Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,623 articles

Pentagon cyber chief: The demand far exceeds supply

At DefenseTalks on Tuesday, Katie Sutton said the Pentagon now receives far more requests to use cyber operations than its forces…

NEWScriticalThe Registerabout 1 month ago

Someone's attacking a critical 0-day RCE in F5 BIG-IP APM

Good news: there's a patch. Bad news: both CISA and F5 warn that it's under active exploitation

NEWShighThe Hacker Newsabout 1 month ago

Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry

Cybersecurity researchers have disclosed Go-based malware distributed via two Go Modules and two Terraform providers, marking the…

NEWSSecurityWeekabout 1 month ago

Worries About an AI Internet Takeover Gain New Urgency Among Doomsday Scenarios

The idea that AI could break away and work toward its own agenda is looking increasingly plausible to researchers and experts. The…

NEWSHackreadabout 1 month ago

Open-Source AI Agents Breach 27 Companies, Steal 600,000 Credit Card Records

Gambit Security found AI agents breached 27 companies, stole 600,000 credit card records and installed payment skimmers across com…

NEWSCyberScoopabout 1 month ago

Ryuk ransomware operator sentenced to 2 years in prison

The Armenian national was extradited from Ukraine to the United States last year and pleaded guilty to cybercrimes in July. The po…

NEWSSecurity Magazineabout 1 month ago

Spokane Public Schools Faces Cybersecurity Incident

As of the latest report, online information systems remain down.

NEWSThe Hacker Newsabout 1 month ago

A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You

The private email address GitLab gives you for filing issues by email is a credential. Anyone who gets it can email a patch that G…

NEWSBleeping Computerabout 1 month ago

Malicious AI agents steal 600K credit cards, infect 100+ sites with skimmers

A financially motivated threat actor is using open-source AI agent frameworks to attack hundreds of online retailers at scale, ste…

NEWSCVE-2026-67279The Hacker Newsabout 1 month ago

MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key

Two MikroTik RouterOS SSH vulnerabilities chained together let attackers take full administrative control of Internet-exposed rout…

NEWShighSecurity Magazineabout 1 month ago

Flock Camera Hacked, Security Leaders Discuss

After gaining physical access to a Flock Safety security camera, hackers were able to extract its software and data.

NEWShighHackreadabout 1 month ago

Email Makes Up Nearly 1 in 3 MSSP Analyses: How Tier 1 Can Triage Phishing Faster

MSSP Tier 1 analysts can cut phishing triage time with interactive analysis, fresh threat intelligence, clearer evidence and compl…

NEWSCyberScoopabout 1 month ago

OpenAI, Ukraine partner on ‘Daybreak’ program to protect power grids and water systems

A Ukrainian official said the government will use the tools to automate cybersecurity functions in critical infrastructure as the…

NEWSThe Registerabout 1 month ago

Academic publisher Elsevier hit by LAPSUS$ redirect attack

Customers got crime crew's calling card instead of access to journals

NEWSThe Registerabout 1 month ago

Closing the observability gap for the AI-ready enterprise

SPONSORED FEATURE: Why AI-driven operations need a data-rich view of the network

NEWSInfosecurity Magazineabout 1 month ago

Hundreds of Leaked GitHub App Keys Still Authenticate

GitGuardian finds 474 leaked GitHub App keys still authenticating, including keys with admin access

NEWShighSecurity Magazineabout 1 month ago

FBI Hacked, Employee Data Reportedly Exposed

The cybercriminal group ShinyHunters claims it has hacked the FBI.

NEWSBleeping Computerabout 1 month ago

InfraTrust report warns network management systems under attack

Attackers are increasingly targeting the management systems used to control enterprise infrastructure, with several critical vulne…

NEWShighThe Hacker Newsabout 1 month ago

This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move

A Windows malware called CLOSEDQUORUM is built to take orders from a vote of up to four AI models instead of an attacker's server,…

NEWShighHackreadabout 1 month ago

Microsoft Disrupts AI-Powered EvilTokens Service Linked to 12,000 Hacked Inboxes

Microsoft disrupted EvilTokens after the AI-powered phishing service compromised 12,000 inboxes across 10,000 organisations and en…

NEWSBleeping Computerabout 1 month ago

How One Kubernetes YAML Can Hand Over a GCP Organization

A Kubernetes user with limited permissions can potentially gain control of an entire Google Cloud organization by exploiting the a…

NEWSInfosecurity Magazineabout 1 month ago

Windows Botnet x47.c Offers AI API Draining, 18 Attack Methods

Qrator found a Windows botnet advertised with AI API draining, credential theft and SOCKS5 proxying

NEWSThe Hacker Newsabout 1 month ago

Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI

Unknown threat actors have managed to compromise two legitimate MemTensor packages across the npm and Python Package Index (PyPI)…

NEWSWired Securityabout 1 month ago

Meta’s Muse AI Assistant Rolled Out With a Serious Security Flaw

Meta says it issued a fix for the Muse zero-day vulnerability that would have let attackers do “whatever” they wanted on a victim’…

NEWScriticalBleeping Computerabout 1 month ago

Arista patches actively exploited VeloCloud Orchestrator zero-day

Arista Networks has released security patches for a zero-day flaw that is being actively exploited and affects VeloCloud Orchestra…

NEWSSecurityWeekabout 1 month ago

Honeywell: OT Security Teams Embrace AI, but Autonomy Still Rare

Only 21% of industrial security leaders report a complete OT asset inventory, even as 88% call their programs mature. The post Hon…

NEWSCyberScoopabout 1 month ago

The president has called for AI leadership. Here’s the mission.

An AI compact built around capability, control, and continuity can ensure the country stays safe and secure while also leading the…

NEWSThe Hacker Newsabout 1 month ago

New cPanel Flaw Lets a Hosting Account Run Code as Root, Take Full Server Control

A flaw in cPanel's CalDAV and CardDAV service lets anyone with a cPanel hosting account run code as root and take "full control of…

NEWScriticalInfosecurity Magazineabout 1 month ago

Ransomware Attacks Reach Record High for 2026

A total of 1073 firms fell victim to ransomware attacks globally in August, with the industrial sector the most affected, accordin…

NEWSThe Registerabout 1 month ago

Ofcom takes a hard look at Pornhub's Apple-powered age checks

Regulator wants to know whether parent Aylo did its homework before reopening the door to UK iPhone users