Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

2,132 articles

Police suspects Dutch hackers were involved in Odido breach

The Dutch National Police (Politie) says it has found "strong indications" that Dutch hackers have been involved in a February bre…

NEWSThe Hacker News16 days ago

URGENT - Progress Tells ShareFile Customers to Shut Down Storage Zone Controllers Over Security Threat

Progress Software has told ShareFile customers to shut down the Windows servers running their Storage Zone Controllers, confirming…

NEWSBleeping Computer16 days ago

Progress urges ShareFile customers to shut down servers over "credible" threat

Progress Software is emailing ShareFile customers who use Storage Zone Controllers to immediately shut down their servers after id…

NEWSInfosecurity Magazine16 days ago

CISA Details Incident Response to Exposed AWS GovCloud Keys

CISA reveals how it responded after sensitive AWS GovCloud credentials and internal data were exposed in a public GitHub repositor…

NEWSThe Hacker News16 days ago

Six New U-Boot Flaws Could Let Malicious Images Crash Devices or Run Code at Boot

Researchers at firmware security firm Binarly have found six new flaws in U-Boot, the small program that starts up hardware as var…

NEWScriticalBleeping Computer16 days ago

Hackers exploit critical auth bypass in Gitea Docker image

Hackers are actively exploiting a critical vulnerability in the official Docker image for the Gitea self-hosted Git service that a…

NEWSBleeping Computer16 days ago

Money launderer accused of stealing seized crypto while in prison

A Bulgarian national has been charged with stealing $290,000 in government-seized cryptocurrency while serving 121 months in priso…

NEWShighInfosecurity Magazine16 days ago

Microsoft Warns New 'GigaWiper' Malware Combines Espionage and Destructive Capabilities

A new multi-purpose backdoor allows cyber threat actors to conduct both quiet espionage activity and destructive wiping operations

NEWShighSecurityWeek16 days ago

In Other News: DHS Database Hacked, Adobe Boosts Patch Cadence, Canada Disrupts Ransomware Ops

Other noteworthy stories that might have slipped under the radar: Abnormal AI sued by Anthropic, AssuranceAmerica data breach affe…

NEWSThe Hacker News16 days ago

Laser Attack Resets Tangem Wallet Passwords on Cards That Can't Be Patched

Researchers at Ledger's Donjon security team have shown that a precisely timed laser pulse, aimed at the chip inside a Tangem cryp…

NEWSThe Hacker News16 days ago

Researcher Details WhatsApp-to-Host Attack Chain Using Three OpenClaw Flaws

Details have emerged about three now-patched security flaws in the OpenClaw personal artificial intelligence (AI) assistant that,…

NEWSBleeping Computer16 days ago

The Replicant in Your Directory: AI Agents and the Identity Security Gap

AI agents are accelerating the growth of non-human identities, making it harder for organizations to understand what exists, who o…

NEWSInfosecurity Magazine16 days ago

Anthropic and OpenAI Security Tools Could Fuel Cyber-Attacks, Researchers Warn

Researchers at the AI Now Institute developed a proof-of-concept exploit showing common AI tools used for security could backfire

NEWSHackread16 days ago

Cybersecurity Negotiator Gets 70 Months for Helping BlackCat Extort Victims

Former ransomware negotiator Angelo Martino gets 70 months in prison for helping BlackCat extort US victims and misuse confidentia…

NEWSThe Hacker News16 days ago

New MODBEACON RAT Uses gRPC Streaming for Encrypted C2 Traffic

The China-linked cybercrime group known as Silver Fox has been attributed to a new Rust-based remote access trojan (RAR) called MO…

NEWShighInfosecurity Magazine16 days ago

New Ransomware Exploits Malicious Driver to Remove Cybersecurity Protections

GodDamn ransomware uses remote desktop application to secretly move around networks and drop the malicious PoisonX kernel driver

NEWSSecurityWeek16 days ago

Third US Security Expert Sentenced to Prison for Helping Ransomware Gang

Angelo Martino, a former ransomware negotiator, was sentenced to 70 months for helping the BlackCat/Alphv group. The post Third US…

NEWShighThe Register16 days ago

Fashion mart Miinto unzips breach details, warns shoppers to watch for phisherfolk

Copenhagen company ‘sorry’ after 'perpetrator' pops order management system

NEWShighSecurityWeek16 days ago

China, India-Linked Hackers Both Targeted Same Pakistani Police Force

Both foes and allies have targeted the Balochistan Police force in Pakistan for at least two years, according to SentinelOne. The…

NEWSThe Hacker News16 days ago

Unpatched XRING Flaw in XQUIC Lets Remote Clients Crash HTTP/3 Servers

A single wrong variable on one line in XQUIC, Alibaba's QUIC and HTTP/3 library, lets any remote client crash the server with a sh…

NEWScriticalBleeping Computer16 days ago

Zimbra urges customers to patch critical web client XSS flaw

The Zimbra security team urged customers to patch a critical vulnerability affecting the Classic Web Client used to access the Zim…

NEWSThe Hacker News16 days ago

From 17,000 to 1.1 Million Assets: How Lumen Technologies Rebuilt Exposure Management at Scale

Most enterprises assume their asset inventory is close enough to accurate. The evidence suggests otherwise. According to a survey…

NEWShighThe Hacker News16 days ago

Exposed Hacker Server Reveals WP-SHELLSTORM Backdooring Thousands of WordPress Sites

A cybercrime crew left one of its own servers wide open on the internet for three weeks, and it exposed the operation's inner work…

NEWSSecurityWeek16 days ago

Okta Warns of Vishing Attacks Targeting Microsoft 365 Customers

The attackers call victims to direct them to phishing websites mirroring Microsoft Entra ID login pages. The post Okta Warns of Vi…

NEWSThe Hacker News16 days ago

Study of 281 Free Android VPN Apps Finds Traffic Leaks, Unencrypted Data, and Tracking

Researchers ran 281 of the most popular free VPN apps on the Google Play Store through a new testing system and found that many fa…

NEWShighThe Hacker News16 days ago

Hackers Use Fake Microsoft Entra Passkey Enrollment to Gain Microsoft 365 Access

A threat actor has been targeting organizations spanning multiple sectors with voice-based fake security requests that prompt Micr…

NEWSInfosecurity Magazine16 days ago

Microsoft Warns of Increase in Number of Security Updates

Microsoft has said the volume of Windows security updates is set to grow as it uses AI to find new bugs

NEWSHackread16 days ago

FastNetMon Launches Netomics, a Self-Hosted Routing Intelligence Platform

London, United Kingdom, 10th July 2026, CyberNewswire

NEWSThe Register16 days ago

Scot NHS Trust probes email stuffup involving maternity patients' data

NHS Forth Valley is the latest health board to bungle basic email data protection principles

NEWShighSecurityWeek16 days ago

GigaWiper Combines Multiple Malware for System-Level Sabotage

The backdoor’s destructive capabilities include a standalone wiper, ransomware encryption, and a multi-pass wiping command. The po…