Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,586 articles

ClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits

A new type of ClickFix attack is using compromised websites to trick users into executing a malicious payload cached in a web brow…

NEWScriticalThe Register22 days ago

Atlassian warns of critical file access flaw in its datacenter products

Tells users ‘action required’ – but maybe don’t make that action a Jira ticket, because it has this bug

NEWSThe Register23 days ago

Security researcher claims to they found KVM guest-host escape flaw

Firecracker MicroVMs, which started at AWS, seem to be the problem

NEWScriticalCyberScoop23 days ago

Citrix discloses third actively exploited NetScaler zero-day in less than a week

The vendor was much quicker and consistent in its response to the latest defect, and researchers consider the impact relatively lo…

NEWSBleeping Computer23 days ago

OpenAI is adding invisible watermarks to ChatGPT and Codex text in the EU

OpenAI is preparing to add invisible watermarks to text generated by ChatGPT and Codex in the European Union. [...]

NEWScriticalCVE-2026-887797.5 HIGHThe Register23 days ago

Citrix NetScaler security snafus get even worse amid more 0-day reports

The new vuln, CVE-2026-88779, is a memory overflow bug that leads to denial of service

NEWScriticalCVE-2026-615009.8 CRITICALBleeping Computer23 days ago

Rejetto HFS servers now actively scanned for critical RCE flaw

Hackers are actively scanning for a Rejetto HFS weak signing key vulnerability, tracked as CVE-2026-61500, that allows session for…

NEWSHackread23 days ago

Authenticated Doesn’t Mean Safe: Why AI Agents Need Action-Level Security

AI agents can misuse legitimate access. Learn why action-level security, trusted policy enforcement and verified approvals are cri…

NEWShighThe Register23 days ago

FBI confirms 'multiple' arrests related to ShinyHunters hack

Another few bite the dust

NEWSBleeping Computer23 days ago

IQVIA fined $7.8 million for failing to properly anonymize health data

Italy's Data Protection Authority (GPDP) has fined IQVIA €7 million ($7.8M) over poor data-processing practices that the agency sa…

NEWSCVE-2026-969408.8 HIGHThe Hacker News23 days ago

Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes

Microsoft has released out-of-band security updates to address a high-severity flaw in Microsoft Exchange Server that could allow…

NEWShighHackread23 days ago

Hackers Exploit 24 IoT Vulnerabilities to Install ClingSTUN Linux Backdoor

Meet ClingSTUN, a new Linux backdoor that exploits IoT vulnerabilities, gives attackers remote command access and turns infected d…

NEWSThe Register23 days ago

Debian's latest kernel security update has 1,313 reasons to patch

AI-assisted bug hunting adds to maintainers' workload, while broad CVE rules help explain the sprawling tally

NEWScriticalBleeping Computer23 days ago

Denmark population registry data breach affects 8.8 million people

Denmark's Central Population Register (CPR) is warning of a data breach that exposed the personal information of approximately 8.8…

NEWShighBleeping Computer23 days ago

New Dell System Update flaw lets hackers gain root privileges

Dell warned customers to patch a critical vulnerability in the System Update (DSU) command-line interface (CLI) deployment tool as…

NEWShighInfosecurity Magazine23 days ago

ClingSTUN Malware Turns Unpatched IoT Devices Into Proxy Nodes

ClingSTUN exploits known IoT flaws and abuses public STUN servers to keep proxy access to devices

NEWSSecurityWeek23 days ago

Google Narrows Open Source Bug Bounty Amid Wave of Invalid Automated Reports

Google has temporarily stopped accepting product vulnerability reports through its Open Source Software Vulnerability Reward Progr…

NEWSBleeping Computer23 days ago

South Korea probes bank breaches amid suspected AI-powered attacks

South Korea's Financial Services Commission (FSC) held an emergency meeting following a series of cyberattacks targeting financial…

NEWScriticalThe Hacker News23 days ago

⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware Arrests

A blank field. A public repo. One reply to an email. A box left exposed. None of this sounds dramatic, which is partly the problem…

NEWShighInfosecurity Magazine23 days ago

New Stealthy Linux Backdoors Target Telecoms, Masquerade as Email Traffic

Rapid7 has uncovered new BPFDoor, BPF Rekoobe and AVERAT malware variants targeting telecom and network-edge appliances in South K…

NEWSBleeping Computer23 days ago

tenfold CE: Our free Identity Governance tool just got 2 new features

tenfold has added shared content governance and real-time event auditing to its free Community Edition for organizations with unde…

NEWScriticalInfosecurity Magazine23 days ago

Citrix NetScaler Targeted Via New Zero Day

The memory buffer vulnerability can result in denial of service to customers, with CISA warning it poses “significant risks” to th…

NEWShighBleeping Computer23 days ago

Alleged dev of Ploutus ATM malware appears in US court after arrest

The U.S. Department of Justice has announced the arrest of the alleged developer of Ploutus malware, used to steal millions of dol…

NEWShighSecurityWeek23 days ago

Linux Backdoor Abuses STUN Protocol, Exploits Dozens of Flaws

ClingSTUN operates as a back-connect proxy backdoor, sets up persistence, and contains exploits for self-propagation. The post Lin…

NEWScriticalSecurityWeek23 days ago

250,000 Impacted by Data Breaches at New Jersey, Texas Healthcare Firms

Hackers stole patient information from Clover Health Investments and AngMar Management Services in July. The post 250,000 Impacted…

NEWSThe Hacker News23 days ago

The Credential Layer Is Expanding Faster Than Security Teams Can See It

Every modern enterprise depends on credentials. This is how humans, systems, and now AI, all connect to data, services, and each o…

NEWShighThe Hacker News23 days ago

Realtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C2

Threat actors have been observed attempting to exploit a now-patched critical security flaw impacting the Realtek Jungle software…

NEWShighHackread23 days ago

Star Blizzard Targets 100+ Organizations with Phishing and RedFlick Technique

Russian group Star Blizzard expands phishing campaigns with a new malware delivery RedFlick technique, using scheduled tasks to de…

NEWShighCVE-2026-615009.8 CRITICALSecurityWeek23 days ago

Exploitation Hits Rejetto HFS Vulnerability Discovered by AI

CVE-2026-61500 allows attackers to recover the session-cookie signing key and gain administrative access and RCE. The post Exploit…

NEWSSecurityWeek23 days ago

Senate Passes Bipartisan Bill to Strengthen Healthcare Cybersecurity

More than 730 cyber breaches affected over 270 million Americans last year, costing an average of $10 million per breach. The post…