Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

2,150 articles

Citrix Patches NetScaler Vulnerabilities, Including New ‘HTTP/2 Bomb’ Attack

Citrix urges customers to patch NetScaler after fixing six vulnerabilities, including the HTTP/2 Bomb flaw and a high-severity Cit…

NEWSInfosecurity Magazine26 days ago

Anthropic's Fable 5 and Mythos 5 Are Back with New Security Guardrails

The new classifier in Fable 5 blocks the jailbreak technique that prompted the US export controls “in over 99% of cases”

NEWSBleeping Computer26 days ago

Microsoft fixes GIF functionality in the Windows Emoji Panel

Microsoft has fixed the GIF functionality in the Emoji Panel for Windows 11 and Windows Server users after the provider shut down…

NEWSThe Hacker News26 days ago

Microsoft Accelerates Post-Quantum Cryptography Shift to 2029

Microsoft on Tuesday said it's accelerating its quantum safe security roadmap, stating technology advances in quantum computing ar…

NEWShighCyberScoop26 days ago

This phishing kit looks more like BEC-as-a-service

Cisco Talos’ research on ARToken builds on what’s known about the related EvilTokens phishing-as-a-service. The post This phishing…

NEWSInfosecurity Magazine26 days ago

Microsoft Accelerates Quantum-Safe Push with New Timeline

Microsoft has brought forward its timelines for transitioning to post-quantum cryptography (PQC)

NEWSSecurityWeek26 days ago

Frontier AI: Six Questions Every Enterprise Should Ask Security Vendors

From model selection and automation to validation and measurable results, the right questions can help enterprises separate genuin…

NEWShighWired Security26 days ago

Claude Helped a Hacker Find a Way to Issue Tickets to Almost Every US Music Festival

A researcher found that using Anthropic’s Claude Opus 4.7, he could break into the website of Front Gate—used by every festival fr…

NEWSBleeping Computer26 days ago

Amazon fined $2.25M for withholding evidence from fraud victims

The U.S. Federal Trade Commission (FTC) says Amazon will pay a $2.25 million civil penalty to settle charges that it blocked ident…

NEWShighSecurityWeek26 days ago

Apple Patches Dozens of Vulnerabilities Across iOS, macOS, and Safari

The updates fix vulnerabilities in WebKit, the kernel, WebRTC, Web Extensions, and other components affecting iPhone, iPad, Mac, a…

NEWScriticalInfosecurity Magazine26 days ago

Insurance Giant Aflac Discloses Data Breach Impacting Millions

Aflac Japan has notified regulators that policy details and personal and banking information have been compromised

NEWSSecurityWeek26 days ago

Dawnguard Raises $6.3 Million for Security Architecture Automation Platform

The company has publicly launched its solution to help organizations design, build, and operate secure cloud systems. The post Daw…

NEWSSecurityWeek26 days ago

Massive Password Spray Campaign Targeting Azure CLI

Hackers were seen making over 81 million login attempts originating from systems associated with hosting provider LSHIY. The post…

NEWSBleeping Computer26 days ago

Adobe patches seven max severity ColdFusion, Campaign flaws

Adobe has released security patches for seven maximum-severity vulnerabilities in the ColdFusion web app development platform and…

NEWShighThe Hacker News26 days ago

Phantom Squatting Uses AI-Hallucinated Domains for Phishing and Malware

Large language models keep inventing web addresses that do not exist. Attackers have started buying those made-up domains before a…

NEWSThe Hacker News26 days ago

Anthropic Restores Claude Fable 5 After U.S. Lifts Jailbreak-Linked Export Controls

Anthropic is putting Claude Fable 5 back online worldwide. On June 30, the U.S. Commerce Department lifted the export controls it…

NEWShighSecurityWeek26 days ago

Google Patches 382 Chrome Vulnerabilities

Fifteen of the newly patched flaws have been rated ‘critical’ and 67 have been rated ‘high severity’. The post Google Patches 382…

NEWSThe Hacker News26 days ago

Azure CLI Password Spray Hits at Least 78 Microsoft Accounts in 81M+ Attempts

Cybersecurity researchers have warned of a "massive, ongoing, automated password spray attack" aimed at Microsoft's Azure command-…

NEWShighThe Hacker News26 days ago

Researcher Analyzes 3,000 Live ClickFix Payloads, Exposing API-Driven Malware Delivery

ClickFix, the trick that fools people into running malware by hand, has quietly grown a back office. New research shows the malic…

NEWSSecurity Magazine26 days ago

Nearly Half of Organizations Lack "Full" Visibility Into Employee AI Usage

A recent report by Bitdefender analyzed employee AI tool usage.

NEWSCVE-2026-84517.5 HIGHThe Hacker News26 days ago

Citrix Patches Six NetScaler Flaws Allowing File Read and Denial-of-Service

Citrix on Tuesday released security updates to address multiple flaws in NetScaler ADC (formerly Citrix ADC) and NetScaler Gateway…

NEWSBleeping Computer27 days ago

Anthropic to restore Claude Fable access on Wednesday

Anthropic has confirmed that the Department of Commerce has lifted export controls on Claude's two most powerful models, Fable 5 a…

NEWSBleeping Computer27 days ago

Anthropic rolls out Sonnet 5 with near-Opus 4.8 performance at a lower price

Anthropic is now rolling out Sonnet 5, and it's almost as good as the Opus range, but it is designed to be cheaper than the compan…

NEWSBleeping Computer27 days ago

New BioShocking attack manipulates AI browser into data theft

A new prompt injection attack dubbed "BioShocking" could trick AI-powered browsers into treating real-world risky actions as part…

NEWSCyberScoop27 days ago

Citrix patches a new NetScaler flaw with echoes of CitrixBleed

The bulletin includes six NetScaler issues, but attention is centered on a high-severity flaw with similarities to earlier activel…

NEWSBleeping Computer27 days ago

Microsoft accelerates quantum-safe roadmap as risks grow

Microsoft announced today that it is accelerating its quantum-safe security roadmap, saying advances in quantum computing are brin…

NEWShighBleeping Computer27 days ago

Malicious PyPI packages give hackers control of Telegram bot servers

A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram forks t…

NEWSCyberScoop27 days ago

Trump budget boss Russell Vought open to re-staffing CISA

DHS Secretary Markwayne Mullin has been floating the idea of adding back 600 CISA personnel after deep Trump administration cuts.…

NEWSThe Register27 days ago

Infosec professionals sour on automated pentesting tools

29% of security pros were open to fully autonomous pentesting last year; now only 9% are

NEWSThe Hacker News27 days ago

Microsoft Warns Poisoned MCP Tool Descriptions Can Make AI Agents Leak Data

New Microsoft research shows how attackers can hijack AI agents that act on a user's behalf, using nothing more than a poisoned to…