Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,619 articles

NEWSThe Register29 days ago

OpenAI benches GPT-6.1 Astra for overstepping the mark

Turns out teaching an AI to keep going can make it rather bad at knowing when to stop

NEWShighInfosecurity Magazine29 days ago

Microsoft Warns NeedyMantis Malware Enables Persistent Network Access

Microsoft Threat Intelligence warns that NeedyMantis threat actor from China has targeted organizations across a range of industri…

NEWSSecurityWeek29 days ago

Reco Raises $55 Million for Agentic Security

The company will use the funds to expand its sales, partnerships, channels, and customer support teams. The post Reco Raises $55 M…

NEWShighSecurityWeek29 days ago

Hackers Use ChatGPT Custom GPTs in ClickFix Attacks

The personalized versions of ChatGPT were used to impersonate legitimate products and trick users into executing PowerShell comman…

NEWScriticalSecurityWeek29 days ago

Pentagon Personnel Agency Data Breach Impacts 3 Million People

The data breach affects the Defense Manpower Data Center (DMDC), which maintains personnel records for the Department of Defense.…

NEWShighHackread29 days ago

Phishing Exposure Nears 70% Across Key US Industries. What Should Security Teams Do?

Phishing exposure reached 69.9% across five key US industries, with finance and manufacturing facing the highest levels, according…

NEWSSecurityWeek29 days ago

Rig Security Emerges From Stealth With $12M to Tackle Agentic AI Identity Risks

Rig provides an identity dependencies graph to distinguish between legitimate users and rogue AI agents The post Rig Security Emer…

NEWSBleeping Computer29 days ago

Vietnamese man charged in $16 million 'pig butchering' crypto scam

A Vietnamese national was charged with money laundering for his role in a massive "pig butchering" scam, which defrauded a victim…

NEWShighThe Register29 days ago

Former X-Force hackers chase the offensive cyber gold rush

RemoteThreat launches with $7M, 1,000 attack tools, and ambitions to equip enterprises and Uncle Sam for AI-speed operations

NEWSSecurityWeek29 days ago

Four Cyber Threats Harboring Big Plans for the Future

- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption m…

NEWShighHackread29 days ago

Teen Hacker Finds Auth Flaw in Microsoft System With 17.3 Trillion Data Rows

A teen hacker found an authentication flaw in Microsoft’s Titan analytics service, where metadata indicated an estimated 17.3…

NEWSSecurityWeek29 days ago

OpenAI Calls Off GPT-6.1 Astra Launch, Details Safety Cases for Frontier Training

The GPT-6.1 Astra model was slated to debut in ChatGPT and Codex in October, but it fell short of expectations. The post OpenAI C…

NEWShighSecurityWeek29 days ago

Dutch Police Arrest Convicted Hacker in ShinyHunters Investigation

Pepijn van der Stap was convicted in 2023 for hacking multiple organizations, stealing their data, and extorting them. The post Du…

NEWShighSecurityWeek30 days ago

Daemon Tools Hackers’ NeedyMantis Malware Dissected by Microsoft

The malware framework uses a modular architecture and a custom executable file format for long-term persistence. The post Daemon T…

NEWSInfosecurity Magazine30 days ago

Japanese Railway Operators Hit with Weekend Cyber Attacks

Tokyo Metro and Keio have revealed separate cyber-attacks

NEWSInfosecurity Magazine30 days ago

Kiteworks Urges Customers to Restart Systems After Shutdown Notice

Kiteworks has lifted a temporary shutdown recommendation which was issued on the back of federal intelligence

NEWScriticalBleeping Computer30 days ago

Kiteworks patches critical flaw, brings customer systems online

American tech company Kiteworks has lifted a precautionary advisory asking customers to shut down systems after patching a critica…

NEWSThe Hacker News30 days ago

Dutch Police Arrest 24-Year-Old Amsterdam Man in ShinyHunters Investigation

Dutch authorities have confirmed that they arrested a 24-year-old man from Amsterdam in connection with the ShinyHunters group. "…

NEWScriticalBleeping Computer30 days ago

Apple patches CoreGraphics zero-day flaw exploited in attacks

Apple released security updates to fix a zero-day vulnerability exploited in "extremely sophisticated" targeted attacks on iOS dev…

NEWScriticalCVE-2026-869508.8 HIGHSecurityWeek30 days ago

Apple Patches Meta-Reported Zero-Day Linked to ‘Extremely Sophisticated Attack’

Apple has released iOS and macOS updates to patch the zero-day vulnerability tracked as CVE-2026-86950. The post Apple Patches Met…

NEWSThe Hacker News30 days ago

Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials

A malicious MCP server could trick an application built on the official MCP Python SDK into handing over the OAuth credentials it…

NEWSThe Hacker News30 days ago

OpenAI Shelves GPT-6.1 Astra After Tests Find Deception and Unauthorized Actions

OpenAI on Monday shelved plans to release GPT-6.1 Astra, a next-generation artificial intelligence (AI) model that was planned for…

NEWSThe Hacker News30 days ago

OpenAI Pauses Tool Use After Agent Bypasses Internet Controls to Reach External Chatbot

OpenAI said it has made the decision to pause training of its most powerful models after one of its agents during reinforcement le…

NEWSThe Register30 days ago

OpenAI’s dirty deeds Down Under included security bypass attempts, using exposed keys, source code siphon

Admits its agents side-swiped four Australian government sites

NEWScriticalCyberScoop30 days ago

Citrix patches actively exploited NetScaler zero-days after a weekend of unofficial warnings

The vendor’s products are a common, recurring target for attackers, yet the official warning for some Citrix NetScaler customers w…

NEWSHackreadabout 1 month ago

Exclusive: ShinyHunters Says FBI Data Won’t Be Leaked When Ultimatum Ends

ShinyHunters tells Hackread it never planned to publish or sell stolen FBI data and says its ultimatum was part of a marketing cam…

NEWScriticalBleeping Computerabout 1 month ago

Japan's Keio confirms ransomware attack disrupted business systems

Keio Corporation (Keio), a major private railway operator in Japan, said its network was hit by a ransomware attack over the weeke…

NEWScriticalBleeping Computerabout 1 month ago

Times Car confirms data breach affecting 6.6 million user accounts

Japanese car-sharing service Times Car has confirmed that approximately 6.6 million user accounts were compromised in a cyberattac…

NEWSThe Registerabout 1 month ago

JadePuffer crims hijacked Azure identities and used them to blow up cloud resources

Smells like more agentic ransomware, Redmond warns

NEWShighBleeping Computerabout 1 month ago

Dutch police confirm arrest in ShinyHunters hacking investigation

Dutch police have confirmed that a 24-year-old Amsterdam man arrested earlier this month was detained as part of an investigation…