Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

3,747 articles

What It Took to Reach 1 Billion Build Manifests

In the last six months, Chainguard doubled its output from 500 million to more than 1 billion container build manifests. We also s…

NEWSThe Hacker Newsabout 23 hours ago

FreeIPA Flaw Chain Lets Anonymous Clients Create Reusable Administrator Credentials

A flaw in FreeIPA lets a client that has never logged in create a Kerberos identity of its own choosing in the directory and end u…

NEWSInfosecurity Magazineabout 23 hours ago

THost9 Android RAT Pairs Packed Loader With ADB Worm

THost9 hides its payload and uses ADB to spread across exposed Android devices and containers

NEWScriticalSecurityWeekabout 23 hours ago

MikroTik Patches Critical Flaws Chained to Hack Routers

Dubbed MikroTrick, the bugs allow attackers to bypass authentication, overwrite configuration files, and take over devices. The po…

NEWScriticalSecurityWeekabout 23 hours ago

Mathspace Data Breach Exposes Over 1 Million People

Hackers stole the information of students, teachers, staff, and parents/guardians from a self-hosted Metabase instance. The post M…

NEWScriticalSecurityWeekabout 23 hours ago

N-able Patches Critical Zero-Day in N-central

Administrators are advised to check their deployments for newly created user accounts they don’t recognize. The post N-able Patche…

NEWSCyberScoop1 day ago

In most cities, nobody owns the whole network

July’s intrusions reached water controllers that sat on a cellular link no city network scan would find. Naming an owner and payin…

NEWSInfosecurity Magazine1 day ago

BigBear 2 PhaaS Campaign Steals 5000+ Microsoft Credentials

CloudSEK has uncovered BigBear 2.0, a new phishing-as-a-service operation targeting Microsoft 365

NEWScriticalCVE-2026-7565010.0 CRITICALThe Hacker News1 day ago

Adobe Patches Magento Zero-Day Exploited to Deploy Rust Backdoor and PHP Web Shell

Adobe on Monday released security patches to address a maximum-severity flaw impacting Adobe Commerce and Magento Open Source that…

NEWSInfosecurity Magazine1 day ago

Trezor Supply Chain Breach Now Impacts 81,000 Customers

Crypto wallet-maker Trezor says a data breach at supplier ShipMonk is far worse than originally thought

NEWSThe Register1 day ago

Britain reboots its space strategy with £7.8B already on the launchpad

Cross-government plan combines civil ambitions with an increasingly military view of orbit

NEWSThe Hacker News1 day ago

BengalSEO Poisons Bing Search Results to Deliver MayaBot and Tech Support Scams

Cybersecurity researchers have disclosed details of a sprawling search engine optimization (SEO) poisoning campaign that paves the…

NEWSBleeping Computer1 day ago

220 million traveler records exposed in Vietnam-linked APIS leak

Exclusive: An exposed Advance Passenger Information System (APIS) database held 220 million passenger and crew records containing…

NEWSThe Hacker News1 day ago

Grindr to Pay £26 Million to Settle U.K. Claims Over HIV Status Data Sharing

Online dating app Grindr has opted to pay £26 million ($35.1 million) to settle a lawsuit in the U.K. over allegations that it sha…

NEWShighThe Hacker News1 day ago

PEEP Turns Chrome and Edge Into Post-Compromise Backdoors for Host Command Execution

Cybersecurity researchers have disclosed details of a complex Chromium-based post-exploitation toolkit called PEEP that masquerade…

NEWScriticalBleeping Computer1 day ago

Magento StyleSmuggler zero-day exploited to deploy Linux backdoor

A zero-day vulnerability dubbed "StyleSmuggler" affecting all versions of Magento and Adobe Commerce is being exploited in attacks…

NEWSThe Hacker News2 days ago

Fake IT Calls Target Executives in Microsoft 365 Data Theft and Extortion Attacks

Threat hunters have disclosed details of a widespread data theft and extortion threat cluster that's targeting Microsoft 365 and o…

NEWShighBleeping Computer2 days ago

BigBear Microsoft 365 phishing service bypassed MFA at 258 organizations

A phishing-as-a-service framework called BigBear 2.0 has been used to bypass multi-factor authentication at 258 organizations and…

NEWSThe Register2 days ago

Nightwing CEO has a Labor Day message for staff – and apparently The Register

Nothing says ‘For internal use only’ quite like emailing it to the press

NEWScriticalThe Hacker News2 days ago

⚡ Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain Attack and More

Turning off email images should at least stop the pictures. This week, attackers had a workaround: a scannable QR code built out o…

NEWSInfosecurity Magazine2 days ago

NCSC Warns Shadow AI Creates New Security Risks

NCSC warns unapproved AI tools can expose corporate data and create new security risks

NEWShighThe Register2 days ago

Hackers drain $320M in Bitcoin from Liquid Network, claim they're the good guys

Self-described white hats promise to return 'most' of the 4,000 BTC once the vulnerability is fixed

NEWScriticalBleeping Computer2 days ago

Mathspace discloses data breach affecting over 1 million people

Online maths learning platform Mathspace disclosed over the weekend that attackers stole data from more than 1 million students, s…

NEWScriticalCVE-2026-86218Infosecurity Magazine2 days ago

N-able Releases Hotfix for Critical Remote Code Execution Vulnerability

The vulnerability, CVE-2026-86218, was allocated a maximum-severity rating by the software provider itself

NEWScriticalBleeping Computer2 days ago

Trezor data breach impact now reaches 81,000 customers

Cryptocurrency hardware wallet maker Trezor says an August data breach at its shipping and logistics provider, ShipMonk, affects a…

NEWScriticalSecurityWeek2 days ago

Nightmare Eclipse Drops CrowdStrike, Nvidia, Avast Zero-Day Exploits

The proof-of-concept (PoC) exploits lead to privilege escalation, spawning a shell with System privileges. The post Nightmare Ecli…

NEWShighSecurityWeek2 days ago

North Korean Hackers Deploy New Linux Espionage Toolkit

The stealthy toolkit embeds a backdoor in HAProxy and targets automotive and media organizations in South Korea for long-term surv…

NEWSSecurityWeek2 days ago

OpenAI Agents Hijack Another Victim Website

OpenAI agents made 15,000–18,000 autonomous edits to a German wiki over three months, evading moderation and echoing tactics seen…

NEWSInfosecurity Magazine2 days ago

Rhysida Publishes Berlin Government Data After €2m Extortion Demand Refused

The ransomware group’s published dataset reportedly includes Berlin state employee data, as well as highly sensitive emergency pla…

NEWScriticalSecurityWeek2 days ago

Adobe Commerce Zero-Day Exploited to Backdoor Online Stores

The StyleSmuggler zero-day allows attackers to execute code and deploy a stealthy backdoor on Adobe Commerce and Magento stores. T…