Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

2,150 articles

RustDuck Botnet Rebuilds in Rust to Hijack Routers and Servers for DDoS

A new two-stage malware family called RustDuck is hijacking home routers, IP cameras, Android boxes, and poorly secured servers, t…

NEWSHackread27 days ago

New EvilTokens Attack Exposes Browser Visibility Gap in Enterprise SOCs

EvilTokens phishing hides takeover clues until browser execution leaving SOC teams needing deeper visibility to validate threats f…

NEWSThe Register27 days ago

Huntress CEO says threat hunter used 'poor judgment' in alerting ransomware crim about law enforcement probe

Ex-employee claims this 'meets the definition of an insider threat'

NEWSHackread27 days ago

Modern Enterprises: How to Evaluate the Security and Compliance of Office Software

Learn how modern businesses can judge office software for ISO 27001 certification, GDPR-aligned data handling, encryption, and saf…

NEWScriticalInfosecurity Magazine27 days ago

Nissan Discloses Employee Data Breach Linked to Oracle Zero-Day

Nissan says employees' data was stolen via the Oracle PeopleSoft zero-day campaign

NEWShighCVE-2026-330179.8 CRITICALThe Hacker News27 days ago

Langflow RCE Exploited to Deploy Monero Miner on Exposed AI App Endpoints

Threat actors are continuing to exploit a critical Langflow vulnerability as part of fresh attacks designed to deliver a Monero cr…

NEWSBleeping Computer27 days ago

Fake Perplexity extension on Chrome Web Store tracked searches

A malicious extension in the Chrome Web Store is masquerading as the Perplexity AI answer engine, intercepting search traffic and…

NEWSThe Hacker News27 days ago

Silent Swap Crypto Clipper Uses Fake Google Notes Extension to Replace Wallet Addresses

Cybersecurity researchers have flagged an active browser extension campaign that is designed to steal cryptocurrency by stealthily…

NEWScriticalInfosecurity Magazine27 days ago

Critical SimpleHelp Vulnerability Exploited For Malware Delivery

Attackers exploited a critical SimpleHelp RMM bug to deploy TaskWeaver and Djinn Stealer malware

NEWScriticalCyberScoop27 days ago

DHS to unveil replacement council for critical infrastructure cybersecurity

The Department of Homeland Security is bringing back a key cybersecurity information sharing effort with critical infrastructure,…

NEWShighHackread27 days ago

Hackers Use Fake FIFA World Cup 2026 T-Shirt Offers to Spread Voidrift Malware

A fake FIFA World Cup 2026 T-shirt giveaway scam is spreading Voidrift malware through personalized emails using company logos and…

NEWSHackread27 days ago

NDSS Symposium Heads to Seoul in 2027 to Expand Global Cybersecurity Collaboration

DC, United States, 30th June 2026, CyberNewswire

NEWSHackread27 days ago

Reflectiz to Host Webinar, Joined by Taboola, on Securing Third-Party Marketing in the AI Era

Boston, Massachusetts, 30th June 2026, CyberNewswire

NEWSThe Hacker News27 days ago

GuardFall Exposes Open-Source AI Coding Agents to Decades-Old Shell Injection Risks

The safety check that is supposed to stop an AI coding agent from running a dangerous command can be walked straight past using a…

NEWSBleeping Computer27 days ago

Lessons from the Underground: How to Combat Business Email Compromise

Business Email Compromise is more than an email scam. It's a coordinated operation involving compromised accounts, financial resea…

NEWScriticalCVE-2026-338257.8 HIGHSecurityWeek27 days ago

BlueHammer Vulnerability Exploited in Ransomware Attacks

The Microsoft Defender vulnerability CVE-2026-33825 was exploited in the wild as a zero-day before patches were released. The post…

NEWSThe Hacker News27 days ago

282 iOS AI Apps Leak API Keys and Open AI Proxy Access in Network Traffic Study

Researchers tested 444 AI chatbot apps for iPhone and found that 282 of them, nearly two-thirds, exposed paid AI access through th…

NEWSSecurity Magazine27 days ago

Security Organizations Reveal Threat Management Fails to Match Visibility

A recent report by Filigran analyzes the gap between threat visibility and threat management.

NEWSHackread27 days ago

AppViewX Launches Global Partner Program Amid Rising Demand for Machine and Agent Identity Security

New York, United States, 30th June 2026, CyberNewswire

NEWSHackread27 days ago

OpenMatter Network Introduces Verifiable Trust Layer for Secure Collaboration and AI Agents

Melbourne, Florida, 30th June 2026, CyberNewswire

NEWSSecurityWeek27 days ago

Decades-Old Bash Tricks Expose AI Coding Agents to Supply Chain Attacks

Decades-old Bash shell tricks can bypass safeguards in most open source AI coding agents, potentially turning malicious repositori…

NEWScriticalSecurityWeek27 days ago

Aflac Japan Data Breach Impacts 4.38 Million

Hackers accessed the insurance giant’s policyholder portal multiple times between June 15 and June 25. The post Aflac Japan Data B…

NEWShighInfosecurity Magazine27 days ago

ClickFix Now Cybercriminals' Favorite Malware Delivery Technique

ReliaQuest report warns of a surge in ClickFix social engineering attacks against Windows and macOS users

NEWShighSecurityWeek27 days ago

Hacker Conversations: Chris Thompson, Former Head of IBM X-Force Red, Co-Founder of RemoteThreat

Chris Thompson's journey took him from hacking game controls as a teenager to founding IBM’s X-Force Red team. The post Hacker Con…

NEWSSecurityWeek27 days ago

Supreme Court Rules Constitutional Privacy Protections Apply to Cellphone Users’ Location History

The ruling was made in the case of a bank robber whose identity was discovered through a geofence warrant. The post Supreme Court…

NEWSThe Hacker News27 days ago

What the Numbers Say About FIFA 2026 Cyber Risk

The FIFA World Cup 2026 opened on June 11. By that date, according to Check Point Research, the fraud infrastructure targeting it…

NEWShighSecurityWeek27 days ago

Exploitation of Recent Oracle E-Business Suite Vulnerability Begins

The critical-severity defect allows unauthenticated attackers to take over the E-Business Suite’s Payments product. The post Explo…

NEWShighCVE-2026-4855810.0 CRITICALThe Hacker News27 days ago

Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer

An unknown threat actor has been observed exploiting a recently disclosed maximum-severity security flaw in SimpleHelp to deliver…

NEWScriticalBleeping Computer27 days ago

Insurance giant Aflac discloses data breach after subsidiary hack

American insurance giant Aflac has disclosed a new data breach after attackers breached its Japan subsidiary's systems and stole p…

NEWSHackread27 days ago

WhatsApp Usernames Will Let You Chat Without Sharing Your Phone Number

WhatsApp is letting users reserve usernames before its 2026 launch, giving people a way to chat without sharing phone numbers. Her…