Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

2,144 articles

Britain's privacy watchdog quits after 'poor judgment' admission

John Edwards says his position had become 'untenable' following investigation into conduct including inappropriate attempts at hum…

NEWSThe Registerabout 1 month ago

Rights groups brand Home Office's AI age guesser for asylum-seekers as biased and inaccurate

Campaigners say tech is unable to reliably distinguish between kids and adults at the boundary where use is planned

NEWShighInfosecurity Magazineabout 1 month ago

AWS Unveils 'Continuum,' an AI-Powered Vulnerability Management Platform

Working with frontier AI models, this new platform aims to help discovering, prioritizing, validating and remediating code vulnera…

NEWSSecurityWeekabout 1 month ago

FortiBleed: 86,000 Fortinet Device Credentials Compromised

The large-scale credential theft campaign hit roughly half of the internet-accessible Fortinet firewalls and VPNs. The post FortiB…

NEWScriticalBleeping Computerabout 1 month ago

CISA: Splunk Enterprise flaw actively exploited, patch by Sunday

CISA has urged U.S. federal agencies to secure their systems by Sunday against a critical Splunk Enterprise vulnerability that is…

NEWSThe Hacker Newsabout 1 month ago

Forget Data Leakage: Shadow AI's Real Threat Is Access Control

The first wave of enterprise AI concern was straightforward. It was simply employees pasting sensitive data into public AI tools.…

NEWShighInfosecurity Magazineabout 1 month ago

Operation Endgame Disrupts Malware Network Linked to Major Ransomware Gang

SocGholish malware has been removed from 15,000 sites associated with Evil Corp hackers

NEWShighHackreadabout 1 month ago

FIFA World Cup 2026: Hackers Target Football Fans With Fake Tickets Sites

Cybersecurity experts warn that active hacking networks are using fake hotel bookings, cloned websites, and live chat features to…

NEWSSecurityWeekabout 1 month ago

Cybersecurity Firms Impacted by Klue Supply Chain Attack

The hackers exfiltrated data from Salesforce instances of Klue customers, such as Huntress and Recorded Future. The post Cybersecu…

NEWSThe Hacker Newsabout 1 month ago

Salesforce Disables Klue App Integration After OAuth Token Abuse Exposes Customer Data

Salesforce has revealed that it disabled the Klue Battlecards app integration within its platform in response to a security incide…

NEWSInfosecurity Magazineabout 1 month ago

Confidence Lacks in Threat Detection Across Non-Email Channels like Slack and Teams

Half of cybersecurity leaders lack confidence in detecting threats on Slack, Teams and other non-email platforms, despite growing…

NEWSBleeping Computerabout 1 month ago

NY man charged after harassing college student with AI-generated nudes

A New York man faces cyberstalking charges after allegedly sharing AI-generated nude images and fabricated racist messages using f…

NEWSSecurityWeekabout 1 month ago

Cisco to Acquire WideField Security to Boost Splunk’s Agentic SOC

WideField will accelerate Agentic SOC capabilities by expanding the lens on threat investigation to include identity, credentials,…

NEWSBleeping Computerabout 1 month ago

CISA warns Fortinet users to secure devices after FortiBleed leak

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) urged Fortinet customers to secure their devices after nearly 74,…

NEWSSecurityWeekabout 1 month ago

15,000 WordPress Websites Cleaned Up in SocGholish Botnet Takedown

Law enforcement and private partners took down 106 SocGholish C&C servers and domains as part of Operation Endgame. The post 15,00…

NEWSCVE-2025-20701The Hacker Newsabout 1 month ago

Apple Patches Beats Studio Buds Flaw Letting Nearby Attackers Spy via Microphone

Apple has updated its Beats Studio Buds wireless earbuds to patch a high-severity vulnerability that could be exploited by nearby…

NEWShighCVE-2026-202539.8 CRITICALSecurityWeekabout 1 month ago

Splunk Enterprise Vulnerability Exploited in Attacks Days After Disclosure

CISA has given federal agencies only three days to patch CVE-2026-20253, which can be exploited for unauthenticated remote code ex…

NEWSBleeping Computerabout 1 month ago

Gentlemen ransomware uses multiple EDR killers to disable defenses

The Gentlemen ransomware-as-a-service (RaaS) is actively developing and maintaining a suite of endpoint detection and response (ED…

NEWSWired Securityabout 1 month ago

How the Peter Thiel-Linked Dialog Club Secretly Ranks Its Members

Leaked files show the invite-only network grades members by their money and fame, shaping who’s in, who’s out, and who pays.

NEWSCyberScoopabout 1 month ago

Authorities disrupt Evil Corp’s SocGholish botnet

Cybersecurity firms, researchers and officials took down 106 servers and remediated nearly 15,000 sites that were infected with th…

NEWSCyberScoopabout 1 month ago

Congress tees up No FAKES Act, aiming at AI-generated deepfakes

While preventing third parties from profiting off unauthorized deepfakes of artists and performers is a bipartisan concern, some b…

NEWSHackreadabout 1 month ago

MacBook Neo vs Windows Laptops for Cybersecurity Tasks

There is no one-size-fits-all cybersecurity laptop. We’ll examine real-world work scenarios, tool compatibility, and trade-offs th…

NEWShighHackreadabout 1 month ago

Operation Endgame Disrupts SocGholish Malware Infrastructure

International law enforcement dismantled TA569's SocGholish infrastructure, taking down over 100 C2 servers and remediating nearly…

NEWSBleeping Computerabout 1 month ago

Nintendo confirms data stolen in WebMD subsidiary cyberattack

Nintendo of America has confirmed to BleepingComputer that threat actors stole survey data from the third-party TinyPulse service…

NEWSKrebs on Securityabout 1 month ago

‘Popa’ Botnet Linked to Publicly-Traded Israeli Firm

For the past four years, a sprawling Android-based botnet called Popa has forced millions of consumer TV boxes to relay Internet t…

NEWScriticalCVE-2026-425308.1 HIGHThe Hacker Newsabout 1 month ago

F5 Patches Two Critical NGINX Open Source Flaws Enabling Remote Code Execution

F5 has released security updates to address two critical security flaws in NGINX Open Source that could be exploited to achieve co…

NEWSSecurityWeekabout 1 month ago

Majority of Internet-Accessible REDCap Servers Outdated

These servers are regularly targeted by China-linked UNC6508 for initial access and backdoor deployment. The post Majority of Inte…

NEWShighBleeping Computerabout 1 month ago

USB worm spreads crypto-stealing malware via Windows shortcut files

Threat actors targeting cryptocurrency wallets have been distributing clipboard-stealing malware with self-spreading capabilities…

NEWShighSecurity Magazineabout 1 month ago

Chinese Hackers Targeting AI, Cyber and National Defense Research

The campaign was undetected for more than one year.

NEWSHackreadabout 1 month ago

What Businesses Should Know Before Migrating Their CMS

Plan your CMS migration with clean content audits, SEO safeguards, tested data transfer, integrations, staff training, and a safe…