamous Ryuk ransomware to encrypt thei…

NEWShighThe Register16 days ago

Destructive Windows backdoor stuffs multiple wipers and ransomware code into a single package

Microsoft says GigaWiper combines at least 3 malware families into one modular tool

NEWSThe Hacker News16 days ago

Injective Labs GitHub Compromise Pushes Wallet-Key-Stealing npm Packages

Unknown threat actors compromised the Injective Labs SDK project's GitHub repository and leveraged it to publish a malicious packa…