Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

3,747 articles

Modified ScreenConnect Clients Used in Worm-Like Campaign

The attacks rely on backdoored ScreenConnect instances to transfer and execute payloads to newly connected clients. The post Modif…

NEWSThe Hacker News2 days ago

Your Cloud Security Checklist Doesn't Work the Way You Think It Does

If managing security across multiple cloud providers wasn't hard enough, each one fails in a different way. For the 2026 Cloud Sec…

NEWSThe Hacker News2 days ago

Rogue ScreenConnect Clients Spread Four-Stage VBScript Chain to Newly Connected Hosts

Cybersecurity researchers have disclosed details of worm-like activity that abuses ConnectWise ScreenConnect to distribute a malic…

NEWShighThe Hacker News2 days ago

Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE — Public Exploit Released

A TantoSec proof-of-concept turns an AES-CBC "padding oracle" in Telerik UI for ASP.NET AJAX into unauthenticated remote code exec…

NEWSThe Register2 days ago

Welsh environment regulator's FoI blunder exposes diversity data of 2,000 staff

NRW says it has found no evidence data was misused after spreadsheet published in error five years ago

NEWSInfosecurity Magazine2 days ago

North Korea’s Lazarus Operates Through Six Distinct Cyber Clusters

Sekoia and Kudelski Security have observed that North Korea's Lazarus umbrella is split into six distinct clusters, focused on esp…

NEWSBleeping Computer2 days ago

ChatGPT can now connect to your personal apps to mimic writing style

OpenAI appears to be testing a new "Writing Style" feature for ChatGPT that can learn how you write by looking at examples from yo…

NEWShighBleeping Computer2 days ago

Hackers exploit new MikroTik RouterOS flaws to hijack routers

Hackers are exploiting a chain of two recently disclosed vulnerabilities in MikroTik routers to take control of devices with SSH s…

NEWSBleeping Computer2 days ago

ConnectWise warns of new ScreenConnect flaw without patch

ConnectWise has shared temporary mitigation measures for a new ScreenConnect Remote Access vulnerability that it plans to patch la…

NEWSThe Register2 days ago

UK food supply chain at risk from hostile attacks

Defending against cyber foes is among factors hitting food price inflation, report finds

NEWSThe Register2 days ago

Peers ask why UK cyber bill leaves execs off the personal liability hook

Ministers say £17M corporate fines and forthcoming board-level governance rules provide sufficient accountability

NEWSInfosecurity Magazine2 days ago

Multiple Class Action Lawsuits Filed Against IDScan

Several victims of a recent breach of driver’s license information have sued the company they believe responsible

NEWSSecurity Magazine2 days ago

AI Tools Are Provided Full Enterprise Access

A recent report by Ospin analyzed enterprise production environments in 2026.

NEWSSecurity Magazine2 days ago

Organizations Pledge Cooperation in Open Secure AI Alliance

A number of organizations announced the establishment of an open secure AI alliance.

NEWSThe Hacker News2 days ago

N-able Issues Fourth N-central Hotfix in Five Weeks for Unauthenticated RCE Flaw

Every on-premises N-central build below 2026.3.1.14 — including servers updated to Hotfix 3 a day earlier — needs Hotfix 4. N-able…

NEWSThe Register2 days ago

OpenAI's rebel agent swarm died young, but its chilling logs live on

'The Collective' learned to communicate, organize, cheat, and apparently sacrifice its own

NEWScriticalInfosecurity Magazine2 days ago

Researcher Publishes CrowdStrike Privilege Escalation Zero Day

A security researcher has posted a zero-day exploit in CrowdStrike which could allow hackers to escalate privileges

NEWShighThe Hacker News2 days ago

JSCeal Malware Can Bypass Google Authentication Using Stolen Session Cookies

Cybersecurity researchers have unpacked JSCeal, a sophisticated compiled V8 JavaScript (JSC) malware with credential harvesting, s…

NEWSBleeping Computer2 days ago

N-able patches max severity N-central flaw amid ongoing attacks

N-able has released an emergency hotfix for a maximum-severity remote code execution (RCE) flaw affecting its N-central remote mon…

NEWSBleeping Computer2 days ago

ChatGPT Astra is now rolling out to $20 Plus subscription

OpenAI is now rolling out ChatGPT Astra, its most powerful model to date, to those with a $20 Plus subscription, but there's no wo…

NEWShighBleeping Computer3 days ago

Attackers conceal phishing lures using invisible Unicode characters

Threat actors have adopted the ASCII smuggling technique in phishing campaigns, using invisible Unicode characters to evade email…

NEWSThe Hacker News3 days ago

Attackers Hijack MikroTik Routers Through Internet-Exposed SSH Without Authentication

Attackers are exploiting MikroTik routers with their Secure Shell (SSH) remote-access service, which is reachable from the interne…

NEWSThe Hacker News3 days ago

Four REVSTEALER-Linked Modules Disable Windows Update and Defender to Run a Crypto Miner

Elastic Security Labs has documented four previously unreported programs associated with REVSTEALER, an emerging Windows informati…

NEWScriticalThe Hacker News4 days ago

Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores

Attackers are exploiting a new unpatched vulnerability in Magento Open Source and Adobe Commerce that lets them run malicious code…

NEWSThe Hacker News4 days ago

Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials

JetBrains is urging Cadence users to revoke and rotate all credentials following a security incident last month in which unidentif…

NEWScriticalCVE-2026-59346The Hacker News4 days ago

Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code

Broadcom has released security updates for two security flaws impacting VMware Workstation and Fusion, including one critical bug…

NEWShighBleeping Computer4 days ago

Over 5,400 hacked sites serve ClickFix payloads stored on the blockchain

A massive cybercriminal operation is leveraging thousands of compromised small-business websites to deliver ClickFix payloads stor…

NEWSThe Hacker News4 days ago

Trezor Says ShipMonk Breach Exposed 67,000 U.S. Customers' Data It Said Was Deleted

Hardware wallet manufacturer Trezor on Friday disclosed that another 67,000 customers from the U.S. have been impacted in a breach…

NEWShighCVE-2026-324759.0 CRITICALSecurityWeek4 days ago

Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites

Tracked as CVE-2026-32475 (CVSS score of 9.8), the bug described as an arbitrary file upload issue in the function that handles fo…

NEWSBleeping Computer4 days ago

OpenAI admits it didn't disclose rogue AI wiki hijacking incident

OpenAI admits it did not disclose an incident where autonomous AI agents hijacked a German wiki, created 18,000 posts, shared answ…