Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

2,167 articles

Upwind Security Brings AI Visibility to the Endpoint, Unifying Cloud and Device Security

Upwind’s AI Sensor links endpoint activity with cloud context, helping teams track MCP connections, AI actions, identities and dev…

NEWShighBleeping Computerabout 1 month ago

Bluekit phishing kit adopts browser-in-the-middle for login theft

The Bluekit phishing-as-a-service platform continues to evolve with nearly 70 new hostnames identified over the past week and by a…

NEWSCyberScoopabout 1 month ago

Russia uses Cellebrite to break into human rights activist’s phone, even after cancellation of contract

The phone-cracking firm broke off from its deal with Russia, but Citizen Lab said that didn’t stop authorities from surveilling An…

NEWShighCyberScoopabout 1 month ago

Minnesota man known as ‘Snoopy’ sentenced in DraftKings hack

Nathan Austad, who sold access to compromised accounts through a criminal storefront, is the third and final defendant sentenced i…

NEWShighInfosecurity Magazineabout 1 month ago

Cisco Vulnerability Exploited Months Before Disclosure, Google Warns

A high-severity flaw in Cisco Catalyst SD-WAN Manager disclosed in early June was exploited as early as March

NEWSThe Hacker Newsabout 1 month ago

Chrome Ad Blocker with 10M+ Installs Found with Dormant Script Injection Capability

An analysis of a popular Google Chrome ad block extension for YouTube has uncovered the ability to execute arbitrary JavaScript co…

NEWSBleeping Computerabout 1 month ago

The Four Elevations of Effective Fraud Prevention

Fraudsters don't attack just one transaction. They target accounts, platforms, and entire ecosystems. IPQS explains the four eleva…

NEWSInfosecurity Magazineabout 1 month ago

Twenty Million US IP Connections Used by Proxy Services

Digital Citizens Alliance report claims that millions of Americans may have unwittingly had IP connections used by cybercriminals

NEWSSecurityWeekabout 1 month ago

Runlayer Raises $30 Million in Series A Funding

The startup’s platform functions as a secure control layer, aiming to secure AI tools across enterprises. The post Runlayer Raises…

NEWSThe Hacker Newsabout 1 month ago

ThreatsDay Bulletin: Smart TV Proxyware, 24-Year curl Bug, AI Crime Forums + 13 More Stories

It’s dumb out there again. This week has the usual smell of prod on fire and nobody wanting to admit who left the door open — old…

NEWSBleeping Computerabout 1 month ago

Webinar: Why account takeovers remain one of the hardest threats to stop

Account takeover attacks continue to challenge security teams because attackers often operate through legitimate accounts and trus…

NEWShighSecurityWeekabout 1 month ago

Cal Water Finds No Evidence of OT Activity After Hackers Claimed They Could Disrupt Water Supply

Mandiant has helped the California water utility investigate the cyberattack launched by Iranian hacker group Handala. The post Ca…

NEWShighInfosecurity Magazineabout 1 month ago

Trust in Automated AI Vulnerability Scanning Collapses to 9%, New Study Finds

Cobalt study finds 20-percentage-point drop in number of organizations relying solely on AI automation for testing

NEWShighSecurity Magazineabout 1 month ago

Hackers Exposed Knicks, Madison Square Garden Data

Security leaders discuss the release of Knicks and Madison Square Garden customer and corporate data.

NEWScriticalHackreadabout 1 month ago

Suspected Cyberattack Sends Fake Emergency Alert to Phones Across Brazil

Brazil’s alert system was taken offline after a fake emergency alert reached phones, with officials investigating a suspected cybe…

NEWSInfosecurity Magazineabout 1 month ago

New CISA Guide Helps Agencies Adopt SASE For Zero Trust

New CISA guidance shows federal agencies how to use SASE to move from legacy TIC 2.0 to zero trust

NEWShighCVE-2025-670389.8 CRITICALSecurityWeekabout 1 month ago

Lantronix Serial-to-IP Converter Flaw Exploited in Attacks After OT Threat Warning

The exploited flaw, CVE-2025-67038, is one of the vulnerabilities disclosed in April as part of the BRIDGE:BREAK research project.…

NEWSThe Hacker Newsabout 1 month ago

Surviving the Mythos Era: Richard Bejtlich on the Case for NDR

Despite the abundance of telemetry at analysts’ disposal, many security operations teams struggle to answer a few basic questions…

NEWShighSecurityWeekabout 1 month ago

GitLab Patches Code Execution, Information Disclosure Vulnerabilities

The latest GitLab CE/EE updates address 13 vulnerabilities, including three high-severity defects. The post GitLab Patches Code Ex…

NEWSInfosecurity Magazineabout 1 month ago

macOS Flaw Lets Standard Users Disable EDR and MDM

macos-xpc-flaw-disable-edr-mdm-standard-user-xm-cyber

NEWScriticalInfosecurity Magazineabout 1 month ago

Major Increase in Ransomware Attacks Targeting Europe, Warns New Report

Analysis of ransomware incidents by researchers at Black Kite found that attacks have risen by over 50% in the last year, with sup…

NEWSWired Securityabout 1 month ago

British Police Built a Sprawling Crime-Prediction Machine. Some Results Couldn’t Be Trusted

As UK police embrace the AI revolution, a WIRED investigation reveals the messy inside story of one region’s experiment with predi…

NEWShighSecurityWeekabout 1 month ago

25-Year-Old Vulnerability Patched in Curl

The latest version of the open source data transfer tool resolves 18 medium and low-severity vulnerabilities. The post 25-Year-Old…

NEWShighThe Hacker Newsabout 1 month ago

New Gaslight macOS Malware Uses Prompt Injection to Disrupt AI-Assisted Analysis

A previously undocumented Rust-based macOS implant and information stealer has been found to embed a prompt injection payload desi…

NEWSCyberScoopabout 1 month ago

Why patch directives only go so far

Six weeks of undetected access through a compromised VPN exposes why patching isn't a solution for the organizations already breac…

NEWSSecurityWeekabout 1 month ago

SecurityWeek ICS Cybersecurity Conference Heads to Nashville for Special 25-Year Anniversary Edition

The 2026 Industrial Control Systems (ICS) Cybersecurity Conference takes place October 6-8, 2026, at the W Nashville. The post Sec…

NEWShighThe Hacker Newsabout 1 month ago

New Mistic Backdoor Linked to KongTuke in ClickFix and ModeloRAT Campaigns

A new, stealthy backdoor named Mistic has been deployed as part of suspected financially motivated attacks aimed at multiple organ…

NEWSSecurityWeekabout 1 month ago

NIST Opens Updated IoT Security Guidance to Public Review

The guidance aims to establish product cybersecurity requirements for IoT devices integrated into federal agencies’ networks. The…

NEWShighSecurityWeekabout 1 month ago

Chrome 149 Update Resolves 18 Severe Vulnerabilities

More than half of the bugs are use-after-free defects, which can potentially lead to remote code execution. The post Chrome 149 Up…

NEWSThe Registerabout 1 month ago

UK school’s network left wide open for invasion, student found

And the admin password was right in the Active Directory description field