Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,616 articles

AI Coding Agents Exposed 13,000 Internal Images, Including Billing Records, on GitHub

AI coding agents asked to share screenshots of code changes for review have put internal company images in public GitHub repositor…

NEWShighInfosecurity Magazine28 days ago

Attackers Combine ChatGPT Feature Abuse With ClickFix to Deliver Trojan Malware

Cybersecurity researchers at Huntress identify campaign to deliver potent trojan which targets users searching for ChatGPT via Goo…

NEWShighSecurityWeek28 days ago

Anthropic Flags AI Agent Liability Risks as OpenAI Faces Hacking Lawsuit

Attacks by autonomous AI agents are moving out of the lab and into the courtroom, raising unsettled questions about who is liable…

NEWShighHackread28 days ago

Amazon Prime Phishing Scam Uses Fake Billing Alert to Steal Logins and Card Details

An Amazon Prime phishing campaign is using fake payment alerts to steal account logins, personal data and complete credit or debit…

NEWScriticalBleeping Computer28 days ago

Bitget hacked via zero-day in third-party security products

Cryptocurrency exchange Bitget revealed today that attackers who stole $387.5 million last week breached its systems after exploit…

NEWSSecurityWeek28 days ago

Russian APT Star Blizzard Uses ‘RedFlick’ Infection Chain in Recent Attacks

The state-sponsored group has launched larger-scale phishing campaigns to deploy the CosmicPulse backdoor. The post Russian APT St…

NEWShighThe Hacker News28 days ago

US-Focused CSuite Phishing Steals Microsoft 365 Sessions and Deploys RMM Tools for Remote Access

ANY.RUN researchers traced a US-focused CSuite phishing campaign across 351 sandbox analyses, with 51% of submissions coming from…

NEWSSecurityWeek28 days ago

ShinyHunters Defiant After FBI Calls on Members to Come Forward

In the wake of a suspected leader’s arrest, ShinyHunters says it never intended to publish data stolen from the FBI. The post Shin…

NEWSThe Register28 days ago

More than half of UK businesses lack confidence in basic cyber skills

Government survey puts the figure at 808k, says detecting and removing malware most common weakness

NEWSCyberScoop28 days ago

WaterISAC reckons with range of threats after summer of cyberattacks

Internet-exposed tech, PLCs, outside integrators and inside protections are all factors the water sector’s information sharing and…

NEWSWired Security28 days ago

How Israeli Checkpoints Choke Palestinian Life in the Occupied West Bank

Lost time. Lost jobs. Lost friends. Lost family. Lost lives. Our joint investigation reveals the system that has divided the West…

NEWSHackread28 days ago

8 Top Red Teaming Service Providers for Enterprise Adversary Emulation

Compare 8 top red teaming providers for enterprise adversary emulation, from DeepSeas and Mandiant to CrowdStrike, IBM, SpecterOps…

NEWScriticalCVE-2026-869508.8 HIGHInfosecurity Magazine28 days ago

Apple Patches CoreGraphics Zero Day Exploited in Attacks

Apple has patched CVE-2026-86950, a zero-day bug in the iOS CoreGraphics engine

NEWSThe Register29 days ago

UK rail cops' £320K face-scanning spree nets zero matches

British Transport Police’s six-month facial recognition pilot produced one alert, and it was a false positive

NEWShighThe Hacker News29 days ago

Attackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT

Unknown threat actors have been observed exploiting a newly patched security flaw in Citrix NetScaler ADC and NetScaler Gateway ap…

NEWSThe Hacker News29 days ago

OpenSSL Fixes High-Severity DTLS Flaw That Can Leak Heap Memory Unencrypted

A High-severity OpenSSL flaw can leak heap memory to the other side of a DTLS connection or crash the program, OpenSSL said on Sep…

NEWSThe Register29 days ago

Spectre bug is back, this time to haunt JIT engines

Researchers find a way to recover stale indirect branch prediction entries

NEWShighSecurityWeek29 days ago

High-Severity Vulnerabilities Patched in OpenSSL, WolfSSL

Roughly a dozen vulnerabilities have been patched in each of the open source cryptographic libraries. The post High-Severity Vuln…

NEWShighCVE-2026-887728.1 HIGHThe Hacker News29 days ago

Citrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth Path to Shellcode Execution

Cybersecurity researchers have disclosed technical details of a recently patched critical security flaw in Citrix NetScaler ADC an…

NEWSSecurityWeek29 days ago

Trump Says Top Tech Firms Have Signed Accord to ‘Self-Police’ AI Development

The accord opened the door to future regulation but focused on four voluntary steps for the companies to take. The post Trump Says…

NEWSBleeping Computer29 days ago

Microsoft is rolling out Linux container support to WSL

Microsoft is taking Windows Subsystem for Linux beyond just running Linux distributions, as WSL Containers is now generally availa…

NEWSHackread29 days ago

Dutch ShinyHunters Suspect Investigated for Trying to Arrange 2 Murders

Dutch police say a ShinyHunters suspect is also suspected of trying to arrange two murders abroad, a case separate from the cyberc…

NEWSThe Register29 days ago

Add one more AI worry to the nightmare scenario: self-replicating prompt injections

It's a worm attack, AI-style

NEWScriticalCyberScoop29 days ago

Attackers exploited Citrix NetScaler zero-day for at least three weeks undetected

Mandiant researchers said dozens of organizations have been impacted by attacks attributed to advanced and suspected state-sponsor…

NEWSBleeping Computer29 days ago

Signal adds encypted local backup support to iOS, desktop apps

Signal, the secure messaging app, released version 8.30, completing the rollout of its secure backups feature across all supported…

NEWShighBleeping Computer29 days ago

Custom ChatGPTs push ClickFix attacks to deploy RAT malware

Custom variants of OpenAI's ChatGPT promoted in sponsored Google results are directing unsuspecting users to malicious sites that…

NEWSSecurityWeek29 days ago

OpenAI CEO Announces New AI Agent and Avoids Mention of Security Concerns at Developer Conference

Altman made a slew of product announcements and updates, including the company’s new agents, called Dots. The post OpenAI CEO Anno…

NEWSBleeping Computer29 days ago

FBI tells ShinyHunters members to turn themselves in after recent arrest

The FBI is warning members of the ShinyHunters extortion group to turn themselves in after Dutch police arrested a man the bureau…

NEWShighCyberScoop29 days ago

Russian hackers Star Blizzard expand targeting, change up tactics to reach Ukraine and beyond

Microsoft says the cyberespionage campaign has hit U.S. and U.K. targets, relying on sheer volume and requiring only a single vict…

NEWSThe Register29 days ago

FBI to ShinyHunters: 'We know how to find you'

Federal cops have 'a very particular set of skills'