Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

2,136 articles

INC Ransomware Emerges as Major RaaS Threat in 2026 with 830+ Victims Since 2023

Cybersecurity researchers have charted the evolution of INC from an nascent ransomware-as-a-service (RaaS) operation to one of the…

NEWSBleeping Computerabout 1 month ago

5 reasons Microsoft 365 backup isn’t enough for business data protection

Microsoft 365 helps keep services running, but protecting and recovering business data remains your responsibility. Acronis breaks…

NEWShighThe Hacker Newsabout 1 month ago

DragonForce Hackers Abuse Microsoft Teams Relays to Hide Backdoor.Turn C2 Traffic

Threat actors associated with the DragonForce ransomware have been observed using a custom Go-based remote access trojan (RAT) cal…

NEWSBleeping Computerabout 1 month ago

Police cleans nearly 15,000 SocGholish-infected sites tied to Evil Corp

International law enforcement agencies cleaned nearly 15,000 malware-infected WordPress websites and took down more than 100 serve…

NEWSSecurityWeekabout 1 month ago

Accenture to Acquire Majority Stake in Dragos, All of runZero, NetRise in $4.1 Billion OT Cybersecurity Push

The deal values industrial cybersecurity giant Dragos at $3.25 billion, and runZero and NetRise will operate under Dragos. The pos…

NEWShighBleeping Computerabout 1 month ago

ShapedPlugin update flow hacked to infect WordPress sites

Multiple WordPress plugins from ShapedPlugin were compromised in a supply chain attack that distributed infected releases to payin…

NEWShighHackreadabout 1 month ago

DragonForce Ransomware Abused Microsoft Teams to Hide Malware Activity

DragonForce ransomware abused Microsoft Teams relay systems to hide a custom backdoor, steal files and encrypt systems at a US ser…

NEWShighSecurityWeekabout 1 month ago

No Exploits Required

Four decades of incident response experience suggest that exploits are often the symptom, not the root cause, of today’s cybersecu…

NEWSInfosecurity Magazineabout 1 month ago

Cybercriminals Are Worried About AI Taking Their Jobs Too

Analysis of chatter on underground forums by Sophos finds that hackers fear AI could take work away from them

NEWShighBleeping Computerabout 1 month ago

Apple fixes Beats Studio Buds flaw that let hackers spy on conversations

Apple has released security updates to patch a high-severity flaw affecting the Beats Studio Buds wireless earbuds that could allo…

NEWSBleeping Computerabout 1 month ago

Telegram admits it couldn't police exam-leak channels, India tells court

India's government has told the Delhi High Court that Telegram was warned about two weeks before it was blocked, and that the plat…

NEWSThe Hacker Newsabout 1 month ago

Orphaned AI Agents: How to Find Hidden Access Risks Inside Your Network

If an autonomous AI agent interacts with your company's core intellectual property today, can your security team instantly name th…

NEWSSecurityWeekabout 1 month ago

Dream Raises $260 Million at $3 Billion Valuation

The Israeli startup provides sovereign AI and cyber defenses for governments and critical infrastructure. The post Dream Raises $2…

NEWScriticalBleeping Computerabout 1 month ago

F5 issues out-of-band patches for critical NGINX vulnerabilities

Cybersecurity company F5 has released out-of-band security updates to address multiple NGINX web server vulnerabilities, including…

NEWShighInfosecurity Magazineabout 1 month ago

LATAM Infrastructure Hit by Fortinet and Ivanti Exploits

CloudSEK maps Operation Escaneo, a campaign hitting Latin American infrastructure via perimeter bugs

NEWSWired Securityabout 1 month ago

How to Watch the Knicks Parade on NYC Traffic Surveillance Cameras

Artist Morry Kolman will be livestreaming feeds of the NBA champions’ ticker-tape parade from NYC’s traffic cameras—and this time,…

NEWSThe Hacker Newsabout 1 month ago

The Scripts on Your Checkout Page Are Now a PCI DSS Problem

An independent PCI assessor tested Reflectiz against the new PCI DSS rules. Here is the verdict: See the full QSA assessment here…

NEWScriticalSecurityWeekabout 1 month ago

Atlassian, Splunk Patch Critical Vulnerabilities

Splunk patched an OS command injection in AI Toolkit, while Atlassian fixed dozens of flaws in third-party dependencies. The post…

NEWSSecurityWeekabout 1 month ago

Rokarolla Banking Trojan Targets 200 Applications

The Android malware allows its operators to take control of infected devices and harvest sensitive information. The post Rokarolla…

NEWScriticalSecurityWeekabout 1 month ago

Critical Command Execution Vulnerability Patched in Cisco ISE

Insufficient validation of user input allows an attacker to gain access to the underlying OS and elevate their privileges to root.…

NEWSBleeping Computerabout 1 month ago

Microsoft fixes Windows Server 2016 security update failures

Microsoft has fixed a known issue causing the June 2026 security updates to fail on Windows Server 2016 systems that weren't up to…

NEWSHackreadabout 1 month ago

Agentjacking: Researchers Show How One Fake Bug Report Can Hijack AI Coding Agents

Tenet researchers reveal how fake Sentry bug reports can trick AI coding agents into running code, exposing a new Agentjacking ris…

NEWScriticalSecurityWeekabout 1 month ago

F5 Patches Critical, High-Severity NGINX Vulnerabilities

Critical flaws in NGINX could allow remote, unauthenticated attackers to cause a restart and potentially execute arbitrary code. T…

NEWScriticalInfosecurity Magazineabout 1 month ago

Hostile States Behind 75% of Cyber-Attacks on UK Critical Infrastructure, NCSC Warns

Richard Horne, the NCSC CEO, said three-quarters of cyber-attacks targeting UK critical infrastructure came from nation-state acto…

NEWSSecurityWeekabout 1 month ago

SailPoint to Acquire Entro in Reported $200 Million Deal

Israel-based Entro specializes in non-human identity and credential security solutions, and it will enable SailPoint to enhance it…

NEWSInfosecurity Magazineabout 1 month ago

Cybercrime Surges in APAC as Digitalization Takes Hold

Interpol claims cybercrime accounts for third of crime in over half of Asia and South Pacific countries

NEWScriticalSecurityWeekabout 1 month ago

Kodak Admits Data Breach After ShinyHunters Hack Claims

Kodak told SecurityWeek it believes there is no threat to its systems or operations as a result of the cybersecurity incident. The…

NEWSThe Registerabout 1 month ago

Welcome to your new telco job – here's sudo access to a database with full customer info stored in the clear

It happened at a major US telco in the early 2000s

NEWSWired Securityabout 1 month ago

The UK Will Scan Asylum-Seekers’ Faces for Age Checks—Despite Knowing the Tech Is Flawed

Internal Home Office tests of age-verification technology show the risks of life-altering errors. It’s moving forward anyway.

NEWSThe Registerabout 1 month ago

Cyber offenses now account for around a third of all crime across Asia and South Pacific

Latest Interpol review shows how scams continue to dominate, and AI-enabled attackers prove too hot to handle for cash-strapped re…