Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,593 articles

Linux Backdoor Abuses STUN Protocol, Exploits Dozens of Flaws

ClingSTUN operates as a back-connect proxy backdoor, sets up persistence, and contains exploits for self-propagation. The post Lin…

NEWScriticalSecurityWeek23 days ago

250,000 Impacted by Data Breaches at New Jersey, Texas Healthcare Firms

Hackers stole patient information from Clover Health Investments and AngMar Management Services in July. The post 250,000 Impacted…

NEWSThe Hacker News23 days ago

The Credential Layer Is Expanding Faster Than Security Teams Can See It

Every modern enterprise depends on credentials. This is how humans, systems, and now AI, all connect to data, services, and each o…

NEWShighThe Hacker News23 days ago

Realtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C2

Threat actors have been observed attempting to exploit a now-patched critical security flaw impacting the Realtek Jungle software…

NEWShighHackread23 days ago

Star Blizzard Targets 100+ Organizations with Phishing and RedFlick Technique

Russian group Star Blizzard expands phishing campaigns with a new malware delivery RedFlick technique, using scheduled tasks to de…

NEWShighCVE-2026-615009.8 CRITICALSecurityWeek23 days ago

Exploitation Hits Rejetto HFS Vulnerability Discovered by AI

CVE-2026-61500 allows attackers to recover the session-cookie signing key and gain administrative access and RCE. The post Exploit…

NEWSSecurityWeek23 days ago

Senate Passes Bipartisan Bill to Strengthen Healthcare Cybersecurity

More than 730 cyber breaches affected over 270 million Americans last year, costing an average of $10 million per breach. The post…

NEWSThe Hacker News23 days ago

Apple Plans Tighter macOS Full Disk Access Controls Over AI Agent Data Access

Apple has announced that it's taking steps to tighten controls around a macOS setting called Full Disk Access (FDA) due to securit…

NEWShighInfosecurity Magazine23 days ago

Google Suspends Open-Source Bug Bounty Due to AI Vulnerability Reports

Google has paused its Open Source Vulnerability Rewards Program due to a flood of AI submissions

NEWSBleeping Computer23 days ago

OpenAI will show visual ads in ChatGPT while you generate images

OpenAI is expanding ads in ChatGPT, and one of the first new formats will show visual ads while you're generating images. [...]

NEWSCyberScoop23 days ago

The US needs a real plan to defend its water systems

Here’s what it would take: stronger defenses for large utilities, hands-on help for smaller systems and federal support to make bo…

NEWSBleeping Computer23 days ago

Microsoft: Windows KB5124010 update crashes some games and apps

Microsoft confirmed over the weekend that some games and applications using AC-3 (Dolby Digital) audio decoding will crash after i…

NEWSInfosecurity Magazine23 days ago

More UK Schools Are Recovering Faster from Cyber Incidents

Ofqual study finds growing number of UK schools are bouncing back “immediately” from cyber-attacks

NEWSThe Register23 days ago

Legacy sign-on service comes back to bite school software provider Bromcom

Intruders retrieved email addresses from superseded tech kept running for an internal system

NEWSInfosecurity Magazine23 days ago

Frontline Education Breach Impacts K-12 School District Staff

A breach at school software provider Frontline Education has exposed employee data

NEWSBleeping Computer23 days ago

Google halts open-source bug bounty program amid AI spam surge

Google has now suspended submissions to its Open Source Software Vulnerability Rewards Program (OSS VRP) after being flooded by AI…

NEWSCVE-2026-615009.8 CRITICALThe Hacker News23 days ago

Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE

A critical security flaw impacting Rejetto HTTP File Server (HFS) is witnessing active exploitation attempts, according to VulnChe…

NEWSSecurityWeek23 days ago

Alleged ShinyHunters Leader Arrested in Jordan

Known as Rey, the suspect is reportedly helping the FBI identify and locate other members of the extortion group. The post Alleged…

NEWScriticalCVE-2026-887797.5 HIGHThe Hacker News23 days ago

New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline

Citrix has released security updates for a high-severity security flaw in NetScaler ADC and Citrix NetScaler Gateway that has been…

NEWScriticalCVE-2026-887797.5 HIGHSecurityWeek23 days ago

Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier

Citrix has confirmed that a new zero-day vulnerability, CVE-2026-88779, emerged just days after two other exploited flaws were pat…

NEWScriticalCVE-2026-887797.5 HIGHBleeping Computer24 days ago

Citrix patches NetScaler SAML zero-day exploited in attacks

Citrix has released emergency updates for a new NetScaler denial-of-service vulnerability tracked as CVE-2026-88779 that has been…

NEWSSecurityWeek24 days ago

Trump Names National Intelligence Director Jay Clayton to Lead a New Federal AI Task Force

The announcement comes after Trump hosted top executives of AI companies at the White House last week. The post Trump Names Nation…

NEWSBleeping Computer24 days ago

Anthropic asks Claude users to share voice data for AI model training

Anthropic has started asking Claude users to voluntarily share their voice conversations to help train and improve its AI models.…

NEWSThe Hacker News24 days ago

ShinyHunters Suspect Rey Reportedly Detained in Jordan, Helping FBI Identify Group Members

A suspected member of the ShinyHunters digital extortion group, who goes by the online alias "Rey," has been allegedly detained by…

NEWShighThe Hacker News24 days ago

China-Aligned TA419 Targets U.S. AI Policy Experts With Microsoft AitM Phishing

A new China-nexus cyber espionage group known as TA419 has been attributed to multiple credential phishing campaigns targeting art…

NEWSBleeping Computer25 days ago

Google Gemini could soon get full access to your Mac’s files, apps and the web

Google's Gemini could soon access any file on your macOS device, open apps, browse the web, and perform actions without asking for…

NEWSHackread25 days ago

ShinyHunters Suspect “Rey” Detained in Jordan, Reportedly Helping FBI

ShinyHunters hacker “Rey” was detained in Jordan and is reportedly cooperating with the FBI after the group claimed major FBI and…

NEWShighBleeping Computer25 days ago

ShinyHunters hacker reportedly detained in Jordan, aiding FBI

A suspected ShinyHunters hacking group member known online as "Rey" has reportedly been detained in Jordan and is cooperating with…

NEWSThe Register25 days ago

Anthropic's super bug-hunting model Mythos is hardcore good at math, as latest vuln under attack shows

Exploitation attempts came from China-hosted IP, VulnCheck researcher says

NEWSThe Hacker News25 days ago

MI5 Says China’s MSS Funded Research Involving 100+ U.K.-Linked Academics

The U.K.'s domestic intelligence and security agency has warned that more than 100 academics have helped China boost its intellige…