Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

2,166 articles

Agentic AI Has an Identity Problem and Attackers Know It

AI agents can access data, trigger workflows, and take action across enterprise systems. Token Security explains why governing the…

NEWScriticalCVE-2026-4855810.0 CRITICALBleeping Computer28 days ago

Critical SimpleHelp flaw exploited to deploy new stealer malware

Hackers are exploiting a recently disclosed critical vulnerability (CVE-2026-48558) in SimpleHelp to deploy Djinn Stealer, a previ…

NEWScriticalCVE-2026-468179.8 CRITICALBleeping Computer28 days ago

Hackers now exploit critical Oracle E-Business flaw in attacks

Attackers have begun exploiting a critical vulnerability (CVE-2026-46817) in the Oracle E-Business Suite (EBS) financial applicati…

NEWShighThe Register28 days ago

AI may be good at finding security vulnerabilities, but it can't beat human stupidity

You don't need Mythos or GPT-5.5-Cyber to find a vuln to exploit when the world's password habits are so sloppy

NEWShighSecurityWeek28 days ago

Insurance Regulators Group NAIC Hit in Oracle PeopleSoft Hack

The ShinyHunters extortion group claims to have stolen 3.1 TB of data from the organization. The post Insurance Regulators Group N…

NEWSHackread28 days ago

Cybersecurity Firm Cyberbit Shuts Down Israel Operations

Cyberbit is closing its Israeli operations and laying off local staff as the former Elbit Systems spin-off grows mainly in the US…

NEWSThe Register28 days ago

Microsoft keeps Windows Server 2022 hotpatching alive into 2027

In the Azure Edition, of course

NEWSBleeping Computer28 days ago

Webinar: Why business email compromise attacks keep succeeding

Business email compromise attacks increasingly rely on convincing impersonation rather than malware, making them harder for employ…

NEWShighThe Hacker News28 days ago

236,000 DCloud Uni-App Sites Used in Crypto Scams, Phishing, and Wallet Drainers

New findings unearthed by Infoblox show that more than 236,000 websites are using investment scam templates built using a legitima…

NEWSThe Hacker News28 days ago

Why Post-Quantum Cryptography Starts With Credentials

Today’s encrypted data, such as credentials, may no longer remain confidential in the future because the public-key cryptography p…

NEWShighThe Hacker News28 days ago

Gamaredon Expands Ukraine Attacks with New Malware and Cloud Service Abuse

A Russian advanced persistent threat (APT) group has continued to evolve and expand its malware arsenal as part of its ongoing cyb…

NEWSBleeping Computer28 days ago

US seizes hundreds of FIFA World Cup illegal streaming domains

The U.S. Justice Department's Criminal Division has seized nearly 400 web domains used for illegally streaming matches at the FIFA…

NEWShighSecurityWeek28 days ago

‘DirtyClone’ Linux Kernel Vulnerability Leads to Root Access

A variant of DirtyFrag, the flaw allows unprivileged local users to manipulate the Linux page cache and gain root privileges. The…

NEWSThe Register28 days ago

Nissan says Oracle PeopleSoft break-in may have spilled payroll records, SSNs

Carmaker points finger at an 'unknown' flaw as customer fallout continues

NEWSSecurityWeek28 days ago

OpenAI and Anthropic Limit New AI Models to Trump-Approved Customers During Cybersecurity Review

ChatGPT maker OpenAI said Friday it is restricting the release of its new artificial intelligence model at the request of Presiden…

NEWScriticalInfosecurity Magazine28 days ago

US Federal Insurance Regulator Confirms Data Breach Via Oracle Flaw

An attacker has exploited a zero day in Oracle Peoplesoft to gain access to the IT systems of the NAIC, the standard-setting assoc…

NEWShighWired Security28 days ago

Top Google Security Staff Warn Search Data Could Be Hacked if EU Rules Change

Europe’s pro-competition proposals could see Google Search and Android systems opened up. The company claims there are serious pri…

NEWShighHackread28 days ago

Bluekit Phishing Kit Uses Browser-in-the-Middle Attacks to Evade Detection

A new phishing-as-a-service (PHaaS) platform called Bluekit is letting cybercriminals steal user accounts using a tricky method. W…

NEWShighSecurityWeek28 days ago

US Offers $10 Million Bounty for Russian State Hackers as Messaging App Attacks Evolve

UNC5792 and UNC4221 have been targeting US government officials, military leaders, and allied personnel. The post US Offers $10 Mi…

NEWShighInfosecurity Magazine28 days ago

Russian Hackers Accused of Destructive Cyber-Attack on Jaguar Land Rover

Experts warn the Jaguar Land Rover breach bears hallmarks of Kremlin-backed hackers, citing novel ransomware, strategic timing and…

NEWSCyberScoop28 days ago

What the post-quantum executive order really demands of CISOs

ith federal PQC deadlines set for 2030 and 2031, CISOs face a multi-year transformation program that most organizations have not y…

NEWShighThe Hacker News28 days ago

Microsoft Removes 119 Edge Extensions That Hid Malware in Images and Fonts

Microsoft has shut down a long-running malicious extension operation on the Edge Add-ons store that hid its payloads inside ordina…

NEWShighInfosecurity Magazine28 days ago

FBI Sounds Alarm Over Russian Intelligence Signal Phishing

The FBI claims Russian spies are targeting Signal backup keys

NEWSSecurityWeek28 days ago

OpenAI Unveils GPT-5.6 Sol as Its Most Advanced Cybersecurity AI

The company says Sol matches competing systems like Mythos Preview while using only a third of the output tokens. The post OpenAI…

NEWScriticalCVE-2026-552008.1 HIGHThe Hacker News28 days ago

Public PoC Released for Critical libssh2 CVE-2026-55200 Client-Side SSH Flaw

A public proof-of-concept is now out for CVE-2026-55200, a critical flaw in libssh2 that lets a malicious or compromised SSH serve…

NEWSThe Hacker News29 days ago

Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer

Cybersecurity researchers have uncovered two hijacked npm packages and a cluster of Go packages that are designed to deploy a Pyth…

NEWSHackread29 days ago

Top Cyber Range Providers: A Comparison of 15 Leading Platforms

Compare 15 cyber range platforms across live-fire exercises, AI testing, SOC training, OT realism, deployment options, pricing mod…

NEWShighHackread29 days ago

Anonymous-Linked Hacktivist Aubrey Cottle Jailed Over Texas GOP Cyberattack

Canadian hacktivist Aubrey Cottle, known as Kirtaner and once linked to Anonymous, gets 18 months for a 2021 Texas GOP website cyb…

NEWScriticalBleeping Computer29 days ago

Data breach exposes up to 14.2 million email logins at six ISPs

Japanese telecommunications operator KDDI Corporation disclosed a data breach where threat actors gained access to one of its emai…

NEWSThe Hacker Newsabout 1 month ago

Ukraine Says Russian Intelligence Used Fake Support Texts to Steal Messaging Credentials

The Security Service of Ukraine (SSU) said it, together with the U.S. Federal Bureau of Investigation (FBI), uncovered a long-runn…