Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

2,166 articles

NEWScriticalCVE-2026-202457.8 HIGHThe Hacker Newsabout 1 month ago

Cisco Catalyst SD-WAN Zero-Day CVE-2026-20245 Exploited to Gain Root Access

An unknown threat actor exploited a recently disclosed high-severity security flaw impacting Cisco Catalyst SD-WAN as a zero-day a…

NEWScriticalThe Registerabout 1 month ago

Nation-state actors cracked critical Australian infrastructure to ‘cripple it at a time of their choosing’

To defuse another attack, Oz spies called foreign counterparts to tell them an op was a bust

NEWSBleeping Computerabout 1 month ago

Google releases new privacy controls for activity history, personalization

Google is rolling out new privacy controls for Search services and Google Play, giving you more control over saved history and per…

NEWShighCVE-2026-202308.6 HIGHThe Registerabout 1 month ago

The hits keep on coming for Cisco vulnerabilities

CVE-2026-20230 under exploitation, while an earlier SD-WAN 0-day looks even worse than we thought

NEWShighBleeping Computerabout 1 month ago

DraftKings hacker 'Snoopy' sentenced to 18 months in prison

A 21-year-old using the alias "Snoopy" was sentenced to 18 months in prison for his role in hacking DraftKings accounts in the Nov…

NEWScriticalCVE-2026-202457.8 HIGHBleeping Computerabout 1 month ago

Mandiant reveals how Cisco SD-WAN zero-day attacks gained root access

New details have been revealed on how hackers exploited a Cisco Catalyst SD-WAN vulnerability tracked as CVE-2026-20245 in zero-da…

NEWShighBleeping Computerabout 1 month ago

Malicious Edge extension abuses Native Messaging as bridge to malware

A malicious Microsoft Edge extension dubbed 'Edgecution' has been used in a ransomware attack to escape the browser sandbox and de…

NEWShighHackreadabout 1 month ago

Operation Endgame Disrupts StealC, Amadey and SocGholish Malware Networks

Operation Endgame disrupts StealC malware infrastructure, seizing millions of stolen credentials and targeting servers used in glo…

NEWScriticalCyberScoopabout 1 month ago

Malicious hackers exploit Cisco zero-day for highest access level at communications service provider

Mandiant detailed the incident in a blog post Wednesday, but it’s unclear who was behind it or if they managed to get broad visibi…

NEWShighThe Registerabout 1 month ago

Microsoft uses AI to link two malware operations in racketeering suit

200+ C2 servers linked to StealC and Amadey shut down

NEWSSecurityWeekabout 1 month ago

When Information Becomes the Attack Surface – Understanding AI Agent Traps

From hidden content injections to cognitive state poisoning, attackers are turning trusted data sources into traps for autonomous…

NEWScriticalCVE-2025-670389.8 CRITICALThe Hacker Newsabout 1 month ago

CISA Warns Critical Lantronix EDS5000 Flaw Is Being Actively Exploited

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday warned of active exploitation of a critical security f…

NEWSInfosecurity Magazineabout 1 month ago

Researchers Trick AI Browsers Into Leaking Credentials

LayerX tricked AI browsers including ChatGPT Atlas and Comet into bypassing their guardrails

NEWShighThe Hacker Newsabout 1 month ago

Amadey and StealC Malware Network Disrupted, 27M Stolen Credentials Recovered

A coordinated law enforcement operation, in partnership with private sector companies, including Bitdefender, Bitsight, ESET, and…

NEWSInfosecurity Magazineabout 1 month ago

Europol-Led Operation Endgame Takes Down StealC and Amadey Infostealers

Operation Endgame seized around 50 domains and nearly 200 active IP-based servers associated with the infostealers

NEWShighHackreadabout 1 month ago

New GhostShell Hacking Group Targets Ukraine’s Drone Defense Sector

Researchers warn GhostShell is using fake drone documents to target Ukrainian defence teams, stealing passwords and sensitive data…

NEWShighSecurityWeekabout 1 month ago

Microsoft and Allies Smash Shared Infrastructure of Amadey and StealC Malware

Hundreds of C&C servers were disrupted in an operation involving law enforcement and several cybersecurity companies. The post Mic…

NEWShighBleeping Computerabout 1 month ago

CISA warns of max severity Ubiquiti flaws exploited in attacks

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of hackers actively exploiting flaws in Ubiquity UniFi…

NEWShighBleeping Computerabout 1 month ago

Amadey, StealC malware operations disrupted in Operation Endgame action

Microsoft, Europol, and international partners have disrupted infrastructure used by the Amadey and StealC malware operations as p…

NEWSSecurityWeekabout 1 month ago

Exclusive: Meet AIVEX, a New Triage Model Built to Reduce Supply Chain Threat and Risk

The new framework seeks to help security teams identify which software supply chain vulnerabilities pose the greatest operational,…

NEWSBleeping Computerabout 1 month ago

Securing the service desk: Why social engineering attacks keep succeeding

Service desks have become a favored target for attackers seeking password resets, MFA changes, and access to corporate accounts. S…

NEWShighInfosecurity Magazineabout 1 month ago

macOS Backdoor Uses Prompt Injection to Evade AI Triage

SentinelLabs found a North Korea-linked macOS backdoor using prompt injection on AI triage tools

NEWSSecurityWeekabout 1 month ago

macOS Weaknesses Chained to Silently Disable Endpoint Security Agents

A standard non-admin account is sufficient to conduct an attack that exploits legitimate OS behavior rather than software vulnerab…

NEWSHackreadabout 1 month ago

Fake npm Packages Impersonate PostCSS Tool to Steal Chrome Passwords

JFrog warns of malicious npm packages that mimic PostCSS tooling, drop a Windows RAT, and target Chrome-stored passwords through a…

NEWShighSecurityWeekabout 1 month ago

Third DraftKings Hacker Sentenced to 18 Months in Prison

Nathan Austad has been ordered to pay roughly $1.8 million in forfeiture and restitution, and the sentence also includes 3 years o…

NEWSThe Hacker Newsabout 1 month ago

Cordyceps CI/CD Flaws Expose 300+ GitHub Repositories to Supply-Chain Attacks

Cybersecurity researchers have flagged a new class of CI/CD workflow weakness that allows attackers to hijack workflows and compro…

NEWSInfosecurity Magazineabout 1 month ago

KDDI Breach Affects Six Japanese ISPs, Exposes 14.2 Email Credentials

Customers of the affected Japanese email services are “strongly advised” to change their email passwords

NEWScriticalSecurityWeekabout 1 month ago

Critical Ubiquiti Vulnerabilities in Attackers’ Crosshairs

The flaws allow remote, unauthenticated attackers to make system changes, access underlying accounts, and inject commands. The pos…

NEWSCyberScoopabout 1 month ago

In a first, a court takedown goes after two cybercrime tools at once

Microsoft, with law enforcement and industry partners, disrupted more than 200 command and control servers for Amadey and StealC,…

NEWSInfosecurity Magazineabout 1 month ago

Iran-Linked MuddyWater Poses as Ransomware Gang to Mask Cyber Espionage

An NCC Group report warns state-backed hackers are attempting to hide activity by posing as ransomware groups and deploying commer…