Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,450 articles

OpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSL

A flaw in the OpenCode AI coding agent allowed a malicious or hijacked MCP server to run code on a developer's Windows or WSL mach…

NEWScriticalCVE-2026-02579.1 CRITICALHackread3 days ago

Qilin and INC Exploit Palo Alto VPN Flaw in Ransomware Attacks

Qilin and INC ransomware operators exploit a PAN-OS vulnerability (CVE-2026-0257) to gain VPN access, then steal domain credential…

NEWShighInfosecurity Magazine3 days ago

PHP2Shell Exploitation Attempt Detected by Amazon Four Days Before Vulnerability Disclosure

Threat intelligence analysts now observe large-scale evidence of exploitation of the two critical PHP vulnerabilities

NEWShighSecurityWeek3 days ago

Cisco Patches 34 Vulnerabilities Across Multiple Products

Critical-severity security defects could lead to command execution, authentication bypass, and XSS attacks. The post Cisco Patches…

NEWSThe Register3 days ago

IT department and auditors at major pharmacy chain got into a rip-roaring fight about using 'password' on Cisco firewall

Misaligned incentives led to an intractable argument

NEWSCyberScoop3 days ago

Encryption isn’t enough to protect data wherever it goes

Once data is in use, encryption falls short. A tested approach that replaces sensitive values with realistic substitutes could mak…

NEWShighSecurityWeek3 days ago

PHP2Shell Exploitation Started Days Before Patches

Initial attempts were observed on October 17, and mass activity began shortly after patches were released. The post PHP2Shell Expl…

NEWSThe Hacker News3 days ago

LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release

LiteLLM on Wednesday disclosed that threat actors compromised "multiple independent security controls" to push a malicious version…

NEWSBleeping Computer3 days ago

Authorities disrupt nearly 11,000 cybercrime networks in Africa

Law enforcement agencies have disrupted nearly 11,000 cybercriminal networks and arrested more than 1,400 people in Operation Sere…

NEWSInfosecurity Magazine3 days ago

Cloud Security Maturity Lags Despite Widespread Adoption, SANS Warns

Nearly all organizations now run production workloads in the cloud, but a new SANS survey found most have yet to achieve mature cl…

NEWSThe Hacker News3 days ago

Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions

Node.js released security updates on October 21 for its three supported release lines, 22.x, 24.x and 26.x, fixing 10 flaws. The m…

NEWShighSecurityWeek3 days ago

Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU

Nearly 100 vulnerabilities have been assigned a critical severity rating and Fusion Middleware received the most patches. The post…

NEWSSecurityWeek3 days ago

Meta Ordered to Pay New Mexico $25 Billion for Deceiving Users About Privacy on Facebook

The $25 billion award far exceeds a $5 billion fine the Federal Trade Commission levied against Facebook in 2019. The post Meta Or…

NEWSThe Hacker News3 days ago

New QPACK Flaws Can Crash HTTP/3 Servers, Trigger Up to 4,000-Fold Memory Amplification

A remote attacker who has not logged in can crash many HTTP/3 web servers with a single connection, security firm FoxIO disclosed,…

NEWSThe Register3 days ago

Certification authority eMudhra defends its laughably weak private keys

Says it passed audits and made just a minor mystery error

NEWShighThe Hacker News3 days ago

Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed

Amazon's Threat Intelligence team on Wednesday said it detected an attempt to exploit the newly disclosed PHP2Shell vulnerabilitie…

NEWShighThe Hacker News3 days ago

China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain Attack

Microsoft on Wednesday disclosed that a China state-aligned actor dubbed Storm-0940 was behind the recent supply chain compromise…

NEWShighWired Security3 days ago

Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched

Amazon Web Services logged attempts to leverage the internet-melting PHP2Shell bugs four days ago. They're now being “broadly expl…

NEWSThe Register4 days ago

PHP blames supply chain security biz Chainguard for putting huge chunks of the web at risk

'Coordinated vulnerability disclosure, unless there's evidence of active exploits in the wild,' Chainguard CEO tells The Reg

NEWSBleeping Computer4 days ago

Google Chrome adds Gemini-powered scam detection, warns users of ClickFix attacks

Chrome is getting new scam protections that use Gemini to detect deceptive websites and warn users when they copy suspicious comma…

NEWSCyberScoop4 days ago

Microsoft pins ConnectWise supply-chain attack to China-state aligned threat group

Storm-0940 used the agentic AI penetration testing framework to automate attacks and “reach more than 2,250 tenants at 2,900 sign-…

NEWShighBleeping Computer4 days ago

Japan's Onamae Desktop Cloud hacked, up to 27,000 servers affected

Hackers compromised the infrastructure of Onamae Desktop Cloud, a popular provider of VPS services in Japan, and installed malware…

NEWShighBleeping Computer4 days ago

Lazarus hackers use post-quantum cryptography for malware delivery

North Korean hackers are using a post-quantum cryptographic mechanism to secure malicious payload delivery in new operations that…

NEWScriticalThe Hacker News4 days ago

Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases

GitLab released fixes on October 21 for a flaw that lets an attacker run code on a self-managed server without logging in, and it…

NEWShighBleeping Computer4 days ago

CISA: Hackers chain Plex flaws in Plex2Shell attacks to breach servers

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that attackers are actively exploiting four vulnerabil…

NEWSThe Register4 days ago

LiteLLM supply chain attack hoovers up passwords and secrets

Plus a RAT for good measure - get threat hunting now

NEWShighThe Hacker News4 days ago

LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor

The popular LiteLLM Python package has been compromised as part of a software supply chain attack that delivered a credential stea…

NEWSThe Register4 days ago

Signal bug could keep your mic - and camera - on after hangup

Careful what you say after goodbye, or better yet, update your messaging app

NEWSSecurityWeek4 days ago

Google Hardens Chrome Against ClickFix Attacks, Insecure HTTP Connections

Protections have been added against scams and social engineering, including new site warnings and server-side Gemini analysis. The…

NEWShighSecurityWeek4 days ago

PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors

The two RCE bugs can be exploited against WordPress, Drupal, Joomla, and other popular applications. The post PHP2Shell Patches La…