Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

2,132 articles

Attackers Exploit 'Ill Bloom' Vulnerability to Drain $3.1 Million From Cryptocurrency Wallets

Security firm Coinspect has disclosed a crypto wallet flaw it calls Ill Bloom, and attackers are already using it. The flaw is in…

NEWSInfosecurity Magazine16 days ago

NHS Warns Staff Over Unauthorized Access to Patient Data

NHS tells staff they could face prison for “inappropriate” access to patients’ medical records

NEWSSecurityWeek17 days ago

‘HalluSquatting’ Turns AI Hallucinations Into Botnet Delivery Mechanism

Researchers demonstrate adversarial hallucination squatting against popular AI assistants to achieve remote code execution. The po…

NEWSBleeping Computer17 days ago

Former ransomware negotiator gets 4 years for BlackCat attacks

A former employee of cybersecurity incident response company DigitalMint was sentenced to 70 months in prison for targeting U.S. c…

NEWSThe Hacker News17 days ago

Ransomware Negotiator Gets 70 Months in Prison for Aiding BlackCat Attacks

A 41-year-old former ransomware negotiator has been sentenced to nearly six years (i.e., 70 months) in prison in the U.S. for thei…

NEWShighSecurityWeek17 days ago

Network of 200 GitHub Repositories Used for Malware Infection

A Go module is used to load PowerShell code that fetches a resolver from public dead drops to execute Windows malware. The post Ne…

NEWSSecurity Magazine17 days ago

Estonia to Grant Digital IDs to AI Agents

The nation intends to assign digital identification numbers to AI agents.

NEWShighThe Register17 days ago

Microsoft warns customers AI will mean busier Patch Tuesdays

More patches mean more reasons to buy Redmond’s auto-patching tools

NEWSCyberScoop17 days ago

Former DigitalMint ransomware negotiator who duped clients sentenced to 70 months in jail

Angelo Martino exploited his insider position and fed confidential information to ransomware co-conspirators to extort a combined…

NEWSThe Register17 days ago

An unnamed US county – perhaps in Ohio – paid $1M extortion demand to cybercriminals

Leaked negotiations spill the tea

NEWSBleeping Computer17 days ago

OpenMandriva Linux says contributor tried to sabotage the project

The OpenMandriva Linux project announced that it was the target of an attempted act of internal sabotage after a dispute among con…

NEWShighHackread17 days ago

Microsoft Warns of GigaWiper Backdoor Built to Destroy Windows PCs

Microsoft details GigaWiper, a destructive Windows backdoor that can wipe disks, encrypt files and give attackers remote access to…

NEWSBleeping Computer17 days ago

Injective SDK on npm infected with cryptocurrency wallet stealer

Hackers compromised the Injective Labs SDK project's GitHub repository and used it to publish a malicious package on the Node Pack…

NEWSThe Hacker News17 days ago

Dormant GitHub Accounts Help Attackers Blend In While Mapping Corporate Orgs

Datadog Security Labs is warning of "several overlapping campaigns" that are systematically enumerating corporate GitHub organizat…

NEWShighThe Hacker News17 days ago

New GigaWiper Windows Backdoor Bundles Disk Wiping, Fake Ransomware, and Spyware

Microsoft has taken apart a destructive Windows backdoor it calls GigaWiper. What stands out is how it is built: not one tool but…

NEWSCyberScoop17 days ago

Interpol cybercrime crackdown nets 5,800 arrests across 97 countries

The anti-fraud crackdown, dubbed Operation First Light, identified more than 142,000 victims of various social-engineering scams.…

NEWSHackread17 days ago

AI Gateway Connected to Amazon Bedrock Hijacked for Cryptomining

Darktrace says a LiteLLM AI gateway linked to Amazon Bedrock was compromised for cryptomining after signs of exposed SSH activity.

NEWSBleeping Computer17 days ago

New Helix vishing group emerges in SharePoint data theft attacks

A new data-extortion group called Helix is using identity-focused tactics such as voice phishing (vishing), device code phishing,…

NEWSBleeping Computer17 days ago

Microsoft expects more Windows security updates from AI-discovered flaws

Microsoft says Windows users should expect to see an increase in security updates as the company increasingly relies on artificial…

NEWSThe Hacker News17 days ago

npm 12 Disables Install Scripts by Default to Reduce Supply Chain Risk

GitHub has officially announced the release of npm version 12 with install scripts disabled by default, along with deprecating gra…

NEWSThe Register17 days ago

EU 'Chat Control' snoopfest returns after vote to kill it falls short

Opponents won the count but missed the 360-seat threshold needed to stop the interim CSAM-scanning rule

NEWSThe Hacker News17 days ago

ThreatsDay: Cloud Bucket Hijacking, Windows LPE Chain, Global Fraud Bust + 17 More Stories

Most security mess starts as admin work. A link gets clicked. A tool gets trusted. A bucket name gets reused. A setting stays loos…

NEWSSecurityWeek17 days ago

QIZ Security Raises $17 Million for Cryptographic Governance Platform

The Israeli company has developed a cryptographic posture and post-quantum cryptography management platform. The post QIZ Security…

NEWShighBleeping Computer17 days ago

New Forg365 phishing platform uses AI to target Microsoft 365 accounts

A new phishing-as-a-service (PhaaS) operation called Forg365 focuses on stealing Microsoft 365 accounts by combining adversary-in-…

NEWSCyberScoop17 days ago

764 splinter group leader sentenced to 40 years in jail

Alexis Chavez coerced multiple girls to commit self harm and produce child sexual abuse material for notoriety in a sprawling viol…

NEWSSecurityWeek17 days ago

UK Government Rolls Out Agentic AI Defense Plan Alongside Industry Pledge

Two announcements on July 7, 2026, demonstrate the government’s determination to improve the level of cybersecurity within the UK.…

NEWSBleeping Computer17 days ago

The Hidden Security Risks of Reduced Summer IT Coverage

Security operations don't slow down when IT teams take vacation, but staffing levels often do. Kaseya explains how AI-driven autom…

NEWShighInfosecurity Magazine17 days ago

Vibe-Coded Malware Caught in Active Directory Attack

Huntress found a threat actor using vibe-coded PowerShell to map an Active Directory network

NEWSWired Security17 days ago

A Majority of European Lawmakers Voted Against Letting Big Tech Read Our Messages. They’re Going to Anyway.

Companies will once again be allowed to scan citizens’ personal texts, emails, and social media messages via the “chat control” bi…

NEWShighSecurityWeek17 days ago

Palo Alto Networks Patches 13 Vulnerabilities

Buffer overflow, DoS, command injection, SSRF, authentication bypass, and other types of vulnerabilities have been found in PAN-OS…