Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

2,164 articles

New ‘Mistic’ RAT Opens Door to Several Ransomware Families

Mistic is used by Woodgnat, an initial access broker working with Qilin, Interlock, Rhysida, Akira, 8Base, and Black Basta. The po…

NEWSThe Hacker Newsabout 1 month ago

Dawn of the Apex Agentic Adversary

We are standing at the end of an era we never thought to mourn: the era of human-speed threats. For years, cybersecurity moved to…

NEWShighSecurityWeekabout 1 month ago

Exploitable CI/CD Vulnerabilities Expose Millions of Repositories to Hijacking

The security defects allow unauthenticated users to take control of the open source software supply chain. The post Exploitable CI…

NEWShighBleeping Computerabout 1 month ago

Stealthy Mistic backdoor linked to ransomware access broker KongTuke

A new backdoor dubbed Mistic has been observed in financially motivated attacks targeting organizations in the insurance, educatio…

NEWSSecurityWeekabout 1 month ago

BeyondTrust, LastPass Impacted by Klue-Salesforce Incident

Over a dozen Klue customers have confirmed that hackers stole data from their Salesforce instances. The post BeyondTrust, LastPass…

NEWSInfosecurity Magazineabout 1 month ago

AI Is Making Attacks Cheaper, Faster and More Covert, Says ReliaQuest

New ReliaQuest study reveals the six ways AI is practically being used in attacks today

NEWSCyberScoopabout 1 month ago

Open-source security is posing challenges governments can’t easily solve

A diffuse landscape, fruitful targets, companies not stepping up, AI’s influence and flagging U.S. government efforts all figure i…

NEWSThe Hacker Newsabout 1 month ago

DoJ Seizes Huione Cloud Account Tied to Cyber Scam Money Laundering

The U.S. Department of Justice (DoJ) on Tuesday announced the seizure of a cloud computing account put to use by subsidiaries of C…

NEWSInfosecurity Magazineabout 1 month ago

UK Museums Face Cybersecurity Risks, MPs Warn

Public Accounts Committee (PAC) warns that museums and galleries aren’t getting enough government support on cyber

NEWSSecurityWeekabout 1 month ago

Webinar Today: Modern Exposure Validation in the AI Era

The exploit timeline collapsed. Make sure your validation didn't. The post Webinar Today: Modern Exposure Validation in the AI Era…

NEWSHackreadabout 1 month ago

Best Crypto Payment Solutions for E-Commerce Businesses

Compare crypto payment gateways for ecommerce, including checkout tools, stablecoin payments, fiat settlement, plugins, APIs and b…

NEWShighCVE-2026-202308.6 HIGHThe Hacker Newsabout 1 month ago

Cisco Unified CM Flaw Exploited After PoC Reveals File-Write Path to Root

Threat actors have begun to exploit a recently disclosed critical security flaw impacting Cisco Unified Communications Manager (Un…

NEWShighCVE-2026-202308.6 HIGHSecurityWeekabout 1 month ago

Hackers Exploiting Cisco Unified CM Vulnerability

Cisco noted that a PoC had been available for CVE-2026-20230 when it announced patches in early June. The post Hackers Exploiting…

NEWSThe Registerabout 1 month ago

You have got to be KDDI-ng – Japanese telco exposes 14.2 million managed email credentials

Five ISPs and plenty of users await their fate

NEWShighSecurityWeekabout 1 month ago

Anthropic’s Mythos Model Found Vulnerabilities in Classified US Government Systems, Official Says

Come vulnerabilities were found within hours, but that does not mean the model was able to exploit them within that time, the offi…

NEWShighCVE-2026-202308.6 HIGHBleeping Computerabout 1 month ago

Cisco Unified CM flaw CVE-2026-20230 now exploited in attacks

A high-severity SSRF vulnerability, tracked as CVE-2026-20230, in Cisco Unified Communications Manager Server is now being exploit…

NEWShighBleeping Computerabout 1 month ago

Tata Electronics confirms cyberattack as hackers leak data

Tata Electronics has confirmed in a statement to BleepingComputer that it was the target of a cyberattack that impacted parts of i…

NEWSBleeping Computerabout 1 month ago

Windows 11 KB5095093 update rolls out new Point-in-Time restore feature

Microsoft has released the KB5095093 preview cumulative update for Windows 11 24H2 and 25H2, which fixes numerous bugs and begin…

NEWScriticalBleeping Computerabout 1 month ago

Healthtech firm Xolis suffers data breach impacting 1.4 million people

Healthcare technology company Xsolis says that sensitive data belonging to nearly 1.4 million individuals was compromised in a phi…

NEWSHackreadabout 1 month ago

Internet Society Foundation Opens Global Call for Common Good Cyber Fund to Strengthen Cybersecurity

DC, United States, 23rd June 2026, CyberNewswire

NEWShighWired Securityabout 1 month ago

Dialog Claims It Was Hacked. A Misconfigured Website Left Its Members Exposed

The private events group, cofounded by Peter Thiel, says a “criminal” hacker is behind a breach that exposed members’ personal det…

NEWSCyberScoopabout 1 month ago

Justice Department seizes infrastructure used by cyber scam and criminal marketplace

lso Tuesday, the Treasury Department took action against the same Cambodian company, Huione Group, and affiliates. The post Justi…

NEWSBleeping Computerabout 1 month ago

New macOS ClickFix attack silently mounts DMGs to push infostealer

A new macOS ClickFix campaign is using Terminal commands to silently download, mount, and launch info-stealing malware from malici…

NEWScriticalHackreadabout 1 month ago

LastPass Confirms Customer Data Breach After Klue OAuth Token Theft

LastPass has confirmed it was affected by the Klue supply chain incident, saying an unauthorised actor used stolen…

NEWSThe Hacker Newsabout 1 month ago

FortiBleed Targeted FortiGate Firewalls in 110 Million-Credential Harvesting Operation

A Russian-speaking initial access broker (IAB) driven by financial gain is assessed to be behind a large-scale credential-harvesti…

NEWSThe Registerabout 1 month ago

Mythos discovers 'Squidbleed,' a memory leak that's gone undetected since Clinton era

Plus more blasts from the past: NetWare, FTP, and HTTP

NEWSSecurityWeekabout 1 month ago

Dragos Unveils AI for OT Security

Named EmberAI, the new capability is built on Dragos’ massive operational technology cybersecurity dataset. The post Dragos Unveil…

NEWSHackreadabout 1 month ago

‘Cordyceps’ CI/CD Flaw Exposes Microsoft, Google, Apache Repos to Pipeline Hijacking

Novee Security reveals Cordyceps, a CI/CD vulnerability in GitHub Actions workflows that let anonymous users poison builds and exp…

NEWShighKrebs on Securityabout 1 month ago

Scattered Spider Hackers Plead Guilty on Day 1 of Trial

Two men pleaded guilty in the United Kingdom this week to criminal charges stemming from an August 2024 cyberattack that crippled…

NEWSHackreadabout 1 month ago

The Rise of AI-Powered Academic Fraud: Beyond Traditional Plagiarism

AI has changed academic fraud. It now creates original-looking work, fake sources, and hidden misconduct that schools must learn t…