Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

2,133 articles

NEWSInfosecurity Magazineabout 1 month ago

EU Security Experts to Support Ukrainian Organizations in Case of Cyber-Attacks

Ukraine has been added to the EU Cybersecurity Reserve, which provides incident response services against large-scale incidents

NEWScriticalSecurityWeekabout 1 month ago

Microsoft Working on Patch for ‘RoguePlanet’ Zero-Day

The public PoC code exploits a race condition in Microsoft Defender to spawn a command prompt with System privileges. The post Mic…

NEWSThe Hacker Newsabout 1 month ago

Malicious JetBrains Plugins Steal AI API Keys as Chrome Extensions Capture Chatbot Chats

Cybersecurity researchers have flagged a "coordinated malware campaign" on the JetBrains Marketplace that has published no less th…

NEWSInfosecurity Magazineabout 1 month ago

Fifteen JetBrains Marketplace Plugins Found Stealing API Keys

Aikido Security has discovered at least 15 IDE plugins on the JetBrains Marketplace

NEWSSecurityWeekabout 1 month ago

Oracle’s Second Monthly Security Updates Deliver 245 Patches

Oracle has released its June 2026 Critical Security Patch Update to fix vulnerabilities in Communications, EBS, Enterprise Manager…

NEWScriticalSecurity Magazineabout 1 month ago

Organizations’ Emergency Response Fails to Match Confidence Levels

Organizations overestimate their emergency response; Almost 50% of organizations faced a lateral movement attack in the last year.

NEWSInfosecurity Magazineabout 1 month ago

Staffing Is Top SOC Challenge Even as AI Proliferates, Says SANS

SANS Institute study finds few SOCs have built AI into defined workflows, despite widespread adoption

NEWScriticalBleeping Computerabout 1 month ago

Microsoft working on Defender patch for RoguePlanet zero-day

Microsoft confirmed that it's working on a security patch for a Defender zero-day vulnerability named "RoguePlanet," disclosed one…

NEWScriticalSecurityWeekabout 1 month ago

Chrome and Firefox Updated to Patch Critical, High-Severity Vulnerabilities

The browser updates address multiple memory safety bugs that could potentially lead to remote code execution. The post Chrome and…

NEWSHackreadabout 1 month ago

15 Malicious JetBrains Plugins Caught Stealing DeepSeek, OpenAI API Keys

Hackers are using 15 malicious JetBrains plugins posing as AI coding assistants to steal DeepSeek, OpenAI, and other developer API…

NEWSThe Hacker Newsabout 1 month ago

144 Mastra npm Packages Compromised via Hijacked Contributor Account

As many as 144 npm packages associated with the Mastra namespace ("@mastra/*"), a popular open-source JavaScript and TypeScript fr…

NEWShighSecurityWeekabout 1 month ago

Joomla, LiteSpeed Vulnerabilities Exploited in Attacks

The flaws allow attackers to execute arbitrary PHP code and gain root privileges on shared hosting servers. The post Joomla, LiteS…

NEWScriticalBleeping Computerabout 1 month ago

Kodak confirms data breach claimed by ShinyHunters extortion gang

Kodak has confirmed that it's working with external cybersecurity experts to investigate a security breach after hackers gained ac…

NEWShighSecurityWeekabout 1 month ago

3 Recently Patched Fortinet FortiSandbox Vulnerabilities in Hacker Crosshairs

SOCRadar has detected 30,000 compromised Fortinet firewalls that expose networks to hacking. The post 3 Recently Patched Fortinet…

NEWScriticalCVE-2026-489079.8 CRITICALThe Hacker Newsabout 1 month ago

CISA Warns of Actively Exploited Joomla JCE Flaw Allowing PHP Code Execution

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a maximum-severity security flaw impacting Widge…

NEWSThe Registerabout 1 month ago

Cyberattack sees crops kept in the ground

Bitter harvest for Australia's Mackay Sugar, attacked in peak cane crushing season

NEWSBleeping Computerabout 1 month ago

Malicious JetBrains Marketplace plugins steal AI API keys from developers

At least 15 malicious plugins found on the JetBrains Marketplace were designed to steal AI API keys from developers. [...]

NEWSCyberScoopabout 1 month ago

Lawmakers leary about Trump administration’s Anthropic order

Some panned it, some said they needed more information, but caution figured into all of the responses. The post Lawmakers leary ab…

NEWSCyberScoopabout 1 month ago

AI’s constant patching treadmill can be a security problem

The breakneck speed of model releases may be creating short, silent security gaps as developers must choose between performance an…

NEWSWired Securityabout 1 month ago

Leak Exposes Members of Peter Thiel’s Secretive ‘Dialog’ Society

More than 200 of the world's elites registered for a retreat whose agenda runs from panels on cult-building and sex to prepping fo…

NEWSThe Registerabout 1 month ago

Python dev saved from disaster by intuition...and AI

I'm sorry, Dave. I can't install that repo that will totally hose your system.

NEWShighBleeping Computerabout 1 month ago

New Rokarolla Android malware targets 217 banking, crypto apps

A new Android banking trojan named Rokarolla is targeting 217 banking and cryptocurrency applications using an extensive set of 13…

NEWSThe Hacker Newsabout 1 month ago

Google Vertex AI SDK Flaw Let Attackers Hijack Model Uploads via Bucket Squatting

A flaw in the Google Cloud Vertex AI SDK for Python let an attacker with no access to a victim's project hijack the victim's machi…

NEWShighBleeping Computerabout 1 month ago

Steam Workshop abused to spread malware via Wallpaper Engine app

Threat actors are abusing Steam Workshop, Valve's community hub for downloading game-related content, to push various malware hidd…

NEWScriticalThe Registerabout 1 month ago

Three critical Fortinet sandbox bugs splattered by unknown attackers

All have patches, so make sure you upgrade to a fixed version

NEWSWired Securityabout 1 month ago

‘Dangerous’ AI Models Are Coming No Matter What

The US government crackdown on Anthropic’s Claude Fable 5 and Mythos 5 hides a glaring truth: AI models with advanced hacking capa…

NEWShighThe Hacker Newsabout 1 month ago

ClickFix Campaigns Expand Malware Delivery With New Loaders and Fake Update Lures

Cybersecurity researchers have flagged multiple ClickFix campaigns that deliver three malware loaders called BabaDeda Loader, Lore…

NEWSSecurity Magazineabout 1 month ago

Error in Breach Notice Leaves Victims Confused, Skeptical

Patients received notices after a hospital data breach — but the letters looked like scams.

NEWSSecurity Magazineabout 1 month ago

Trump Signs National Security Memo to Bolster Military, Intelligence System Cybersecurity

President Trump signed a new National Security Presidential Memorandum to support the nation’s National Security Systems (NSS).

NEWSHackreadabout 1 month ago

Amos Stealer Targets macOS Keychain Files and Browser Passwords

Amos Stealer targets macOS users through fake downloads, stealing Keychain files, browser passwords, cookies, and developer config…