Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,600 articles

macOS Users Targeted by Fake Zoom Installer Carrying CloudSyncD Backdoor

The dropper “carries a complete universal Mach-O inside itself, roughly 756 KB in the development build, and extracts it at runtim…

NEWSBleeping Computer26 days ago

Dell asks admins to patch max severity CSM flaws as soon as possible

Dell has patched two maximum severity vulnerabilities in the Container Storage Modules (CSM) that connect Dell enterprise storage…

NEWSThe Hacker News26 days ago

OpenAI Parts Ways With Three Safety Researchers Over Sensitive Information Mishandling

OpenAI has parted ways with three members of its safety team after they leaked private information in violation of company policie…

NEWSHackread26 days ago

367,000-Ship Study Finds Global GPS Spoofing, Red Sea Activity Before Grounding

A study of 367,000 ships finds global GPS spoofing, including Red Sea activity detected months before the MSC…

NEWSSecurityWeek26 days ago

Crypto Scammers Hijack Microsoft’s Official X Account

Hackers used the account, which has 13 million followers, to amplify a Clippy-themed cryptocurrency account. The post Crypto Scamm…

NEWSThe Hacker News26 days ago

Why CISOs Struggle to Answer the Board's Three Hardest Questions, and How to Fix the Report

The quarterly board meeting is two weeks out. The security team is pulling exports from the identity provider, the cloud posture t…

NEWShighSecurityWeek26 days ago

In Rare Move, Alleged Iranian State Hacker Extradited to US

Amir Barati, an alleged member of the Mabna Institute, was indicted for targeting universities, private organizations, and governm…

NEWScriticalThe Register26 days ago

Fortinet sounds the alarm over actively exploited FortiMail zero-day

No login required, exploitation underway, and some admins are still waiting for patches

NEWShighWired Security26 days ago

A Flaw in ChatGPT’s Mac App Could Have Let Hackers Grab Sensitive Data

While the focus has been on AI agents’ hacking capabilities, a recently patched vulnerability in a ChatGPT app shows that AI softw…

NEWScriticalSecurityWeek26 days ago

Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks

The China-based hacking group has been exploiting SharePoint vulnerabilities since July 2025. The post Warlock Expands SharePoint…

NEWShighBleeping Computer26 days ago

Microsoft’s X account hacked in crypto pump-and-dump scheme

On Thursday, unknown attackers hijacked the official Microsoft account on X, which has over 13 million followers, in what appeared…

NEWSInfosecurity Magazine26 days ago

Police Target KillSec Ransomware Group with Arrests and Seizures

Investigators have disrupted the operations of ransomware group KillSec and arrested several key suspects

NEWSSecurityWeek26 days ago

AI Agents Aimed SQL Injection at US and Canadian Government Sites

The attacks targeted the US Department of Education and Library and Archives Canada, and researchers linked some agents to OpenAI.…

NEWScriticalInfosecurity Magazine26 days ago

Two Zero-Days Exploited in Attack on Dutch Institute for Vulnerability Disclosure

The Dutch Institute for Vulnerability Disclosure reveals agentic AI-powered attack using Zammad zero-days

NEWScriticalCVE-2026-1042869.8 CRITICALSecurityWeek26 days ago

Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action

CVE-2026-104286 is a critical-severity path traversal vulnerability that could allow attackers to write arbitrary files to the sys…

NEWSThe Hacker News26 days ago

Android 17 Advanced Protection Locks Accessibility Services to Verified Accessibility Tools

Google has announced a new security measure that limits access to Android's accessibility services to verified applications classi…

NEWScriticalCVE-2026-1042869.8 CRITICALThe Hacker News26 days ago

Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes

The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added a critical security flaw impacting Fortinet F…

NEWScriticalCVE-2026-1042869.8 CRITICALBleeping Computer27 days ago

Fortinet warns of critical FortiMail flaw exploited in zero-day attacks

Fortinet is warning customers of a critical FortiMail vulnerability, tracked as CVE-2026-104286, that is being actively exploited…

NEWShighThe Register27 days ago

AI agents hacked the hackers, stealing email addresses from security research org

Chained Zammad flaws enabled session hijacking, code execution, and root escalation in seconds

NEWShighBleeping Computer27 days ago

Autonomous AI agents tried to hack US, Canadian government websites

Autonomous AI agents using aggressive strategies attempted to hack U.S. and Canadian government websites to find school and divorc…

NEWSHackread27 days ago

KillSec Ransomware Group Dismantled, 16-Year-Old Suspected Admin Arrested

An international police operation has disrupted the KillSec ransomware group, with three suspects arrested, five servers seized an…

NEWSCyberScoop27 days ago

Authorities seize KillSec extortion group infrastructure, arrest 3 alleged members

The teenager-run cybercrime group victimized roughly 500 organizations in less than two years. The post Authorities seize KillSec…

NEWSBleeping Computer27 days ago

Microsoft says threat actors are ahead in the early AI race

Microsoft says cyberattackers are currently benefiting from artificial intelligence faster than defenders, allowing threat actors…

NEWSCyberScoop27 days ago

National cyber director: Government-industry collaboration vital to managing AI risks, competition with nations

Sean Cairncross talked about regulations, China, pilot projects and more Thursday. The post National cyber director: Government-in…

NEWSSecurityWeek27 days ago

Zero Trust Creator Says Model Holds Firm Against AI-Assisted Attacks

Fifteen years after coining the framework, John Kindervag insists zero trust still works in the AI era—if you get the implementati…

NEWSWired Security27 days ago

Experience What It’s Like to Travel in the Occupied West Bank

Traverse barriers and checkpoints in the occupied West Bank—your choices reflect the reality of nearly 3.5 million Palestinians wh…

NEWSThe Register27 days ago

EU’s hodgepodge tech policy exposes members to Chinese vendor risks, says think tank

RUSI wants procurement rethink that could put US suppliers under scrutiny too

NEWSSecurityWeek27 days ago

Osavul Lands $10 Million to Spot Hostile Intent Across Cyber, Physical Domains

Hybrid risk intelligence company Osavul has raised $10 million in a Series A funding round led by 33N Ventures. The post Osavul La…

NEWSSecurity Magazine27 days ago

Trump, AI Executives Sign Voluntary AI Safety Accord

Breaking down the voluntary AI safety accord signed by President Trump and AI executives.

NEWSThe Hacker News27 days ago

Police Arrest 16-Year-Old Suspected of Running KillSec, Seize Ransomware Leak Site and Servers

Police in Spain have arrested a 16-year-old whom investigators suspect of running the KillSec ransomware group. KillSec is accused…