Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

2,821 articles

ClickFix Scams Abuse Google, Cloudflare Checks to Deliver 7 Malware Families

Malwarebytes links fake Google and Cloudflare verification pages to shared ClickFix infrastructure delivering StealC, NetSupport a…

NEWSThe Registerabout 1 month ago

Brit supermarket giant triples down on facial recog to nab shoplifters

Up to 150 more stores to get the 'Orwellian' tech by year's end

NEWSHackreadabout 1 month ago

Insignary Closes SBOM Accuracy Gap With Binary-Level Clarity for Regulatory Risk

Toronto, Canada, 6th July 2026, CyberNewswire

NEWSThe Hacker Newsabout 1 month ago

How to Evaluate an AI SOC Platform in 2026: 6 Capabilities That Separate Leaders from Bolt-On AI solutions

Building a shortlist for an AI SOC evaluation can be tough. SIEM, SOAR, and pureplay AI SOC vendors are all saying the same thing.…

NEWSSecurityWeekabout 1 month ago

Prompt Injection Attacks Trick AI Agents Into Making Crypto Payments

Researchers uncovered two campaigns embedding indirect prompt injections in malicious websites to exploit autonomous AI agents bro…

NEWShighThe Hacker Newsabout 1 month ago

Suspected China-Nexus Hackers Use Fake Indian Tax Filing Utility to Deploy DcRAT

A suspected China-nexus threat activity cluster has been observed targeting Indian taxpayers, tax professionals, and corporate fin…

NEWSThe Registerabout 1 month ago

Moody Bible Institute breach leaves 2.3M accounts needing salvation, says cyber expert

ShinyHunters leaks names, addresses, DOBs, and more after Christian college discloses cyberattack

NEWSHackreadabout 1 month ago

AI Can Forge Documents in Minutes – “Looks Right” Is No Longer Enough

Generative AI is making document fraud faster and harder to spot, pushing security teams to verify provenance, signatures and file…

NEWSWired Securityabout 1 month ago

ICE’s Internal Watchdog Is Now Investigating Online Critics

The Office of Professional Responsibility has opened more than 100 cases over what ICE officials call “incidents of doxing and thr…

NEWSThe Registerabout 1 month ago

Secure Unix ancestor KSOS did type safety before Rust made it cool

Modula-based source code resurfaces after nearly four decades

NEWShighCyberScoopabout 1 month ago

Finding vulnerabilities was never the hard part

AI is surfacing vulnerabilities at a scale the industry has never seen, and most organizations have no way to determine which ones…

NEWShighInfosecurity Magazineabout 1 month ago

NCA Issues Warning to Parents As Shared Child Photos Exploited by AI Tools

IWF and NCA warn that growing numbers of images and videos are being manipulated into sexual abuse material

NEWSThe Hacker Newsabout 1 month ago

New TrojPix Attack Leaks Data From Air-Gapped Systems via Video Cable Emissions

Researchers at Shandong University have shown a fast new way to pull data off computers that are cut off from every network. The t…

NEWSInfosecurity Magazineabout 1 month ago

Researchers Claim First Fully Agentic Ransomware: JadePuffer

Researchers have revealed JadePuffer, the first agentic AI-powered ransomware campaign, highlighting how autonomous agents can aut…

NEWSThe Hacker Newsabout 1 month ago

New Java-Based QuimaRAT MaaS Built to Run on Windows, Linux, and macOS

Cybersecurity researchers have flagged a novel Java-based remote access trojan (RAT) called QuimaRAT that's capable of targeting W…

NEWSThe Hacker Newsabout 1 month ago

Opera GX Flaw Let Malicious Sites Auto-Install Mods to Steal Data From Visited Pages

Researchers found a flaw in Opera GX, the gaming-focused version of the Opera browser, that let a malicious website silently insta…

NEWSThe Hacker Newsabout 1 month ago

SkillCloak Lets Malicious AI Agent Skills Evade Static Scanners with Self-Extracting Packing

Scanners meant to catch malicious add-on "skills" for AI coding agents can be fooled by a few simple changes that leave the malwar…

NEWSThe Registerabout 1 month ago

MFA-optional banks leave safe doors (and accounts) wide open for thieves to pillage

Financial institutions are putting their clients at risk in the name of convenience.

NEWSBleeping Computerabout 1 month ago

Flipper Zero firmware development continues with community help

Flipper Devices says development of the Flipper Zero firmware will continue, albeit with a smaller internal team and greater relia…

NEWSBleeping Computerabout 1 month ago

JadePuffer ransomware used AI agent to automate entire attack

Researchers identified what they believe is the first documented case of a ransomware operation, JadePuffer, conducted entirely by…

NEWSThe Hacker Newsabout 1 month ago

U.S. Government Entity Paid Kairos $1 Million in Data-Theft Extortion Case

A U.S. government entity paid about $1 million to keep stolen files from being leaked, according to a new case study by Rakesh Kri…

NEWSHackreadabout 1 month ago

The Lean Expansion Playbook AI Startups Are Using to Build Global Teams

Learn how AI startups use global hiring, EOR partners, and remote systems to access talent, stay compliant, and extend runway effi…

NEWShighThe Hacker Newsabout 1 month ago

North Korean Hackers Publish 108 Malicious Packages and Extensions in PolinRider Campaign

The North Korean threat actors linked to the Contagious Interview campaign have been observed publishing 108 unique packages and w…

NEWSWired Securityabout 1 month ago

Security Roundup: Apple’s Hide My Email Service Fails to Hide Your Email

Plus: Alleged Scattered Spider hacking member extradited, dozens of license plate reader errors, and Indian officials are concerne…

NEWSThe Registerabout 1 month ago

Confidential computing's core trust mechanism is broken. The fix may not exist

Attested TLS: the handshake that can't prove who's on the other end

NEWSThe Hacker Newsabout 1 month ago

Unpatched Flaws Disclosed in Filesystem Bundled Into Millions of Embedded Devices

Security firm runZero has disclosed seven vulnerabilities in FatFs, a small filesystem library that lets a device read and write t…

NEWSHackreadabout 1 month ago

FBI Seizes NetNut Domains as Google Disrupts 2M Device Proxy Network

FBI and Google disrupt NetNut after domains linked to its residential proxy network are seized, exposing abuse of 2 million TVs an…

NEWSCVE-2026-462427.8 HIGHThe Hacker Newsabout 1 month ago

New "Bad Epoll" Linux Kernel Flaw Lets Unprivileged Users Gain Root, Hits Android

A newly disclosed Linux kernel flaw called Bad Epoll (CVE-2026-46242) lets an ordinary user with no special access take full contr…

NEWShighThe Hacker Newsabout 1 month ago

New Avalon Malware Framework Packs CrownX Ransomware Capabilities

Cybersecurity researchers have discovered a previously undocumented modular malware framework codenamed Avalon that's distributed…

NEWSBleeping Computerabout 1 month ago

NetNut proxy network disrupted, 2 million infected devices cut off

A joint operation involving Google has disrupted NetNut, a residential proxy network that gave access to millions of compromised A…