Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

2,131 articles

Upbound Group Says Data Breach Led to $13 Million in Fraudulent Contract Losses

Hackers recently obtained non-sensitive customer information and other documents from the company. The post Upbound Group Says Dat…

NEWSHackread3 days ago

New TrickBot Variant Spotted Using DNS to Control Infected Windows PCs

Fortinet has found a new TrickBot variant hiding commands in DNS traffic and using scheduled tasks and added modules to maintain a…

NEWSInfosecurity Magazine3 days ago

New Dolphin X Stealer Employs AI Profiling to Prioritize Targets

Dolphin X is a new infostealer that uses AI to sort and rank victims, giving cybercriminals a faster way to identify lucrative tar…

NEWSCyberScoop3 days ago

ANCHOR-CI could fix 20 years of broken government-industry collaboration

The government spent the past two decades learning what private sector partners have always known: cyber resilience requires every…

NEWSThe Hacker News3 days ago

Google Adds Selfie Video Recovery for Users Locked Out of Their Accounts

Google on Thursday announced a new way for users to sign-in to their accounts by letting them take a selfie video. The selfie for…

NEWShighBleeping Computer3 days ago

New msaRAT malware uses Chrome, Edge browsers to route C2 traffic

The Chaos ransomware gang is using a new backdoor dubbed msaRAT that hides command-and-control (C2) communication by routing it th…

NEWSSecurityWeek3 days ago

Assaf Keren Appointed New CISO of Meta

He replaces Guy Rosen, who announced his retirement from the company after 13 years. The post Assaf Keren Appointed New CISO of Me…

NEWSBleeping Computer3 days ago

Microsoft working to fix Exchange Online mailbox quarantine issue

Microsoft is working to resolve an ongoing Exchange Online issue that has been mistakenly quarantining customers' mailboxes since…

NEWScriticalCVE-2026-162329.1 CRITICALSecurityWeek3 days ago

New Check Point Zero-Day Vulnerability Exploited in the Wild

The vulnerability tracked as CVE-2026-16232 has been exploited against customers with certain configurations. The post New Check P…

NEWScriticalBleeping Computer3 days ago

Check Point warns of SmartConsole zero-day exploited in attacks

Israeli cybersecurity firm Check Point Software has addressed an actively exploited zero-day flaw in the company's SmartConsole gr…

NEWSCVE-2026-64600The Hacker News3 days ago

Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs

RefluXFS, a new Linux kernel flaw disclosed on July 22 and tracked as CVE-2026-64600, lets an unprivileged local user overwrite ro…

NEWSInfosecurity Magazine3 days ago

Two-Thirds of Ransomware Victims Say AI Boosted Attack Effectiveness

A new study of organizations which have fallen victim to ransomware suggests the rise of AI-tools being used by hackers is making…

NEWSThe Register3 days ago

Talking smack about a doctor got him access to private medical files

Who needs a working security badge when you know how to talk your way into the records room?

NEWShighCVE-2026-162329.1 CRITICALThe Hacker News3 days ago

Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access

Check Point has released security updates to address multiple vulnerabilities impacting Security Management and Multi-Domain Manag…

NEWShighSecurityWeek3 days ago

US Warns of Iranian Hackers Targeting Siemens, Schneider, and Rockwell ICS Devices

An updated advisory from federal agencies provides information on the techniques used to hack programmable logic controllers. The…

NEWSThe Register3 days ago

OpenAI scored an own goal with HuggingFace attack, showing how open Chinese models are winning

Closed models with guardrails can still cause harm, but may also not be able to fix problems they caused

NEWShighBleeping Computer3 days ago

Upbound says hack caused $13 million in fraudulent Acima leases

The Upbound Group fintech company disclosed that threat actors who stole data from its systems leveraged it to create $13 million…

NEWSCyberScoop3 days ago

Most federal cybersecurity reporting rules are duplicative, study finds

The Government Accountability Office looked at 117 rules across 37 agencies and found 70% had reporting requirements that were ove…

NEWScriticalBleeping Computer3 days ago

South Korea discloses data breach impacting diplomats worldwide

South Korea disclosed that hackers breached the National Diplomatic Academy's online education system for ten months and stole per…

NEWSThe Hacker News3 days ago

GitHub Cuts Public Bug Bounty Payouts, Moves Top Rewards to VIP Tier

Beginning July 27, 2026, GitHub will cut public bug bounty payouts by at least half at every severity level. Critical findings wil…

NEWSCVE-2026-89337.8 HIGHThe Hacker News3 days ago

Ubuntu snap-confine Flaw Could Give Local Users Root on Default Desktop Installs

Cybersecurity researchers have disclosed details of a new local privilege escalation (LPE) vulnerability in snap-confine that an u…

NEWShighCyberScoop3 days ago

Malware is targeting AI tools in software development environments

The worm blends in with thousands of other commands occurring daily in any given environment, yet its intent and origins remain un…

NEWSHackread3 days ago

OpenAI Models Escaped Test Environment and Breached Hugging Face

OpenAI models escaped from a controlled cyber test, exploited zero-day flaws and breached Hugging Face while searching its product…

NEWSBleeping Computer3 days ago

Swiss rail giant Stadler rejects $12.3M ransom demand after cyberattack

Swiss rail vehicle manufacturer Stadler Rail says the Everest ransomware gang demanded about $12.3 million after breaching a data…

NEWSThe Register3 days ago

Linux kernel team publishes 432 CVEs in two days

Sunday-to-Monday onslaught fuels speculation over AI-assisted bug reports

NEWSCyberScoop3 days ago

White House accuses Chinese company of distilling Anthropic’s Fable

While distillation attacks by foreign governments and companies have real national security implications, questions around who ult…

NEWScriticalSecurity Magazine3 days ago

Chick-Fil-A Data Breach Exposes Customer Payment Data

Security leaders discuss the Chick-Fil-A breach.

NEWSHackread3 days ago

How to Make AI Tools Work Reliably for Growing Teams

Learn how growing teams make AI tools reliable with clear workflows, shared rules, secure systems, and repeatable processes that i…

NEWSSecurity Magazine3 days ago

Odyssey-Themed Scams Appear Within Hours of Film’s Release

The Odyssey by Christopher Nolan has been one of the most anticipated films of the summer, and not just by cinephiles — but by sca…

NEWSBleeping Computer3 days ago

How enterprise GenAI can amplify ransomware risk — and how to contain it

Enterprise AI can accelerate ransomware attacks when AI assistants and agents inherit excessive permissions or compromised identit…