Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

1,610 articles

Anthropic and OpenAI Security Tools Could Fuel Cyber-Attacks, Researchers Warn

Researchers at the AI Now Institute developed a proof-of-concept exploit showing common AI tools used for security could backfire

NEWSHackread3 days ago

Cybersecurity Negotiator Gets 70 Months for Helping BlackCat Extort Victims

Former ransomware negotiator Angelo Martino gets 70 months in prison for helping BlackCat extort US victims and misuse confidentia…

NEWSThe Hacker News3 days ago

New MODBEACON RAT Uses gRPC Streaming for Encrypted C2 Traffic

The China-linked cybercrime group known as Silver Fox has been attributed to a new Rust-based remote access trojan (RAR) called MO…

NEWShighInfosecurity Magazine3 days ago

New Ransomware Exploits Malicious Driver to Remove Cybersecurity Protections

GodDamn ransomware uses remote desktop application to secretly move around networks and drop the malicious PoisonX kernel driver

NEWSSecurityWeek3 days ago

Third US Security Expert Sentenced to Prison for Helping Ransomware Gang

Angelo Martino, a former ransomware negotiator, was sentenced to 70 months for helping the BlackCat/Alphv group. The post Third US…

NEWShighThe Register3 days ago

Fashion mart Miinto unzips breach details, warns shoppers to watch for phisherfolk

Copenhagen company ‘sorry’ after 'perpetrator' pops order management system

NEWShighSecurityWeek3 days ago

China, India-Linked Hackers Both Targeted Same Pakistani Police Force

Both foes and allies have targeted the Balochistan Police force in Pakistan for at least two years, according to SentinelOne. The…

NEWSThe Hacker News3 days ago

Unpatched XRING Flaw in XQUIC Lets Remote Clients Crash HTTP/3 Servers

A single wrong variable on one line in XQUIC, Alibaba's QUIC and HTTP/3 library, lets any remote client crash the server with a sh…

NEWScriticalBleeping Computer3 days ago

Zimbra urges customers to patch critical web client XSS flaw

The Zimbra security team urged customers to patch a critical vulnerability affecting the Classic Web Client used to access the Zim…

NEWSThe Hacker News3 days ago

From 17,000 to 1.1 Million Assets: How Lumen Technologies Rebuilt Exposure Management at Scale

Most enterprises assume their asset inventory is close enough to accurate. The evidence suggests otherwise. According to a survey…

NEWShighThe Hacker News3 days ago

Exposed Hacker Server Reveals WP-SHELLSTORM Backdooring Thousands of WordPress Sites

A cybercrime crew left one of its own servers wide open on the internet for three weeks, and it exposed the operation's inner work…

NEWSSecurityWeek3 days ago

Okta Warns of Vishing Attacks Targeting Microsoft 365 Customers

The attackers call victims to direct them to phishing websites mirroring Microsoft Entra ID login pages. The post Okta Warns of Vi…

NEWSThe Hacker News3 days ago

Study of 281 Free Android VPN Apps Finds Traffic Leaks, Unencrypted Data, and Tracking

Researchers ran 281 of the most popular free VPN apps on the Google Play Store through a new testing system and found that many fa…

NEWShighThe Hacker News3 days ago

Hackers Use Fake Microsoft Entra Passkey Enrollment to Gain Microsoft 365 Access

A threat actor has been targeting organizations spanning multiple sectors with voice-based fake security requests that prompt Micr…

NEWSInfosecurity Magazine3 days ago

Microsoft Warns of Increase in Number of Security Updates

Microsoft has said the volume of Windows security updates is set to grow as it uses AI to find new bugs

NEWSHackread3 days ago

FastNetMon Launches Netomics, a Self-Hosted Routing Intelligence Platform

London, United Kingdom, 10th July 2026, CyberNewswire

NEWSThe Register3 days ago

Scot NHS Trust probes email stuffup involving maternity patients' data

NHS Forth Valley is the latest health board to bungle basic email data protection principles

NEWShighSecurityWeek3 days ago

GigaWiper Combines Multiple Malware for System-Level Sabotage

The backdoor’s destructive capabilities include a standalone wiper, ransomware encryption, and a multi-pass wiping command. The po…

NEWShighThe Hacker News3 days ago

Attackers Exploit 'Ill Bloom' Vulnerability to Drain $3.1 Million From Cryptocurrency Wallets

Security firm Coinspect has disclosed a crypto wallet flaw it calls Ill Bloom, and attackers are already using it. The flaw is in…

NEWSInfosecurity Magazine3 days ago

NHS Warns Staff Over Unauthorized Access to Patient Data

NHS tells staff they could face prison for “inappropriate” access to patients’ medical records

NEWSSecurityWeek3 days ago

‘HalluSquatting’ Turns AI Hallucinations Into Botnet Delivery Mechanism

Researchers demonstrate adversarial hallucination squatting against popular AI assistants to achieve remote code execution. The po…

NEWSBleeping Computer3 days ago

Former ransomware negotiator gets 4 years for BlackCat attacks

A former employee of cybersecurity incident response company DigitalMint was sentenced to 70 months in prison for targeting U.S. c…

NEWSThe Hacker News3 days ago

Ransomware Negotiator Gets 70 Months in Prison for Aiding BlackCat Attacks

A 41-year-old former ransomware negotiator has been sentenced to nearly six years (i.e., 70 months) in prison in the U.S. for thei…

NEWShighSecurityWeek3 days ago

Network of 200 GitHub Repositories Used for Malware Infection

A Go module is used to load PowerShell code that fetches a resolver from public dead drops to execute Windows malware. The post Ne…

NEWSSecurity Magazine3 days ago

Estonia to Grant Digital IDs to AI Agents

The nation intends to assign digital identification numbers to AI agents.

NEWShighThe Register3 days ago

Microsoft warns customers AI will mean busier Patch Tuesdays

More patches mean more reasons to buy Redmond’s auto-patching tools

NEWSCyberScoop3 days ago

Former DigitalMint ransomware negotiator who duped clients sentenced to 70 months in jail

Angelo Martino exploited his insider position and fed confidential information to ransomware co-conspirators to extort a combined…

NEWSThe Register3 days ago

An unnamed US county – perhaps in Ohio – paid $1M extortion demand to cybercriminals

Leaked negotiations spill the tea

NEWSBleeping Computer3 days ago

OpenMandriva Linux says contributor tried to sabotage the project

The OpenMandriva Linux project announced that it was the target of an attempted act of internal sabotage after a dispute among con…

NEWShighHackread3 days ago

Microsoft Warns of GigaWiper Backdoor Built to Destroy Windows PCs

Microsoft details GigaWiper, a destructive Windows backdoor that can wipe disks, encrypt files and give attackers remote access to…