Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

2,132 articles

NEWScriticalThe Register17 days ago

Microsoft closes book on Nightmare Eclipse's RoguePlanet zero-day

Weeks after the exploit code dropped, Redmond has finally ships a fix for the Defender zero-day

NEWSThe Hacker News17 days ago

AI Attacks Move in Minutes. Join This Webinar on Building a Defense That Keeps Up

AI has changed how fast attacks move. Work that once took an attacker days now takes minutes. Using models like Mythos, attackers…

NEWScriticalSecurityWeek17 days ago

12 Million Impacted by Data Breach at Japanese Telco KDDI

Hackers exploited a zero-day vulnerability in a third-party system to access a KDDI email system for ISPs. The post 12 Million Imp…

NEWSInfosecurity Magazine17 days ago

75% CISOs Fear Executives Don’t Understand Cybersecurity Risks Employees Face

Survey of cybersecurity leaders by MetaCompliance finds that many feel boards are uninterested in ever-evolving cyber risks

NEWShighSecurityWeek17 days ago

15-Year-Old Linux Vulnerability ‘GhostLock’ Earns Researchers $92k From Google

Affecting every major distribution since 2011, the Linux kernel vulnerability allows attackers to gain root access. The post 15-Ye…

NEWSInfosecurity Magazine17 days ago

Chinese-Funded Interpol Cybercrime Crackdown Leads to 5,800 Arrests

Operation First Light 2026, coordinated by Interpol and funded by the Chinese government, has led to 5,811 arrests

NEWSHackread17 days ago

GhostApproval Flaws Let Top AI Coding Tools Write Outside Workspaces

Wiz found GhostApproval symlink flaws in major AI coding assistants that could hide sensitive file targets, bypass approval checks…

NEWSBleeping Computer17 days ago

Microsoft to retire the OWA Light client in Exchange Server

Microsoft has announced plans to disable Outlook Web Access (OWA) Light, the lightweight version of the Outlook Web App email clie…

NEWSInfosecurity Magazine17 days ago

GhostApproval Flaw Hits Six Major AI Coding Assistants

Wiz discovered GhostApproval, a symlink flaw in six major AI coding assistants that bypasses approval

NEWSThe Hacker News17 days ago

Summer of Clearinghouses

Everyone seems to have announced a clearinghouse over the past few weeks. We did too. Ours is called Athena, and the main thing th…

NEWSThe Hacker News17 days ago

GodDamn Ransomware Uses PoisonX Driver to Disable Endpoint Defenses

Cybersecurity researchers have flagged a new ransomware family called GodDamn that employs the PoisonX kernel driver to neutralize…

NEWShighCVE-2026-506567.8 HIGHSecurityWeek17 days ago

Microsoft Patches Defender ‘RoguePlanet’ Vulnerability

The privilege escalation vulnerability tracked as CVE-2026-50656 has been patched with a Microsoft Malware Protection Engine updat…

NEWScriticalSecurityWeek18 days ago

Mount Royal University Confirms Data Stolen in Ransomware Attack

Hackers accessed the institution’s internal network and deleted two drives containing employee, student, and university data. The…

NEWSWired Security18 days ago

Madison Square Garden Kept a List of Gay Celebrities

An MSG database tracked and categorized hundreds of celebs, famous Knicks superfans, and even some of Taylor Swift’s wedding guest…

NEWSBleeping Computer18 days ago

Police arrests 5,800 suspects in global anti-fraud crackdown

Law enforcement agencies have arrested 5,811 suspects and seized $293 million in illicit assets in a global anti-fraud operation s…

NEWSInfosecurity Magazine18 days ago

New AI Security Charter Backed by Over 70 Cyber Firms

Over 70 cybersecurity organizations have signed the CREST AI Charter detailing responsible use of AI for security

NEWShighSecurityWeek18 days ago

AI Coding Tools Tricked Into Hacking Developer Machine via Decades-Old Technique

Wiz has disclosed the details of a new AI coding assistant attack method it has dubbed GhostApproval. The post AI Coding Tools Tri…

NEWSCVE-2026-506567.8 HIGHThe Hacker News18 days ago

Microsoft Patches RoguePlanet Defender Flaw That Can Grant SYSTEM Privileges

Microsoft has released security updates for a Defender vulnerability known as RoguePlanet, nearly a month after details of the fla…

NEWScriticalBleeping Computer18 days ago

AssuranceAmerica data breach exposes records of 6.9 million drivers

American insurance company AssuranceAmerica has disclosed a data breach impacting nearly 7 million drivers after attackers gained…

NEWSInfosecurity Magazine18 days ago

Cybercriminals Plant Malicious AI Agents in Open Source Tool Repositories

Cybersecurity researchers at ESET identify big rise in suspicious and malicious toolsets which put users at risk from cyber-attack…

NEWShighSecurityWeek18 days ago

Chrome 150 Update Patches 27 Vulnerabilities

The security refresh resolves 13 use-after-free bugs, including two critical-severity flaws found by Google. The post Chrome 150 U…

NEWSThe Hacker News18 days ago

Meta's New AI Image Tool Lets Others Use Your Public Instagram Photos in AI Images

Meta has announced that its new artificial intelligence (AI) model Muse Image lets people use public Instagram posts and reels to…

NEWSThe Register18 days ago

Thief posed as Wi-Fi fixing hero, then stole priceless trophy

If people think you are doing a legitimate job, you can get away with anything

NEWSSecurityWeek18 days ago

8Layers Raises $2.9 Million for Identity Security Platform

The Spanish startup has closed an extended pre-seed funding round two months after launching its digital identity protection platf…

NEWScriticalBleeping Computer18 days ago

Microsoft patches RoguePlanet Defender zero-day vulnerability

Microsoft has released a security patch to address a Defender zero-day vulnerability known as "RoguePlanet," disclosed after the J…

NEWSThe Hacker News18 days ago

Top AI Agents Built to Catch Malicious Code Can Be Tricked Into Running It

Ask an AI coding agent to scan open-source code for security holes, and it might run the attacker's code on your own machine inste…

NEWShighCVE-2026-114059.8 CRITICALSecurityWeek18 days ago

Unpatched Backdoor in Tenda Firmware Grants Admin Access to Devices

Tracked as CVE-2026-11405, the vulnerability allows unauthenticated attackers to access a device's web management interface. The p…

NEWSThe Hacker News18 days ago

GhostApproval Symlink Flaws Could Let Malicious Repos Run Code in AI Coding Agents

Researchers at Wiz found that a flaw in six popular AI coding assistants lets a booby-trapped code project quietly take control of…

NEWSThe Hacker News18 days ago

Fake 7-Zip Installers Turn Devices Into Residential Proxy Nodes

Cybersecurity researchers have disclosed details of a new threat actor dubbed Lurking Lizard that has been operating an end-to-end…

NEWSHackread18 days ago

Iris Recognition vs Fingerprint: Which Biometric Wins in 2026?

Compare iris recognition and fingerprint biometrics in 2026, from accuracy and speed to security, privacy, and where each technolo…