Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,622 articles

Begin at the End: How to Enable Agentic Remediation

Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.…

NEWSThe Hacker Newsabout 1 month ago

Secrets Sprawl Is an Identity Problem That AI Just Made Impossible to Ignore

AI coding agents are changing how quickly developers can build and ship software as well as how quickly credentials can become exp…

NEWShighWired Securityabout 1 month ago

An OpenAI Agent Hacked Australia’s Health Service. Their Government Found Out Months Later.

The country’s prime minister expressed disappointment at being informed of the hack only via email. Now Australia is investigating…

NEWScriticalBleeping Computerabout 1 month ago

CISA: Ransomware gangs now exploiting critical TeamCity flaw

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies on Wednesday that ransomware gangs are n…

NEWScriticalCVE-2026-283249.8 CRITICALSecurityWeekabout 1 month ago

SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted

The vulnerabilities, tracked as CVE-2026-28324 and CVE-2026-28325, can be exploited without authentication. The post SolarWinds Pa…

NEWShighInfosecurity Magazineabout 1 month ago

OpenAI Agent Hacks Australian Medicare Portal

Australian PM Anthony Albanese criticized OpenAI’s response to the incident, which occurred in June 2026

NEWSCyberScoopabout 1 month ago

How tax policy can stop threat actors from breaching US water systems

New federal programs take years to launch and fund. State and local governments need cybersecurity software now. The One Big Beaut…

NEWScriticalSecurityWeekabout 1 month ago

Astrana Health Data Breach Impacts Private, Confidential Information

Hackers impersonated the company’s personnel and contacted its employees to gain access to Astrana Health’s servers. The post Astr…

NEWShighHackreadabout 1 month ago

New AvisLoader Windows Malware Uses ClickFix Lure and Tox P2P for C2

Varonis Threat Labs discovered AvisLoader, a Windows malware loader that uses the Tox peer-to-peer network for C2 and arrives thro…

NEWShighBleeping Computerabout 1 month ago

OpenAI hacked Australian Medicare govt site, probed data providers

OpenAI agents targeted public data providers in multiple countries, probing some for vulnerabilities and exploiting a security wea…

NEWSInfosecurity Magazineabout 1 month ago

Over 75% of Organizations Experience Microsoft 365 Governance Issues

ShareGate study claims to reveal a governance ‘crisis’ as AI usage grows

NEWShighThe Hacker Newsabout 1 month ago

17,000 URLs Reveal How ClickFix Turns Trusted Websites Into Malware Traps: Report by CTM360

ClickFix has become the most common way attackers get into enterprise networks, and it does it without an exploit, an attachment,…

NEWScriticalSecurityWeekabout 1 month ago

US Court Sentences Armenian Man to Prison for Ryuk Ransomware Attacks

Karen Vardanyan has also been ordered to pay over $1.2 million in restitution to victims. The post US Court Sentences Armenian Man…

NEWSThe Registerabout 1 month ago

Government contractor exposed path to immigration records

IT took a shortcut when the boss was away, and it led to danger!

NEWSInfosecurity Magazineabout 1 month ago

Data Overtakes Skills as Top Threat Hunting Challenge, SANS Study Finds

SANS Institute report claims data rather than skills is now the main hurdle for threat hunters

NEWSBleeping Computerabout 1 month ago

Microsoft fixes bug that broke Windows File History backup feature

Microsoft has fixed a known issue that breaks the built-in File History backup feature on some Windows systems after installing th…

NEWScriticalCVE-2026-879028.1 HIGHSecurityWeekabout 1 month ago

Critical WordPress Vulnerability Exploited Immediately After Disclosure

Tracked as CVE-2026-87902, the path traversal flaw allows remote, unauthenticated attackers to execute arbitrary code. The post Cr…

NEWSThe Hacker Newsabout 1 month ago

OpenAI Agent Bypassed Australian Medicare Portal Controls to Access Non-Public Files

An AI agent on an internal OpenAI research task bypassed access controls on an Australian government Medicare statistics portal in…

NEWSThe Hacker Newsabout 1 month ago

TeamFiltration Campaign Compromises Seven Microsoft 365 Accounts Using Default Passwords

Cybersecurity researchers have disclosed details of an active TeamFiltration campaign codenamed UNK_CondorFiltration that has targ…

NEWShighCVE-2026-879028.1 HIGHThe Hacker Newsabout 1 month ago

Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure

Threat actors have begun to actively exploit a critical security flaw in WordPress within hours of public disclosure. The vulnera…

NEWSCyberScoopabout 1 month ago

CISA outlines improvement plan for CVE program

The white paper is the latest step in trying to create a “Quality Era” for the Common Vulnerabilities and Exposures (CVE) program…

NEWSThe Registerabout 1 month ago

OpenAI agents ‘infiltrated Australian government website’

Prime Minister has given OpenAI boss a stern talking-to

NEWSBleeping Computerabout 1 month ago

Placeholder domain used in dev docs now serves ClickFix attacks

The "third-party.com" domain, commonly used as a placeholder in developer documentation and code examples, is serving a fake Cloud…

NEWShighBleeping Computerabout 1 month ago

New RemControl Android banking malware targets users in Europe and Canada

A new Android malware-as-a-service (MaaS) platform called RemControl is targeting users through malvertising campaigns that impers…

NEWSHackreadabout 1 month ago

Mobile App Security in HealthTech: Safeguarding Patient Data Against Cybersecurity Threats

HealthTech apps need secure architecture, encrypted data, strong access controls, continuous testing, and post-launch monitoring t…

NEWShighCVE-2026-851029.8 CRITICALBleeping Computerabout 1 month ago

Check Point warns of hackers exploiting Security Gateway VPN RCE flaw

Cybersecurity company Check Point has confirmed active exploitation of CVE-2026-85102, a pre-authentication remote code execution…

NEWSCyberScoopabout 1 month ago

Watchdog finds most agencies failed to meet CISA cloud security orders, heightening risk of attack

The DHS inspector general said CISA lacks the power to compel agencies to implement its Binding Operational Directives. The post W…

NEWSSecurityWeekabout 1 month ago

IonQ Targets Quantum Error-Correction Bottleneck With Single-CPU DecoderIonQ Says Sin

IonQ’s new single processor quantum error decoder minimizes the classical computing overhead in quantum error correction. The post…

NEWScriticalCVE-2026-879028.1 HIGHBleeping Computerabout 1 month ago

Hackers start exploiting critical WordPress flaw for code execution

Threat actors have moved from probing WordPress sites vulnerable to CVE-2026-87902 to exploiting the flaw to write files to disk t…

NEWSCyberScoopabout 1 month ago

Pentagon cyber chief: The demand far exceeds supply

At DefenseTalks on Tuesday, Katie Sutton said the Pentagon now receives far more requests to use cyber operations than its forces…