Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,581 articles

Qilin Ransomware Suspect Arrested in Japan, Extradited to Germany

The individual was detained in May and has been extradited to Germany to face hacking charges. The post Qilin Ransomware Suspect A…

NEWSSecurityWeek21 days ago

Hadrian Raises $40 Million to Expand Autonomous Offensive Security Platform

Hadrian offers an agentic offensive security platform that allows defenders to operate at the same speed as attackers. The post Ha…

NEWShighInfosecurity Magazine21 days ago

Attackers Hide AI Prompt Injections Inside Phishing Emails

Barracuda finds phishing emails designed to manipulate both human users and AI assistants

NEWScriticalCVE-2026-215897.5 HIGHBleeping Computer21 days ago

Hackers exploit critical Atlassian flaw after public PoC release

A critical vulnerability (CVE-2026-21589) affecting multiple Atlassian product families, including Jira, Confluence, and Bitbucket…

NEWScriticalSecurityWeek21 days ago

Advantest Discloses Data Breach Months After Ransomware Attack

The Japanese chip testing giant said hackers stole personal information from its servers in the February 2026 cyberattack. The pos…

NEWSThe Hacker News21 days ago

The Sixth Voice of the CISO Data Shows Cyber Risk Has Moved Inside the Workflow

The 2026 findings are not just a year-over-year shift. They mark the latest point in a five-year arc where resilience, AI governan…

NEWSInfosecurity Magazine21 days ago

Telegram Account Behind ASOS Rogue Notification Tied to Gaming Trading

A Group-IB researcher has found the Telegram account linked to the unauthorized ASOS customer notification previously engaged in g…

NEWSThe Hacker News21 days ago

FBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials

The U.S. Federal Bureau of Investigation (FBI) and Secret Service (USSS) on Tuesday warned that the FortiBleed credential harvesti…

NEWShighCVE-2026-215897.5 HIGHThe Hacker News21 days ago

Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details

Threat actors have begun to exploit a newly disclosed critical security flaw impacting Atlassian Data Center products that could a…

NEWSThe Hacker News21 days ago

What Is Agentic Pentesting? What It Proves, and Where It Stops.

If you’re evaluating an agentic pentesting solution right now, you’ve probably heard the same pitch more than once: point it at a…

NEWSBleeping Computer21 days ago

SonicWall warns of max severity SSRF flaw in SMA1000 gateways

SonicWall has released hotfixes to address a maximum-severity server-side request forgery (SSRF) flaw in SMA1000 series appliances…

NEWSThe Register21 days ago

FortiBleed still a bleeding nuisance as FBI confirms ongoing attacks

Tens of thousands more victims and more ransomware groups getting in on the act

NEWShighSecurityWeek21 days ago

Chrome 155 Update Patches 247 Vulnerabilities

Four critical-severity use-after-free defects were fixed in Chromecast, Browser, Navigation, and Track. The post Chrome 155 Update…

NEWSBleeping Computer21 days ago

Musician sent to prison for $10 million streaming fraud using AI bots

A North Carolina musician was sentenced to 18 months in prison for collecting more than $10 million in royalties from Spotify, App…

NEWScriticalBleeping Computer21 days ago

Advantest confirms personal information stolen in ransomware attack

Advantest Corporation is notifying affected individuals that a ransomware attack earlier this year exposed their personally identi…

NEWSInfosecurity Magazine21 days ago

Half of Cybersecurity Pros Still Rely on Passwords Despite Security Concerns

A Yubico survey identified a significant gap between awareness and adoption of secure methods of authentication in enterprises

NEWSSecurityWeek21 days ago

Anthropic Introduces 3-Tier Cyber Verification Program for AI Access

Anthropic is integrating the CVP and Project Glasswing into a single offering, with three levels of access to its most capable AI…

NEWScriticalSecurityWeek21 days ago

ASOS Confirms Cyberattack, Data Breach

Hackers compromised a third-party communication platform and sent rogue notifications to ASOS users. The post ASOS Confirms Cybera…

NEWShighHackread21 days ago

100+ Ukrainian Websites Hacked to Install Lunex Stealer with ClickFix Lure

Over 100 hacked Ukrainian websites used fake Cloudflare checks to install Lunex Stealer and steal browser passwords, tokens and cr…

NEWScriticalInfosecurity Magazine21 days ago

Pwn2Own Hackers Find 32 Zero-Day Vulnerabilities on Day One

Ethical hackers have already found 32 zero days in various products at Pwn2Own Ireland

NEWSInfosecurity Magazine21 days ago

Danish CPR Breach Highlights Challenge of Supply Chain Risk

A breach of 8.8 million citizens on the Danish Central Register of Persons (CPR) occurred via third-party access

NEWSThe Hacker News21 days ago

Anthropic Expands Claude Access for Vetted Cyber Teams as Glasswing Finds 129,000 Flaws

Anthropic on Tuesday said it's expanding a program that allows vetted cybersecurity professionals to test its advanced artificial…

NEWSSecurityWeek21 days ago

Wikimedia Says Rogue OpenAI Agents Tried to Turn Its Tools Into Proxies

Wikimedia looked into whether its own websites had seen activity like that disclosed by other organizations The post Wikimedia Say…

NEWSThe Hacker News21 days ago

100+ Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealer

The Computer Emergency Response Team of Ukraine (CERT-UA) has identified more than 100 compromised websites that have been injecte…

NEWShighSecurityWeek21 days ago

Android’s October 2026 Updates Patch 25 Vulnerabilities

The patches resolve a critical vulnerability in Android’s System component that could lead to privilege escalation. The post Andro…

NEWScriticalSecurityWeek21 days ago

Atlassian Patches Critical Vulnerability Affecting 8 Products

Unauthenticated attackers could exploit the flaw to access specific files in the web application root directory. The post Atlassia…

NEWSThe Register21 days ago

South Korean president calls for creation of tools that stop all cyber-attacks

'Complete security paradigm refresh' needed for the AI era

NEWSSecurityWeek21 days ago

Personal Information for Over 1 Million People Stolen in a Cyberattack on Arizona’s Court System

The Arizona Supreme Court said the information was copied for people dating back as far as 30 years. The post Personal Information…

NEWSThe Register22 days ago

Anthropic reconfigures its cool kids security program

Company's Project Glasswing and Cyber Verification Program metamorphose into triple tier threat hunting club

NEWScriticalHackread22 days ago

ASOS Hackers Hijack App Notifications, Claim Snowflake Data Breach

British online fashion retailer ASOS is investigating unauthorised activity after attackers used its official mobile app to send…