Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

2,130 articles

Hackers abuse Notepad++ plugins to stealthily install malware

Ukraine's CERT has uncovered attacks distributing an archive containing the legitimate Notepad++ application and a malicious utili…

NEWSThe Register2 days ago

Millions of California-bought cars can be hijacked via Bluetooth

Aftermarket dealer-installed KARR/SWDS security systems all use the same secure key, say UCSD researchers

NEWShighInfosecurity Magazine2 days ago

Russian Hackers Exploit New ‘Zero-Click’ Attack Against Western Organizations

International agencies issue joint alert over state-backed campaign exploiting a critical vulnerability in the Zimbra Collaboratio…

NEWSBleeping Computer2 days ago

Microsoft 365 outage affects Teams, SharePoint and other services

Microsoft Teams and several Microsoft 365 services are experiencing an ongoing outage, with users reporting problems accessing Tea…

NEWSThe Register2 days ago

Oracle drops 1,449 security patches like it's the new normal

Experts say the era of AI bug hunting is here, so defenders will simply have to adapt to busier workloads

NEWSHackread2 days ago

What Is Cryptocurrency and How Does It Actually Work?

Learn how cryptocurrency works, from blockchains and wallets to private keys, custody, and secure transactions, with practical sec…

NEWSHackread2 days ago

Blockchain Life Returns to Dubai — Featuring the Debut of AI Future

Dubai, UAE, 23rd July 2026, CyberNewswire

NEWSSecurityWeek2 days ago

OpenAI Fixes ChatGPT Agent Flaw That Could Let Attackers Forge an AI Insider

AgentForger allows an attacker to create, insert and remotely control an invisible autonomous AI agent inside a victim organizatio…

NEWSThe Hacker News2 days ago

ThreatsDay: Android Spyware, PLC Attacks, AI Image Prompt Injection + 12 More Stories

Most of this week's trouble came dressed as something useful. A package stole data. A fake extension opened remote access. A safe…

NEWShighSecurityWeek2 days ago

Is Patching Dead? Vulnerability Management in the Post-Mythos Era

You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to opti…

NEWSSecurityWeek2 days ago

Chick-fil-A Accounts Get Fried in Credential Stuffing Attack

Threat actors used credentials obtained from other companies to hack into Chick-fil-A One accounts. The post Chick-fil-A Accounts…

NEWSSecurity Magazine2 days ago

Security Experts Discuss the Hugging Face, OpenAI Incident

As more news of AI-conducted attacks make headlines, security leaders must pivot from treating this concept as a future concern to…

NEWSThe Register2 days ago

Iran-linked crews are probing more flavors of US industrial kit

CISA widens alert beyond Rockwell controllers as intruders target internet-facing devices across critical infrastructure

NEWSBleeping Computer2 days ago

FedRAMP Rev5 Is Ending: What the 20x Transition Really Requires

FedRAMP 20X replaces point-in-time assessments with continuous, machine-readable evidence that demonstrates security controls are…

NEWSInfosecurity Magazine2 days ago

Microsoft Copilot Deployments Delayed Over Security Concerns

CoreView research finds that security leadership is concerned about AI Assistant exposing confidential data

NEWSSecurityWeek2 days ago

Abstract Raises $25 Million to Expand Composable Security Operations Platform

The latest investment round brings the total raised by Abstract to nearly $50 million. The post Abstract Raises $25 Million to Exp…

NEWShighInfosecurity Magazine2 days ago

Iranian Hackers Target Siemens and Schneider Industrial Systems, CISA Warns

US government agencies have warned that Iranian cyber actors are targeting US-based Siemens and Schneider industrial equipment

NEWSThe Hacker News2 days ago

Claude Cowork Flaw Could Let AI Agent Escape Its VM and Access Mac Files

Cybersecurity researchers have uncovered a sandbox escape vulnerability in Anthropic's Claude Cowork that makes it possible to bre…

NEWSThe Hacker News2 days ago

Chaos Ransomware Uses msaRAT to Route C2 Traffic Through Headless Chrome and Edge

The Chaos ransomware group ran its command-and-control through the victim's own browser. Cisco Talos on Thursday detailed msaRAT,…

NEWSThe Register2 days ago

One ChatGPT link could smuggle a rogue AI agent into your company

Researchers say OpenAI flaw let phishing bait create an autonomous corporate mole armed with employee access

NEWShighSecurityWeek2 days ago

Nuclear-Sabotage Malware Benchmark Trips Up Most Frontier AI Models

SentinelOne’s new benchmark, built on the Fast16 case, shows which AI models can sustain a malware investigation and which cannot.…

NEWSBleeping Computer2 days ago

EU fines Google $1 billion for search, app store antitrust violations

The European Commission fined Google €890 million ($1 billion) on Thursday after finding the company had violated the European Uni…

NEWSThe Register2 days ago

If you get knocked on the head and get all your devices stolen and have amnesia, Google will let you back in with a selfie

You'll need to be able to move your head side to side to make sure you're not a deepfake

NEWSThe Hacker News2 days ago

China-Nexus JadeProx Uses New TriBack Loader in Government and Healthcare Attacks

An exposed Alibaba Cloud server has revealed a China-nexus operation that Group-IB tracks as JadeProx. The cluster has targeted go…

NEWSThe Register2 days ago

Swiss train maker tells ransomware crooks to get off at the next stop

Stadler refuses $12.3M demand after thieves swipe technical data through supplier platform

NEWSThe Hacker News2 days ago

How Synthetic Identity Fraud is Coming for Machine Identities

Most people understand identity theft as an attacker stealing a real person's sensitive information and impersonating them. Synthe…

NEWSCVE-2026-64600Bleeping Computer2 days ago

New RefluXFS Linux flaw lets attackers gain root privileges

A nine-year-old race condition vulnerability in the Linux kernel's XFS filesystem, tracked as CVE-2026-64600, allows local attacke…

NEWSInfosecurity Magazine2 days ago

AI Agents Now the Enterprises Fastest Growing Exposed Attack Surface

Sophos report warns that the rapid adoption of AI by businesses is leaving them vulnerable to a new source of cyber threats

NEWSThe Hacker News2 days ago

Attackers Weaponize GitHub Actions Runners to Target cPanel and WHM Servers

Cybersecurity researchers have shed light on a large-scale campaign that has turned compromised GitHub repositories into distribut…

NEWScriticalSecurityWeek2 days ago

Upbound Group Says Data Breach Led to $13 Million in Fraudulent Contract Losses

Hackers recently obtained non-sensitive customer information and other documents from the company. The post Upbound Group Says Dat…