Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,603 articles

Osavul Lands $10 Million to Spot Hostile Intent Across Cyber, Physical Domains

Hybrid risk intelligence company Osavul has raised $10 million in a Series A funding round led by 33N Ventures. The post Osavul La…

NEWSSecurity Magazine27 days ago

Trump, AI Executives Sign Voluntary AI Safety Accord

Breaking down the voluntary AI safety accord signed by President Trump and AI executives.

NEWSThe Hacker News27 days ago

Police Arrest 16-Year-Old Suspected of Running KillSec, Seize Ransomware Leak Site and Servers

Police in Spain have arrested a 16-year-old whom investigators suspect of running the KillSec ransomware group. KillSec is accused…

NEWScriticalThe Hacker News27 days ago

ThreatsDay: AI-Powered Zero-Day Chain, 543K Live Secrets, Model Inspection RCE and 13 More Stories

This week, the useful words are boring ones: inspect, cache, compile, store, trust. Each sounds harmless. Each can become an attac…

NEWShighThe Register27 days ago

Suspected Chinese spies spoofed an Anthropic exec, ex-White House official in AI phishing

Your invite to a fake AI policy advisory committee has strings attached

NEWShighHackread27 days ago

New CloudSyncD macOS Backdoor Uses Fake Zoom Installer to Steal Passwords

CloudSyncD macOS backdoor uses a fake Zoom installer to steal Mac passwords, bypass Gatekeeper and connect infected devices to rem…

NEWSSecurity Magazine27 days ago

Cybersecurity Awareness Month Drives Home a Key Challenge: Agentic AI

As AI continues to evolve, governance is struggling to keep pace.

NEWShighThe Register27 days ago

Microsoft catches hackers exploiting Zimbra bug before disclosure

Attackers were probing the mail server flaw weeks before it had a CVE to its name

NEWShighThe Hacker News27 days ago

WordPress Backdoor Rebuilds Itself After Cleanup Using Files, Database, and Shared Memory

Cybersecurity researchers have shed light on a WordPress compromise in which threat actors deployed multiple persistence mechanism…

NEWShighSecurityWeek27 days ago

Hacker Conversations: Rob Juncker, a Knock at the Door and a Moral Compass

Rob Juncker is chief product and technology officer at Mimecast. Is he a hacker? “Unequivocally yes,” he says. The post Hacker Con…

NEWSSecurityWeek27 days ago

Enterprises Struggle to Prepare for AI and Quantum Threats, PwC Says

PwC’s survey found that only 22% of leaders would use fully autonomous AI for cyber defense, while just 21% are implementing quant…

NEWSBleeping Computer27 days ago

Police dismantle KillSec ransomware gang allegedly led by 16-year-old

An international law enforcement operation dubbed "Operation KillSwitch" seized the KillSec ransomware gang's data leak site and s…

NEWSSecurityWeek27 days ago

Police Shut Down KillSec Ransomware, Identify Alleged Teen Leader

Police took control of KillSec’s leak site and secured at least 110 terabytes of data stolen from victims. The post Police Shut Do…

NEWScriticalInfosecurity Magazine27 days ago

Critical Cisco Catalyst SD-WAN Zero-Day Under Active Exploitation

Vulnerability in Cisco Catalyst SD-WAN Manager allows an unauthenticated, remote attacker to access systems with admin privileges

NEWSHackread27 days ago

Why Mobile Device Management Needs Its Own Threat Model

Allowing employees to use their own phones for work sounds simple. Deciding how much control IT should have…

NEWShighCyberScoop27 days ago

AI policy circles targeted in China-linked phishing operation

Cybersecurity firm Proofpoint said TA419 impersonated officials and AI industry figures in an effort to gain access to cloud accou…

NEWSThe Register27 days ago

MI5 warns UK academics their research may have helped Chinese spies

Institutions told to trace who is really financing their work or risk falling foul of national security law

NEWSBleeping Computer27 days ago

The Day-One Hole in Zero Trust Architecture

Zero Trust can verify users once they are established, but onboarding creates a gap where organizations must decide who to trust b…

NEWShighInfosecurity Magazine27 days ago

China-Linked Hackers Impersonate AI Experts to Target US Policy Insiders

TA419 posed as AI policymakers and economists to phish US AI policy experts' Microsoft 365 accounts

NEWShighBleeping Computer27 days ago

Kiteworks patches max severity code injection vulnerability

Secure file-sharing software company Kiteworks has released security updates to address 126 vulnerabilities, including a max-sever…

NEWSThe Register27 days ago

CISO thought he had a 'r3@lg00dp@$$w0rd' but forgot to patch

Replacing letters with symbols still doesn’t make it good.

NEWShighInfosecurity Magazine27 days ago

CloudSyncD MacOS Backdoor Hides Behind Fake Zoom Installer

CloudSyncD uses a fake Zoom installer to phish Mac passwords and launch a two-stage backdoor

NEWSSecurityWeek27 days ago

AI Has Changed Attack Speed, Not Security Fundamentals

As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and st…

NEWShighCVE-2026-735708.9 HIGHSecurityWeek27 days ago

Zimbra Vulnerability Exploited in the Wild Prior to Public Disclosure

Under certain conditions, CVE-2026-73570 can be exploited via specially crafted emails without user interaction. The post Zimbra V…

NEWSThe Hacker News27 days ago

How Financial Services Companies Can Modernize Their Software Supply Chain

Every security leader at a bank, insurer, or asset manager has had a version of this conversation: Security wants to eliminate a c…

NEWSSecurityWeek27 days ago

Kevin Mandia’s Armadin Raises $255 Million at $2.5 Billion Valuation

The Series B brings the AI-powered offensive security startup’s total funding to roughly $445 million only seven months after its…

NEWSThe Register27 days ago

England's schools are getting better at mopping up cyber incidents

Two-thirds report immediate recovery, although teachers remain divided over whose job security is

NEWSBleeping Computer27 days ago

Microsoft enables Windows settings backup by default for orgs

Microsoft announced that Windows settings backup and restore is now enabled by default on all Microsoft Entra-joined or Microsoft…

NEWShighSecurityWeek27 days ago

Treasury Blacklists Most-Wanted ATM Malware Developer and His Network

The US government continues its crackdown on Tren de Aragua over its ATM jackpotting scheme. The post Treasury Blacklists Most-Wan…

NEWScriticalSecurityWeek27 days ago

Zammad Zero-Days Exploited in AI-Powered DIVD Hack

The flaws were chained to hijack sessions, achieve remote code execution, and elevate privileges to root. The post Zammad Zero-Day…