Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,622 articles

North Korea Suspected in $351 Million Bitget Crypto Heist

Bitget’s security systems caught the unauthorized transfers on September 24, and some wallet addresses linked to the attacker have…

NEWShighInfosecurity Magazineabout 1 month ago

Zero-Click Vulnerabilities in Salesforce Agentforce Expose Wider AI Agent Risk

The ‘SalesBleed’ set of weaknesses in Salesforce’s Agentforce agents exposed CRM data to attackers via prompt injection and DNS ex…

NEWShighThe Hacker Newsabout 1 month ago

PamStealer macOS Malware Adds Live C2 Payload Decryption and Multi-Layer Persistence

Cybersecurity researchers have flagged a new version of PamStealer that ensures that the main payload can only be recovered using…

NEWShighHackreadabout 1 month ago

Only 26% of Detected CISA Known Exploited Vulnerabilities Were Fully Remediated

A recent Verizon study found that vulnerability exploitation became the most common initial access vector, appearing in 31%…

NEWSBleeping Computerabout 1 month ago

Microsoft plans to deprecate Windows Deployment Services

Microsoft announced it will deprecate the Windows Deployment Services (WDS) server role starting with the next Windows Server rele…

NEWSSecurityWeekabout 1 month ago

CISA Election Security Plan Flags Patching Barriers, Voter Database Attacks

Homeland Security Secretary Markwayne Mullin tasked CISA with developing the plan in July. The post CISA Election Security Plan F…

NEWSInfosecurity Magazineabout 1 month ago

CISA Unveils Election Security Plan Ahead of 2026 Midterms

The CISA plan provides guidance and resources for election officials to secure systems such as voter registration databases and vo…

NEWSSecurityWeekabout 1 month ago

Kosovar Owner of Rydox Marketplace Pleads Guilty in US Court

Ardit Kutleshi created and operated Rydox, which allowed miscreants to trade PII and cybercrime tools and services. The post Kosov…

NEWSHackreadabout 1 month ago

Salmon Introduces Execution Verification Infrastructure (EVI) for Securing AI Agents and Autonomous Systems

San Francisco, USA, 25th September 2026, CyberNewswire

NEWSBleeping Computerabout 1 month ago

Rydox marketplace admin pleads guilty, faces 22 years in prison

A Kosovar national has pleaded guilty to operating Rydox, a large illegal online marketplace that sold stolen personal information…

NEWSThe Hacker Newsabout 1 month ago

The SOC Doesn't Need to Start Over with Every Alert

Security leaders keep debating whether AI will produce an entirely new class of cyberattack. The nearer change is quieter and alre…

NEWSSecurityWeekabout 1 month ago

Windows, Linux, Android File Notification Systems Leak User Activity

Researchers show that file-change notification systems can leak keystroke timing, browsing activity, and WhatsApp media events. Th…

NEWSHackreadabout 1 month ago

SectopRAT Abuses Legitimate Audio Software Files to Steal PC Data

FortiGuard found SectopRAT hidden in modified audio software files, using staged loading to steal browser data and remotely contro…

NEWShighThe Hacker Newsabout 1 month ago

Bitget Says Suspected North Korean Hackers Stole $351.6M After Backend Compromise

Cryptocurrency exchange Bitget said suspected North Korean threat actors have stolen $351.6 million from its hot and warm wallets.…

NEWSBleeping Computerabout 1 month ago

Microsoft: Recent Windows updates cause desktop loading issues

Microsoft has confirmed that some users may experience desktop loading issues, including black screens, after installing the Augus…

NEWScriticalCVE-2026-488428.1 HIGHThe Hacker Newsabout 1 month ago

Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild

The Canadian Centre for Cyber Security has warned that a now-patched Roundcube Webmail vulnerability is being actively exploited i…

NEWSInfosecurity Magazineabout 1 month ago

RemControl Banking Trojan Gives Attackers Remote Control of Android Devices

The newly-discovered trojan abuses the Android Accessibility Service to gain control over victim devices and collect sensitive ban…

NEWSSecurityWeekabout 1 month ago

‘SalesBleed’ Flaws in Salesforce Agentforce Enabled Zero-Click Data Exfiltration

Three vulnerabilities in Salesforce Agentforce allowed hackers to hijack trusted agents, steal data, and launch phishing attacks.…

NEWShighBleeping Computerabout 1 month ago

Hackers steal $351.6 million in Bitget crypto exchange hack

Cryptocurrency exchange Bitget disclosed today that suspected North Korean hackers have stolen $351.6 million from its hot and wa…

NEWShighInfosecurity Magazineabout 1 month ago

Researchers Identify AliExpress Phishing Domains Before Registration

EfficientIP says it flagged AliExpress phishing domains before they were registered

NEWShighCVE-2026-488428.1 HIGHSecurityWeekabout 1 month ago

Roundcube Webmail Vulnerability in Attackers’ Crosshairs

Tracked as CVE-2026-48842, the exploited bug is an SQL injection that can be exploited without authentication. The post Roundcube…

NEWSThe Hacker Newsabout 1 month ago

Cloudflare Fixes Flaw That Let One Container Read Another Customer's Leftover Disk Data

A flaw in Cloudflare Containers let a paying customer read data that other customers' containers had left behind on the same serve…

NEWShighCVE-2026-543010.0 CRITICALThe Hacker Newsabout 1 month ago

WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV

The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added two critical security flaws impacting WSO2 an…

NEWShighHackreadabout 1 month ago

Bitget Confirms $351.6 Million Hack, Suspects North Korea’s Lazarus Group

Bitget confirms a $351.6 million theft, suspends withdrawals and says North Korea's Lazarus Group may be involved as investigators…

NEWSThe Registerabout 1 month ago

Crook used three open source agents to break into a Fortune 500 hospitality company, a major US airline and 25+ other orgs

Operator’s AI bill averaged just $25 per completed scan

NEWSCyberScoopabout 1 month ago

House and Senate members propose legislation for CISA to step up cyber defenses for biotech

Biotechnology doesn’t have its own critical infrastructure designation, so the bipartisan group of lawmakers wants to make sure it…

NEWShighBleeping Computerabout 1 month ago

MacSync malware uses public iCloud calendars to deliver new payloads

A new variant of the MacSync malware targeting macOS systems now uses public iCloud calendar events to deliver new native payloads…

NEWShighSecurityWeekabout 1 month ago

Autonomous AI Hacks Raise Thorny Questions of Legal Accountability

The prospect of legal accountability is unclear. Lawsuits are a possibility, but some legal experts believe any criminal investiga…

NEWShighBleeping Computerabout 1 month ago

New Carbonato malware uses AI agents to hijack exposed Docker hosts

A new botnet malware called Carbonato is targeting insecure hosts running Docker daemons to install the Hermes Agent AI framework…

NEWSHackreadabout 1 month ago

OpenAI Agent Breached Australian Medicare Statistics Portal

An OpenAI agent bypassed controls on Australia's Medicare statistics portal, accessed non-public data and was not reported to offi…