Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,450 articles

NEWSThe Register3 days ago

Max-severity GitLab bug allows remote code execution over 12 years of releases

Vendor 'strongly recommends' upgrading to a fixed version 'as soon as possible'

NEWScriticalBleeping Computer3 days ago

Arista patches new VeloCloud Orchestrator zero-day exploited in attacks

Arista Networks released security updates to patch an actively exploited zero-day vulnerability affecting VeloCloud Orchestrator (…

NEWSThe Hacker News3 days ago

Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes

Linux servers running KSMBD, the kernel's built-in SMB server, are exposed to two publicly reported remote code execution flaws ra…

NEWSThe Register3 days ago

Disgraced Indian cert issuer leaves the cert issuing business

We didn't want to issue SSL/TLS certs anyway, Indian firm suggests after one private key turns out to be the number 4

NEWSThe Hacker News3 days ago

Meta Ordered to Pay $25 Billion After Court Finds 43 Million Privacy Violations

Social media giant Meta was ordered to pay 25 billion in penalties by a New Mexico court on Wednesday as part of a data privacy la…

NEWSThe Register3 days ago

PHP2Shell puts dozens of UK government services out of service

Ministers report 32 unavailable and four partly disrupted, but no confirmed compromise

NEWSBleeping Computer3 days ago

Microsoft shares how to fix broken Exchange Online EWS apps

Microsoft says IT admins can re-enable the retired Exchange Web Services (EWS) API in Exchange Online to fix EWS apps that have st…

NEWSHackread3 days ago

Operation Serengeti III Nets 1,462 Arrests and $105M in Cybercrime Crackdown

INTERPOL’s Operation Serengeti III targeted cybercrime in 21 African countries, recovering over $105 million and identifying 65,92…

NEWSThe Register3 days ago

When the attacker becomes the user: Rethinking account takeover

SPONSORED FEATURE: AI makes phishing easier than ever

NEWScriticalSecurity Magazine3 days ago

PHP Issues Patches for Two Critical Flaws, Security Leaders Discuss

PHP, which is used in most major operating systems, has issued fixes for two critical vulnerabilities. Security leaders discuss.

NEWSCyberScoop3 days ago

eMudhra kills its certificate business after researchers cracked its private keys in under a second

The private keys were so weak they could be guessed in under a second — and one of them was just the number 4. The post eMudhra ki…

NEWShighSecurityWeek3 days ago

Hacker Conversations: Corey Thuen and the Evil Bit

Corey Thuen hires hackers for what he calls ‘the evil bit’ — an adversarial streak he believes is either there or it isn’t. The po…

NEWSHackread3 days ago

Gcore Makes Enterprise Security Bundle Free for Public Agencies Until End of the Year

Contern, Luxembourg, 22nd October 2026, CyberNewswire

NEWSBleeping Computer3 days ago

Machine speed attacks require machine speed detection and response

Attackers can steal credentials and begin exfiltrating data within minutes, often before security teams can respond. Exaforce exam…

NEWSInfosecurity Magazine3 days ago

EU Regulators to Investigate Booking.com Over Scam Risks

The EU Commission will assess whether Booking.com has adequately protected customers from phishing attacks

NEWSSecurity Magazine3 days ago

11M Impacted by Capcom Breach, Some Facing Unauthorized Changes

Capcom experienced a data breach impacting more than 11 million customer accounts.

NEWSThe Hacker News3 days ago

INTERPOL Arrests 1,462 Suspects, Disrupts 10,909 Cybercrime Networks in Global Crackdown

INTERPOL on Thursday announced that a coordinated law enforcement action has disrupted 10,909 malicious networks and recovered mor…

NEWShighBleeping Computer3 days ago

Amazon says PHP2Shell exploitation began 4 days before patches

Security researchers at Amazon Threat Intelligence say attackers began targeting the PHP2Shell flaws four days before security pat…

NEWShighInfosecurity Magazine3 days ago

Iranian Hacking Group Found Hosting C2 Infrastructure in the US

Stealthy malware campaign by ‘Prince of Persia’ threat group targeting organisations worldwide discovered operating on American so…

NEWSSecurityWeek3 days ago

Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform

The Amsterdam-based company plans to use the funding for research and development and commercial expansion in Europe and the Middl…

NEWScriticalSecurity Magazine3 days ago

US Defense Department Faces Class Action Lawsuit for Data Breach

A data breach compromised sensitive, personally identifiable information for millions of current and former military.

NEWShighSecurityWeek3 days ago

Signal Vulnerability Lets Malicious Callers Block Hang-Ups

Affecting the open source calling library RingRTC, the bug prevented calls from ending properly. The post Signal Vulnerability Let…

NEWShighSecurityWeek3 days ago

Tech and Security Companies Respond to PHP2Shell Vulnerabilities

Vendors are checking their products for PHP2Shell, security firms are shipping detections, and governments are urging immediate pa…

NEWShighThe Register3 days ago

Hackers pile on PHP2Shell as AWS reveals attacks began before disclosure

Cloudflare reports millions of exploit attempts, while Amazon spotted attackers trying their luck four days before patches landed

NEWSThe Hacker News3 days ago

The AI Agent Nobody Owns: Watch Expert Webinar On Your Newest Insider Threat

Right now, there is probably an AI agent running on a laptop somewhere in your network. It stores API keys and database passwords,…

NEWShighBleeping Computer3 days ago

GitLab warns of new max severity code execution vulnerability

GitLab has released security patches for a maximum-severity Regular Expression Compiler flaw that can let remote attackers run arb…

NEWSThe Register3 days ago

Microsoft says ConnectWise breach let Chinese spies loose on 2,250 cloud tenants

AI agents did the dirty work, with hackers gaining privileged access in some environments in under three hours

NEWSThe Hacker News3 days ago

Railway Says Intruder May Have Accessed Customer Secrets, Urges Credential Rotation

Platform-as-a-Service (PaaS) provider Railway on Wednesday disclosed "anomalous activity" related to systems that store customer e…

NEWSInfosecurity Magazine3 days ago

Microsoft: Chinese State Actor Used AI to Compromise ConnectWise Tenants

Microsoft said it has observed threat actor activity in multiple ConnectWise customer environments, with the attackers leveraging…

NEWSSecurityWeek3 days ago

Splunk, SolarWinds Release Fresh Security Updates

Patched vulnerabilities could allow attackers to execute code, elevate privileges, and leak sensitive information. The post Splunk…