Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

2,821 articles

Microsoft releases Windows 10 KB5120249 extended security update

Microsoft has released Windows 10 KB5120249 Extended Security Updates for versions 22H2 and 21H2 to fix security vulnerabilities a…

NEWScriticalBleeping Computer1 day ago

Microsoft August 2026 Patch Tuesday fixes 400 flaws, 3 zero-days

Today is Microsoft's August 2026 Patch Tuesday, and with it comes security updates for a massive 400 flaws, including one actively…

NEWSCyberScoop1 day ago

Delta investigates in-flight Wi-Fi spoofing on post-DEF CON flight from Las Vegas

The airline deactivated the network after the crew realized someone was messing with the in-flight system. The feds are investigat…

NEWSBleeping Computer1 day ago

Windows 11 KB5121003 & KB5120240 cumulative updates released

Microsoft has released Windows 11 KB5121003 and KB5120240 cumulative updates for versions 25H2/24H2 and 23H2 to fix security vulne…

NEWScriticalSecurityWeek1 day ago

Adobe Urges Immediate Patching of Critical ColdFusion, Campaign Classic Flaws

The security defects could be exploited for arbitrary code execution and denial-of-service. The post Adobe Urges Immediate Patchin…

NEWShighCVE-2026-550409.1 CRITICALThe Hacker News1 day ago

Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE

Security researchers found a way to enter Microsoft SharePoint servers as any user, including an administrator, with no valid acco…

NEWSThe Hacker News1 day ago

DeadLock Ransomware Uses Polygon Smart Contracts to Make Extortion Infra Harder to Disrupt

The ransomware group known as DeadLock has been observed using decentralized infrastructure to facilitate victim communications an…

NEWSThe Register1 day ago

DEF CON dingus suspected of trying to take over Delta in-flight Wi-Fi

This is why we can't have nice things, people

NEWSSecurity Magazine1 day ago

Film Festival Data Leak Exposes A-List Directors, Actors, Celebrities

Records associated with Tribeca Film Festival were exposed.

NEWSBleeping Computer1 day ago

Wesco confirms security incident after ExfilSquad claims data theft

Global supply chain and distribution giant Wesco has confirmed in a statement for BleepingComputer that it is investigating a cybe…

NEWShighSecurityWeek1 day ago

Zoom Patches Zero-Click Code Execution Vulnerability

Impacting Zoom annotation, the bug could be exploited by a meeting participant to execute code on another participant’s machine. T…

NEWShighCyberScoop1 day ago

NIST wants to overhaul its vulnerability database for the AI age

NIST is seeking public input to modernize the National Vulnerability Database to keep pace with AI-driven cyber threats and machin…

NEWSThe Register1 day ago

Two wars and a World Cup lead to epic DDoS attacks on publishers

Ukraine, Iran, and football inspire geopolitically motivated DDoS attacks, while 1 Tbps traffic jams up 519 percent

NEWSInfosecurity Magazine1 day ago

Six npm Packages Read C2 Addresses From Ethereum Wallet

Six npm packages queried an Ethereum wallet to locate C2 infrastructure

NEWSSecurityWeek1 day ago

The AI Governance Gap Is a Leadership Problem: Waiting Won’t Close It

Organizations are rushing to implement AI without fully grasping where its legal protections begin and end. The post The AI Govern…

NEWSInfosecurity Magazine1 day ago

Cursor Security Bug Allowed Repositories to Execute Commands Before Trust Verification

Cursor fixed a pre-trust code execution path in three days then closed the report as informative

NEWScriticalSecurityWeek1 day ago

SAP Patches Critical Code Injection, Memory Corruption Vulnerabilities

SAP released 28 new and two updated security notes, including four notes dealing with critical-severity bugs. The post SAP Patches…

NEWSSecurityWeek1 day ago

US Water Systems Get Cyber Boost From New Senate Bill and ‘Water Watch Center’

The Water Watch Center launched at DEF CON aims to help under-resourced utilities protect their systems against hackers. The post…

NEWSBleeping Computer1 day ago

Mozilla updates GPG signing key for Firefox releases after exposure

Mozilla announced today that it updated the GPG key used to sign Firefox and Thunderbird releases after it was accidentally expose…

NEWSBleeping Computer1 day ago

Vague Task, Total Access: When AI Delegation Becomes a Security Risk

AI agents can improvise beyond the intended scope of a task when they are given broad access to enterprise systems and data. Token…

NEWShighThe Hacker News1 day ago

OpenAI Launches GPT-5.6-Cyber with Reduced Safeguards for Exploit Development

OpenAI on Monday unveiled a new cybersecurity-focused model called GPT‑5.6‑Cyber that it said is focused on vulnerability research…

NEWSBleeping Computer1 day ago

DDoS attacks over 1 Tbps surged fivefold in the second quarter

Cloudflare says it mitigated more than 800 network-layer distributed denial-of-service (DDoS) attacks exceeding 1 Tbps in the seco…

NEWSWired Security1 day ago

A Zoom Screen-Sharing Bug Let Anyone Take Over Other Devices on a Call

Researchers say it took fewer than 20 prompts for a public AI tool to find a flaw (now fixed) allowing anyone on a Zoom call to hi…

NEWSThe Register1 day ago

Deepfake hiccup unmasks suspected digital certificate fraudster

Face-swap software blinked for 'barely a second,' giving Spanish cops the break they needed

NEWScriticalBleeping Computer1 day ago

CISA: Microsoft SharePoint flaw now exploited in ransomware attacks

CISA confirmed today that ransomware gangs have begun abusing a high-severity Microsoft SharePoint remote code execution vulnerabi…

NEWSThe Hacker News1 day ago

A Malicious SIM Card Can Run Attacker Code Inside the Modems Behind Cellular IoT Devices

A malicious SIM card can order the device it sits in to run commands of the attacker's choosing. On the cellular modules built int…

NEWSThe Hacker News1 day ago

Mozilla Revokes Firefox and Thunderbird Linux Signing Key After Key Lands in Private Repo

Mozilla has scrapped the cryptographic key behind Firefox and Thunderbird downloads for Linux after an unencrypted copy of it was…

NEWSSecurityWeek1 day ago

Corma Raises $60 Million for Defensive Cybersecurity AI Model

Corma emerged from stealth with seed funding from Sequoia Capital, Khosla Ventures, and Coatue. The post Corma Raises $60 Million…

NEWSInfosecurity Magazine1 day ago

Suisan City, California, Responds to Cyber Incident Amid Wave of US Local Government Attacks

Police and fire response has been impacted by the attack on Suisan City, while two other local authorities have been hit by cyber…

NEWSThe Register1 day ago

Mozilla revokes Firefox signing key after unencrypted copy lands in GitHub

Audit logs found no unexpected visitors, but release verification still needs an update