Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,453 articles

NEWShighCVE-2026-1051337.3 HIGHSecurityWeek17 days ago

Unpatched AhsayCBS Vulnerabilities Exploited in the Wild

The flaws, CVE-2026-105133 and CVE-2026-105134, allow attackers to bypass authentication and inject OS commands. The post Unpatche…

NEWSBleeping Computer17 days ago

Microsoft: Outdated Windows devices will stop receiving security updates

Microsoft says devices running unsupported versions of Windows will stop receiving security updates after next year's Windows Upda…

NEWSInfosecurity Magazine17 days ago

UK and Allies Warn of Cyber Threat from China’s Integrity Technology Group

The UK, US and allies have issued an alert detailing malicious activity linked to China’s Integrity Technology Group

NEWShighSecurityWeek17 days ago

Pre-Baked Firmware Malware Hits Budget Android Devices in 150+ Countries

Midnight Mimosa is the name given to a malware campaign primarily running preinstalled on low-cost Android devices. The post Pre-B…

NEWSThe Hacker News17 days ago

GoBalance Flaw Lets Attackers Hijack .onion Addresses by Recovering Tor-Format Keys

A bug in GoBalance, a tool many dark-web sites use to stay reachable during attacks, lets anyone work out the secret key that cont…

NEWScriticalInfosecurity Magazine17 days ago

AI Training Critical as Governance Challenges Grow

As AI adoption accelerates, ISACA is expanding its certification portfolio with a governance-focused credential designed to help p…

NEWShighSecurityWeek17 days ago

US Disrupts Chinese State-Sponsored Hacking Tools

Flax Typhoon and other APTs used MicroScan and FishHub to scan and hack US and foreign critical infrastructure. The post US Disrup…

NEWSBleeping Computer17 days ago

Citrix warns admins to patch new NetScaler RCE flaw immediately

Citrix has warned IT administrators to patch systems immediately against a new critical vulnerability affecting NetScaler ADC netw…

NEWShighThe Hacker News17 days ago

Three Teams Demonstrate Remote Hacks of Fully Patched Google Pixel 10 at Pwn2Own

Three research teams broke into Google's Pixel 10 on October 8 at Pwn2Own Ireland, a hacking contest in Cork whose rules require e…

NEWSSecurityWeek17 days ago

Anthropic Fast-Tracks AI Bug Reports to OSS Maintainers, Taps 11 Firms for OT Security

OSS Scanner sends unreviewed, model-generated vulnerability reports to open source maintainers that opt in. The post Anthropic Fas…

NEWScriticalCVE-2026-107406The Hacker News17 days ago

Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments

Citrix has released patches for yet another critical security flaw impacting NetScaler ADC and NetScaler Gateway that could result…

NEWSInfosecurity Magazine17 days ago

Major AI Firms Pledge Data Protection Changes Following UK Privacy Watchdog Push

Ten leading AI firms have committed to make data protection improvements following a call for evidence by the UK’s Information Com…

NEWScriticalCVE-2026-107406SecurityWeek17 days ago

Citrix Urges Immediate Patching of Critical NetScaler Vulnerability

The security defect, tracked as CVE-2026-107406, could lead to remote code execution or denial-of-service. The post Citrix Urges I…

NEWShighSecurityWeek17 days ago

Google Pixel 10 Exploits Earned Hackers $560,000 at Pwn2Own

$1.2 million was paid out at Pwn2Own Ireland 2026 for exploits targeting phones, printers, smart speakers, smart home hubs, and AI…

NEWScriticalThe Hacker News17 days ago

FBI Seizes 7 Domains, Disrupts Flax Typhoon Tools Used in Critical Infrastructure Intrusions

The U.S. Federal Bureau of Investigation (FBI) and Department of Justice (DoJ) have announced the disruption of malicious tools us…

NEWScriticalBleeping Computer17 days ago

Hackers get $1,262,000 for 98 zero-days at Pwn2Own Ireland

The Pwn2Own Ireland 2026 hacking contest has concluded, with hackers collecting $1,262,000 in rewards after exploiting 98 zero-day…

NEWSWired Security17 days ago

ICE Agent at NYC Shooting Has History of Alleged Violence and Illegal Arrests

Brenden Cuni, an ICE supervisor, has been accused of excessive force and tackling a pregnant woman to the ground. Several of his a…

NEWSSecurityWeek17 days ago

Formula Predicts When AI Chatbots Are at Risk of Turning Bad

Researchers from George Washington University have published a paper examining whether the time and cause of AI going rogue can be…

NEWShighHackread17 days ago

FBI Seizes Flax Typhoon Hacking Tools Linked to Chinese Contractor

The FBI and DOJ seized domains and disrupted scanning and spear-phishing tools used by Flax Typhoon, a China-linked…

NEWShighThe Register17 days ago

US disrupts Chinese hacking tools as 7 govts warn of PRC spies stealing sensitive data worldwide

Infecting devices from 2021 until the FBI stepped in

NEWScriticalBleeping Computer17 days ago

FBI disrupts Chinese hacking tools used to breach critical infrastructure

The FBI has seized seven domains used by Chinese state-sponsored hackers known as Flax Typhoon to operate two hacking tools, Micro…

NEWSCyberScoop17 days ago

Leader of 764 pleads guilty, faces up to 30 years in prison

Prasan Nepal ran the nihilistic violent extremist network for almost four years and played a crucial role facilitating the groomin…

NEWScriticalCyberScoop17 days ago

Anthropic rolls out program for ‘long-term commitment’ to secure critical infrastructure, open source software

The critical infrastructure defense program will seek to pair Claude models, Anthropic engineers and threat research with the expe…

NEWScriticalBleeping Computer17 days ago

Ransomware attack disrupts Japan's IDCF Cloud used by govt clients

IDC Frontier, a major Japanese cloud and digital infrastructure company, disclosed that its IDCF Cloud service was targeted in a r…

NEWShighCyberScoop17 days ago

DOJ, FBI seize Flax Typhoon-linked hacking tools Microscan, FishHub

The seizures of the tools, allegedly operated by the Chinese firm Integrity Tech, accompanied a warning from the FBI, CISA and NSA…

NEWShighCyberScoop17 days ago

Ransomware recovery CEO indicted after allegedly paying hackers and pocketing millions

Zohar Pinhasi allegedly deceived ransomware recovery clients into a payment scheme disguised as a specialized service that helped…

NEWShighBleeping Computer17 days ago

Low-cost Android phones ship with residential proxy malware

A malware campaign dubbed 'Midnight Mimosa' has been discovered on low-cost Android smartphones that ship with malicious software…

NEWShighThe Hacker News17 days ago

FBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emails

Hackers tied to a Chinese cybersecurity company stole email from government organizations, law enforcement agencies, healthcare sy…

NEWSCVE-2026-474838.2 HIGHThe Register17 days ago

High-severity Nvidia bug could crash GPU monitoring on exposed servers

The GPU giant released a fix for the flaw, tracked as CVE-2026-47483

NEWShighThe Hacker News17 days ago

ThreatsDay: Ransomware Affiliate Betrayal, WhatsApp RAT, Exposed Hacker Tools and 12 More Stories

The crooks have trust problems of their own. One ransomware affiliate decided to keep the profits for himself. Elsewhere, an attac…