Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,454 articles

48% of Cybersecurity Professionals Rely on Passwords for Personal Accounts

Nearly half of cybersecurity professionals depend on passwords to authenticate personal accounts, and almost as many depend on the…

NEWSHackread19 days ago

How DNS, Firewalls and Endpoint Tools Block Websites

Website filtering can be enforced at four points in a request's lifecycle. What each layer sees, what routes around it, and why ne…

NEWSThe Hacker News19 days ago

SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances

SonicWall has released hotfixes for four flaws in its SMA1000 appliances, the gateways that give remote workers access to a compan…

NEWShighThe Register19 days ago

Poetry is the new AI security threat as PoeLLM malware infects 3K+ servers

Quoth the LLM, 'More and more'

NEWSBleeping Computer19 days ago

Microsoft Outlook to block MSIX attachments starting November

Microsoft announced that it will add .msix and .msixbundle attachments to the list of blocked attachments in Outlook Web and the n…

NEWScriticalThe Hacker News19 days ago

Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely

A critical vulnerability in LMCache, open-source software that speeds up large language model (LLM) servers such as vLLM, lets an…

NEWSWired Security19 days ago

The Pentagon Hopes to Speed Up ‘Kill Chain’ AI Buys With 5-Minute Videos

The US government’s Tradewinds initiative has made it easier to throw millions of dollars at “nontraditional” defense contractors,…

NEWShighThe Hacker News19 days ago

PoeLLM Malware Infects 3,400+ Servers to Expand Crypto Mining Botnet

Cybersecurity researchers are calling attention to a new malware family that has been observed targeting exposed artificial intell…

NEWShighBleeping Computer19 days ago

PoeLLM malware infects exposed AI servers in cryptomining attacks

A cryptomining campaign targeting exposed AI services is using PoeLLM malware to turn compromised servers into scanners and exploi…

NEWShighCyberScoop19 days ago

PoeLLM malware has assembled a sweeping botnet, taking technical cues from a poem

More than 3,400 servers have been compromised by malware that hides its infrastructure coordinates in a poem. The post PoeLLM malw…

NEWScriticalSecurityWeek19 days ago

Georgia Power, Alabama Power Data Breach Hits 400,000 Accounts

Southern Company is notifying customers that their utility account information was accessed by hackers. The post Georgia Power, Al…

NEWSInfosecurity Magazine19 days ago

OT Coalition Urges CISA to Mandate Federal OT Security

OTCC urged CISA to mandate baseline security requirements for federal operational technology

NEWSBleeping Computer19 days ago

Ransomware has a new target. Is your backup ready?

Ransomware groups are increasingly targeting backup infrastructure to eliminate recovery options and increase pressure on victims…

NEWScriticalSecurity Magazine19 days ago

FBI Removes Accenture Contractor Following Employee Data Breach

The FBI employee breach was caused by an Accenture flaw.

NEWSKrebs on Security19 days ago

ShinyHunters Extorted Boeing Spin-off Prior to Arrests

A teenager from Amman, Jordan suspected of leading the prolific data theft and extortion group ShinyHunters has been detained and…

NEWSSecurityWeek19 days ago

Qilin Ransomware Suspect Arrested in Japan, Extradited to Germany

The individual was detained in May and has been extradited to Germany to face hacking charges. The post Qilin Ransomware Suspect A…

NEWSSecurityWeek19 days ago

Hadrian Raises $40 Million to Expand Autonomous Offensive Security Platform

Hadrian offers an agentic offensive security platform that allows defenders to operate at the same speed as attackers. The post Ha…

NEWShighInfosecurity Magazine19 days ago

Attackers Hide AI Prompt Injections Inside Phishing Emails

Barracuda finds phishing emails designed to manipulate both human users and AI assistants

NEWScriticalCVE-2026-215897.5 HIGHBleeping Computer19 days ago

Hackers exploit critical Atlassian flaw after public PoC release

A critical vulnerability (CVE-2026-21589) affecting multiple Atlassian product families, including Jira, Confluence, and Bitbucket…

NEWScriticalSecurityWeek19 days ago

Advantest Discloses Data Breach Months After Ransomware Attack

The Japanese chip testing giant said hackers stole personal information from its servers in the February 2026 cyberattack. The pos…

NEWSThe Hacker News19 days ago

The Sixth Voice of the CISO Data Shows Cyber Risk Has Moved Inside the Workflow

The 2026 findings are not just a year-over-year shift. They mark the latest point in a five-year arc where resilience, AI governan…

NEWSInfosecurity Magazine19 days ago

Telegram Account Behind ASOS Rogue Notification Tied to Gaming Trading

A Group-IB researcher has found the Telegram account linked to the unauthorized ASOS customer notification previously engaged in g…

NEWSThe Hacker News19 days ago

FBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials

The U.S. Federal Bureau of Investigation (FBI) and Secret Service (USSS) on Tuesday warned that the FortiBleed credential harvesti…

NEWShighCVE-2026-215897.5 HIGHThe Hacker News19 days ago

Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details

Threat actors have begun to exploit a newly disclosed critical security flaw impacting Atlassian Data Center products that could a…

NEWSThe Hacker News19 days ago

What Is Agentic Pentesting? What It Proves, and Where It Stops.

If you’re evaluating an agentic pentesting solution right now, you’ve probably heard the same pitch more than once: point it at a…

NEWSBleeping Computer19 days ago

SonicWall warns of max severity SSRF flaw in SMA1000 gateways

SonicWall has released hotfixes to address a maximum-severity server-side request forgery (SSRF) flaw in SMA1000 series appliances…

NEWSThe Register19 days ago

FortiBleed still a bleeding nuisance as FBI confirms ongoing attacks

Tens of thousands more victims and more ransomware groups getting in on the act

NEWShighSecurityWeek19 days ago

Chrome 155 Update Patches 247 Vulnerabilities

Four critical-severity use-after-free defects were fixed in Chromecast, Browser, Navigation, and Track. The post Chrome 155 Update…

NEWSBleeping Computer19 days ago

Musician sent to prison for $10 million streaming fraud using AI bots

A North Carolina musician was sentenced to 18 months in prison for collecting more than $10 million in royalties from Spotify, App…

NEWScriticalBleeping Computer19 days ago

Advantest confirms personal information stolen in ransomware attack

Advantest Corporation is notifying affected individuals that a ransomware attack earlier this year exposed their personally identi…