Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

2,144 articles

Ransomware-Proof Backup: 7 Strategies for Enterprise IT Teams

Ransomware-proof backup planning helps IT teams protect clean data copies, isolate storage, test recovery, and keep operations run…

NEWSSecurityWeek26 days ago

Microsoft Adds New Teams Controls to Block Unauthorized AI Bots From Meetings

Microsoft's new Teams admin policy requires organizer approval for external AI bots, giving organizations greater visibility and c…

NEWSThe Hacker News26 days ago

SEO-Poisoned Software Sites Abuse ScreenConnect to Deploy AsyncRAT

Unknown threat actors are leveraging the ScreenConnect remote access tool as a way to deploy and execute AsyncRAT. Kaspersky said…

NEWShighBleeping Computer26 days ago

DHS confirms hackers breached HSIN info-sharing platform

The Department of Homeland Security is investigating a cyberattack that compromised the Homeland Security Information Network (HSI…

NEWShighThe Hacker News26 days ago

VEIL#DROP Malware Chain Uses Blogger Platform to Deliver PureLogs Stealer

Cybersecurity researchers have flagged a new multi-stage malware delivery attack chain that uses social engineering and Blogger pa…

NEWSThe Register26 days ago

Red teamers turned Claude Desktop into a double agent to do their evil bidding

People trust their AI assistants and it's easy to abuse this trust

NEWSBleeping Computer26 days ago

Webinar: Why traditional email security is no longer enough

Modern phishing, business email compromise, and account takeover attacks increasingly exploit trusted identities and legitimate bu…

NEWSHackread26 days ago

Fake “Google Notes” Browser Extension Caught Swapping Crypto Wallet Addresses

McAfee says a Google Notes browser extension is replacing copied crypto payment details, putting wallet transfers at risk for Chro…

NEWShighBleeping Computer26 days ago

Hackers target Microsoft 365 accounts with 81 million login attempts

An aggressive password-spraying campaign targeting Microsoft 365 environments generated more than 81 million login attempts over a…

NEWSThe Hacker News26 days ago

Ousaban Banking Trojan Targets Iberian Bank Users with Fake PDF Lures

A Brazilian banking trojan called Ousaban is going after Windows users who bank in Spain and Portugal. Fortinet's FortiGuard Labs…

NEWSThe Hacker News26 days ago

Adobe Patches 7 CVSS 10.0 Flaws in ColdFusion and Campaign Classic

Adobe has released patches for multiple maximum-severity security flaws impacting Adobe ColdFusion and Adobe Campaign Classic. Th…

NEWScriticalCVE-2026-505489.8 CRITICALThe Hacker News26 days ago

Critical Cursor Flaws Could Let Prompt Injection Escape Sandbox and Run Commands

Two flaws in Cursor, an AI code editor, could let a single, ordinary-looking prompt break out of the editor's safety sandbox and r…

NEWShighInfosecurity Magazine26 days ago

Fileless Malware Abuses Google Blogspot to Deploy Infostealer in Memory

Securonix said the Veil#Drop campaign abuses Google Blogspot to deliver PureLog Stealer in memory

NEWSHackread26 days ago

Fake Interpol Investigation Emails Push Ransomware at Small Businesses Globally

Fake Interpol investigation emails are targeting small businesses with Proton Drive links that deliver ransomware, encrypt files,…

NEWSBleeping Computer26 days ago

Turning Indicators into Intelligence in OpenCTI with Criminal IP

Threat intelligence is only as useful as the context behind it. Criminal IP explains how its integration enriches threat indicator…

NEWSHackread26 days ago

Turning Indicators into Intelligence in OpenCTI with Criminal IP

Torrance, California, USA, 1st July 2026, CyberNewswire

NEWShighCVE-2026-80379.6 CRITICALThe Hacker News26 days ago

Progress Kemp LoadMaster Pre-Auth RCE Flaw Faces Active Exploitation Attempts

A recently disclosed critical security flaw impacting Progress Kemp LoadMaster is seeing active exploitation attempts, according t…

NEWSInfosecurity Magazine26 days ago

Brazilian Banking Trojan Ousaban Targets Spain and Portugal

FortiGuard says the Brazilian banking trojan Ousaban is targeting Spain and Portugal via phishing

NEWSCyberScoop26 days ago

US lifting export control restrictions on Anthropic’s Mythos, Fable

The company and the Commerce Department say they have reached an agreement that will see the AI models released publicly with new…

NEWSThe Hacker News26 days ago

AI-Generated Browser Ransomware Abuses Chromium API on Windows and Android

Cybersecurity researchers have flagged a new malware artifact generated using DeepSeek that constructed a novel attack path combin…

NEWSBleeping Computer26 days ago

Over 900 Oracle E-Business instances exposed to ongoing attacks

Over 900 Oracle E-Business Suite (EBS) instances have been found exposed online amid ongoing attacks exploiting a critical securit…

NEWSHackread26 days ago

Mitigating Attacks Before They Impact Infrastructure: Link11 provides next generation network DDoS protection

Frankfurt am Main, Deutschland, 1st July 2026, CyberNewswire

NEWSThe Hacker News26 days ago

2026 Cybersecurity Assessment: The Gap Between Awareness and Resilience

Organizations have never had greater awareness of cyber risk. Yet turning that awareness into operational resilience has never bee…

NEWScriticalSecurityWeek26 days ago

Adobe Patches Critical ColdFusion, Campaign Classic Vulnerabilities

Seven of the security defects have a maximum severity rating of 10/10 and could lead to arbitrary code execution. The post Adobe P…

NEWShighSecurityWeek26 days ago

Citrix Patches NetScaler Vulnerabilities, Including New ‘HTTP/2 Bomb’ Attack

Citrix urges customers to patch NetScaler after fixing six vulnerabilities, including the HTTP/2 Bomb flaw and a high-severity Cit…

NEWSInfosecurity Magazine26 days ago

Anthropic's Fable 5 and Mythos 5 Are Back with New Security Guardrails

The new classifier in Fable 5 blocks the jailbreak technique that prompted the US export controls “in over 99% of cases”

NEWSBleeping Computer26 days ago

Microsoft fixes GIF functionality in the Windows Emoji Panel

Microsoft has fixed the GIF functionality in the Emoji Panel for Windows 11 and Windows Server users after the provider shut down…

NEWSThe Hacker News26 days ago

Microsoft Accelerates Post-Quantum Cryptography Shift to 2029

Microsoft on Tuesday said it's accelerating its quantum safe security roadmap, stating technology advances in quantum computing ar…

NEWShighCyberScoop26 days ago

This phishing kit looks more like BEC-as-a-service

Cisco Talos’ research on ARToken builds on what’s known about the related EvilTokens phishing-as-a-service. The post This phishing…

NEWSInfosecurity Magazine26 days ago

Microsoft Accelerates Quantum-Safe Push with New Timeline

Microsoft has brought forward its timelines for transitioning to post-quantum cryptography (PQC)