Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

2,132 articles

RedWing MaaS Packages Android Bank Fraud as a Telegram Rental Service

A new Android malware operation called RedWing is being rented out on Telegram as a ready-made bank-fraud service. It lets even lo…

NEWSHackread19 days ago

7 Arrested Over World’s Top Anime Piracy Site HiAnime

Vietnamese police, aided by US Homeland Security and ACE, arrested seven people accused of running HiAnime, tied to $12.85M in ad…

NEWSThe Hacker News19 days ago

Rogue Agent Flaw Could Have Let Attackers Hijack Google Dialogflow CX Chatbots

A critical flaw in Google's Dialogflow CX could have let an attacker with edit rights on one Code Block-enabled agent compromise o…

NEWSThe Register19 days ago

Predatorgate snoopfest victims launch €8M sueball at spyware maker

Greek lawsuit comes as rights campaigners lobby the EU to take firmer stance on spyware abuses

NEWSInfosecurity Magazine19 days ago

Suspected Chinese Threat Group Targets Universities via Vulnerable Roundcube Servers

A suspected Chinese threat cluster is exploiting Roundcube vulnerabilities to compromise university networks in the US and Canada…

NEWShighBleeping Computer19 days ago

Spain arrests suspected member of pro-Russian hacktivist groups

The National Police in Spain have arrested a man who is suspected of being an active member of the CyberArmy of Russia Reborn (CAR…

NEWSThe Hacker News19 days ago

DEBULL Tooling Abuses Microsoft Device-Code Flow to Target M365 Accounts

A Microsoft 365 device code phishing campaign has been observed leveraging collaboration-themed lures to take control of victim ac…

NEWScriticalSecurity Magazine19 days ago

Department of Homeland Security Investigating a Data Breach

The DHS announced it is investigating a data breach involving an information-sharing network.

NEWSThe Hacker News20 days ago

Public GitHub Issue Could Trick GitHub Agentic Workflows Into Leaking Private Repo Data

A public issue can trick GitHub Agentic Workflows into leaking the contents of an organization's private repositories, researchers…

NEWSBleeping Computer20 days ago

The GitHub Actions Attack Pattern Your CI Security Scanners Miss

ActiveState explains how GitHub Actions attack chains can evade traditional CI security scanners, why passing a scan doesn't guara…

NEWSInfosecurity Magazine20 days ago

Scattered Spider’s Structure More Like a Cybercrime Collective Than a Unified Gang

Group-IB analysis argued Scattered Spider is a decentralized collective of independent clusters

NEWShighThe Hacker News20 days ago

Court Filing Reveals Windows Device ID Helped FBI Trace Alleged Scattered Spider Hacker

U.S. prosecutors linked an alleged Scattered Spider hacker to a break-in at a luxury jewelry retailer using a persistent Windows d…

NEWSThe Hacker News20 days ago

Writer AI Flaw Could Let Agent Previews Leak Session Tokens Across Tenants

Cybersecurity researchers have disclosed details of a now-patched critical session isolation vulnerability in Writer, an enterpris…

NEWSSecurityWeek20 days ago

CISA Reportedly Using Anthropic’s Mythos to Scan Government Software for Flaws

The audits are reportedly being spearheaded by CISA’s Attack Surface Evaluation team, a specialized unit tasked with conducting di…

NEWSHackread20 days ago

GitLost: GitHub’s AI Agent Tricked Into Leaking Private Repository Data

Noma Labs details GitLost, a prompt injection flaw that made GitHub's AI agent expose private repo data through a crafted public i…

NEWSThe Register20 days ago

Enterprise AI still smarting from leaping before looking

Majority report AI-related security incidents or vulnerabilities

NEWScriticalCVE-2026-4828210.0 CRITICALSecurityWeek20 days ago

Critical Adobe ColdFusion Vulnerability Exploited in Attacks

Hackers are exploiting a recently patched critical vulnerability (CVE-2026-48282) in Adobe ColdFusion that carries a CVSS score of…

NEWShighSecurityWeek20 days ago

Iran-Linked Hackers Using Modular C&C Framework in Cyberattacks

Researchers say the Iran-linked threat actor used an adaptable modular malware framework and compromised IT service providers to r…

NEWSBleeping Computer20 days ago

Webinar tomorrow: Why modern email attacks require a new approach to defense

Tomorrow's webinar explores how behavioral AI can help organizations detect sophisticated phishing, business email compromise, and…

NEWSBleeping Computer20 days ago

New Januscape Linux flaw allows VM escape on Intel, AMD devices

A 16-year-old Linux kernel vulnerability, dubbed Januscape, allows attackers to escape a virtual machine and execute arbitrary cod…

NEWSSecurityWeek20 days ago

CISO Conversations: Tarah Wheeler, Cybersecurity Leader, Thought Leader and Original Thinker

Tarah Wheeler is CISO at TPO Group, a firm that provides cybersecurity consultancy for high-stakes organizations. But despite this…

NEWSThe Hacker News20 days ago

What Changes When Your Software Supply Chain Includes AI Writing Your Code?

Software supply chain security was hard enough. Then AI joined the build pipeline. For five years, "software supply chain securit…

NEWShighThe Register20 days ago

Fake IT bods on Microsoft Teams coax workers into installing malware

Unit 42 says attackers are posing as helpdesk staff and persuading employees to hand over remote control before dropping EtherRAT…

NEWSHackread20 days ago

4 Best Email Security Solutions to Keep Employee Inboxes Safe

Compare leading and best email security solutions with AI threat detection, phishing defense, malware blocking, and DLP features f…

NEWShighThe Register20 days ago

Spain collars alleged pro-Russia hacktivist after FBI tip-off

Palencia man suspected of links to CARR, Z-Pentest, and NoName057(16), plus helping a Ukrainian hacker flee to Russia

NEWSThe Register20 days ago

Government's cyber pledge lands 60 signatories, including M&S and, somehow, Capita

Whitehall's latest attempt to boost corporate cyber hygiene has already produced a curious roll call

NEWSInfosecurity Magazine20 days ago

UK Government Launches Cyber Resilience Pledge, Claiming 60+ Signatories

More than 60 organizations, including M&S, Microsoft UK and Vodafone, have signed the UK government's Cyber Resilience Pledge, a n…

NEWShighSecurityWeek20 days ago

Linux Kernel Vulnerability Allows VM Escape on Intel and AMD Systems

The 16-year-old Januscape flaw affects Linux's KVM hypervisor, allowing attackers to escape virtual machines and potentially execu…

NEWSBleeping Computer20 days ago

Microsoft to enable Windows settings backup by default for orgs

Microsoft says the Windows settings backup and restore tool will be enabled by default on Microsoft Entra-joined or Microsoft Entr…

NEWSSecurityWeek20 days ago

Keyfactor Scores $1 Billion+ Investment for AI, Post-Quantum Security

The investment will accelerate Keyfactor's machine identity, PKI, and cryptographic security platform as enterprises prepare for A…