Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

2,159 articles

Algerian man charged with running two cybercrime marketplaces

Abdellah Belmili allegedly ran two black-market websites selling stolen financial credentials and custom-built phishing kits targe…

NEWSThe Hacker Newsabout 1 month ago

GitHub Updates actions/checkout to Block Common Pwn Request Attack Patterns

GitHub is moving to strengthen software supply chain security by updating "actions/checkout" to block pwn request attacks that exp…

NEWSInfosecurity Magazineabout 1 month ago

OpenAI Expands Daybreak to Help Defenders Patch Flaws

OpenAI expanded Daybreak with a full GPT-5.5-Cyber release to help defenders patch software flaws

NEWShighBleeping Computerabout 1 month ago

The Exploit Doesn't Exist. You Can Still Prove It Works Against You

Attackers can now weaponize newly disclosed vulnerabilities far faster than most organizations can patch them. Picus Security expl…

NEWSInfosecurity Magazineabout 1 month ago

Trump Issues Executive Order to Fast-Track Post-Quantum Migration

All US federal agencies will have to complete their post-quantum cryptography transition by 2031, according to a new Trump Executi…

NEWScriticalBleeping Computerabout 1 month ago

LastPass confirms data breach in Klue supply chain attack

LastPass announced that hackers accessed customer data from its Salesforce environment after stealing the company's OAuth tokens i…

NEWSInfosecurity Magazineabout 1 month ago

GTA 6 Scams Emerge as Pre-Orders Open

Cybercriminals launch fake GTA 6 pre-order sites offering early access for crypto payments

NEWSSecurityWeekabout 1 month ago

Eight-Year-Old Samsung KNOX Flaw Exposed Millions of Galaxy Devices to Kernel Attacks

The high-severity use-after-free vulnerability in Samsung's KNOX security framework affected Android-powered Galaxy devices from t…

NEWSSecurityWeekabout 1 month ago

CISO Conversations: Carl Froggett – Combining CISO and CIO at Deep Instinct

Carl Froggett combines CISO and CIO. He currently occupies both positions at Deep Instinct. Before then, he was CISO at Citi for a…

NEWSBleeping Computerabout 1 month ago

Webinar: Why email security teams are drowning in alerts

Phishing, BEC, and account takeover attacks continue to overwhelm security teams with alerts and investigations. This webinar expl…

NEWSSecurityWeekabout 1 month ago

Algerian Man Extradited to US for Running Cybercrime Marketplaces

26-year-old Abdellah Belmili faces up to 30 years in prison for allegedly operating the marketplaces Market0Day and Spoxy. The pos…

NEWShighHackreadabout 1 month ago

New CryptoBandits Malware Uses USB Drives and Tor to Steal Crypto

Microsoft researchers warn of a new dual-action cryptocurrency clipper (CryptoBandits Malware) spreading through USB devices to al…

NEWSSecurityWeekabout 1 month ago

FFmpeg PixelSmash Flaw Allows RCE on Video Players, Media Servers, NAS Appliances

Attackers can send crafted media files to execute code in any application that uses FFmpeg’s libavcodec library. The post FFmpeg P…

NEWSThe Hacker Newsabout 1 month ago

Agentic AI: The Weapon That No Longer Needs a Warrior

Every weapon begins as an extension of the hand that holds it. The spear lengthened the reach of the arm. The bow sent the point f…

NEWSHackreadabout 1 month ago

The Evolution of iGaming Fraud: What Security Teams Should Expect in 2027

Learn how AI, deepfakes, synthetic identities and fraud-as-a-service may reshape iGaming risk, and what security teams can do to d…

NEWSSecurityWeekabout 1 month ago

OpenAI Refocuses Cybersecurity Efforts on Patching Over Discovery

OpenAI has expanded its Daybreak cybersecurity initiative with a new suite of tools and partnerships. The post OpenAI Refocuses Cy…

NEWSSecurityWeekabout 1 month ago

Russian Initial Access Broker Behind FortiBleed Campaign

Using a custom sniffer, the threat actor has captured over 110 million credentials since at least February 2026. The post Russian…

NEWShighHackreadabout 1 month ago

2 Scattered Spider-Linked Hackers Plead Guilty Over £39M TfL Cyberattack

Two teenagers face sentencing after admitting to a massive Scattered Spider cyberattack that hit Transport for London (TfL) and US…

NEWSInfosecurity Magazineabout 1 month ago

Scattered Spider Teens Convicted of TfL Cyber-Attack

Two young British men have pleaded guilty to hacking Transport for London as part of a Scattered Spider plot

NEWScriticalSecurityWeekabout 1 month ago

Canadian Electricity Provider London Hydro Discloses Data Breach

Hackers stole customers’ names, addresses, email addresses, phone numbers, and account information. The post Canadian Electricity…

NEWSThe Hacker Newsabout 1 month ago

Malicious npm Packages Pose as PostCSS Tools to Deliver Windows RAT

Cybersecurity researchers have discovered a set of malicious npm packages that are designed to deliver a Windows-based remote acce…

NEWSSecurityWeekabout 1 month ago

Trump Signs Executive Order Accelerating Post-Quantum Cryptography Migration

Federal agencies are required to transition high-value assets and high-impact systems to use PQC by the end of 2030 and 2031. The…

NEWSInfosecurity Magazineabout 1 month ago

Five Eyes Group Issues Urgent Call to Tackle Frontier AI Threats

The Five Eyes Alliance has published a rare call to action for organizations facing AI threats

NEWScriticalSecurityWeekabout 1 month ago

Xsolis Data Breach Affects 1.4 Million Individuals

Threat actors gained access to personal and protected health information that Xsolis received from its clients. The post Xsolis Da…

NEWSThe Hacker Newsabout 1 month ago

WhatsApp VBScript Campaign Uses Fake Documents to Install ManageEngine RMM Tool

Direct messages sent via WhatsApp are being used to distribute malicious Visual Basic Script (VBScript) files that lead to the ins…

NEWSThe Registerabout 1 month ago

Five Eyes spooks warn AI means infosec incidents can become ‘major operational and financial crises’

Bosses told to step up and get cybersecurity right

NEWSThe Hacker Newsabout 1 month ago

OpenAI Expands Daybreak With GPT-5.5-Cyber to Help Defenders Patch Security Flaws

OpenAI on Monday said it's releasing an improved version of its GPT‑5.5‑Cyber model to trusted defenders as part of the Daybreak i…

NEWSThe Registerabout 1 month ago

Sniff out stale AI override advice with this open source CLI

Package dependencies can create vulnerabilities that are fiendishly hard to find and stamp out

NEWSThe Registerabout 1 month ago

OpenAI: Yoo-hoo, look over here, we do that security stuff too!

A plethora of pwn-prevention, including a 'Patch The Planet' pledge

NEWShighBleeping Computerabout 1 month ago

WhatsApp phishing attack uses fake business docs to hack PCs

An ongoing malware campaign is targeting WhatsApp users in multiple countries with deceptive messages that push VBScript files, le…