Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

2,130 articles

Hotel Wi-Fi Routers Compromised to Steal Corporate Login Credentials From Visitors

Researchers at ReliaQuest warned of widespread DNS poisoning attacks targeting the hospitality sector as part of a cyber espionage…

NEWShighThe Hacker News1 day ago

ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link

Cybersecurity researchers have disclosed a critical vulnerability in OpenAI's ChatGPT Workspace Agents that could have allowed a s…

NEWSCVE-2026-321949.8 CRITICALThe Hacker News1 day ago

Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers

A crafted SVG submitted to Bing's image search ran commands as NT AUTHORITY\SYSTEM on Microsoft's production image-processing work…

NEWSThe Hacker News1 day ago

Seeing AI Agents Is Not Enough. Security Teams Must Enforce What They Can Do

AI agent security is moving through a familiar maturity curve: adoption, then visibility, and finally, control. But what we've col…

NEWShighSecurityWeek1 day ago

Industry Reactions to OpenAI Models Hacking Hugging Face: Feedback Friday

Industry professionals debate whether it represents a lab containment failure or an unprecedented agentic capability milestone. Th…

NEWShighBleeping Computer1 day ago

Man gets six years for hacking 750 women's Snapchat accounts

An Illinois man was sentenced on Tuesday to 76 months in prison and three years of supervised release for hacking the Snapchat acc…

NEWSHackread1 day ago

Tego AI Discloses Second Claude Flaw in a Week: Hidden Link Silently Sends Files to Attackers

Tel Aviv, Israel, 24th July 2026, CyberNewswire

NEWShighInfosecurity Magazine1 day ago

ChatGPT Among Top 10 Most Impersonated Brands in Phishing Attacks, Says Check Point

OpenAI’s chatbot tool ChatGPT ranked among the top 10 most impersonated brands in phishing attacks for the first time

NEWScriticalHackread1 day ago

Russian Hackers Used a Zimbra Zero-Day to Steal Emails Without Link Clicks

Russian hackers from the TA488 group exploited a Zimbra webmail flaw triggered when emails were opened or previewed, stealing cred…

NEWShighThe Hacker News1 day ago

Hacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry

Someone installed a popular AI assistant on a rented server, switched off the setting that makes it ask permission before running…

NEWShighHackread1 day ago

New Dolphin X Malware Uses AI Profiler to Rank High-Value Victims

Dolphin X malware targets more than 300 apps and includes an AI Profiler that scores infected Windows PCs to help criminals identi…

NEWShighThe Hacker News1 day ago

Golden Chickens Resurfaces With Four New Malware Families and Modular Implants

The threat actors behind the Golden Chickens malware-as-a-service (MaaS) ecosystem have resurfaced with four new malware families,…

NEWSWired Security1 day ago

Satellite Images Reveal How Suspected Scam Compounds Appear Out of Nowhere

Analysis of satellite images of Myanmar shows dozens of alleged scam compounds have appeared in recent months, despite a purported…

NEWScriticalInfosecurity Magazine1 day ago

Ransomware Attacks Targeting Universities on the Rise

Comparitech’s analysis of incidents in the first half of 2026 finds that the emergence of The Gentlemen ransomware has resulted in…

NEWSThe Hacker News1 day ago

NodeBB Patches Eight AI-Found Flaws Exposing Admin Access and Private Chats

Eight security flaws in NodeBB went public on Wednesday, along with the code to exploit them. Aikido Security rates all eight as h…

NEWSBleeping Computer1 day ago

Clop ransomware targets Windchill, FlexPLM in data theft attacks

The Clop ransomware gang (also tracked as Cl0p) is targeting Internet-exposed PTC Windchill and FlexPLM instances in a new data th…

NEWScriticalThe Hacker News1 day ago

Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers Say

Redis shipped seven security releases on July 23 after researchers published authenticated RCE PoCs for stock Redis 6.2.22, 7.4.9,…

NEWSThe Hacker News1 day ago

Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in UAC-0099 Attacks

The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of a new campaign that involves the use of a malicious progra…

NEWScriticalSecurityWeek1 day ago

Data Breach Confirmed After Australian Energy Giant Origin Is Hacked

A hacker claims to have stolen the information of 2 million Origin Energy customers and is threatening to leak it. The post Data…

NEWSThe Register2 days ago

OpenAI-Hugging Face attack doesn't mean agents are evil – unless you tell them to be

Attack models gonna attack

NEWSThe Register2 days ago

Researchers replace downloaded macOS apps with evil twins, Apple shrugs

Gatekeeper has one job and it's not doing it for some software

NEWShighBleeping Computer2 days ago

New Dolphin X malware uses AI to rank high-value targets

A new Dolphin X remote access trojan claims to use an AI-powered profiling feature to score and rank infected users, helping cyber…

NEWScriticalBleeping Computer2 days ago

Australian energy provider Origin says data breach exposes client data

Origin Energy has confirmed that an unauthorized party accessed and subsequently leaked customer data online, exposing sensitive p…

NEWSCyberScoop2 days ago

Rubio restricts visas for sextortionists, cyber scammers

The move stems from a Trump executive order as the administration continues to pursue cyber-enabled fraud and other crimes. The po…

NEWShighBleeping Computer2 days ago

Fake Claude app promoted by Bing ads pushes SectopRAT malware

A malvertising campaign on the Bing search service is pushing a fake Claude desktop app installer hosted on a legitimate Claude.ai…

NEWScriticalThe Hacker News2 days ago

Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes

A Russian state-supported espionage group spent months reading Western mailboxes through a then-unknown flaw in Zimbra's webmail c…

NEWSWired Security2 days ago

For Taylor Swift, Madison Square Garden’s Controversial Cameras Briefly Went Dark

MSG’s sprawling surveillance system can monitor guests down to the second. Its owners made an exception for the pop star’s rehears…

NEWShighCyberScoop2 days ago

Russian espionage group using novel Zimbra exploit to steal sensitive data from Western countries

Laundry Bear exploited a zero-day vulnerability for five months before it was patched in July 2025, and the group is still activel…

NEWShighBleeping Computer2 days ago

Russian hackers exploit Zimbra zero-click flaw for email theft

CISA is warning that the Russian state-sponsored hacking group Laundry Bear, also known as Void Blizzard, is targeting organizatio…

NEWSThe Register2 days ago

Year-long Russian attacks infect users as soon as they look at an email

Phishing for dummies