Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

2,133 articles

⚡ Weekly Recap: Proxy Botnets, Browser Ransomware, AI Agent Tricks, Fake PoC Malware and More

A streaming box should not need a threat model. Neither should a username field, a demo repo, a reset flow, or a browser permissio…

NEWShighSecurityWeek21 days ago

Proof-of-Concept Exploit Released for Linux ‘Bad Epoll’ Root Access Vulnerability

Organizations are urged to patch after proof-of-concept code makes the Linux root escalation flaw easier to exploit. The post Proo…

NEWShighHackread21 days ago

ClickFix Scams Abuse Google, Cloudflare Checks to Deliver 7 Malware Families

Malwarebytes links fake Google and Cloudflare verification pages to shared ClickFix infrastructure delivering StealC, NetSupport a…

NEWSThe Register21 days ago

Brit supermarket giant triples down on facial recog to nab shoplifters

Up to 150 more stores to get the 'Orwellian' tech by year's end

NEWSHackread21 days ago

Insignary Closes SBOM Accuracy Gap With Binary-Level Clarity for Regulatory Risk

Toronto, Canada, 6th July 2026, CyberNewswire

NEWSThe Hacker News21 days ago

How to Evaluate an AI SOC Platform in 2026: 6 Capabilities That Separate Leaders from Bolt-On AI solutions

Building a shortlist for an AI SOC evaluation can be tough. SIEM, SOAR, and pureplay AI SOC vendors are all saying the same thing.…

NEWSSecurityWeek21 days ago

Prompt Injection Attacks Trick AI Agents Into Making Crypto Payments

Researchers uncovered two campaigns embedding indirect prompt injections in malicious websites to exploit autonomous AI agents bro…

NEWShighThe Hacker News21 days ago

Suspected China-Nexus Hackers Use Fake Indian Tax Filing Utility to Deploy DcRAT

A suspected China-nexus threat activity cluster has been observed targeting Indian taxpayers, tax professionals, and corporate fin…

NEWSThe Register21 days ago

Moody Bible Institute breach leaves 2.3M accounts needing salvation, says cyber expert

ShinyHunters leaks names, addresses, DOBs, and more after Christian college discloses cyberattack

NEWSHackread21 days ago

AI Can Forge Documents in Minutes – “Looks Right” Is No Longer Enough

Generative AI is making document fraud faster and harder to spot, pushing security teams to verify provenance, signatures and file…

NEWSWired Security21 days ago

ICE’s Internal Watchdog Is Now Investigating Online Critics

The Office of Professional Responsibility has opened more than 100 cases over what ICE officials call “incidents of doxing and thr…

NEWSThe Register21 days ago

Secure Unix ancestor KSOS did type safety before Rust made it cool

Modula-based source code resurfaces after nearly four decades

NEWShighCyberScoop21 days ago

Finding vulnerabilities was never the hard part

AI is surfacing vulnerabilities at a scale the industry has never seen, and most organizations have no way to determine which ones…

NEWShighInfosecurity Magazine21 days ago

NCA Issues Warning to Parents As Shared Child Photos Exploited by AI Tools

IWF and NCA warn that growing numbers of images and videos are being manipulated into sexual abuse material

NEWSThe Hacker News21 days ago

New TrojPix Attack Leaks Data From Air-Gapped Systems via Video Cable Emissions

Researchers at Shandong University have shown a fast new way to pull data off computers that are cut off from every network. The t…

NEWSInfosecurity Magazine21 days ago

Researchers Claim First Fully Agentic Ransomware: JadePuffer

Researchers have revealed JadePuffer, the first agentic AI-powered ransomware campaign, highlighting how autonomous agents can aut…

NEWSThe Hacker News21 days ago

New Java-Based QuimaRAT MaaS Built to Run on Windows, Linux, and macOS

Cybersecurity researchers have flagged a novel Java-based remote access trojan (RAT) called QuimaRAT that's capable of targeting W…

NEWSThe Hacker News21 days ago

Opera GX Flaw Let Malicious Sites Auto-Install Mods to Steal Data From Visited Pages

Researchers found a flaw in Opera GX, the gaming-focused version of the Opera browser, that let a malicious website silently insta…

NEWSThe Hacker News21 days ago

SkillCloak Lets Malicious AI Agent Skills Evade Static Scanners with Self-Extracting Packing

Scanners meant to catch malicious add-on "skills" for AI coding agents can be fooled by a few simple changes that leave the malwar…

NEWSThe Register22 days ago

MFA-optional banks leave safe doors (and accounts) wide open for thieves to pillage

Financial institutions are putting their clients at risk in the name of convenience.

NEWSBleeping Computer22 days ago

Flipper Zero firmware development continues with community help

Flipper Devices says development of the Flipper Zero firmware will continue, albeit with a smaller internal team and greater relia…

NEWSBleeping Computer23 days ago

JadePuffer ransomware used AI agent to automate entire attack

Researchers identified what they believe is the first documented case of a ransomware operation, JadePuffer, conducted entirely by…

NEWSThe Hacker News23 days ago

U.S. Government Entity Paid Kairos $1 Million in Data-Theft Extortion Case

A U.S. government entity paid about $1 million to keep stolen files from being leaked, according to a new case study by Rakesh Kri…

NEWSHackread23 days ago

The Lean Expansion Playbook AI Startups Are Using to Build Global Teams

Learn how AI startups use global hiring, EOR partners, and remote systems to access talent, stay compliant, and extend runway effi…

NEWShighThe Hacker News23 days ago

North Korean Hackers Publish 108 Malicious Packages and Extensions in PolinRider Campaign

The North Korean threat actors linked to the Contagious Interview campaign have been observed publishing 108 unique packages and w…

NEWSWired Security23 days ago

Security Roundup: Apple’s Hide My Email Service Fails to Hide Your Email

Plus: Alleged Scattered Spider hacking member extradited, dozens of license plate reader errors, and Indian officials are concerne…

NEWSThe Register23 days ago

Confidential computing's core trust mechanism is broken. The fix may not exist

Attested TLS: the handshake that can't prove who's on the other end

NEWSThe Hacker News23 days ago

Unpatched Flaws Disclosed in Filesystem Bundled Into Millions of Embedded Devices

Security firm runZero has disclosed seven vulnerabilities in FatFs, a small filesystem library that lets a device read and write t…

NEWSHackread23 days ago

FBI Seizes NetNut Domains as Google Disrupts 2M Device Proxy Network

FBI and Google disrupt NetNut after domains linked to its residential proxy network are seized, exposing abuse of 2 million TVs an…

NEWSCVE-2026-462427.8 HIGHThe Hacker News23 days ago

New "Bad Epoll" Linux Kernel Flaw Lets Unprivileged Users Gain Root, Hits Android

A newly disclosed Linux kernel flaw called Bad Epoll (CVE-2026-46242) lets an ordinary user with no special access take full contr…