Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

2,171 articles

macOS Flaw Allowed Standard Users to Disable CrowdStrike and Kandji Security Tools

A macOS XPC flaw let regular users disable CrowdStrike and Kandji tools, exposing security gaps that vendors patched after XM Cybe…

NEWSSecurityWeekabout 1 month ago

Nebulock Raises $25 Million for AI-Native Contextual Security

The cybersecurity startup provides threat hunting, proactive detection, and behavioral security analytics. The post Nebulock Raise…

NEWShighThe Hacker Newsabout 1 month ago

CISA Adds Exploited PTC Windchill RCE Flaw to KEV as Web Shell Attacks Continue

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a critical remote code execution vulnerability…

NEWSThe Registerabout 1 month ago

Miasma campaign poisons 20-plus npm packages, hunts for developer secrets

Microsoft says latest attack targets Leo Platform and RStreams packages, harvesting creds and going after more maintainers

NEWSCVE-2026-435038.8 HIGHThe Hacker Newsabout 1 month ago

New DirtyClone Linux Kernel Flaw Lets Local Users Gain Root via Cloned Packets

DirtyClone is a new Linux kernel privilege escalation in the DirtyFrag family. JFrog Security Research published a working exploit…

NEWSThe Hacker Newsabout 1 month ago

Guardian Agents: The Next Layer of Identity Governance

AI agents are moving through enterprise environments, inheriting permissions, traversing systems, and executing decisions at machi…

NEWSSecurityWeekabout 1 month ago

Linux Foundation Unveils New Open Source Security Project Akrites

It will provide the tools and channels to report, patch, and disclose open source software vulnerabilities. The post Linux Foundat…

NEWShighThe Hacker Newsabout 1 month ago

Miasma Malware Targets npm Packages and GitHub Actions in Supply Chain Attack

Cybersecurity researchers have flagged yet another evolution of the supply chain attack linked to the Mini Shai-Hulud, Miasma, and…

NEWScriticalInfosecurity Magazineabout 1 month ago

China-Linked Hackers Strike Asian Critical Infrastructure with TinyRCT Backdoor

A China-linked threat group has been targeting critical infrastructure in Southeast Asia with a new custom backdoor called TinyRCT

NEWShighSecurityWeekabout 1 month ago

$3 Million Reportedly Stolen in Polymarket Hack

The decentralized prediction market said hackers targeted some of its users through a compromise of a third-party vendor. The post…

NEWSHackreadabout 1 month ago

A decade of infrastructure development, one new name: Coinspaid Dev

The team behind Coinspaid Solutions steps into the spotlight with a mission to become the engineering voice of blockchain infrastr…

NEWShighThe Hacker Newsabout 1 month ago

Microsoft Warns of Photo ZIP Phishing Campaign Targeting Hotels with Node.js Implant

An active phishing campaign has been targeting hotel and other hospitality organizations across Europe and Asia since April 2026,…

NEWShighSecurityWeekabout 1 month ago

Russian APT Deploys ‘StockStay’ Backdoor Against Ukrainian Targets

Turla has been using the backdoor against government and military organizations in Ukraine for espionage. The post Russian APT Dep…

NEWSThe Hacker Newsabout 1 month ago

Russia Used Cellebrite on Jailed Activist's iPhone Months After Sales Cutoff

Russian authorities used Cellebrite's UFED forensic tools to break into the iPhone of detained opposition activist Andrey Pivovaro…

NEWShighCVE-2026-125699.8 CRITICALSecurityWeekabout 1 month ago

First-Ever Exploitation of PTC Windchill Vulnerability Discovered in the Wild

CISA has added the remote code execution flaw CVE-2026-12569 to its Known Exploited Vulnerabilities catalog. The post First-Ever E…

NEWScriticalInfosecurity Magazineabout 1 month ago

CMC Releases Analysis and Guidance for Education Sector After Canvas Data Breach

The UK Cyber Monitoring Centre reviews the Canvas breach affecting 160 UK universities, highlighting data theft risks and financia…

NEWSSecurityWeekabout 1 month ago

New Enterprise-Ready MCP Specification Brings New Security Challenges

A major overhaul of the Model Context Protocol shifts critical security responsibilities from the protocol itself to developers an…

NEWShighThe Hacker Newsabout 1 month ago

Google Details Turla's New STOCKSTAY Backdoor Used in Ukraine Espionage Attacks

The Russian state-sponsored threat actor known as Turla has been attributed to a previously undocumented .NET backdoor called STOC…

NEWSThe Registerabout 1 month ago

Security boss thought MFA would be too much security

One rule for the workers, another for execs

NEWSSecurityWeekabout 1 month ago

Philip Martin Joins Uber as Chief Information Security Officer

Martin brings experience from Coinbase, Palantir, Amazon, and the U.S. Army to lead Uber's cybersecurity and enterprise security o…

NEWSThe Registerabout 1 month ago

Chinese cybersecurity company claims it’s built a better-than-Mythos bug finder

Qihoo 360, which the US has banned, says it’s needed as a deterrent to weaponized Anthropic models

NEWSBleeping Computerabout 1 month ago

Anthropic is testing desktop-like Claude Cowork for mobile

Anthropic appears to be testing Claude Cowork support on mobile, allowing you to manage long-running Claude tasks from your phone.…

NEWSBleeping Computerabout 1 month ago

Poland busts SIM-swapping gang tied to millions in crypto theft

Authorities in Poland have arrested four members of an organized cybercrime group accused of breaching telecommunications partners…

NEWShighThe Registerabout 1 month ago

Self-destructing Mistic backdoor linked to access broker selling corporate footholds to ransomware gangs

Spotted in intrusions targeting insurance, education, IT, and professional services sectors

NEWSThe Registerabout 1 month ago

Ex-Huntress analyst claims company insider fed info to a ransomware crim. Social media drama ensues

Former employee accuses company of prioritizing pending IPO over client security

NEWScriticalCyberScoopabout 1 month ago

FCC passes new cybersecurity rules for emergency systems, undersea cables

The new rules would overhaul national emergency systems to protect against hijacking and update federal security review rules for…

NEWShighBleeping Computerabout 1 month ago

Order-tracking app Shop abused to push callback phishing attacks

Threat actors are increasingly abusing Shop, the order-tracking app from Shopify, by adding fake purchase receipts in users' order…

NEWSBleeping Computerabout 1 month ago

Microsoft quietly extends free Windows 10 ESU support to October 2027

Microsoft has quietly extended its free Windows 10 Extended Security Updates (ESU) program for consumers by an additional year, al…

NEWShighHackreadabout 1 month ago

Fake GTA 6 Early Access Websites Target Gamers with Malware and Crypto Scams

GTA 6 scams are luring fans with fake early access, crypto payments and malware downloads. Learn why PC and Android gamers face th…

NEWShighBleeping Computerabout 1 month ago

New macOS malware embeds fake errors to confuse AI analysis tools

A newly discovered macOS malware dubbed "Gaslight" is designed to confuse AI-assisted malware analysis tools by hiding prompt inje…