Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,453 articles

OpenAI says Iran, Russia used AI journalists, think tanks to influence Western media

The two campaigns were rated 4 and 5 out of 6 for severity, the first time OpenAI has reported what it considers a high-impact inf…

NEWShighBleeping Computer17 days ago

FakeGit malware campaign returns with 17,610 malicious GitHub repos

More than 17,000 fake repositories on GitHub are distributing the SmartLoader malware after the FakeGit campaign reactivated earli…

NEWSThe Register17 days ago

Shai-Hulud worm makes jump to AI infrastructure with Tensorlake compromise

Credential-stealing malware detected within minutes of npm release, but impact remains unknown

NEWSSecurity Magazine17 days ago

5 Data Security Stories to Know About (September 2026)

Five data security stories to know about.

NEWSThe Hacker News17 days ago

Japan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attacks

Attackers behind a string of personal data leaks at Japanese organizations have abused APIs for mobile apps and targeted known sof…

NEWShighHackread18 days ago

Midnight Mimosa Malware Found Preinstalled on Low-Cost Android Phones

Low-cost Android phones can arrive already compromised, with malware embedded in their firmware before buyers switch them on.

NEWScriticalSecurityWeek18 days ago

Cisco Patches a Dozen Critical Vulnerabilities

The security defects could lead to unauthorized access, information leaks, privilege escalation, DoS attacks, and remote code exec…

NEWSThe Hacker News18 days ago

UAC-0099 Targets Ukrainian Government Personnel With ASHVEIN RAT Hiding Commands in HTML

The Russia-aligned threat actor known as UAC-0099 has been attributed to a previously undocumented .NET infostealer and remote acc…

NEWScriticalBleeping Computer18 days ago

Cisco warns of critical flaws allowing Nexus switch takeover

Cisco released security advisories for five critical vulnerabilities in its NX-OS data center network operating system that could…

NEWSThe Register18 days ago

Fighting GenAI with GenAI: The New Email Security Landscape

SPONSORED FEATURE: Old attack, new protections

NEWSInfosecurity Magazine18 days ago

Attackers Hijack Three ccTLDs to Obtain Google Certificates

Attackers compromised .gh, .sl and .as registries to obtain unauthorized HTTPS certificates

NEWSSecurityWeek18 days ago

Security Awareness Training Isn’t Dead, but It Needs a Rethink

All enterprises conduct security awareness training for their employees. But whether this has tangible benefits is debatable. The…

NEWSSecurity Magazine18 days ago

3 Fundamentals Mid-Market IT Leaders Should Focus On

Three key steps IT leaders can take to bolster their organization’s security.

NEWSThe Hacker News18 days ago

ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms

Cybersecurity researchers have disclosed details of a targeted campaign aimed at South Korean financial organizations that used an…

NEWScriticalCVE-2026-215897.5 HIGHSecurityWeek18 days ago

Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication

Threat actors have started targeting CVE-2026-21589, a critical vulnerability in Atlassian’s self-hosted Data Center products. The…

NEWSBleeping Computer18 days ago

OAuth grants pile up faster than you can review them. Here's how to keep up.

OAuth grants create data highways between SaaS apps, AI agents, and other tools. And, they are multiplying faster than any securit…

NEWScriticalInfosecurity Magazine18 days ago

ASOS Confirms Data Breach Linked to Stolen Employee Credentials

The ASOS hack comes from the compromise of agentic marketing platform Simon AI, said the attackers

NEWShighBleeping Computer18 days ago

Uranium crypto exchange hacker convicted for stealing $53 million

A Maryland man was found guilty of stealing more than $53 million after hacking the decentralized crypto exchange Uranium Finance…

NEWShighInfosecurity Magazine18 days ago

Russia-Aligned UAC-0099 Evolves MATCHBOIL Malware

Russia-aligned UAC-0099 has steadily upgraded its MATCHBOIL downloader since 2024

NEWShighSecurityWeek18 days ago

US Seeks Alleged Chinese Hafnium Hacker With $10 Million Reward

Zhang Yu was charged alongside Xu Zewei, who was extradited from Italy to the US in April 2026. The post US Seeks Alleged Chinese…

NEWScriticalSecurityWeek18 days ago

SonicWall and Splunk Patch Critical Vulnerabilities

Critical and high-severity vulnerabilities could allow attackers to bypass authentication, execute arbitrary code, and elevate the…

NEWSBleeping Computer18 days ago

Microsoft Teams to get support for third-party deepfake detection tools

Microsoft will soon introduce support for third-party deepfake detection solutions and impersonation protection in Teams meetings.…

NEWSHackread18 days ago

Insignary Launches Clarity AIR to Detect Undeclared Open-Source and AI-Written Code

Toronto, Canada, 8th October 2026, CyberNewswire

NEWScriticalBleeping Computer18 days ago

ASOS links data breach to social engineering attack, credential theft

ASOS is sending updates to affected customers about the cybersecurity incident it suffered earlier this week, confirming that hack…

NEWSThe Register18 days ago

UK and Germany team up against Russian cyberattacks as Brexit rethink looms

Security pact promises information-sharing and coordinated disruption, but offers little detail on agencies or funding

NEWSSecurityWeek18 days ago

Rein Security Raises $25 Million to Guard AI Agents at Runtime

The cybersecurity startup will invest in product innovation, agentic research, and employee base expansion. The post Rein Security…

NEWShighInfosecurity Magazine18 days ago

Chinese Hacker Deployed AI in Campaign Against South Korean Banks

CrowdStrike revealed that a Chinese-speaking hacker deployed agentic pentesting tool ARTEX and Claude to help breach data from Sou…

NEWSHackread18 days ago

FBI, French Police Seize CSAM Site Domains, Suspected Admin Arrested

US and French authorities seized two domains and arrested a suspected administrator in a CSAM and non-consensual intimate image ab…

NEWShighThe Hacker News18 days ago

Wazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and Australia

Phishing kits are no longer limited to copying a familiar login page and waiting for a victim to enter credentials. Attackers are…

NEWSBleeping Computer18 days ago

Owner of Empire cybercrime market gets 40 years in prison

The co-creator of Empire Market, one of the largest dark web marketplaces before its shutdown, has been sentenced to 40 years in p…