Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,618 articles

Russian hackers Star Blizzard expand targeting, change up tactics to reach Ukraine and beyond

Microsoft says the cyberespionage campaign has hit U.S. and U.K. targets, relying on sheer volume and requiring only a single vict…

NEWSThe Register29 days ago

FBI to ShinyHunters: 'We know how to find you'

Federal cops have 'a very particular set of skills'

NEWScriticalCyberScoop29 days ago

US is looking to weave AI into critical infrastructure for cybersecurity, national cyber director says

Sean Cairncross said CEOs need to be cognizant of how it’s being used, however. The post US is looking to weave AI into critical i…

NEWShighWired Security29 days ago

OpenAI Gets Sued Over the Hugging Face Hack

A nonprofit in California is doing what Hugging Face has not, and attempting to hold OpenAI legally accountable for the actions of…

NEWScriticalCVE-2026-887728.1 HIGHBleeping Computer29 days ago

Hackers exploit Citrix NetScaler zero-day to deploy web shells

Cybersecurity firms say attackers exploited the Citrix NetScaler CVE-2026-88772 zero-day to deploy custom web shells and tunneling…

NEWSBleeping Computer29 days ago

Former US Air Force members sent to prison over BEC attacks

Two former members of the United States Air Force were sentenced to a combined 189 months in federal prison for their roles in a m…

NEWSSecurity Magazine29 days ago

Cyber Skills Diminish Quicker than Organizations Can Build Readiness

Research finds organizations are experiencing lapses in in onboarding talent, cultivating skills, and maintaining readiness.

NEWSHackread29 days ago

When to Use Stablecoins for Cross-Border Business Payments

Learn when stablecoins work for cross-border payments and how businesses can compare settlement speed, FX costs, fees and liquidit…

NEWScriticalThe Register29 days ago

Custom malware used in Citrix 0-day attacks targeting govt, banks, professional services

Two questions remain: who is abusing the CVEs? And why did Citrix take so long to disclose?

NEWSThe Hacker News29 days ago

French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Seven Weeks

An attacker used stolen passwords of staff at France's tax administration to take tax data on hundreds of thousands of taxpayers a…

NEWSBleeping Computer29 days ago

Windows 11 2026 Update released, here's everything you need to know

Microsoft has started rolling out Windows 11 26H2 to everyone, and while it's this year's big annual feature update, you probably…

NEWSSecurityWeek29 days ago

DARPA Selects Xint to Use AI in Securing Military Messaging Apps

The AIxCC competition winner will analyze messaging app code and compiled binaries for vulnerabilities, with technology that could…

NEWShighThe Hacker News29 days ago

Russia's Star Blizzard Targets 100+ Organizations With Fake Event Invites to Deliver Backdoor

Russian state hackers known as Star Blizzard have been using fake event invitations to trick people into installing a backdoor on…

NEWSBleeping Computer29 days ago

New Spectre v2 attack variant leaks Linux root password hash in minutes

A new Branch Target Reuse (BTR) attack has been devised that can recover root password hashes on Intel computers running Linux in…

NEWSThe Hacker News29 days ago

New Spectre-v2 BTR Attack Leaks Linux Memory Despite Existing Defenses

A group of academics from VUSec and Scuola Superiore Sant'Anna have disclosed details of a new Spectre CPU vulnerability variant t…

NEWSSecurityWeek29 days ago

New Spectre v2 Variant Exposes Intel, AMD, Arm CPUs to Data Leaks

Branch Target Reuse (BTR) is a new Spectre v2 attack targeting JIT compilers in web browsers, language runtimes, and the operating…

NEWShighHackread29 days ago

Hackers Use Hijacked University Emails to Scam Students, Pose as FBI Agent

Students, job seekers and university staff, watch out for fake job offers sent from legitimate university email accounts.

NEWSThe Register29 days ago

AI models keep posting screenshots showing sensitive data from inside tech companies

Glow Security finds more than 13,000 publicly accessible images that expose corporate development work

NEWSSecurity Magazine29 days ago

17.3 Trillion Microsoft Records Exposed

Approximately 17.3 trillion stored rows within several Microsoft datasets were found to be accessible via an internal analytics se…

NEWSBleeping Computer29 days ago

Automated AI agent used to breach cybersecurity nonprofit DIVD

The Dutch Institute for Vulnerability Disclosure (DIVD) suffered an AI-driven cyberattack that the organization described as "loud…

NEWSCyberScoop29 days ago

Alleged ShinyHunters leader arrested in the Netherlands

The arrest of a 24-year-old man in Amsterdam, which occurred a week before ShinyHunters hacked the FBI, marks a major turning poin…

NEWSSecurityWeek29 days ago

RemoteThreat Launches With $7 Million for Offensive Operations Platform

The company emerged from stealth mode with pre-seed funding from Osage University Partners and DataTribe. The post RemoteThreat La…

NEWScriticalThe Register29 days ago

Apple patches CoreGraphics zero-day already exploited in targeted attacks

Meta-spotted flaw could hand attackers arbitrary code execution via a maliciously crafted file

NEWShighInfosecurity Magazine29 days ago

RatHat's Evolving C2 Panel Points to Malware-as-a-Service Model

RatHat's C2 panel now builds malware and ranks victims with AI across nearly 100 deployments

NEWScriticalThe Hacker News29 days ago

Kiteworks Fixes Critical Flaw Found During Nine-Hour Precautionary Shutdown

Kiteworks on Monday said it worked with federal intelligence authorities over the weekend as it identified and addressed a critica…

NEWSCyberScoop29 days ago

Kiteworks lifts shutdown advisory after ‘credible threat intelligence’ from federal authorities

The company said it found and patched a previously unknown critical vulnerability in one product during the weekend shutdown, and…

NEWSBleeping Computer29 days ago

Catch threats before they escalate with real-time Identity Telemetry

Identity governance helps control who should have access, but periodic reviews alone may not reveal attacks as they happen. tenfol…

NEWSInfosecurity Magazine29 days ago

Amazon Bedrock AgentCore Flaws Could Expose AWS Credentials

AWS AgentCore SDK flaws could let attackers run commands in AI sandboxes and reach AWS credentials

NEWSThe Hacker News29 days ago

101 Malicious npm Packages Add Developers' WhatsApp Accounts to Groups Without Consent

Cybersecurity researchers have identified a cluster of 101 npm packages that are used to trap developers into a WhatsApp group sub…

NEWSThe Register29 days ago

OpenAI benches GPT-6.1 Astra for overstepping the mark

Turns out teaching an AI to keep going can make it rather bad at knowing when to stop