Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,620 articles

NEWSCVE-2026-352739.8 CRITICALSecurityWeekabout 1 month ago

Google Warns of ShinyHunters’ Fresh Oracle PeopleSoft Campaign

The extortion group has modified its exploit in new attacks targeting the PeopleSoft vulnerability CVE-2026-35273. The post Google…

NEWSSecurityWeekabout 1 month ago

New Mexico Jury Finds Facebook Liable for Deceiving Users About Privacy Protections

A New Mexico jury has found Facebook liable for deceiving users about privacy protections on the platform. The post New Mexico Jur…

NEWSSecurityWeekabout 1 month ago

Nvidia Unveils AI Agent Safety Platform With Hardware-Based Watchdog

The platform combines open source software and a reference system design to keep AI agents within set boundaries. The post Nvidia…

NEWSHackreadabout 1 month ago

Tech Support Scam Kit Uses Google Ads to Deliver Fake Security Alerts

Google Ads deliver a tech support scam kit that shows fake security alerts, makes browsers appear locked and…

NEWSInfosecurity Magazineabout 1 month ago

MCP Is Creating Major Governance Gaps, Researchers Warn

Ox Security found security shortcomings in analysis of over 15,000 MCP servers

NEWShighSecurityWeekabout 1 month ago

Kiteworks Urges Server Shutdown, Finds Advanced Forms Vulnerability

The company says the measure was precautionary and that it has no evidence of Kiteworks or customer systems being compromised. The…

NEWSBleeping Computerabout 1 month ago

Bitget resumes Bitcoin withdrawals after $387.5 million crypto heist

Cryptocurrency exchange Bitget has resumed Bitcoin withdrawals suspended after suspected North Korean hackers breached its systems…

NEWSThe Hacker Newsabout 1 month ago

JADEPUFFER-Linked Attackers Used Compromised Service Principals to Delete Azure Resources

The threat actor known as JADEPUFFER has been observed orchestrating destructive actions within a Microsoft Azure environment usin…

NEWScriticalInfosecurity Magazineabout 1 month ago

Citrix Patches Critical Zero Days Under Active Exploitation

Citrix has confirmed exploitation of two critical zero-day RCE bugs

NEWSBleeping Computerabout 1 month ago

US soldier gets 70 months in prison for extorting 10 tech, telecom firms

A former U.S. Army soldier has been sentenced to 70 months in prison for hacking and extorting at least 10 U.S. technology and tel…

NEWScriticalCVE-2026-887719.8 CRITICALSecurityWeekabout 1 month ago

Citrix Confirms 2 NetScaler Zero-Days After Admins Pulled the Plug

Citrix has released patches for the critical NetScaler vulnerabilities tracked as CVE-2026-88771 and CVE-2026-88772. The post Citr…

NEWScriticalCVE-2026-887719.8 CRITICALThe Hacker Newsabout 1 month ago

CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Sunday added two critical Citrix NetScaler ADC and Gateway fla…

NEWScriticalThe Registerabout 1 month ago

Certainties in life: Death, taxes, and critical Citrix vulns under attack

Sunday NetScaler patch dump fixes trio of critical vulns and five more serious messes

NEWShighBleeping Computerabout 1 month ago

CISA orders feds to patch exploited Citrix flaws by Wednesday

The Cybersecurity and Infrastructure Security Agency (CISA) has ordered U.S. government agencies over the weekend to secure their…

NEWSThe Registerabout 1 month ago

OpenAI pauses some training amid allegations its rogue agents behaved more badly than first thought

Amid allegations that agents may have gone off the rails thousands of times, China set up some kind of agentic incident hotline

NEWSBleeping Computerabout 1 month ago

OpenAI is preparing “o,” an always-on ChatGPT assistant that could handle email

OpenAI is testing a new always-on assistant called "o", and references to the unannounced feature briefly showed up on the company…

NEWSHackreadabout 1 month ago

Best Security Awareness Platforms for Personalized Employee Training

Comparing five leading security awareness platforms, based on the level of personalization they offer.

NEWScriticalBleeping Computerabout 1 month ago

Citrix admins warned to shut down NetScalers over 2 exploited zero-days

Two unpatched Citrix NetScaler zero-day vulnerabilities are reportedly being exploited in attacks, with cybersecurity agencies, se…

NEWSBleeping Computerabout 1 month ago

Cloudflare fixes Containers cross-tenant flaw exposing customer data

Cloudflare has fixed a vulnerability in Containers and Sandboxes that allowed customers with a Workers Paid account to recover res…

NEWSBleeping Computerabout 1 month ago

Anthropic turns Claude into an AI marketplace with 2,000+ plugins and connectors

Anthropic has just announced a new Claude Marketplace, and it brings all AI-related tools into one place, including plugins, conne…

NEWShighCVE-2026-656608.8 HIGHSecurityWeekabout 1 month ago

Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks

CISA added CVE-2026-65660 to its KEV catalog, giving federal agencies a patching deadline of September 28. The post Microsoft Shar…

NEWScriticalThe Hacker Newsabout 1 month ago

Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation

Two new unpatched zero-day vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway appliances that allow remote code executi…

NEWSCVE-2026-352739.8 CRITICALBleeping Computerabout 1 month ago

ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks

The ShinyHunters extortion gang is using a URL-encoding trick to bypass web application firewall rules that mitigate the Oracle Pe…

NEWSHackreadabout 1 month ago

Placeholder Domains Used by 349 AI Agent Skills Found Redirecting to Scams

Manifold Security found placeholder domains cited in 359,000 GitHub files and 349 AI agent skills serving cloaked scam…

NEWSThe Hacker Newsabout 1 month ago

Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials

The Psychedelic Stealer malware distributed via compromised Ukrainian websites using ClickFix-style Cloudflare verification checks…

NEWSSecurityWeekabout 1 month ago

China and US Agree to Establish AI Safety Channel and Continue Trade and Military Talks

The US and China agreed to set up a communication mechanism for artificial intelligence-related incidents. The post China and US A…

NEWSBleeping Computerabout 1 month ago

Claude Opus 5.5 uses 95% fewer em dashes, but its answers are getting longer

Anthropic's Claude Opus 5.5 appears to be changing how it writes, with new analysis showing fewer obvious AI writing patterns, sho…

NEWSBleeping Computerabout 1 month ago

Microsoft pauses KB5002907 update after Office license deactivations

Microsoft has paused the rollout of the KB5002907 Microsoft 365 update after users report that it deactivated, or in some cases co…

NEWSBleeping Computerabout 1 month ago

GitHub Actions re-enabled with Mini Shai-Hulud payload still active

Two third-party GitHub Actions previously compromised in a Mini Shai-Hulud campaign were re-enabled by their maintainer and remain…

NEWSCVE-2026-352739.8 CRITICALHackreadabout 1 month ago

ShinyHunters Bypass WAF Rules to Resume Oracle PeopleSoft Attacks

ShinyHunters exploit CVE-2026-35273 in Oracle PeopleSoft using URL encoding to bypass WAF rules, deploy web shells and spread the…