Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,622 articles

GitHub Actions re-enabled with Mini Shai-Hulud payload still active

Two third-party GitHub Actions previously compromised in a Mini Shai-Hulud campaign were re-enabled by their maintainer and remain…

NEWSCVE-2026-352739.8 CRITICALHackreadabout 1 month ago

ShinyHunters Bypass WAF Rules to Resume Oracle PeopleSoft Attacks

ShinyHunters exploit CVE-2026-35273 in Oracle PeopleSoft using URL encoding to bypass WAF rules, deploy web shells and spread the…

NEWSBleeping Computerabout 1 month ago

OpenAI's AI agents accidentally uploaded user-provided images to third-party sites

OpenAI says its AI agents uploaded user-provided images to third-party image-hosting services while carrying out research and eval…

NEWSSecurityWeekabout 1 month ago

New x47.c Windows Botnet Weaponizes xAI Grok, AI API Draining

The Windows botnet relies on AI to maintain persistence, using xAI Grok to choose from predefined actions. The post New x47.c Wind…

NEWSWired Securityabout 1 month ago

Old-School Credit Card Scams Are Far From Dead

In an era of increasingly sophisticated AI-fueled scams, a retro threat may be lurking in your mailbox.

NEWShighCVE-2026-352739.8 CRITICALThe Hacker Newsabout 1 month ago

Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells

Google is warning of renewed mass exploitation of a known security vulnerability in Oracle PeopleSoft as part of a campaign target…

NEWSThe Hacker Newsabout 1 month ago

Zero Trust for AI Agents Starts With Fixing Zero Visibility

The way we talk about AI agents is shifting, and the way we implement them requires an even more fundamental shift. While earlier…

NEWSSecurityWeekabout 1 month ago

OpenAI Says Its Models Engaged With US Government Websites in New Model Misbehavior Disclosure

OpenAI’s CEO said there is an “extensive and ongoing review related to our agents’ use of internet access during training and eval…

NEWSThe Hacker Newsabout 1 month ago

Elementor CSRF Flaw Lets Attackers Take Over Sites After Admin Clicks Crafted Link

Details have emerged about a high-severity security flaw in the Elementor Website Builder WordPress plugin that could be exploited…

NEWScriticalCVE-2026-656608.8 HIGHThe Hacker Newsabout 1 month ago

SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Microsoft SharePoint…

NEWSThe Hacker Newsabout 1 month ago

Kiteworks Urges Customers to Shut Down Systems for 9 Hours Over Possible Cyber Attack

Kiteworks (formerly Accellion) is urging customers to shut down their systems as a precautionary measure for nine hours over the w…

NEWSKrebs on Securityabout 1 month ago

U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions

A U.S. Army soldier who pleaded guilty to hacking into multiple telecommunications companies and stealing mobile call and text met…

NEWScriticalBleeping Computerabout 1 month ago

Kiteworks urges 6-hour server shutdown over potential zero-day attacks

Secure file-sharing software company Kiteworks is urging customers worldwide to temporarily shut down their servers on Saturday fo…

NEWSCyberScoopabout 1 month ago

Army soldier sentenced for spree of attacks on AT&T, Snowflake and other major companies

Cameron Wagenius was involved in some of the most high-profile attacks of 2024 while on active duty. The post Army soldier sentenc…

NEWShighBleeping Computerabout 1 month ago

ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw

The Clop ransomware gang has moved its data leak site to a new Tor address after confirming its previous server was compromised an…

NEWSHackreadabout 1 month ago

5G-Shark Lures Phones to Rogue 5G Cells Without Network Jamming

Researchers have developed 5G-Shark to lure phones onto rogue base stations, collect subscriber IDs, force network downgrades and…

NEWShighThe Registerabout 1 month ago

Fake Google Security Team ad says 'no script reading' in voice phishing - then prints the script

More mockery and memes from the Dark Web Roast

NEWShighThe Registerabout 1 month ago

ShinyHunters tells The Reg: We hacked the FBI to 'protect our business'

Data theft and extortion biz, that is

NEWSBleeping Computerabout 1 month ago

Elementor WordPress flaw lets attackers create admin accounts

A cross-site request forgery (CSRF) vulnerability in the Elementor plugin for WordPress could allow an unauthenticated attacker to…

NEWSCyberScoopabout 1 month ago

Supreme Court permits states to use SAVE database for citizenship checks

Three justices wrote in a dissent that longstanding privacy laws protecting sensitive personal data held by the government should…

NEWSThe Registerabout 1 month ago

Crooks use fake desktop apps to fool HR staff into giving them remote access

Nothing in the attack chain screams malicious software, except none of the impersonated HR and payroll providers actually offers a…

NEWShighCVE-2026-543010.0 CRITICALBleeping Computerabout 1 month ago

CISA warns of Sharepoint, WSO2, Adobe Commerce flaws exploited in attacks

The Cybersecurity and Infrastructure Security Agency (CISA) warns that hackers are exploiting a critical authentication bypass vul…

NEWSThe Registerabout 1 month ago

Bitget blames North Korea for $387.5M crypto wallet raid

Familiar fingerprints point to Kim’s regime … to the surprise of nobody

NEWSBleeping Computerabout 1 month ago

Anthropic rolls out up to $250 in free Claude Code credits, but only for cloud sessions

Anthropic now allows you to run Claude Code via cloud sessions without signing up for the research preview, and it's offering up t…

NEWSSecurityWeekabout 1 month ago

In Other News: Clop Leak Site Takeover, Docker Botnet Hunts AI Keys, Water Utility Exposure

Noteworthy stories that might have slipped under the radar: BragJack attack against browser AI assistants, TDengine flaw threatens…

NEWSThe Registerabout 1 month ago

Which copy of that file is the real one? Dinner, off the record, in Midtown

Joe Fay chairs a Register dinner in New York on the file infrastructure nobody has got around to replacing, with nothing on the re…

NEWSSecurity Magazineabout 1 month ago

New Russian Infostealer Targeting Ukrainian Users

A four-stage attack chain linked to the Lunex Malware-as-a-Service platform has been identified and reverse-engineered.

NEWSBleeping Computerabout 1 month ago

OpenAI is preparing a $500 ChatGPT Pro Max plan with faster Codex

OpenAI appears to be preparing a new ChatGPT Pro Max subscription that could cost $500 per month, but it's unclear when it'll begi…

NEWSBleeping Computerabout 1 month ago

With the Rise of AI Agents, SOC 2 Should Adapt or Risk Irrelevance

AI agents can operate through human credentials and take actions that existing SOC 2 controls may not distinguish from human activ…

NEWShighThe Hacker Newsabout 1 month ago

Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware

Two actions-cool GitHub Actions have been disabled for a second time after the repositories became accessible last week, months af…