Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,622 articles

NEWShighThe Registerabout 1 month ago

Salesforce Agentforce vulns allowed 0-click CRM data theft, anonymous phishing

'SalesBleed' security flaws 'lead to very unexpected consequences'

NEWSThe Hacker Newsabout 1 month ago

Unpatched OnePlus Flaws Let Installed Android Apps Gain Root Without Permissions

A OnePlus 15 running the latest OxygenOS can be rooted by a malicious app the owner installs, one that asks for no special permiss…

NEWShighCyberScoopabout 1 month ago

New bill would create federal investigative body for AI-driven hacks

A new Democratic bill in Congress would establish a federal Cybersecurity and AI Board of Investigations to provide independent go…

NEWSThe Hacker Newsabout 1 month ago

ThreatsDay: AI Search Poisoning, AI Coding Tool Leaking Repos, One-Click Code Execution and 13 More Stories

This week, the dangerous stuff keeps arriving dressed as something boring. An update. A login box. A search answer. A coding tool.…

NEWSBleeping Computerabout 1 month ago

Exposed GitLab project email addresses let attackers push code

Private GitLab email addresses that allow developers to push issues or tasks to a project are being deliberately exposed in README…

NEWShighCyberScoopabout 1 month ago

Phone-hacking company that won U.S. security agency contracts hid Russian ownership, DOJ alleges

The Justice Department said two leaders of the company have been arrested and face conspiracy to commit wire fraud. The post Phone…

NEWSHackreadabout 1 month ago

Microsoft Password Reset Portal Can Leak Account Verification Details

LevelBlue found Microsoft’s password reset portal can reveal valid accounts, recovery methods and likely administrator accounts wi…

NEWSThe Registerabout 1 month ago

Decades-old file security flaws found in Android, Linux, macOS, and Windows

Security researchers report that Microsoft considers the side-channel leak of file events to be by design

NEWSThe Registerabout 1 month ago

CVE flood pushes Ubuntu onto weekly kernel release cycle

AI-assisted bug hunting is helping pile up vulnerabilities faster than defenders can patch them, so Canonical is picking up the pa…

NEWSSecurity Magazineabout 1 month ago

OpenAI Agent Breaches Australian Government Health Service

An OpenAI agent gained unauthorized access to a public-facing Medicare portal.

NEWSSecurityWeekabout 1 month ago

Kontext Security Emerges With $4 Million for AI Agent Runtime Controls

The startup’s runtime enforcement platform evaluates AI agents in real time to provide visibility and control over their actions.…

NEWSHackreadabout 1 month ago

The Hidden Security Risks of Devices You Forgot Were Connected

IoT and OT devices can create hidden security gaps. Learn how asset visibility helps organizations find forgotten devices and redu…

NEWSThe Hacker Newsabout 1 month ago

Placeholder third-party[.]com Referenced Across 1,700+ Repositories Now Serves Malicious Content

The "third-party[.]com" domain, commonly used as a documentation placeholder, has been observed serving a ClickFix lure to Windows…

NEWSThe Registerabout 1 month ago

Someone went shopping in ASUS's eShop – for customer data

Contact details and order records accessed, but PC maker is keeping schtum on how many customers are affected

NEWSInfosecurity Magazineabout 1 month ago

Emerging Ransomware Gang Uses Backup Destruction Threats to Pressure Victims

Ransom notes by n0n ransomware claim to take double extortion to a new level of danger for victims

NEWSSecurity Magazineabout 1 month ago

AI Leaders Warn UN the Technology Could Be a Risk to Humanity

AI representatives call for UN leaders to establish controls over the technology.

NEWShighSecurityWeekabout 1 month ago

OpenAI Agents Probed Websites for Vulnerabilities While Fetching Public Data

Australia disclosed that an OpenAI agent gained unauthorized access to non-public government information. The post OpenAI Agents P…

NEWShighThe Hacker Newsabout 1 month ago

Hacked Ukrainian Sites Serve Fake Cloudflare ClickFix Lures for Psychedelic Stealer

An active ClickFix campaign has been observed compromising legitimate Ukrainian business websites to inject bogus Cloudflare verif…

NEWScriticalHackreadabout 1 month ago

SCOUTz Prospect Intelligence Platform Launches for MSPs with 30-Day Beta

Phoenix, Arizona, 24th September 2026, CyberNewswire

NEWSBleeping Computerabout 1 month ago

FedRAMP VDR & VER: Daily Scans Are Only the Beginning

FedRAMP's new VDR and VER requirements make vulnerability management more continuous, with faster scanning, tighter remediation de…

NEWShighCyberScoopabout 1 month ago

Bipartisan Senate leaders introduce bill to bolster telecom cybersecurity in response to Salt Typhoon hacks

The legislation from Senate Intelligence Vice-Chairman. Mark Warner, D-Va., and Senate Commerce Chairman Ted Cruz, R-Tex., would c…

NEWScriticalBleeping Computerabout 1 month ago

Hackers now exploit critical Roundcube flaw in code injection attacks

A high-severity Roundcube Webmail vulnerability patched in May is now being actively exploited in attacks, according to the Canadi…

NEWScriticalThe Registerabout 1 month ago

Google to critical infra orgs: Our AI scanners won't be evil, promise

Gemini 3.8 Flash Cyber and Wiz's Red Agent team up to protect hospitals, public transit, and tech

NEWSInfosecurity Magazineabout 1 month ago

CISA Charts New "Quality Era" for Global CVE Program

CISA has set out a new framework to improve CVE data quality as vulnerability volumes rise

NEWSSecurityWeekabout 1 month ago

AI-Powered Campaign Targets Hundreds of Online Retailers

A threat actor is using three AI harnesses for vulnerability research, exploitation, and attack orchestration. The post AI-Powered…

NEWSBleeping Computerabout 1 month ago

Windows 11 KB5124010 update released with 46 changes and fixes

Microsoft released the KB5124010 September 2026 non-security preview update for Windows 11 24H2 and 25H2, with 46 changes includin…

NEWSThe Hacker Newsabout 1 month ago

Corp MDM Spyware Targets Logistics Firms, Steals New SMS and Redirects Calls

The logistics sector has become the target of a new malicious cyber campaign that distributes an Android spyware codenamed Corp MD…

NEWSSecurityWeekabout 1 month ago

Island Raises $400 Million at $6.4 Billion Valuation

The enterprise security firm has raised more than $1 billion since its launch in 2020; Evolution Equity Partners led the latest fu…

NEWSSecurityWeekabout 1 month ago

OT Security Guidance: NIST Drafts Updated Guide, CISA/FBI Advise on ICS Integrators

Revision 4 of NIST’s operational technology security guide is open for public comments until November 30. The post OT Security Gui…

NEWSInfosecurity Magazineabout 1 month ago

UK Government Shifts to Service-Led Cyber Governance After Stinging Audit

Whitehall is shifting from mandatory cyber controls to service-led governance following a critical audit exposing failures of its…