Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

2,133 articles

NEWScriticalCVE-2026-506567.8 HIGHThe Hacker Newsabout 1 month ago

Microsoft Confirms RoguePlanet Defender Zero-Day, Says Patch is in Development

Microsoft has formally disclosed that it's working to release a patch to address a Defender zero-day codenamed RoguePlanet. The v…

NEWSThe Registerabout 1 month ago

Massive password-stealing attack hits 75k Fortinet firewalls

Why are you even reading this?! Rotate your passwords!!

NEWSSecurity Magazineabout 1 month ago

Kodak Confirms Breach Following Claims 2.2M Records Stolen

This breach may include internal corporate data and the personal information of customers.

NEWSHackreadabout 1 month ago

FortiBleed Attack Exposes Fortinet Firewall Credentials in 194 Countries

Researchers say FortiBleed used stolen and tested credentials to access exposed Fortinet firewalls, putting major organizations an…

NEWShighThe Hacker Newsabout 1 month ago

Junior Hacker Used Tailscale and OpenSSH to Keep Access After His C2 Went Offline

A French-speaking attacker broke into a small French automotive business, planted a keylogger, and stole banking and email credent…

NEWScriticalCyberScoopabout 1 month ago

Attackers hit pair of critical Fortinet vulnerabilities the vendor disclosed in April

Multiple firms have observed active exploitation of the FortiSandbox defects, and warn that the attacks originate from multiple so…

NEWSBleeping Computerabout 1 month ago

FortiBleed leak exposes Fortinet VPN credentials for 73,000 devices.

A newly discovered data leak dubbed "FortiBleed" has exposed what appears to be a collection of Fortinet and FortiGate VPN credent…

NEWSInfosecurity Magazineabout 1 month ago

North Korean Hiring Fraud Runs on AI and US Laptop Farms

Nisos infiltrated a North Korean IT-worker fraud cell running on AI interviews and a US laptop farm

NEWSThe Registerabout 1 month ago

Digital sovereignty needs an operating model

PARTNER CONTENT Europe wants control over its own technology, but what does that look like?

NEWSSecurityWeekabout 1 month ago

Webinar Today: How Modern Breaches Bypass MFA and Evade Detection

Attendees will learn how attackers evade conventional detection methods, why legacy MFA alone is no longer sufficient, and how org…

NEWSBleeping Computerabout 1 month ago

Why Account Takeovers Are Rising and How to Stop Them

Account takeovers are rising as attackers bypass traditional defenses through phishing, session hijacking, and MFA fatigue. Specop…

NEWShighInfosecurity Magazineabout 1 month ago

Serverless Phishing Kit on GitHub Targets Mexican Banks

GitBait phishing kit abuses GitHub Pages and the SheetBest API to steal Mexican banking credentials

NEWSThe Registerabout 1 month ago

Cisco adds another SD-WAN box to max-severity bug advisory

Updated at the time? No sweat. Check those logs, though

NEWSThe Registerabout 1 month ago

Homebrew 6.0 released with new security mechanism, Linux sandbox and more

Homebrew was "less vulnerable 10 years ago than npm is today," project lead tells us

NEWSInfosecurity Magazineabout 1 month ago

Sensitive Enterprise Data Uploads to AI Models Double in a Year

The rise of AI-assistants and applications in the enterprise has seen a 93% increase in employees attempting to upload sensitive d…

NEWSBleeping Computerabout 1 month ago

India's Telegram ban hit the UAE too. Here's how to get around it

India has banned Telegram until June 22 after the app was used to circulate leaked exam papers. CEO Pavel Durov accuses telecom Re…

NEWShighHackreadabout 1 month ago

SpyCloud Report Finds Phishing Attacks Surge as Employee Data Is Exposed at 86% of Fortune 100 Companies

Austin, TX, USA, 17th June 2026, CyberNewswire

NEWSSecurityWeekabout 1 month ago

1Password Acquires Apono in Reported $250M-$300M Deal

Apono specializes in just-in-time access governance technology for humans, machines, and AI agents. The post 1Password Acquires Ap…

NEWSInfosecurity Magazineabout 1 month ago

AI Threats and Alert Fatigue Challenge Cybersecurity Teams

Filigran survey at Infosecurity Europe 2026 reveals AI-powered attacks as the top concern, with false positives, alert fatigue and…

NEWSHackreadabout 1 month ago

152 Chrome Live Wallpaper Extensions Hid Ad Tracking and Fake Search Clicks

Socket says the extensions worked as wallpaper tools, but also logged user data, disguised install traffic as Google clicks, and f…

NEWSHackreadabout 1 month ago

Heimdal Survey: Executives Four Times More Confident About AI Risk Than the Teams Managing It

London, United Kingdom, 17th June 2026, CyberNewswire

NEWSSecurityWeekabout 1 month ago

Tenet Security Emerges From Stealth With $6 Million Seed Funding

Tenet aims to detect and stop dangerous AI agentic behavior in real time. The post Tenet Security Emerges From Stealth With $6 Mil…

NEWSThe Hacker Newsabout 1 month ago

Adversarial Exposure Validation Turns Security Visibility into Confident Prioritization

For security teams, the findings never stop, but confidence in knowing which ones matter is becoming harder to maintain. The prob…

NEWSBleeping Computerabout 1 month ago

Microsoft confirms Office apps launch issues after June updates

Microsoft is investigating a new issue preventing third-party applications from launching Microsoft Office applications or opening…

NEWShighSecurityWeekabout 1 month ago

Rockwell Automation Patches Vulnerabilities in ICS Controllers and Software

The industrial automation giant has fixed security holes in Logix, CompactLogix, Flex, RSLinx, and FactoryTalk products. The post…

NEWSHackreadabout 1 month ago

ESET MDR vs Sophos MDR: Compared Time to discover and respond to a threat

A detailed ESET MDR vs Sophos MDR comparison covering tiers, response speed, coverage, threat intelligence, pricing, and breach wa…

NEWSThe Registerabout 1 month ago

Helpdesk scammers are making house calls to make their lies feel more real

15-year-old among six arrested after Dutch cops target suspected bank fraud call center

NEWScriticalSecurityWeekabout 1 month ago

Microsoft Teams Relay Servers Abused in DragonForce Ransomware Attack

The attackers deployed a new Go-based backdoor that uses Microsoft Teams servers for command-and-control. The post Microsoft Teams…

NEWSThe Hacker Newsabout 1 month ago

The Top 10 Attack Surface Exposures in 2026

Breaches don't always start with a zero-day. An exposed admin panel can get brute-forced, or credentials reused from a previous at…

NEWSBleeping Computerabout 1 month ago

CISA orders feds to patch max severity Joomla plugin flaw by Friday

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch a maximum-severity flaw in…