Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,587 articles

Android’s October 2026 Updates Patch 25 Vulnerabilities

The patches resolve a critical vulnerability in Android’s System component that could lead to privilege escalation. The post Andro…

NEWScriticalSecurityWeek21 days ago

Atlassian Patches Critical Vulnerability Affecting 8 Products

Unauthenticated attackers could exploit the flaw to access specific files in the web application root directory. The post Atlassia…

NEWSThe Register21 days ago

South Korean president calls for creation of tools that stop all cyber-attacks

'Complete security paradigm refresh' needed for the AI era

NEWSSecurityWeek21 days ago

Personal Information for Over 1 Million People Stolen in a Cyberattack on Arizona’s Court System

The Arizona Supreme Court said the information was copied for people dating back as far as 30 years. The post Personal Information…

NEWSThe Register22 days ago

Anthropic reconfigures its cool kids security program

Company's Project Glasswing and Cyber Verification Program metamorphose into triple tier threat hunting club

NEWScriticalHackread22 days ago

ASOS Hackers Hijack App Notifications, Claim Snowflake Data Breach

British online fashion retailer ASOS is investigating unauthorised activity after attackers used its official mobile app to send…

NEWSHackread22 days ago

Karina Portugal Makes the Case for Know Your Agent

Karina Portugal has spent more than ten years working in digital identity, fraud prevention, anti-money laundering and Know…

NEWScriticalCyberScoop22 days ago

Alert: FortiBleed remains active campaign, can lock out users or lead to ransomware attacks

The FBI and Secret Service warned Fortinet users that FortiBleed, uncovered this summer, is a continuing threat. The post Alert: F…

NEWShighBleeping Computer22 days ago

Ninja Forms plugin flaw exploited to hack WordPress sites

Hackers are exploiting stored cross-site scripting (XSS) vulnerabilities in two unrelated WordPress plugins, Ninja Forms and WPC P…

NEWSCyberScoop22 days ago

Wiretapping change sparks big privacy fight in the Golden State

An update to a state wiretapping law will end private lawsuits over some internet tracking and surveillance, pitting businesses ag…

NEWScriticalBleeping Computer22 days ago

Hackers exploit 32 zero-days on first day of Pwn2Own Ireland

On the first day of the Pwn2Own Ireland 2026 competition, security researchers hacked the Samsung Galaxy S26 twice and earned $388…

NEWSThe Hacker News22 days ago

Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes

Cybersecurity researchers have disclosed details of a "human-operated phishing platform" that impersonates advertising products fo…

NEWShighThe Hacker News22 days ago

Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan

Linux backdoors targeting telecom and network appliances in South Korea and Taiwan have been disguising their traffic as email ser…

NEWSCyberScoop22 days ago

Former NSA chief Nakasone says agency overhaul is ‘probably needed’

Paul Nakasone said the reported reorganization is likely necessary to meet faster-moving cyberthreats and competition in AI, but w…

NEWSSecurity Magazine22 days ago

Researchers Determine That 2,514 Cybersecurity Events Occur Each Second

The Comcast Business 2026 Cybersecurity Threat Report analyzed 79.3 billion cybersecurity events detected across its cybersecurity…

NEWScriticalCVE-2026-215897.5 HIGHBleeping Computer22 days ago

Atlassian warns of critical file-access flaw in Jira, Confluence

Atlassian is warning customers of a critical vulnerability, tracked as CVE-2026-21589, that can be exploited for arbitrary file-ac…

NEWSThe Register22 days ago

Trump Mobile customers' data dumped - and some never even received their gold device

All that glitters …

NEWScriticalHackread22 days ago

FBI Removes Accenture Contractor Over ShinyHunters Job Site Data Breach

The FBI removed a contractor over a ShinyHunters-linked breach. Reuters sources identified Accenture and an unpatched Oracle Peopl…

NEWScriticalBleeping Computer22 days ago

ASOS confirms data breach after “HACKED” in-app notifications

UK fashion retailer ASOS confirmed a data breach Tuesday after hackers sent unauthorized push notifications through its mobile app…

NEWSSecurity Magazine22 days ago

Mississippi City Discloses Ransomware Incident

Vicksburg, Mississippi, had computer systems temporarily shut down due to a cyberattack.

NEWSBleeping Computer22 days ago

Fake ChatGPT, Gemini Sites steal advertising accounts, MFA codes

A new campaign targeting ad account managers uses fake ChatGPT, Gemini, Claude, and Perplexity sites that steal login credentials…

NEWSThe Register22 days ago

Microsoft extends the Outlook naughty step with two more file types

You didn't really want to be sending around .msix and .msixbundle files, did you?

NEWSInfosecurity Magazine22 days ago

ClickFix Attack Hides VBScript Payload in Browser Cache

ClickFix sites stage a VBScript payload in the browser cache to bypass the Run dialog's length limit

NEWShighSecurity Magazine22 days ago

US-Bound Oil Supertanker Breached by Hackers

While approaching the coast of Texas, an oil supertanker was hacked.

NEWSHackread22 days ago

5 Astrix and Aembit Alternatives for AI Agent Identity Security

Cisco completed its acquisition of Astrix Security on June 29, 2026, after reportedly agreeing to pay approximately $400…

NEWScriticalSecurity Magazine22 days ago

Frontline Education Data Breach Highlights Third-Party Risks

An education technology company was breached.

NEWSSecurityWeek22 days ago

FBI Blames Contractor’s Missed Patch for ShinyHunters Breach

The FBI has removed an Accenture contractor over a data breach that exposed personal information of thousands of bureau employees.…

NEWSBleeping Computer22 days ago

How to secure RMM software: 8 controls MSPs should test

RMM platforms give MSPs privileged access across customer environments, making their security controls critical to limiting risk.…

NEWSInfosecurity Magazine22 days ago

Nikkei Discloses Two Employee Cloud Account Compromises

Nikkei says two employee cloud accounts were accessed, with one used to send 9,000 phishing emails

NEWSHackread22 days ago

Aembit Extends Access Controls to Personal AI Agents

Silver Springs, United States / Maryland, 6th October 2026, CyberNewswire