Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,453 articles

NEWScriticalBleeping Computer14 days ago

Microsoft: Windows 11 23H2 reaches end of support in 30 days

Microsoft has reminded customers that systems running Windows 11 23H2 Enterprise, Education, and IoT Enterprise editions will stop…

NEWSInfosecurity Magazine14 days ago

Major French Supermarket Chains Hit by Cyber-Attack, Food Stock Impacted

The CEO of Cooperative U confirmed a cyber-attack affected the food stock in several stores from October 11

NEWSThe Hacker News14 days ago

Bring Your Own Agent: Your Employees' Assistants Are Already Logged In

The personal AI agents rollout is going about as smoothly as expected: Amazon now blocks Meta's Muse because it doesn't identify i…

NEWSSecurityWeek14 days ago

Mastermind of 15,000-Mule Cybercrime Laundering Network Pleads Guilty in US

Oleg Korniev was a leader of YMCO, a sophisticated network of money mules that helped hackers move funds outside the US. The post…

NEWSThe Hacker News14 days ago

Ledger Finds Unauthorized Hardware Implant in CryptoBilis-Sold Wallet Amid Fund Theft Reports

Cryptocurrency hardware maker Ledger has temporarily paused sales of its products via Cryptobilis following reports of stolen fund…

NEWScriticalSecurityWeek14 days ago

iRhythm Data Breach Impacts at Least 360,000 People

Hackers stole patients’ personal information, including names, addresses, email addresses, dates of birth, and phone numbers. The…

NEWSWired Security14 days ago

Feds Got Warrants to Use Fake Cell Towers to Hunt Down Don Lemon’s Producer

Investigators also sought permission to use an invasive surveillance tool called a cell-site simulators against journalist Georgia…

NEWScriticalCVE-2026-10225510.0 CRITICALThe Hacker News14 days ago

Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch

Threat actors have been observed exploiting a recently disclosed critical security flaw in SonicWall Secure Mobile Access (SMA) 10…

NEWShighSecurityWeek14 days ago

Ransomware Response Expert Arrested in ShinyHunters FBI Hack Probe

The suspect is believed to be Edward Dubrovsky, a Canadian cybersecurity executive who was visiting the United States for a confer…

NEWShighThe Register14 days ago

Imagine there's no Shiny Hunters – AI could make human hacking crews obsolete

This week on The Kettle, we discuss some arrests and how Mythos' mathematical expertise has led to a second exploited bug that no…

NEWSHackread14 days ago

Dark Web Empire Market Co-Creator Raheim Hamilton Gets 40 Years in Prison

Raheim Hamilton, co-creator of the dark web marketplace Empire Market, was sentenced to 40 years for a platform…

NEWSCyberScoop14 days ago

Your AI agent is only as safe as the packages it downloads

NVIDIA's new agent safety platform puts enforcement in the right place. It still must know what it is letting through. The post Yo…

NEWSInfosecurity Magazine14 days ago

Net Closes Around ShinyHunters with Another FBI Arrest

The FBI has arrested a Canadian cybersecurity executive as it continues its crackdown on ShinyHunters

NEWShighInfosecurity Magazine14 days ago

Months-Old Palo Alto VPN Vulnerability Remains a Target for Ransomware Groups

ReliaQuest confirmed that the Qilin and Settra ransomware groups are actively exploiting a Palo Alto vulnerability patched in May

NEWShighCVE-2026-850979.8 CRITICALThe Hacker News14 days ago

Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE

A maximum-severity security flaw impacting the Bricksforge plugin for WordPress has come under active exploitation in the wild, ac…

NEWScriticalCVE-2026-10225510.0 CRITICALSecurityWeek14 days ago

Critical SonicWall Vulnerability Exploited Days After Disclosure

CVE-2026-102255 is a pre-authenticated SSRF flaw that could allow attackers to perform unauthorized operations. The post Critical…

NEWScriticalInfosecurity Magazine14 days ago

Karaoke Giant Reveals Data Breach Impacting Eight Million

Daiichi Kosho says a supply chain breach has exposed personal data on over eight million karaoke customers

NEWSSecurityWeek14 days ago

Let’s Encrypt Cuts Default Certificate Validity to 64 Days Ahead of 45-Day Switch

Beginning February 2027, all newly issued certificates will have a 64-day validity period by default. The post Let’s Encrypt Cuts…

NEWSThe Hacker News14 days ago

CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records

Cybersecurity researchers have disclosed details of a two-pronged artificial intelligence (AI)-augmented initial access campaign t…

NEWShighBleeping Computer14 days ago

Nippon Columbia malware incident exposes 8.6 million karaoke fan records

Daiichi Kosho, a major Japanese entertainment system maker, disclosed that a malware infection at its contractor, Nippon Columbia,…

NEWSThe Register15 days ago

AI systems are fully capable of carrying out nightmare attacks against infrastructure and nobody's ready

Meanwhile, AI agents move robotic arms, 'make OT device operator screens lie'

NEWShighBleeping Computer15 days ago

Cyber exec arrested in case allegedly tied to ShinyHunters hackers

Canadian cybersecurity executive Edward Dubrovsky has been arrested in Pennsylvania in connection with alleged extortion activity…

NEWSBleeping Computer15 days ago

ARTEX AI, Claude agents used in cyberattacks on South Korean banks

The cyberattacks that shook the South Korean financial sector earlier this month were launched by a Chinese hacker using the ARTEX…

NEWSCyberScoop15 days ago

Canadian cybersecurity executive arrested in federal extortion case

Details of the case align with the investigation into ShinyHunters’ attack on FBI IT systems. The post Canadian cybersecurity exe…

NEWSBleeping Computer16 days ago

Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management

Traditional attack surface management helps organizations discover exposed assets, but visibility alone is not enough to address t…

NEWSWired Security16 days ago

AI Is Getting Really Good at Messing With Cybercriminals

Anti-cybercrime initiatives are increasingly using AI to scam the scammers by tricking them into talking to lifelike bots that the…

NEWSHackread16 days ago

FBI Arrests Ransomware Negotiation Firm Co-Founder in ShinyHunters Probe

FBI arrests Cypfer co-founder Edward Dubrovsky, now associated with CyberSteward, in the ShinyHunters investigation into the FBI j…

NEWSSecurityWeek16 days ago

Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison

The former core infrastructure engineer deleted admin accounts, reset hundreds of passwords, and demanded 20 bitcoin to spare the…

NEWSThe Hacker News16 days ago

The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn't

In environments studied for the 2026 State of Agent Security Report, roughly 1,280 third-party products now embed AI. About 282 of…

NEWSThe Register16 days ago

Two characters open up a world of typosquatting opportunities in Chromium browsers

Attackers abusing rare Cyrillic and Latin letters to impersonate popular websites