Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,614 articles

OpenAI reveals ‘novel’ encryption bypass used in distillation attack

The company said individuals associated with Chinese company MoonshotAI were behind parts of the attack, but did not offer hard ev…

NEWSHackread28 days ago

Internet Society Launches Global Online Trust and Safety Hub as Part of Its Safer Internet Initiative

Washignton, DC, USA, 30th September 2026, CyberNewswire

NEWSThe Register28 days ago

Irony alert: OpenAI whines that Chinese model stole its special IP that it stole from everybody else

US model makers can train on web data - but distilling theirs is a 'national security risk'

NEWShighBleeping Computer28 days ago

Russian state hackers use new RedFlick technique to push malware

The Russian state actor Star Blizzard has been using a new malware installation tactic dubbed "RedFlick" to deploy its signature C…

NEWScriticalBleeping Computer28 days ago

DIVD says Zammad zero-days enabled AI-driven network breach

The Dutch Institute for Vulnerability Disclosure (DIVD) says that the breach of its network was possible by exploiting a chain of…

NEWSHackread28 days ago

MALFEX npm Attack Spreads Windows RAT, Steals Discord and Browser Data

CloudSEK uncovered the MALFEX campaign using malicious npm packages to deploy Overlord RAT, steal Discord and browser data,…

NEWSThe Register28 days ago

16-year-old researcher found a Microsoft bug, got admin access to databases with 17.3 trillion rows

It's 2 am. Do you know what your teen is doing?

NEWSBleeping Computer28 days ago

Over 543,000 valid credentials exposed in public GitHub repositories

More than 543,000 credentials exposed in public GitHub repositories were still valid in July despite the platform's security measu…

NEWShighCVE-2026-735708.9 HIGHThe Hacker News28 days ago

Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets

Threat actors have weaponized a now-patched security flaw in Zimbra Collaboration Suite (ZCS) to deploy web shells and access mail…

NEWShighThe Hacker News28 days ago

Attackers Abuse MSP360 to Deploy ScreenConnect in Dual-RMM Phishing Attacks

Microsoft has warned of phishing campaigns distributing an installer for the MSP360 Remote Monitoring and Management (RMM) softwar…

NEWScriticalBleeping Computer28 days ago

CISA warns of critical pre-auth RCE flaw in MikroTik RouterOS

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of a new critical vulnerability in MikroTik RouterOS t…

NEWSHackread28 days ago

Global Group Ransomware Abuses WinMerge to Deploy Encryptor

Cofense researchers reveal how Global Group uses payment-themed phishing, malicious ISO files and WinMerge to deploy ransomware an…

NEWSSecurity Magazine28 days ago

40M McDonald's Records Exposed Through Customer Data Platform

McDonald’s Indonesia exposed more than 40 million records.

NEWScriticalCVE-2026-765049.8 CRITICALThe Hacker News28 days ago

Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager

Attackers are exploiting a critical flaw in Cisco Catalyst SD-WAN Manager, the system companies use to manage their Cisco SD-WAN n…

NEWSThe Hacker News28 days ago

Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix Lures

Threat actors are abusing ChatGPT Custom GPTs to disguise them as legitimate product offerings and direct unsuspecting victims to…

NEWScriticalCVE-2026-765049.8 CRITICALBleeping Computer28 days ago

Cisco warns of new SD-WAN zero-day exploited in attacks

Cisco released security updates to address a critical zero-day in the Catalyst SD-WAN Manager (tracked as CVE-2026-76504) that att…

NEWShighHackread28 days ago

Legit Security launches agentic remediation for open-source dependency vulnerabilities

Tel Aviv, Israel, 30th September 2026, CyberNewswire

NEWShighSecurityWeek28 days ago

Google: AI Is Changing the Pace and Profile of Vulnerability Discovery

Google’s analysis found that AI-discovered vulnerabilities are more likely to enable remote code execution. The post Google: AI Is…

NEWSBleeping Computer28 days ago

AI's Third Wave: Coworkers Break the Security Model That Worked for Agents

Persistent AI coworkers may operate continuously with standing access, creating identity risks that existing security models were…

NEWShighInfosecurity Magazine28 days ago

AI-Found Vulnerabilities More Likely to Enable RCE, Google Says

AI-discovered vulnerabilities are more likely to enable RCE, as disclosures and exploitation rise

NEWSBleeping Computer28 days ago

Microsoft to block Entra ID script injection attacks starting October

Microsoft has reminded customers that the Entra ID authentication system will get better protection against external script inject…

NEWScriticalSecurityWeek28 days ago

WatchGuard Patches Critical Fireware OS Code Injection Vulnerability

WatchGuard has rolled out patches for 15 code execution, DoS, authorization, and path traversal bugs in Fireware OS. The post Watc…

NEWSInfosecurity Magazine28 days ago

Trump, Six AI Giants Sign 'Super Intelligence' Safety Accord

Trump and six AI firms sign a voluntary accord on internal controls, audits and board oversight

NEWScriticalCVE-2026-887719.8 CRITICALSecurityWeek28 days ago

Government, Finance Orgs Targeted in Weeks-Long NetScaler Zero-Day Attacks

Several security firms have confirmed seeing exploitation of the NetScaler vulnerabilities CVE-2026-88771 and CVE-2026-88772. The…

NEWSBleeping Computer28 days ago

TeamViewer urges users to patch severe flaws “as soon as possible”

Remote access software company TeamViewer warned customers on Tuesday to immediately patch a set of high-severity vulnerabilities…

NEWShighSecurityWeek28 days ago

Chrome, Firefox Updates Patch Over 100 Vulnerabilities

Some of the flaws could allow remote attackers to execute arbitrary code or escape the browser sandbox. The post Chrome, Firefox U…

NEWSInfosecurity Magazine28 days ago

AI Boosts SOC Analyst Capacity but Limits Skill Development

Swimlane finds that AI is reducing repetitive work for SOC teams but some feel their careers may suffer

NEWSThe Hacker News28 days ago

Know Your Enemy: Browser-Based Attack Techniques in 2026

Given that the browser is where business apps are accessed and used, it makes sense that attacks are happening there too. Most bre…

NEWSThe Hacker News28 days ago

AI Coding Agents Exposed 13,000 Internal Images, Including Billing Records, on GitHub

AI coding agents asked to share screenshots of code changes for review have put internal company images in public GitHub repositor…

NEWShighInfosecurity Magazine28 days ago

Attackers Combine ChatGPT Feature Abuse With ClickFix to Deliver Trojan Malware

Cybersecurity researchers at Huntress identify campaign to deliver potent trojan which targets users searching for ChatGPT via Goo…