Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,577 articles

Shaq Got Hacked. Now He’s Pitching for a VPN

At a recent event for security firm NordVPN, NBA superstar Shaquille O’Neal revealed that he got hacked—and warned the public abou…

NEWSBleeping Computer21 days ago

FBI: Ongoing FortiBleed attacks lock out FortiGate VPN admins

The FBI is warning that FortiBleed attacks are still ongoing, targeting exposed Fortinet FortiGate firewalls and SSL VPN gateways…

NEWShighBleeping Computer21 days ago

Hackers hijack Google domains after breaching ccTLD registries

Hackers obtained unauthorized HTTPS certificates for several Google domains and hijacked domains in the country-code top-level dom…

NEWSCyberScoop21 days ago

Major rules for federal contractors handling sensitive data are nearing the finish line

The regulations on “controlled unclassified information” include security rules and requirements for reporting when they’re breach…

NEWSThe Register21 days ago

Attackers hijacked top-level domains, minted fake security certs for Google and other orgs

Trusted brand impersonation without the usual browser certificate warnings spells trouble

NEWSThe Hacker News21 days ago

Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains

Attackers compromised three country-code top-level domains (ccTLDs) and obtained unauthorized HTTPS certificates for several Googl…

NEWSHackread21 days ago

Dread Dark Web Forum Hijacked, Operators Claim Control of Domain Keys

Dread dark web forum appears hijacked after a pinned post claimed control of the project and domain keys, while denying plans to l…

NEWSThe Hacker News21 days ago

Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer

Cybersecurity researchers have disclosed details of a long-running npm supply chain malware campaign that pushes information steal…

NEWSThe Register21 days ago

AWS launches open-source AI agent sandbox to prevent YOLO mode disasters

Strands Box is the latest open source AI control tool from the cloud giant; like its predecessors, it promises tighter reins on au…

NEWSThe Register21 days ago

US states sue popular kitmaker TP-Link over China risks

Router maker rejects allegations it misled buyers about protection and its reliance on Chinese suppliers

NEWSCyberScoop21 days ago

FBI, French authorities seize deepfake CSAM-for-sale websites

Some of the material appeared to be recorded or stolen video of girls through interactions on social media sites like Snapchat, Ti…

NEWSSecurity Magazine21 days ago

48% of Cybersecurity Professionals Rely on Passwords for Personal Accounts

Nearly half of cybersecurity professionals depend on passwords to authenticate personal accounts, and almost as many depend on the…

NEWSHackread21 days ago

How DNS, Firewalls and Endpoint Tools Block Websites

Website filtering can be enforced at four points in a request's lifecycle. What each layer sees, what routes around it, and why ne…

NEWSThe Hacker News21 days ago

SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances

SonicWall has released hotfixes for four flaws in its SMA1000 appliances, the gateways that give remote workers access to a compan…

NEWShighThe Register21 days ago

Poetry is the new AI security threat as PoeLLM malware infects 3K+ servers

Quoth the LLM, 'More and more'

NEWSBleeping Computer21 days ago

Microsoft Outlook to block MSIX attachments starting November

Microsoft announced that it will add .msix and .msixbundle attachments to the list of blocked attachments in Outlook Web and the n…

NEWScriticalThe Hacker News21 days ago

Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely

A critical vulnerability in LMCache, open-source software that speeds up large language model (LLM) servers such as vLLM, lets an…

NEWSWired Security21 days ago

The Pentagon Hopes to Speed Up ‘Kill Chain’ AI Buys With 5-Minute Videos

The US government’s Tradewinds initiative has made it easier to throw millions of dollars at “nontraditional” defense contractors,…

NEWShighThe Hacker News21 days ago

PoeLLM Malware Infects 3,400+ Servers to Expand Crypto Mining Botnet

Cybersecurity researchers are calling attention to a new malware family that has been observed targeting exposed artificial intell…

NEWShighBleeping Computer21 days ago

PoeLLM malware infects exposed AI servers in cryptomining attacks

A cryptomining campaign targeting exposed AI services is using PoeLLM malware to turn compromised servers into scanners and exploi…

NEWShighCyberScoop21 days ago

PoeLLM malware has assembled a sweeping botnet, taking technical cues from a poem

More than 3,400 servers have been compromised by malware that hides its infrastructure coordinates in a poem. The post PoeLLM malw…

NEWScriticalSecurityWeek21 days ago

Georgia Power, Alabama Power Data Breach Hits 400,000 Accounts

Southern Company is notifying customers that their utility account information was accessed by hackers. The post Georgia Power, Al…

NEWSInfosecurity Magazine21 days ago

OT Coalition Urges CISA to Mandate Federal OT Security

OTCC urged CISA to mandate baseline security requirements for federal operational technology

NEWSBleeping Computer21 days ago

Ransomware has a new target. Is your backup ready?

Ransomware groups are increasingly targeting backup infrastructure to eliminate recovery options and increase pressure on victims…

NEWScriticalSecurity Magazine21 days ago

FBI Removes Accenture Contractor Following Employee Data Breach

The FBI employee breach was caused by an Accenture flaw.

NEWSKrebs on Security21 days ago

ShinyHunters Extorted Boeing Spin-off Prior to Arrests

A teenager from Amman, Jordan suspected of leading the prolific data theft and extortion group ShinyHunters has been detained and…

NEWSSecurityWeek21 days ago

Qilin Ransomware Suspect Arrested in Japan, Extradited to Germany

The individual was detained in May and has been extradited to Germany to face hacking charges. The post Qilin Ransomware Suspect A…

NEWSSecurityWeek21 days ago

Hadrian Raises $40 Million to Expand Autonomous Offensive Security Platform

Hadrian offers an agentic offensive security platform that allows defenders to operate at the same speed as attackers. The post Ha…

NEWShighInfosecurity Magazine21 days ago

Attackers Hide AI Prompt Injections Inside Phishing Emails

Barracuda finds phishing emails designed to manipulate both human users and AI assistants

NEWScriticalCVE-2026-215897.5 HIGHBleeping Computer21 days ago

Hackers exploit critical Atlassian flaw after public PoC release

A critical vulnerability (CVE-2026-21589) affecting multiple Atlassian product families, including Jira, Confluence, and Bitbucket…