Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,623 articles

NEWShighThe Hacker Newsabout 1 month ago

545 Hackers Tested It First. Now XRanges for AI Scores Your Security Agent

Autonomous security agents are getting good at finding bugs. Nobody has a good way to measure how good. Point one at a realistic t…

NEWSThe Hacker Newsabout 1 month ago

Anthropic and OpenAI Models Still Attempt Restricted Actions in Safety Tests

Anthropic and OpenAI on Tuesday announced new models, with both artificial intelligence (AI) companies noting that they are contin…

NEWScriticalSecurityWeekabout 1 month ago

Adobe Patches Critical Flaws in Connect, AEM Forms

The nine critical security defects could be exploited for arbitrary code execution and privilege escalation. The post Adobe Patche…

NEWShighSecurityWeekabout 1 month ago

AI-Powered Phishing Platform EvilTokens Disrupted by Microsoft

The cybercrime platform leveraged AI at every step of the attack chain, including writing social engineering messages and deciding…

NEWSBleeping Computerabout 1 month ago

Microsoft: September Windows updates break Always On VPN connections

Microsoft warned that the September 2026 security updates may also break Always On VPN connections on some Windows 11 systems. [..…

NEWShighCVE-2026-805217.8 HIGHThe Hacker Newsabout 1 month ago

Exploit Released for Unpatched Ubuntu Linux Flaw Enabling Host-Root Container Escape

A use-after-free in the Linux kernel's AF_UNIX socket subsystem can be used to escape a container and gain root on the host, secur…

NEWShighSecurityWeekabout 1 month ago

Chrome 154 Patches 108 Vulnerabilities

The browser update resolves several critical-severity memory safety and memory corruption flaws. The post Chrome 154 Patches 108 V…

NEWSSecurityWeekabout 1 month ago

A Look at AI Doomsday Scenarios That Researchers Say Could Put Humanity at Risk

Debates over the plausibility of these doomsday scenarios have heated up since several executives endorsed slowing the technology’…

NEWScriticalInfosecurity Magazineabout 1 month ago

ShinyHunters Claims FBI Hack Via PeopleSoft Zero Day

Infamous threat group ShinyHunters claims to have personal information on thousands of FBI employees

NEWSSecurityWeekabout 1 month ago

Outerlimit Raises $16 Million to Stop Rogue AI Agents From Causing Harm

Emerging from stealth with $16 million in pre-seed funding, Outerlimit offers a decentralized authorization layer designed to disc…

NEWScriticalSecurityWeekabout 1 month ago

Arista Urges Immediate Patching of Exploited VCO Zero-Day

Remote attackers could trigger the critical-severity flaw to access privileged internal functionality. The post Arista Urges Immed…

NEWSInfosecurity Magazineabout 1 month ago

EU Auditors Warn Information-Sharing Gaps Are Hindering Cyber Incident Response

The EU Court of Auditors has criticized EU shortcomings in responding to major cyber incidents

NEWScriticalCVE-2026-941279.8 CRITICALThe Hacker Newsabout 1 month ago

F5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE on OAuth Servers

Attackers are exploiting a critical flaw in F5 BIG-IP Access Policy Manager (APM) that lets them run code on a BIG-IP system witho…

NEWScriticalCVE-2026-850468.8 HIGHThe Hacker Newsabout 1 month ago

Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware

A Chinese threat actor codenamed UTA0565 has been observed exploiting the recently disclosed Google Chrome-Microsoft Windows explo…

NEWSBleeping Computerabout 1 month ago

Ryuk ransomware member sentenced to 24 months in prison

An Armenian man was sentenced to 24 months in prison and 3 years of supervised release for hacking U.S. companies and encrypting t…

NEWSThe Registerabout 1 month ago

Why security belongs in the network

SPONSORED EXPLAINER: Merging security into the network makes enterprise protection more agile

NEWScriticalSecurityWeekabout 1 month ago

Critical F5 BIG-IP Vulnerability Exploited as Zero-Day

Unauthenticated attackers could send malicious traffic to BIG-IP to achieve remote code execution. The post Critical F5 BIG-IP Vul…

NEWScriticalBleeping Computerabout 1 month ago

F5 patches BIG-IP APM zero-day flaw exploited in RCE attacks

F5 has released security updates to address a critical BIG-IP APM zero-day vulnerability being exploited in remote code execution…

NEWShighSecurityWeekabout 1 month ago

ShinyHunters Claims FBI Hack, Demands Retraction of Threat Report

The cybercrime group is unhappy with its description in an FBI report and threatens to leak stolen information. The post ShinyHun…

NEWScriticalThe Hacker Newsabout 1 month ago

Critical Next.js ImageResponse Flaw Can Lead to Server Code Execution via Crafted SVG Input

A new security vulnerability in Next.js could allow attackers to run code on a server via ImageResponse, the feature that generate…

NEWScriticalSecurityWeekabout 1 month ago

Check Point Patches Exploited Management Server Zero-Day

The critical-severity flaw could allow unauthenticated attackers to upload and execute arbitrary scripts. The post Check Point Pat…

NEWSThe Hacker Newsabout 1 month ago

ShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job Applicants

The cyber extortion group known as ShinyHunters on Tuesday claimed it had breached the U.S. Federal Bureau of Investigation and st…

NEWSCyberScoopabout 1 month ago

ShinyHunters claims attack on FBI exposes almost all agents

The FBI jobs site, which was temporarily defaced, remains unavailable and the agency said it’s investigating the claims. The post…

NEWSBleeping Computerabout 1 month ago

Rogue external MFA providers can steal passwords during logins

Security researchers developed an attack that lets hackers with privileged access register a rogue external MFA provider that stea…

NEWSBleeping Computerabout 1 month ago

Sweden fines Miljödata $183,000 over breach affecting 2.2 million

Sweden's data privacy regulator, IMY, has imposed a $183,000 (SEK 1.8 million) fine on IT systems provider Miljödata for inadequat…

NEWShighThe Registerabout 1 month ago

Windows CLOSEDQUORUM malware uses AI models to autonomously select post-compromise actions

'first' publicly documented Windows implant to use LLMs for C2

NEWSCyberScoopabout 1 month ago

After water attacks, Capitol Hill offers its own proposal for an AI-cyber test program

A key House Democrat and his bipartisan sponsors want to see a $100 million DHS pilot to help critical infrastructure owners and o…

NEWShighHackreadabout 1 month ago

ShinyHunters Hacks FBI Jobs Portal, Claims It Stole Agents’ Data

ShinyHunters hacks the FBI Jobs portal and claims sensitive data on nearly all FBI agents and job applicants before the site is ta…

NEWShighBleeping Computerabout 1 month ago

Chinese hackers exploit WordPress, Zyxel flaws to steal govt data

A Chinese-speaking threat actor has been exploiting vulnerabilities in ZyXEL GS1900 Smart Managed Switches and WordPress to steal…

NEWScriticalBleeping Computerabout 1 month ago

ShinyHunters claims FBI hack, data theft in PeopleSoft zero-day breach

The ShinyHunters extortion gang claims it breached FBI systems using a new Oracle PeopleSoft zero-day vulnerability, gaining acces…