Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,596 articles

ShinyHunters hacker reportedly detained in Jordan, aiding FBI

A suspected ShinyHunters hacking group member known online as "Rey" has reportedly been detained in Jordan and is cooperating with…

NEWSThe Register25 days ago

Anthropic's super bug-hunting model Mythos is hardcore good at math, as latest vuln under attack shows

Exploitation attempts came from China-hosted IP, VulnCheck researcher says

NEWSThe Hacker News25 days ago

MI5 Says China’s MSS Funded Research Involving 100+ U.K.-Linked Academics

The U.K.'s domestic intelligence and security agency has warned that more than 100 academics have helped China boost its intellige…

NEWShighThe Hacker News25 days ago

Warlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware

The suspected China-linked threat actor known as Warlock is still continuing to weaponize Microsoft SharePoint vulnerabilities, li…

NEWSBleeping Computer25 days ago

Danish university DTU breach exposes data of up to 200,000 people

The Technical University of Denmark (DTU) says information belonging to up to 200,000 users may have been exposed after hackers ac…

NEWScriticalHackread25 days ago

Dutch Institute for Vulnerability Disclosure Breached via Zammad 0-Days

Dutch Institute for Vulnerability Disclosure was breached through two Zammad 0-days in an AI-powered attack that led to remote cod…

NEWSWired Security25 days ago

Muse Creates Detailed Profiles of All Your Friends and Family

Millions have downloaded Meta’s AI agent Muse. But getting it to do your bidding comes with privacy costs.

NEWSSecurityWeek25 days ago

doxx.net Raises $38 Million to Prevent AI Agent-on-the-Internet Misadventures

doxx.net’s new ADN platform prevents agentic misadventure while the agent is operating under the user’s authority. The post doxx.n…

NEWScriticalSecurityWeek25 days ago

Fortra Patches Critical Vulnerabilities in BoKS

The bugs could lead to authentication bypass, shell command execution, and memory corruption. The post Fortra Patches Critical Vul…

NEWSThe Hacker News25 days ago

The State of Cybersecurity in 2026: Key Segments, Insights, and Innovations

Featuring: Cybersecurity is being reshaped by the expansion of cloud infrastructure, AI, distributed systems, and increasingly co…

NEWSWired Security26 days ago

ICE Has Been Dumping Protester Photos Into a Palantir Database

DHS agents not only tracked and intimidated people observing ICE activity in Maine, but stored information about them in a Palanti…

NEWSBleeping Computer26 days ago

Frontline Education breach exposes school district employee data

Frontline Education is notifying school districts of a data breach after attackers exploited a vulnerability in third-party softwa…

NEWSBleeping Computer26 days ago

Warlock ransomware breach SharePoint in water, telecom operator attacks

The China-linked ransomware group Warlock targeted a water utility, a telecom provider, a regional government body, and a universi…

NEWShighCyberScoop26 days ago

The legal questions raised by agentic AI hacks

Experts and policymakers want AI companies to face consequences for agentic hacks. There may not be a clear-cut answer under exist…

NEWSThe Register26 days ago

OpenAI alerts 100+ orgs that its 'misaligned models' attempted to break in - or worse

Mostly 'routine research tasks,' and 'some involved government websites, which our models often use,' AI giant tells The Reg

NEWScriticalThe Hacker News26 days ago

GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers

A critical flaw in GitLab's AI Gateway could let a logged-in user with Duo Agent Platform access run commands on the gateway under…

NEWShighThe Hacker News26 days ago

Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign

Government and policy organizations across Asia have become the target of a new campaign orchestrated by a China-nexus threat acto…

NEWSCVE-2026-63688The Hacker News26 days ago

Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes

Dell has released security updates to address multiple critical security flaws in Dell Container Storage Modules (CSM) that could…

NEWScriticalBleeping Computer26 days ago

GitLab warns of critical RCE vulnerability in AI Gateway service

GitLab warned customers today to immediately patch a critical AI Gateway vulnerability that could let attackers run arbitrary comm…

NEWShighBleeping Computer26 days ago

US sanctions Tren de Aragua gang members in ATM hacks crackdown

The U.S. Treasury Department has sanctioned eight members of the Venezuelan gang Tren de Aragua (TdA) for their role in the theft…

NEWSThe Register26 days ago

Californian accused of shipping $300M worth of Nvidia chips to China without Uncle Sam’s approval

Prosecutors claim Greg Lui helped China procure advanced hardware to develop, ahem, 'super intelligence’

NEWSThe Register26 days ago

OpenAI's wandering AI agents earn it a California subpoena

Plus: Attorneys-general say investigators should have direct access to AI companies' records when things go wrong

NEWShighSecurityWeek26 days ago

In Other News: $15K iCloud Spoofing Bugs, AI Policy Experts Phished, Adblocker Spies on AI Chats

Noteworthy stories that might have slipped under the radar: Kiteworks patches over 100 vulnerabilities, Microsoft publishes 2026 D…

NEWSInfosecurity Magazine26 days ago

Microsoft: AI Cuts Post-Compromise Attack Time to Minutes

Microsoft has warned that threat actors have gained the advantage over defenders by using AI to enhance the speed and scale of att…

NEWSBleeping Computer26 days ago

The EDR blind spot: 3 ways browser attacks evade endpoint telemetry

Browser-based attacks can steal sessions, abuse extensions, or manipulate users without creating the endpoint artifacts EDR is des…

NEWShighSecurityWeek26 days ago

macOS Users Targeted by Fake Zoom Installer Carrying CloudSyncD Backdoor

The dropper “carries a complete universal Mach-O inside itself, roughly 756 KB in the development build, and extracts it at runtim…

NEWSBleeping Computer26 days ago

Dell asks admins to patch max severity CSM flaws as soon as possible

Dell has patched two maximum severity vulnerabilities in the Container Storage Modules (CSM) that connect Dell enterprise storage…

NEWSThe Hacker News26 days ago

OpenAI Parts Ways With Three Safety Researchers Over Sensitive Information Mishandling

OpenAI has parted ways with three members of its safety team after they leaked private information in violation of company policie…

NEWSHackread26 days ago

367,000-Ship Study Finds Global GPS Spoofing, Red Sea Activity Before Grounding

A study of 367,000 ships finds global GPS spoofing, including Red Sea activity detected months before the MSC…

NEWSSecurityWeek26 days ago

Crypto Scammers Hijack Microsoft’s Official X Account

Hackers used the account, which has 13 million followers, to amplify a Clippy-themed cryptocurrency account. The post Crypto Scamm…