Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,454 articles

NEWSThe Register20 days ago

Microsoft extends the Outlook naughty step with two more file types

You didn't really want to be sending around .msix and .msixbundle files, did you?

NEWSInfosecurity Magazine20 days ago

ClickFix Attack Hides VBScript Payload in Browser Cache

ClickFix sites stage a VBScript payload in the browser cache to bypass the Run dialog's length limit

NEWShighSecurity Magazine20 days ago

US-Bound Oil Supertanker Breached by Hackers

While approaching the coast of Texas, an oil supertanker was hacked.

NEWSHackread20 days ago

5 Astrix and Aembit Alternatives for AI Agent Identity Security

Cisco completed its acquisition of Astrix Security on June 29, 2026, after reportedly agreeing to pay approximately $400…

NEWScriticalSecurity Magazine20 days ago

Frontline Education Data Breach Highlights Third-Party Risks

An education technology company was breached.

NEWSSecurityWeek20 days ago

FBI Blames Contractor’s Missed Patch for ShinyHunters Breach

The FBI has removed an Accenture contractor over a data breach that exposed personal information of thousands of bureau employees.…

NEWSBleeping Computer20 days ago

How to secure RMM software: 8 controls MSPs should test

RMM platforms give MSPs privileged access across customer environments, making their security controls critical to limiting risk.…

NEWSInfosecurity Magazine20 days ago

Nikkei Discloses Two Employee Cloud Account Compromises

Nikkei says two employee cloud accounts were accessed, with one used to send 9,000 phishing emails

NEWSHackread20 days ago

Aembit Extends Access Controls to Personal AI Agents

Silver Springs, United States / Maryland, 6th October 2026, CyberNewswire

NEWShighInfosecurity Magazine20 days ago

Red Hat’s Lightwell Project Remediates 400 Open-Source Vulnerabilities

The IBM subsidiary has also announced its Lightwell Clearinghouse is now available to all customers

NEWSHackread20 days ago

Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management

Torrance, Californina, 6th October 2026, CyberNewswire

NEWSHackread20 days ago

AppViewX Adds Shadow AI Visibility and a Runtime Kill Switch to Agent Identity Security

New York, New York, 6th October 2026, CyberNewswire

NEWSThe Register20 days ago

Zombie instructions on carefully constructed web pages could trick GitHub Copilot CLI into sharing secrets

Run the CLI in autopilot mode and take your chances

NEWShighSecurityWeek20 days ago

FBI Arrests ‘Most Wanted’ Developer of Ploutus ATM Malware

An alleged leader of Tren de Aragua’s ATM jackpotting activities, Canelon Aguirre was on the FBI’s top 10 most wanted list since M…

NEWScriticalInfosecurity Magazine20 days ago

Critical Medical Devices Unable to Support PQC Transition

Forescout found that just 6% of Internet of Medical Things (IoMT) and 16% of medical OT are capable of supporting post quantum cry…

NEWSThe Hacker News20 days ago

LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings

A malicious spreadsheet can make LibreOffice and Apache OpenOffice run an attacker's code as soon as the file is opened, security…

NEWSThe Register20 days ago

Asos app delivers a data leak threat instead of fast fashion

Rogue notification claims Snowflake instance compromised, but customer info theft remains unverified

NEWSSecurityWeek20 days ago

Apple to Tighten Full Disk Access Controls in macOS Amid AI Risks

Citing growing risks posed by more capable and autonomous AI agents, Apple will introduce additional controls. The post Apple to T…

NEWSThe Register20 days ago

Denmark's ID register spills more people's details than the country has residents

Abuse of private firm's access exposed 8.8M records, including those of people who had died or moved abroad

NEWShighInfosecurity Magazine20 days ago

ASOS Customers Receive Bizarre “Hacked” Message Amid Suspected Snowflake Compromise

ASOS customers have received a seemingly legitimate push notifications claiming the retailer’s IT systems have been breached throu…

NEWSBleeping Computer20 days ago

Wikimedia: Rogue OpenAI agents behind unauthorized Wikipedia edits

The Wikimedia Foundation says rogue OpenAI agents made unauthorized Wikipedia edits and may have been partially responsible for a…

NEWSCyberScoop20 days ago

Here’s how experts think CISA should tell agencies to protect OT

Government auditors say federal agencies haven’t met mandated security steps for operational technology, which hackers targeted in…

NEWSThe Hacker News20 days ago

Wikimedia Says OpenAI Agents Tried to Compromise Etherpad and Use Wiki Tools as Proxies

The Wikimedia Foundation, which hosts Wikipedia, has confirmed that it has discovered activity by rogue OpenAI agents on its platf…

NEWSThe Hacker News20 days ago

Welcome to the Jungle: What We Found Inside 15,465 Public MCP Servers

In 2024, MCP (Model Context Protocol) set out to become the USB-C of AI: one standard for connecting models, agents, and IDEs to t…

NEWSSecurityWeek20 days ago

Cybersecurity M&A Roundup: 39 Deals Announced in September 2026

Significant cybersecurity M&A deals announced by Dragos, IBM, Palo Alto Networks, Kiteworks, and Upwind. The post Cybersecurity M&…

NEWSHackread20 days ago

Using Technology to Fight Distraction and Improve Focus

Learn how to use technology to fight distraction and improve focus with notification controls, site blockers, focus timers and tas…

NEWShighSecurityWeek20 days ago

Long-Running NPM Malware Campaign Accumulates 40,000 Downloads

Since August 2023, attackers have published eight malicious packages as part of the MALFEX supply chain campaign. The post Long-Ru…

NEWSHackread20 days ago

FBI Confirms Multiple Arrests in ShinyHunters Investigation

The FBI confirmed multiple arrests in its ShinyHunters investigation after suspected member Saif al-Din Khader was reportedly deta…

NEWScriticalSecurityWeek20 days ago

8.8 Million Impacted by Data Breach at Denmark’s Central Person Register

Hackers abused a company’s lawful access to the CPR system to steal the personal information of registered citizens. The post 8.8…

NEWSBleeping Computer20 days ago

Nikkei discloses breaches of employees’ Microsoft, Google email accounts

Over the weekend, Japanese publishing giant Nikkei disclosed that unknown attackers recently breached two employee email accounts…