Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

2,164 articles

Quantifind Raises $200 Million for AI-Native Risk Intelligence

Quantifind will accelerate international expansion and extend its platform’s localized risk intelligence capabilities. The post Qu…

NEWSThe Register27 days ago

Microsoft builds a bouncer to keep bots out of Teams meetings

Allows ISVs to put their names on the door so desirable bots always get in

NEWShighSecurityWeek28 days ago

New Controller Flaws Expose Highway Signs and Billboards to Remote Hacking

CISA has published an advisory to inform organizations about three vulnerabilities found by a researcher in Daktronics controllers…

NEWScriticalCVE-2026-468179.8 CRITICALThe Hacker News28 days ago

Oracle E-Business Suite Flaw CVE-2026-46817 Actively Exploited in the Wild

A critical security flaw impacting Oracle E-Business Suite has come under active exploitation in the wild, according to Defused Cy…

NEWSThe Register28 days ago

India’s central bank mandated use of .bank domains to enhance trust – but its registry leaked sensitive info

Open API leaked everything an attacker needs to impersonate bank officials

NEWSThe Register28 days ago

Security researchers tricked LLMs into giving them cocaine recipes by abusing role models for prompt injection

If you want a picture of the future of LLM security, imagine Whac-a-Mole meets Groundhog Day

NEWSThe Register28 days ago

Four years into Ukraine invasion, Russia turns influence-ops back to US and Europe

Not today, Putin

NEWSWired Security28 days ago

Meta Contractors Posed as Teens to Prompt Rival Chatbots About Suicide, Sex, and Drugs

Hundreds of contractors working on a project for Meta pretended to be kids in order to see how other chatbots like Gemini and Chat…

NEWSCyberScoop28 days ago

Warner bill would create federally vetted list for secure, trustworthy AI agents

The bill empowers the FTC to create a registry for sellers of AI agent software certifying their privacy and cybersecurity protect…

NEWSHackread28 days ago

212 New Venezuela Earthquake Domains Prompt Donation Scam Warnings

Researchers spotted 212 new domains registered after Venezuela's earthquake, warning donors of donation scam risks and urging them…

NEWScriticalBleeping Computer28 days ago

Nissan discloses employee data breach linked to Oracle zero-day attacks

Nissan is warning that it suffered a data breach affecting current and former employees after threat actors exploited an Oracle Pe…

NEWSBleeping Computer28 days ago

NAIC says public data stolen in ShinyHunters' PeopleSoft breach

The National Association of Insurance Commissioners (NAIC) says the ShinyHunters extortion group stole only publicly available dat…

NEWScriticalThe Register28 days ago

Anonymous researcher drops 0-day 'exploitarium' repo

At least two vulnerabilities are already under attack

NEWSThe Hacker News28 days ago

Malicious Perplexity Chrome Extension Intercepted Searches and Address Bar Input

Microsoft has found a malicious Chrome extension that posed as the AI search engine Perplexity and quietly logged what people sear…

NEWSBleeping Computer28 days ago

WhatsApp rolls out usernames to help users hide their phone number

WhatsApp is finally allowing users to reserve usernames, a privacy feature that lets them hide their phone numbers from people not…

NEWSCyberScoop28 days ago

Supreme Court approves mail-in ballots that arrive after Election Day

The ruling is a victory for election advocates who say the evidence overwhelmingly shows that voter fraud is rare and not tied to…

NEWSCyberScoop28 days ago

Supreme Court delivers ‘major win’ for tech privacy in Chatrie ruling

Dissenting justices who criticized the ruling said it would have “seismic” implications for the Fourth Amendment. The post Supreme…

NEWSBleeping Computer28 days ago

Microsoft extends Windows Server 2022 hotpatching until October 2027

Microsoft has extended Windows Server 2022 hotpatching until October 2027, one year after the mainstream end date of October 2026.…

NEWSThe Hacker News28 days ago

WhatsApp is Finally Getting Usernames to Help Keep Phone Numbers Private

WhatsApp on Monday officially announced the start of global reservations of usernames with an aim to protect the privacy of more t…

NEWSSecurityWeek28 days ago

WhatsApp Rolling Out Username Feature to Bolster Phone Number Privacy

An optional ‘username key’ adds another layer by requiring a secondary credential before someone can message users. The post Whats…

NEWSHackread28 days ago

Amazon Kindle E-Reader: Worth It, and How to Afford More Books?

See whether an Amazon Kindle is worth buying, how it compares with other e-readers, and practical ways to read more books without…

NEWShighBleeping Computer28 days ago

U.S. offers $10 million for hackers targeting WhatsApp, Signal users

The U.S. Department of State is offering up to $10 million for information that helps identify or locate members of the UNC5792 an…

NEWSThe Hacker News28 days ago

Mustang Panda Uses Zoho WorkDrive as Command Channel in Indian Government Attacks

The China-aligned espionage group Mustang Panda is running two campaigns against the Indian government and hydropower targets, dep…

NEWSInfosecurity Magazine28 days ago

OpenAI Reveals GPT-5.6 Sol Cybersecurity Model, Restricts Early Access

OpenAI is previewing its GPT-5.6 Sol model to a vetted few at the US government's request

NEWShighThe Hacker News28 days ago

⚡ Weekly Recap: Linux Kernel Flaws, AI Malware Tricks, Turla Backdoor, Infostealers and More

This week was a reminder that attackers do not always need big tricks. One small mistake, one old access path, one missed patch, a…

NEWSInfosecurity Magazine28 days ago

Telegram-Based Millenium RAT Campaign Infects 60,000 Devices

Group-IB says Millenium RAT, now rewritten in C++, has hit 62,289 devices in 160+ countries

NEWSSecurityWeek28 days ago

New Attack Abuses Claude Code and Harmless-Looking Repositories to Hijack Developer Machines

Indirect prompts hidden in a repository can lead to Claude Code spawning a reverse shell on the developer’s machine. The post New…

NEWSSecurityWeek28 days ago

Straiker Raises $64 Million for AI Security Platform

The startup’s platform can identify AI agents and provide visibility into their access, behavior, and risks. The post Straiker Rai…

NEWSBleeping Computer28 days ago

Agentic AI Has an Identity Problem and Attackers Know It

AI agents can access data, trigger workflows, and take action across enterprise systems. Token Security explains why governing the…

NEWScriticalCVE-2026-4855810.0 CRITICALBleeping Computer28 days ago

Critical SimpleHelp flaw exploited to deploy new stealer malware

Hackers are exploiting a recently disclosed critical vulnerability (CVE-2026-48558) in SimpleHelp to deploy Djinn Stealer, a previ…