Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,586 articles

NEWSHackread22 days ago

Aembit Extends Access Controls to Personal AI Agents

Silver Springs, United States / Maryland, 6th October 2026, CyberNewswire

NEWShighInfosecurity Magazine22 days ago

Red Hat’s Lightwell Project Remediates 400 Open-Source Vulnerabilities

The IBM subsidiary has also announced its Lightwell Clearinghouse is now available to all customers

NEWSHackread22 days ago

Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management

Torrance, Californina, 6th October 2026, CyberNewswire

NEWSHackread22 days ago

AppViewX Adds Shadow AI Visibility and a Runtime Kill Switch to Agent Identity Security

New York, New York, 6th October 2026, CyberNewswire

NEWSThe Register22 days ago

Zombie instructions on carefully constructed web pages could trick GitHub Copilot CLI into sharing secrets

Run the CLI in autopilot mode and take your chances

NEWShighSecurityWeek22 days ago

FBI Arrests ‘Most Wanted’ Developer of Ploutus ATM Malware

An alleged leader of Tren de Aragua’s ATM jackpotting activities, Canelon Aguirre was on the FBI’s top 10 most wanted list since M…

NEWScriticalInfosecurity Magazine22 days ago

Critical Medical Devices Unable to Support PQC Transition

Forescout found that just 6% of Internet of Medical Things (IoMT) and 16% of medical OT are capable of supporting post quantum cry…

NEWSThe Hacker News22 days ago

LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings

A malicious spreadsheet can make LibreOffice and Apache OpenOffice run an attacker's code as soon as the file is opened, security…

NEWSThe Register22 days ago

Asos app delivers a data leak threat instead of fast fashion

Rogue notification claims Snowflake instance compromised, but customer info theft remains unverified

NEWSSecurityWeek22 days ago

Apple to Tighten Full Disk Access Controls in macOS Amid AI Risks

Citing growing risks posed by more capable and autonomous AI agents, Apple will introduce additional controls. The post Apple to T…

NEWSThe Register22 days ago

Denmark's ID register spills more people's details than the country has residents

Abuse of private firm's access exposed 8.8M records, including those of people who had died or moved abroad

NEWShighInfosecurity Magazine22 days ago

ASOS Customers Receive Bizarre “Hacked” Message Amid Suspected Snowflake Compromise

ASOS customers have received a seemingly legitimate push notifications claiming the retailer’s IT systems have been breached throu…

NEWSBleeping Computer22 days ago

Wikimedia: Rogue OpenAI agents behind unauthorized Wikipedia edits

The Wikimedia Foundation says rogue OpenAI agents made unauthorized Wikipedia edits and may have been partially responsible for a…

NEWSCyberScoop22 days ago

Here’s how experts think CISA should tell agencies to protect OT

Government auditors say federal agencies haven’t met mandated security steps for operational technology, which hackers targeted in…

NEWSThe Hacker News22 days ago

Wikimedia Says OpenAI Agents Tried to Compromise Etherpad and Use Wiki Tools as Proxies

The Wikimedia Foundation, which hosts Wikipedia, has confirmed that it has discovered activity by rogue OpenAI agents on its platf…

NEWSThe Hacker News22 days ago

Welcome to the Jungle: What We Found Inside 15,465 Public MCP Servers

In 2024, MCP (Model Context Protocol) set out to become the USB-C of AI: one standard for connecting models, agents, and IDEs to t…

NEWSSecurityWeek22 days ago

Cybersecurity M&A Roundup: 39 Deals Announced in September 2026

Significant cybersecurity M&A deals announced by Dragos, IBM, Palo Alto Networks, Kiteworks, and Upwind. The post Cybersecurity M&…

NEWSHackread22 days ago

Using Technology to Fight Distraction and Improve Focus

Learn how to use technology to fight distraction and improve focus with notification controls, site blockers, focus timers and tas…

NEWShighSecurityWeek22 days ago

Long-Running NPM Malware Campaign Accumulates 40,000 Downloads

Since August 2023, attackers have published eight malicious packages as part of the MALFEX supply chain campaign. The post Long-Ru…

NEWSHackread22 days ago

FBI Confirms Multiple Arrests in ShinyHunters Investigation

The FBI confirmed multiple arrests in its ShinyHunters investigation after suspected member Saif al-Din Khader was reportedly deta…

NEWScriticalSecurityWeek22 days ago

8.8 Million Impacted by Data Breach at Denmark’s Central Person Register

Hackers abused a company’s lawful access to the CPR system to steal the personal information of registered citizens. The post 8.8…

NEWSBleeping Computer22 days ago

Nikkei discloses breaches of employees’ Microsoft, Google email accounts

Over the weekend, Japanese publishing giant Nikkei disclosed that unknown attackers recently breached two employee email accounts…

NEWSThe Hacker News22 days ago

Google Pauses OSS Product Bug Bounty Rewards After Surge in Invalid Automated Reports

Google has stopped accepting product vulnerability reports through its bug bounty program for its open-source software. The chang…

NEWSInfosecurity Magazine22 days ago

Police Urge Passkey Use After Surge in Cybercrime Profits

Report Fraud says cybercrime revenue stemming from account takeover increased 417% annually

NEWSSecurityWeek22 days ago

Social Engineering Detection Moves Into the Live Conversation

Companies are pouring time and dollars into security awareness training, but little evidence shows it actually works against socia…

NEWSInfosecurity Magazine22 days ago

Ransomware Affiliate Double-Crosses RaaS Operator to Steal Victim Funds

An affiliate of The Gentlemen RaaS group ran a parallel leak site during extortion of two dozen victims

NEWSBleeping Computer22 days ago

Engineer sentenced for locking over 3,000 devices on employer network

A former core infrastructure engineer at an industrial company headquartered in New Jersey was sentenced to 32 months in prison fo…

NEWScriticalCVE-2026-215897.5 HIGHThe Hacker News22 days ago

Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products

A critical flaw in 8 Atlassian Data Center products, which customers host themselves, allows an attacker with no login access to r…

NEWSThe Hacker News22 days ago

FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach

The U.S. Federal Bureau of Investigation (FBI) has removed an Accenture contractor for their alleged role in a ShinyHunters-breach…

NEWSThe Hacker News22 days ago

Denmark Says Attackers Accessed CPR Data for 8.8 Million People via Company Account

Unauthorized parties have gained access to the names, addresses, and personal identification numbers of about 8.8 million people,…