Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,606 articles

Microsoft enables Windows settings backup by default for orgs

Microsoft announced that Windows settings backup and restore is now enabled by default on all Microsoft Entra-joined or Microsoft…

NEWShighSecurityWeek27 days ago

Treasury Blacklists Most-Wanted ATM Malware Developer and His Network

The US government continues its crackdown on Tren de Aragua over its ATM jackpotting scheme. The post Treasury Blacklists Most-Wan…

NEWScriticalSecurityWeek27 days ago

Zammad Zero-Days Exploited in AI-Powered DIVD Hack

The flaws were chained to hijack sessions, achieve remote code execution, and elevate privileges to root. The post Zammad Zero-Day…

NEWSThe Hacker News27 days ago

OpenAI Disrupts Reasoning Extraction Campaign Linked to Moonshot AI Associates

OpenAI on Wednesday said it identified and disrupted a coordinated distillation campaign that was designed to illicitly extract pr…

NEWSThe Register27 days ago

UK privacy watchdog starts over with new board and Manchester HQ

The Information Commission replaces the Information Commissioner, putting statutory powers under collective control

NEWShighCVE-2026-765049.8 CRITICALThe Hacker News27 days ago

CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEV

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a critical authentication bypass flaw impactin…

NEWScriticalHackread27 days ago

Japanese Car-Sharing Site Times Car Data Breach Affects 6.6M Accounts

Times Mobility says a data breach exposed data linked to 6.6 million accounts, including 1.6 million identity records with driver'…

NEWShighBleeping Computer27 days ago

Hackers stole Pentagon personnel records of over 3 million people

The Pentagon's Defense Manpower Data Center (DMDC) is notifying millions of military service members that hackers stole their data…

NEWSSecurityWeek27 days ago

500,000 Active Credentials Left Exposed on GitHub

Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default. The post 500,000 Active Credenti…

NEWSInfosecurity Magazine27 days ago

AI Threats Top Cybersecurity Preparedness Gap, PwC Finds

PwC finds global security leaders are most concerned about attacks on AI systems

NEWSWired Security27 days ago

The Secrets of the US Spyware King

In an exclusive interview with WIRED, Paragon Solutions CEO Andrew Boyd reveals the limits of the company’s promise to keep bad ac…

NEWSThe Register27 days ago

Fewer women than ever in UK's 'old boys' club' cyber industry

Younger workers often overlooked for senior roles due to historical issues and fears they’ll get pregnant, says survey

NEWScriticalSecurityWeek27 days ago

Cisco Patches Exploited Catalyst SD-WAN Zero-Day Vulnerability

The flaw could allow remote, unauthenticated attackers to access vulnerable appliances with administrative privileges. The post Ci…

NEWSSecurityWeek27 days ago

Google Launches Gemini 4 Argon With Guardrail-Free Access for Vetted Defenders

The company says its new frontier AI model found a critical vulnerability in software used by hospitals worldwide. The post Google…

NEWSThe Hacker News27 days ago

Google Rolls Out Gemini 4 Argon to Trusted Cyber Defenders, Plans Guardrail-Free Version

Google on Wednesday announced its latest frontier artificial intelligence (AI) model, Gemini 4 Argon, that it said is being rolled…

NEWSInfosecurity Magazine27 days ago

MI5 Warns Over 100 Academics Helped China's Espionage Plans

MI5 has issued a rare warning to UK academics contributing to the China General Technology Research Institute

NEWSBleeping Computer27 days ago

Metamask discloses security incident affecting its infrastructure

On Thursday, cryptocurrency wallet provider MetaMask has disclosed an ongoing infrastructure security incident affecting some of i…

NEWSCVE-2026-869508.8 HIGHThe Hacker News28 days ago

Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Path

Security researchers have published the first public proof-of-concept for CVE-2026-86950, an Apple CoreGraphics flaw Apple says ma…

NEWScriticalThe Hacker News28 days ago

Bitget Confirms Third-Party Zero-Day Behind $387.5 Million Cryptocurrency Theft

Cryptocurrency exchange Bitget on Wednesday confirmed that attackers who stole $387.5 million last week exploited a zero-day flaw…

NEWSThe Hacker News28 days ago

MetaMask Security Incident Prompts Exit of Affected Ethereum Validators

MetaMask on Thursday said it's responding to what it described as an "ongoing security incident" impacting part of its infrastruct…

NEWShighThe Hacker News28 days ago

Citrix NetScaler Post-Exploitation Payload Creates Superuser, Maps Web Shell to CSS-Like URLs

Threat actors have been observed exploiting a critical pre-authentication command injection vulnerability in Citrix NetScaler ADC…

NEWSSecurityWeek28 days ago

FTC is Investigating OpenAI and Anthropic Over Possible risks to Consumers

An FTC spokesperson confirmed the investigation but declined further comment. The post FTC is Investigating OpenAI and Anthropic O…

NEWSCyberScoop28 days ago

OpenAI reveals ‘novel’ encryption bypass used in distillation attack

The company said individuals associated with Chinese company MoonshotAI were behind parts of the attack, but did not offer hard ev…

NEWSHackread28 days ago

Internet Society Launches Global Online Trust and Safety Hub as Part of Its Safer Internet Initiative

Washignton, DC, USA, 30th September 2026, CyberNewswire

NEWSThe Register28 days ago

Irony alert: OpenAI whines that Chinese model stole its special IP that it stole from everybody else

US model makers can train on web data - but distilling theirs is a 'national security risk'

NEWShighBleeping Computer28 days ago

Russian state hackers use new RedFlick technique to push malware

The Russian state actor Star Blizzard has been using a new malware installation tactic dubbed "RedFlick" to deploy its signature C…

NEWScriticalBleeping Computer28 days ago

DIVD says Zammad zero-days enabled AI-driven network breach

The Dutch Institute for Vulnerability Disclosure (DIVD) says that the breach of its network was possible by exploiting a chain of…

NEWSHackread28 days ago

MALFEX npm Attack Spreads Windows RAT, Steals Discord and Browser Data

CloudSEK uncovered the MALFEX campaign using malicious npm packages to deploy Overlord RAT, steal Discord and browser data,…

NEWSThe Register28 days ago

16-year-old researcher found a Microsoft bug, got admin access to databases with 17.3 trillion rows

It's 2 am. Do you know what your teen is doing?

NEWSBleeping Computer28 days ago

Over 543,000 valid credentials exposed in public GitHub repositories

More than 543,000 credentials exposed in public GitHub repositories were still valid in July despite the platform's security measu…