Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,454 articles

Half of Cybersecurity Pros Still Rely on Passwords Despite Security Concerns

A Yubico survey identified a significant gap between awareness and adoption of secure methods of authentication in enterprises

NEWSSecurityWeek19 days ago

Anthropic Introduces 3-Tier Cyber Verification Program for AI Access

Anthropic is integrating the CVP and Project Glasswing into a single offering, with three levels of access to its most capable AI…

NEWScriticalSecurityWeek19 days ago

ASOS Confirms Cyberattack, Data Breach

Hackers compromised a third-party communication platform and sent rogue notifications to ASOS users. The post ASOS Confirms Cybera…

NEWShighHackread19 days ago

100+ Ukrainian Websites Hacked to Install Lunex Stealer with ClickFix Lure

Over 100 hacked Ukrainian websites used fake Cloudflare checks to install Lunex Stealer and steal browser passwords, tokens and cr…

NEWScriticalInfosecurity Magazine19 days ago

Pwn2Own Hackers Find 32 Zero-Day Vulnerabilities on Day One

Ethical hackers have already found 32 zero days in various products at Pwn2Own Ireland

NEWSInfosecurity Magazine19 days ago

Danish CPR Breach Highlights Challenge of Supply Chain Risk

A breach of 8.8 million citizens on the Danish Central Register of Persons (CPR) occurred via third-party access

NEWSThe Hacker News19 days ago

Anthropic Expands Claude Access for Vetted Cyber Teams as Glasswing Finds 129,000 Flaws

Anthropic on Tuesday said it's expanding a program that allows vetted cybersecurity professionals to test its advanced artificial…

NEWSSecurityWeek19 days ago

Wikimedia Says Rogue OpenAI Agents Tried to Turn Its Tools Into Proxies

Wikimedia looked into whether its own websites had seen activity like that disclosed by other organizations The post Wikimedia Say…

NEWSThe Hacker News19 days ago

100+ Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealer

The Computer Emergency Response Team of Ukraine (CERT-UA) has identified more than 100 compromised websites that have been injecte…

NEWShighSecurityWeek19 days ago

Android’s October 2026 Updates Patch 25 Vulnerabilities

The patches resolve a critical vulnerability in Android’s System component that could lead to privilege escalation. The post Andro…

NEWScriticalSecurityWeek19 days ago

Atlassian Patches Critical Vulnerability Affecting 8 Products

Unauthenticated attackers could exploit the flaw to access specific files in the web application root directory. The post Atlassia…

NEWSThe Register19 days ago

South Korean president calls for creation of tools that stop all cyber-attacks

'Complete security paradigm refresh' needed for the AI era

NEWSSecurityWeek19 days ago

Personal Information for Over 1 Million People Stolen in a Cyberattack on Arizona’s Court System

The Arizona Supreme Court said the information was copied for people dating back as far as 30 years. The post Personal Information…

NEWSThe Register19 days ago

Anthropic reconfigures its cool kids security program

Company's Project Glasswing and Cyber Verification Program metamorphose into triple tier threat hunting club

NEWScriticalHackread19 days ago

ASOS Hackers Hijack App Notifications, Claim Snowflake Data Breach

British online fashion retailer ASOS is investigating unauthorised activity after attackers used its official mobile app to send…

NEWSHackread19 days ago

Karina Portugal Makes the Case for Know Your Agent

Karina Portugal has spent more than ten years working in digital identity, fraud prevention, anti-money laundering and Know…

NEWScriticalCyberScoop19 days ago

Alert: FortiBleed remains active campaign, can lock out users or lead to ransomware attacks

The FBI and Secret Service warned Fortinet users that FortiBleed, uncovered this summer, is a continuing threat. The post Alert: F…

NEWShighBleeping Computer19 days ago

Ninja Forms plugin flaw exploited to hack WordPress sites

Hackers are exploiting stored cross-site scripting (XSS) vulnerabilities in two unrelated WordPress plugins, Ninja Forms and WPC P…

NEWSCyberScoop19 days ago

Wiretapping change sparks big privacy fight in the Golden State

An update to a state wiretapping law will end private lawsuits over some internet tracking and surveillance, pitting businesses ag…

NEWScriticalBleeping Computer19 days ago

Hackers exploit 32 zero-days on first day of Pwn2Own Ireland

On the first day of the Pwn2Own Ireland 2026 competition, security researchers hacked the Samsung Galaxy S26 twice and earned $388…

NEWSThe Hacker News19 days ago

Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes

Cybersecurity researchers have disclosed details of a "human-operated phishing platform" that impersonates advertising products fo…

NEWShighThe Hacker News19 days ago

Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan

Linux backdoors targeting telecom and network appliances in South Korea and Taiwan have been disguising their traffic as email ser…

NEWSCyberScoop19 days ago

Former NSA chief Nakasone says agency overhaul is ‘probably needed’

Paul Nakasone said the reported reorganization is likely necessary to meet faster-moving cyberthreats and competition in AI, but w…

NEWSSecurity Magazine20 days ago

Researchers Determine That 2,514 Cybersecurity Events Occur Each Second

The Comcast Business 2026 Cybersecurity Threat Report analyzed 79.3 billion cybersecurity events detected across its cybersecurity…

NEWScriticalCVE-2026-215897.5 HIGHBleeping Computer20 days ago

Atlassian warns of critical file-access flaw in Jira, Confluence

Atlassian is warning customers of a critical vulnerability, tracked as CVE-2026-21589, that can be exploited for arbitrary file-ac…

NEWSThe Register20 days ago

Trump Mobile customers' data dumped - and some never even received their gold device

All that glitters …

NEWScriticalHackread20 days ago

FBI Removes Accenture Contractor Over ShinyHunters Job Site Data Breach

The FBI removed a contractor over a ShinyHunters-linked breach. Reuters sources identified Accenture and an unpatched Oracle Peopl…

NEWScriticalBleeping Computer20 days ago

ASOS confirms data breach after “HACKED” in-app notifications

UK fashion retailer ASOS confirmed a data breach Tuesday after hackers sent unauthorized push notifications through its mobile app…

NEWSSecurity Magazine20 days ago

Mississippi City Discloses Ransomware Incident

Vicksburg, Mississippi, had computer systems temporarily shut down due to a cyberattack.

NEWSBleeping Computer20 days ago

Fake ChatGPT, Gemini Sites steal advertising accounts, MFA codes

A new campaign targeting ad account managers uses fake ChatGPT, Gemini, Claude, and Perplexity sites that steal login credentials…