Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,453 articles

TP-Link Faces State Lawsuits and New Scrutiny Over ISP Router Flaws

SEC Consult has published technical details on vulnerabilities mentioned in a complaint filed by several US states. The post TP-Li…

NEWScriticalInfosecurity Magazine18 days ago

Critical Flaw in Multiple Atlassian Products Exploited in the Wild

A critical vulnerability affecting eight Atlassian products, including Jira and Confluence, is being exploited in the wild, said V…

NEWSCyberScoop18 days ago

Quantum computers could break today’s encryption. Washington needs to prepare now.

As advances lower the barrier to breaking current encryption, Washington must move with equal urgency on post-quantum defenses. Th…

NEWSThe Hacker News18 days ago

16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases

Cybersecurity researchers have discovered a cluster of 16 malicious Mozilla Firefox extensions that are capable of stealing crypto…

NEWSInfosecurity Magazine18 days ago

Europol and US GAO Sound the Alarm Over Quantum Threats

Europol and US Government Accountability Office urge faster transition to post-quantum cryptography

NEWSSecurityWeek18 days ago

Fake Decryption Tools Masked $11M Markup in Ransomware Recovery Scheme

Zohar Pinhasi was paying ransoms to obtain decryption keys and then charging victims substantially more for remediation. The post…

NEWSWired Security18 days ago

The Man Behind a West Bank Telegram Channel Trying to Keep Palestinian Drivers Safe

With no accurate Big Tech mapping app to help him, Anas Hattab launched a Telegram group to get himself home at night. Now nearly…

NEWSInfosecurity Magazine18 days ago

FBI and Secret Service Warn of FortiBleed Lockout Threat

The FBI and Secret Service are warning Fortigate admins that their systems are still being targeted

NEWScriticalSecurityWeek18 days ago

Oracle Health Data Breach Tally Climbs to Nearly 20 Million

The figure is far higher than the counts that surfaced in earlier filings and patient notifications. The post Oracle Health Data B…

NEWSThe Register18 days ago

Cheapskates wouldn't pay for security help, got hit by ransomware, and went bust months later

The owner knew a guy...

NEWSSecurityWeek18 days ago

FortiBleed Attackers Locking Victims Out of Fortinet Devices

Attackers are creating new accounts and deleting existing ones and passwords to prevent legitimate access. The post FortiBleed Att…

NEWShighThe Hacker News18 days ago

U.S. Offers Up to $10 Million for Tips on Zhang Yu, Charged in HAFNIUM Hacks

The U.S. State Department is offering up to $10 million for information leading to the identification or location of Zhang Yu, a C…

NEWSThe Hacker News18 days ago

MonsterCloud Owner Accused of Billing Over $19M While Secretly Paying Ransoms to Decrypt Data

The U.S. Department of Justice (DoJ) on Wednesday announced charges against a 50-year-old U.S. and Israeli national for allegedly…

NEWShighBleeping Computer18 days ago

Samsung Galaxy S26 hacked three more times at Pwn2Own Ireland

On the second day of Pwn2Own Ireland 2026, security researchers collected $232,500 in cash awards after exploiting 45 unique ze…

NEWSThe Hacker News18 days ago

Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm

The npm package known as "tensorlake," a TypeScript software development kit (SDK) for Tensorlake applications, sandboxes, and clo…

NEWSSecurity Magazine18 days ago

Security Leaders Share Additional Thoughts on Oracle Health Breach

Recently, additional information was released regarding the data breach Oracle Health faced in Spring 2025.

NEWSThe Register18 days ago

Ransomware fixer claimed he could decrypt files, allegedly defrauded clients instead

Feds claim he charged clients more than ransoms, paid up, pocketed the difference

NEWSBleeping Computer18 days ago

Ransomware recovery CEO charged over secret ransom payments

The owner of ransomware remediation company MonsterCloud has been charged with allegedly defrauding ransomware victims by secretly…

NEWShighWired Security18 days ago

Shaq Got Hacked. Now He’s Pitching for a VPN

At a recent event for security firm NordVPN, NBA superstar Shaquille O’Neal revealed that he got hacked—and warned the public abou…

NEWSBleeping Computer18 days ago

FBI: Ongoing FortiBleed attacks lock out FortiGate VPN admins

The FBI is warning that FortiBleed attacks are still ongoing, targeting exposed Fortinet FortiGate firewalls and SSL VPN gateways…

NEWShighBleeping Computer18 days ago

Hackers hijack Google domains after breaching ccTLD registries

Hackers obtained unauthorized HTTPS certificates for several Google domains and hijacked domains in the country-code top-level dom…

NEWSCyberScoop18 days ago

Major rules for federal contractors handling sensitive data are nearing the finish line

The regulations on “controlled unclassified information” include security rules and requirements for reporting when they’re breach…

NEWSThe Register18 days ago

Attackers hijacked top-level domains, minted fake security certs for Google and other orgs

Trusted brand impersonation without the usual browser certificate warnings spells trouble

NEWSThe Hacker News18 days ago

Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains

Attackers compromised three country-code top-level domains (ccTLDs) and obtained unauthorized HTTPS certificates for several Googl…

NEWSHackread18 days ago

Dread Dark Web Forum Hijacked, Operators Claim Control of Domain Keys

Dread dark web forum appears hijacked after a pinned post claimed control of the project and domain keys, while denying plans to l…

NEWSThe Hacker News18 days ago

Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer

Cybersecurity researchers have disclosed details of a long-running npm supply chain malware campaign that pushes information steal…

NEWSThe Register18 days ago

AWS launches open-source AI agent sandbox to prevent YOLO mode disasters

Strands Box is the latest open source AI control tool from the cloud giant; like its predecessors, it promises tighter reins on au…

NEWSThe Register18 days ago

US states sue popular kitmaker TP-Link over China risks

Router maker rejects allegations it misled buyers about protection and its reliance on Chinese suppliers

NEWSCyberScoop18 days ago

FBI, French authorities seize deepfake CSAM-for-sale websites

Some of the material appeared to be recorded or stolen video of girls through interactions on social media sites like Snapchat, Ti…

NEWSSecurity Magazine18 days ago

48% of Cybersecurity Professionals Rely on Passwords for Personal Accounts

Nearly half of cybersecurity professionals depend on passwords to authenticate personal accounts, and almost as many depend on the…