Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,519 articles

What Is Agentic Pentesting? What It Proves, and Where It Stops.

If you’re evaluating an agentic pentesting solution right now, you’ve probably heard the same pitch more than once: point it at a…

NEWSBleeping Computer20 days ago

SonicWall warns of max severity SSRF flaw in SMA1000 gateways

SonicWall has released hotfixes to address a maximum-severity server-side request forgery (SSRF) flaw in SMA1000 series appliances…

NEWSThe Register20 days ago

FortiBleed still a bleeding nuisance as FBI confirms ongoing attacks

Tens of thousands more victims and more ransomware groups getting in on the act

NEWShighSecurityWeek20 days ago

Chrome 155 Update Patches 247 Vulnerabilities

Four critical-severity use-after-free defects were fixed in Chromecast, Browser, Navigation, and Track. The post Chrome 155 Update…

NEWSBleeping Computer20 days ago

Musician sent to prison for $10 million streaming fraud using AI bots

A North Carolina musician was sentenced to 18 months in prison for collecting more than $10 million in royalties from Spotify, App…

NEWScriticalBleeping Computer20 days ago

Advantest confirms personal information stolen in ransomware attack

Advantest Corporation is notifying affected individuals that a ransomware attack earlier this year exposed their personally identi…

NEWSInfosecurity Magazine20 days ago

Half of Cybersecurity Pros Still Rely on Passwords Despite Security Concerns

A Yubico survey identified a significant gap between awareness and adoption of secure methods of authentication in enterprises

NEWSSecurityWeek20 days ago

Anthropic Introduces 3-Tier Cyber Verification Program for AI Access

Anthropic is integrating the CVP and Project Glasswing into a single offering, with three levels of access to its most capable AI…

NEWScriticalSecurityWeek20 days ago

ASOS Confirms Cyberattack, Data Breach

Hackers compromised a third-party communication platform and sent rogue notifications to ASOS users. The post ASOS Confirms Cybera…

NEWShighHackread20 days ago

100+ Ukrainian Websites Hacked to Install Lunex Stealer with ClickFix Lure

Over 100 hacked Ukrainian websites used fake Cloudflare checks to install Lunex Stealer and steal browser passwords, tokens and cr…

NEWScriticalInfosecurity Magazine20 days ago

Pwn2Own Hackers Find 32 Zero-Day Vulnerabilities on Day One

Ethical hackers have already found 32 zero days in various products at Pwn2Own Ireland

NEWSInfosecurity Magazine20 days ago

Danish CPR Breach Highlights Challenge of Supply Chain Risk

A breach of 8.8 million citizens on the Danish Central Register of Persons (CPR) occurred via third-party access

NEWSThe Hacker News20 days ago

Anthropic Expands Claude Access for Vetted Cyber Teams as Glasswing Finds 129,000 Flaws

Anthropic on Tuesday said it's expanding a program that allows vetted cybersecurity professionals to test its advanced artificial…

NEWSSecurityWeek20 days ago

Wikimedia Says Rogue OpenAI Agents Tried to Turn Its Tools Into Proxies

Wikimedia looked into whether its own websites had seen activity like that disclosed by other organizations The post Wikimedia Say…

NEWSThe Hacker News20 days ago

100+ Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealer

The Computer Emergency Response Team of Ukraine (CERT-UA) has identified more than 100 compromised websites that have been injecte…

NEWShighSecurityWeek20 days ago

Android’s October 2026 Updates Patch 25 Vulnerabilities

The patches resolve a critical vulnerability in Android’s System component that could lead to privilege escalation. The post Andro…

NEWScriticalSecurityWeek20 days ago

Atlassian Patches Critical Vulnerability Affecting 8 Products

Unauthenticated attackers could exploit the flaw to access specific files in the web application root directory. The post Atlassia…

NEWSThe Register20 days ago

South Korean president calls for creation of tools that stop all cyber-attacks

'Complete security paradigm refresh' needed for the AI era

NEWSSecurityWeek20 days ago

Personal Information for Over 1 Million People Stolen in a Cyberattack on Arizona’s Court System

The Arizona Supreme Court said the information was copied for people dating back as far as 30 years. The post Personal Information…

NEWSThe Register20 days ago

Anthropic reconfigures its cool kids security program

Company's Project Glasswing and Cyber Verification Program metamorphose into triple tier threat hunting club

NEWScriticalHackread20 days ago

ASOS Hackers Hijack App Notifications, Claim Snowflake Data Breach

British online fashion retailer ASOS is investigating unauthorised activity after attackers used its official mobile app to send…

NEWSHackread20 days ago

Karina Portugal Makes the Case for Know Your Agent

Karina Portugal has spent more than ten years working in digital identity, fraud prevention, anti-money laundering and Know…

NEWScriticalCyberScoop20 days ago

Alert: FortiBleed remains active campaign, can lock out users or lead to ransomware attacks

The FBI and Secret Service warned Fortinet users that FortiBleed, uncovered this summer, is a continuing threat. The post Alert: F…

NEWShighBleeping Computer20 days ago

Ninja Forms plugin flaw exploited to hack WordPress sites

Hackers are exploiting stored cross-site scripting (XSS) vulnerabilities in two unrelated WordPress plugins, Ninja Forms and WPC P…

NEWSCyberScoop21 days ago

Wiretapping change sparks big privacy fight in the Golden State

An update to a state wiretapping law will end private lawsuits over some internet tracking and surveillance, pitting businesses ag…

NEWScriticalBleeping Computer21 days ago

Hackers exploit 32 zero-days on first day of Pwn2Own Ireland

On the first day of the Pwn2Own Ireland 2026 competition, security researchers hacked the Samsung Galaxy S26 twice and earned $388…

NEWSThe Hacker News21 days ago

Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes

Cybersecurity researchers have disclosed details of a "human-operated phishing platform" that impersonates advertising products fo…

NEWShighThe Hacker News21 days ago

Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan

Linux backdoors targeting telecom and network appliances in South Korea and Taiwan have been disguising their traffic as email ser…

NEWSCyberScoop21 days ago

Former NSA chief Nakasone says agency overhaul is ‘probably needed’

Paul Nakasone said the reported reorganization is likely necessary to meet faster-moving cyberthreats and competition in AI, but w…

NEWSSecurity Magazine21 days ago

Researchers Determine That 2,514 Cybersecurity Events Occur Each Second

The Comcast Business 2026 Cybersecurity Threat Report analyzed 79.3 billion cybersecurity events detected across its cybersecurity…