Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

2,132 articles

NEWShighCVE-2024-420099.3 CRITICALThe Hacker News20 days ago

Suspected China-Aligned Hackers Exploit Roundcube Flaws Against Universities

A suspected China-aligned threat activity cluster has been observed exploiting Roundcube webmail software belonging to physics and…

NEWShighCyberScoop20 days ago

Suspected Chinese espionage group used a Roundcube exploit chain to burrow into universities

Proofpoint researchers said attackers targeted physics and engineering departments, and warn that the campaign is likely ongoing.…

NEWShighInfosecurity Magazine20 days ago

Hackers Exploit Maximum Severity Adobe ColdFusion Flaw

Threat actors are exploiting an Adobe ColdFusion vulnerability which has a CVSS score of 10.0

NEWScriticalBleeping Computer20 days ago

BeyondTrust warns of critical flaws in remote access software

BeyondTrust warned customers to patch two critical security flaws in its Remote Support (RS) and Privileged Remote Access (PRA) so…

NEWSBleeping Computer20 days ago

Microsoft testing new Cloud Rebuild Windows 11 recovery feature

Microsoft has begun testing the Cloud Rebuild recovery feature in the latest Windows 11 Insider Preview builds released for users…

NEWShighInfosecurity Magazine20 days ago

Phishing Attacks Targeted Facebook Users With Fake Verification Offer

Attacks also used a compromised chatbot in campaign to steal sensitive information from Business Users

NEWShighCVE-2026-114059.8 CRITICALThe Hacker News20 days ago

CERT/CC Warns of Hidden Admin Backdoor in Tenda Router Firmware

Several versions of firmware released by Chinese network device manufacturer Tenda have been found to embed an undocumented authen…

NEWScriticalCVE-2026-40138The Hacker News20 days ago

BeyondTrust Patches Critical Auth Bypass Flaws in Remote Support and PRA

BeyondTrust has released updates to address two critical security flaws affecting Remote Support (RS) and Privileged Remote Access…

NEWSHackread20 days ago

FBI and Spanish Police Arrest Alleged Cyber Army of Russia Reborn Member

Spanish police and the FBI arrested an alleged Cyber Army of Russia Reborn member as international efforts against pro Russia cybe…

NEWShighBleeping Computer20 days ago

Phishing poses as big-brand job interview to steal Google accounts

A phishing campaign is impersonating more than 30 well-known brands, including Adobe, Netflix, Coca-Cola, and OpenAI, in fake job…

NEWShighBleeping Computer20 days ago

Fake IT support calls on Microsoft Teams push EtherRAT malware

Threat actors are abusing Microsoft Teams voice calls by impersonating corporate IT support staff to trick employees into installi…

NEWSSecurityWeek20 days ago

Blogspot-Hosted Payloads Delivered in ‘Veil#Drop’ Attacks

Securonix says the sophisticated framework abuses compromised websites, Blogspot, PowerShell, and fileless techniques to evade det…

NEWShighThe Hacker News20 days ago

Iran-Linked Hackers Use New Cavern C2 Framework to Target Israeli Organizations

An Iranian hacking group affiliated with Iran's Ministry of Intelligence and Security (MOIS) has been wielding a previously undocu…

NEWSBleeping Computer20 days ago

Vietnam arrests suspects behind HiAnime anime piracy service

Vietnamese authorities have arrested and are prosecuting seven suspects believed to have run HiAnime, the largest anime piracy st…

NEWSCyberScoop20 days ago

US Army websites defaced with pro-Kurdish sentiments, insults to Trump

At least two websites appear to be victim to 404 hijacking attacks. Army officials took the sites down after being contacted by Cy…

NEWSCVE-2026-53359The Hacker News20 days ago

16-Year-Old Linux KVM Flaw Lets Guest VMs Escape to Host on Intel and AMD x86 Systems

A use-after-free bug in Linux's KVM hypervisor can be triggered from a guest virtual machine to corrupt the shadow-page state of t…

NEWSThe Register20 days ago

EU urged to act after Pegasus infects phone of spyware inquiry MEP

Campaigners demand investigation and long-delayed action on PEGA Committee recommendations

NEWShighCVE-2026-208969.8 CRITICALThe Hacker News20 days ago

Threat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure

Threat actors have been observed attempting to exploit a recently patched critical security flaw in Gitea Docker images, according…

NEWShighInfosecurity Magazine21 days ago

New Iran-Nexus Hacking Group Targets Israel Government and IT Sectors

Check Point researchers have identified a new cyber adversary targeting Israeli government and IT businesses, tracked as ‘Cavern M…

NEWSSecurityWeek21 days ago

The Shift Toward Business-Aligned Risk Management

Moving from isolated, technical data to a continuous risk lifecycle can help organizations align security controls with actual bus…

NEWSCyberScoop21 days ago

Sysdig clocks first documented case of agentic ransomware

The AI agent didn’t accomplish every step in the late June 2026 attack, but it allowed the threat actor to significantly reduce co…

NEWSSecurityWeek21 days ago

Armored Likho APT Targeting Government, Electric Power Entities

The threat actor uses modular RATs and information stealers in financially motivated and cyber espionage campaigns. The post Armor…

NEWSHackread21 days ago

From Image-to-3D to AI Agents: How AI 3D Generation Operates in 2026

Learn how AI 3D generation turns text, images, and video into usable 3D models, with Meshy AI tools for design, games, 3D printing…

NEWSInfosecurity Magazine21 days ago

Indirect Prompt Injection in Web Content Targets AI Agents

Zscaler found sites hiding prompt-injection text to manipulate AI agents into crypto payments

NEWSSecurity Magazine21 days ago

Researchers Discover First Documented Case of Agentic Ransomware

Researchers believe they have discovered the first documented case of an extortion operation run end-to-end by an LLM.

NEWSInfosecurity Magazine21 days ago

Opera GX Flaw Let Sites Auto-Install Mods to Steal Data

Opera GX flaw let sites automatically install mods to steal data from other pages, now patched

NEWSBleeping Computer21 days ago

Software Is Now Written at the Speed of Thought. Security Isn't.

Every evolution in software development has reduced the friction between an idea and a deployable application. AI may remove the f…

NEWShighCVE-2026-4828210.0 CRITICALBleeping Computer21 days ago

Max severity Adobe ColdFusion flaw now exploited in attacks

Attackers are now exploiting a maximum-severity Adobe ColdFusion vulnerability tracked as CVE-2026-48282, the Canadian Center for…

NEWShighSecurityWeek21 days ago

North Korean Hackers Target Open Source Developers in Supply Chain Attacks

The PolinRider campaign has compromised more than 100 legitimate open source packages and repositories to deliver a backdoor and i…

NEWShighThe Hacker News21 days ago

⚡ Weekly Recap: Proxy Botnets, Browser Ransomware, AI Agent Tricks, Fake PoC Malware and More

A streaming box should not need a threat model. Neither should a username field, a demo repo, a reset flow, or a browser permissio…