Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,453 articles

Anthropic Cuts Live Internet Access for Internal AI Tests After Claude Exploits Injection Flaws

Anthropic on Friday said it's cutting off live internet access for all its internal evaluations following the discovery of new inc…

NEWSKrebs on Security16 days ago

FBI Arrests Founder of Ransomware Negotiation Firm

Agents with the Federal Bureau of Investigation (FBI) on Thursday arrested the co-founder of a Canadian cybersecurity firm in conn…

NEWSSecurityWeek16 days ago

OpenAI Fires 3 Safety Researchers in Dispute Over AI Risks

The ChatGPT maker said the researchers "violated clear policies on handling sensitive information.” The post OpenAI Fires 3 Safet…

NEWShighBleeping Computer16 days ago

Hackers abuse Google Ads, Bing redirects to push Claude ClickFix attacks

Hackers are abusing legitimate Bing search-result redirects as click URLs in Google search ads to direct users to fake Claude inst…

NEWSThe Register16 days ago

AWS AgentCore security undone by prompt requesting credentials

Tokens transmitted in metadata, weak VM isolation, and expansive permissions make hacking a lot easier

NEWSThe Hacker News16 days ago

Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories

Cybersecurity researchers have disclosed details of an ongoing credential-theft campaign that has compromised two high-profile ope…

NEWShighHackread16 days ago

MonsterCloud CEO Zohar Pinhasi Accused of Paying Hackers, Defrauding Victims

The DOJ accuses MonsterCloud CEO Zohar Pinhasi of secretly paying ransomware gangs for decryption keys while charging victims…

NEWShighThe Hacker News16 days ago

FBI Arrests Another ShinyHunters Suspect Reportedly Involved in Its Jobs Portal Hack

The FBI has arrested another suspected co-conspirator of ShinyHunters, FBI Director Kash Patel said on October 9 in a post on X.…

NEWShighBleeping Computer16 days ago

Unpatched AhsayCBS flaws exploited to deploy webshells, mine crypto

Threat actors are exploiting one critical and one medium-severity vulnerability still unpatched in the AhsayCBS backup management…

NEWShighBleeping Computer16 days ago

FBI arrests another suspected ShinyHunters hacker after agency breach

The FBI has arrested another suspected member of the ShinyHunters extortion group believed to be involved in the recent breach of…

NEWShighThe Hacker News16 days ago

P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands

Cybersecurity researchers have disclosed details of a previously unseen variant of the DarkSword iOS exploit kit called P7 DarkSwo…

NEWSSecurity Magazine16 days ago

8,500+ European Wind, Solar Systems Exposed

The Dutch National Cyber Security Centre (NCSC-NL) and cybersecurity organization Modat discovered more than 8,500 exposed systems…

NEWSBleeping Computer16 days ago

Germany arrests alleged core Qilin ransomware member after extradition

Germany has arrested a Russian national suspected of being a leading member of the Qilin ransomware group following extradition fr…

NEWSInfosecurity Magazine16 days ago

Wikimedia Says Rogue AI Agents Abused its Platforms

Wikimedia says OpenAI agents performed unauthorized actions on its platforms, including edits to wikis

NEWSSecurity Magazine16 days ago

AI-Powered Pentest Tool Used to Breach South Korean Banks

Infrastructure for a targeted campaign against South Korean financial institutions has been discovered.

NEWSBleeping Computer16 days ago

How to keep AI agents within their permissions

AI agents can use valid credentials to perform actions beyond their assigned permissions, creating risks that traditional access c…

NEWSThe Hacker News17 days ago

TP-Link Sued by Four More U.S. States Over Router Security and China Ties

Four more U.S. states sued router maker TP-Link Systems on October 6, bringing the total to five, with Texas filing a suit in Feb…

NEWShighThe Hacker News17 days ago

Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access

Security researchers have published a full working exploit for a pre-authentication remote code execution flaw in AnyDesk Linux th…

NEWShighThe Hacker News17 days ago

Anthropic Launches Free AI Vulnerability Scanner for Open-Source Projects

Anthropic on Thursday unveiled OSS Scanner as an opt-in vulnerability scanner to help secure the open-source ecosystem using artif…

NEWShighCVE-2026-1051337.3 HIGHThe Hacker News17 days ago

Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge

Threat actors have been observed exploiting two recently disclosed flaws in the AhsayCBS backup utility to seize control of affect…

NEWSHackread17 days ago

Practical AI Integration for Modern Business Teams

Learn how businesses can use AI to reduce repetitive work, improve workflows, connect information, and support better everyday dec…

NEWShighCVE-2026-10225510.0 CRITICALBleeping Computer17 days ago

Max severity SonicWall SMA1000 flaw now exploited in attacks

Attackers are exploiting a maximum-severity vulnerability in SonicWall SMA1000 appliances (CVE-2026-102255) that was patched on Tu…

NEWShighCVE-2015-330610.0 CRITICALThe Hacker News17 days ago

Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added five security flaws to its Known Exploited Vuln…

NEWSSecurityWeek17 days ago

In Other News: AI Used in Korean Bank Breaches, Poem-Guided Botnet, Empire Admin Gets 40 Years

Noteworthy stories that might have slipped under the radar: Tensorlake npm SDK compromised, Empire Market co-founder gets 40 years…

NEWScriticalInfosecurity Magazine17 days ago

Q3 2026 Sets New Record for Ransomware Attacks

Comparitech observed 2627 claimed ransomware attacks in Q3, with critical sectors like finance, technology, education and healthca…

NEWSSecurityWeek17 days ago

Google Domains Impacted by Recent ccTLD Hijacks

Hackers hijacked the .gh, .sl, and .as ccTLDs and obtained HTTPS certificates for several Google domains. The post Google Domains…

NEWScriticalThe Register17 days ago

Citrix gives NetScaler admins another critical reason to patch

No word on exploitation status, but a 9.5 severity score suggests time is of the essence

NEWSThe Hacker News17 days ago

The AI Velocity Paradox: Why Security Is Decades Behind AI Ambition

As enterprises race to deploy autonomous AI agents to accelerate business, a new report reveals they are tethered to security arch…

NEWSBleeping Computer17 days ago

Man admits to running network of 15,000 money mules for cybercriminals

A Ukrainian-Russian dual citizen has pleaded guilty to running a massive money laundering operation that laundered millions for c…

NEWSHackread17 days ago

FBI Warns FortiBleed Campaign Still Active, Hits 86,000+ FortiGate Devices

FortiBleed attacks continue to target Fortinet FortiGate devices, with SOCRadar reporting more than 86,644 compromised devices acr…