Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

2,132 articles

NEWSThe Register18 days ago

Suspected Chinese snoops caught breaking into universities' Roundcube mailservers

Proofpoint researcher tells The Reg: 'We estimate the total volume of targets would be a few dozen'

NEWShighBleeping Computer18 days ago

Mount Royal University confirms breach as hackers claim attack

Mount Royal University in Calgary says hackers stole and then deleted data from its file storage systems after breaching the unive…

NEWSBleeping Computer18 days ago

Fake Paysafe, Skrill SDKs on NPM and PyPi steal credentials

Malicious packages on the Node Package Manager (npm) and the Python Package Index (PyPI) delivered stealer malware to developers a…

NEWSThe Register18 days ago

GitHub Copilot: Sorry Dave, I can't do that harmful thing - unless you ask me in code

More fun with AI jailbreaks, this time at the workflow level

NEWShighBleeping Computer18 days ago

Hackers exploit Roundcube flaw to spy on academic researchers

A China-linked threat cluster has been exploiting vulnerable Roundcube servers at U.S. and Canadian universities to steal credenti…

NEWSHackread18 days ago

DuckDuckGo Now Blocks Most YouTube Ads Right Inside Its Browser

DuckDuckGo's browser now blocks most YouTube ads by default on supported devices. Here's how it works, which platforms support it,…

NEWSCyberScoop18 days ago

French nonprofit starts global intelligence and research hub for AI cyber threats

One of the project’s top goals is stitching together an international, quick response coalition of governments, businesses and civ…

NEWSThe Hacker News18 days ago

AI Coding Agents Found Triggering Endpoint Security Rules Built to Catch Attackers

Sophos looked at a week of its own endpoint data and found that AI coding agents such as Claude Code, Cursor, and OpenAI Codex are…

NEWSBleeping Computer18 days ago

Entra passkey enrollment vishing targets Microsoft 365 users

A threat actor has been targeting organizations across multiple sectors with voice-based fake security requests that ask Microsoft…

NEWScriticalSecurityWeek18 days ago

Accenture Confirms Data Breach After Hacker Claims Source Code Theft

The professional services giant says it contained the incident, remediated its source, and experienced no operational or service d…

NEWScriticalSecurity Magazine18 days ago

6 Data Breaches to Know About (June 2026)

Security magazine dives into 6 data breach stories from the last month.

NEWShighSecurity Magazine18 days ago

Accenture Confirms Breach After Hackers Claim Source Code Theft

IT services organization Accenture has confirmed it experienced a data breach.

NEWShighSecurityWeek18 days ago

China-Linked APT Expands Arsenal With New ‘Leash’ Backdoors

Cisco says the threat actor behind the LapDogs campaign has expanded its SOHO router malware toolkit with LongLeash, DogLeash, and…

NEWSInfosecurity Magazine18 days ago

RedWing Android Spyware Sold as a Service on Telegram

Zimperium found RedWing, an Android spyware sold as a service via Telegram to target banking apps

NEWShighSecurity Magazine18 days ago

China Claims “Backdoor” Security Risk in Claude Code, Anthropic Responds

A Chinese cybersecurity platform has claimed to discover a “backdoor” security concern in Anthropic’s Claude Code.

NEWShighThe Hacker News18 days ago

New HalluSquatting Attack Could Trick AI Coding Assistants Into Installing Botnet Malware

AI coding assistants have a habit of making things up. Ask one to fetch a popular tool, and it will sometimes hand back a real-sou…

NEWScriticalCVE-2026-5074610.0 CRITICALThe Hacker News18 days ago

Ubiquiti Patches Critical UniFi Flaws Across Connect, Talk, Access, Protect, and OS

Ubiquiti has shipped updates to address multiple critical security flaws impacting UniFi Connect, UniFi Talk, UniFi Access, UniFi…

NEWShighInfosecurity Magazine18 days ago

China-Linked APT Expands Proxy Network With New Malware

Cisco Talos said China-linked APT UAT-7810 is growing its proxy relay network with new malware

NEWSHackread18 days ago

Armored Likho Hits Government, Energy Sectors With BusySnake Stealer

Kaspersky details how the newly named Armored Likho APT uses BusySnake Stealer, AI-generated loaders, and phishing to target gover…

NEWSBleeping Computer18 days ago

3 Ways AI Powers Service Desk Attacks and How to Prevent Them

Specops Software explains how AI is making service desk impersonation attacks more convincing, personalized, and scalable, along w…

NEWSThe Register18 days ago

Bug in top AI coding agents shows that Unix-era security headaches never really die

'GhostApproval' problem highlights human-in-the-loop fails

NEWShighThe Register18 days ago

China tells devs to ditch Claude Code over 'backdoor code' fears

National vulnerability database claims monitoring mechanism can forward Chinese users' data to remote servers

NEWSSecurityWeek18 days ago

Webinar Today: Why Email Security Keeps Failing

Join the webinar as we break down why email-layer defenses alone can’t keep pace with the modern phishing ecosystem. The post Webi…

NEWSHackread18 days ago

OpenMatter Network Joins HOL Initiative to Help Define Standards for Verifiable AI Collaboration and Security

Melbourne, Florida, United States, 8th July 2026, CyberNewswire

NEWShighThe Hacker News18 days ago

New Ghost Phishing Wave Is Breaking Traditional Email Security

A recent EvilTokens campaign targeting businesses across the US and Europe is exposing a new email security blind spot. This “ghos…

NEWShighThe Hacker News18 days ago

SCMBANKER Malware Uses ClickFix Lures to Target Mexican Banking Users

A new banking fraudulent operation is targeting customers of Mexican banks, fintech, payment processors, and cryptocurrency exchan…

NEWSKrebs on Security18 days ago

Felons, Fraudsters Flog Offensive Cybersecurity Startup

A cybersecurity startup dangling millions of dollars to acquire zero-day security vulnerabilities in popular software is run by a…

NEWSInfosecurity Magazine18 days ago

Threat Actors Uses Agentic AI to Rapidly Compromise Cloud Target

Sygnia report details how agentic AI accelerated weeks-long attack to just 72 hours

NEWSSecurityWeek18 days ago

Google Dialogflow CX Bug Allowed Attackers to Hijack AI Conversations

The "Rogue Agent" vulnerability could have enabled attackers to silently manipulate AI conversations, exfiltrate data, and comprom…

NEWSBleeping Computer19 days ago

DuckDuckGo browser now blocks YouTube video ads

DuckDuckGo announced that its browser can now block most video ads on YouTube, including those shown before the video starts playi…