Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,450 articles

NEWSHackread4 days ago

Arrakis Security Report Finds 76% of AI Agents Are Dormant but Keep Their Credentials and Connections

New York, NY, USA, 21st October 2026, CyberNewswire

NEWSThe Hacker News4 days ago

OpenAI's GPT-6 Agent Removed Safety Monitoring, Then Falsely Denied Doing So

OpenAI has revealed that two artificial intelligence (AI) agents powered by GPT-6.1 Sol and one GPT-6 Astra weakened misalignment…

NEWSBleeping Computer4 days ago

OpenAI agents disabled safety monitoring, one lied about it

OpenAI agents powered by the GPT-6.1 Sol and GPT-6 Astra models weakened misalignment monitoring during two internal tasks, interp…

NEWSSecurity Magazine4 days ago

CISO Burnout Isn’t a Personal Problem — It’s Organizational

Security magazine tackles the issue of CISO burnout alongside Chris Bevil, global cyber resilience and AI leader at Commvault.

NEWSKrebs on Security4 days ago

Widespread PHP Flaw May Cause Many Site Outages Today

Expect to see quite a few websites serving "404" or "Page Not Found" errors today: Nearly 70 percent of websites need to update th…

NEWScriticalThe Register4 days ago

PHP devs publish critical bug fix as site owners warned: Pull 'em offline if you're unpatched

Websites down as precaution as exploits have already been published

NEWShighInfosecurity Magazine4 days ago

New PhaaS Platform Uses AI to Craft Phishing Lures and Mask Malicious Activity

Researchers have uncovered Athena StealthRoute, a phishing-as-a-service platform featuring an AI Studio that generates phishing lu…

NEWSSecurityWeek4 days ago

‘Context Bombs’ Cut AI Attack Success by Misleading Agents With Fake Targets

Deceptive prompts lure AI agents into decoys and dead ends, cutting attack success by up to 91% in tests and raising the cost of a…

NEWScriticalHackread4 days ago

PHP Releases Emergency Fixes for Critical PHP2Shell Vulnerabilities

PHP releases emergency PHP2Shell fixes for two critical flaws allowing unauthenticated code execution. Website owners and hosting…

NEWShighSecurityWeek4 days ago

High-Severity Flaws Exploited in Three Days as Ransomware Dominates Q3: Rapid7

Rapid7’s Q3 analysis finds high-severity flaws exploited within three days on average, while AI appeared in just 8% of tracked inc…

NEWScriticalWired Security4 days ago

‘This Is Not a Drill’: Critical PHP Vulnerabilities Are Setting the Internet on Fire

The PHP Foundation has revealed two serious vulnerabilities that could impact millions of websites. Security experts warn that fai…

NEWScriticalCVE-2026-109618Bleeping Computer4 days ago

PHP ships emergency patches for critical PHP2Shell flaws

The PHP security team released emergency security patches for two critical remote code execution (RCE) vulnerabilities (CVE-2026-1…

NEWSBleeping Computer4 days ago

ClickFix has never been bigger, and AI tools are its most convincing lure yet

ClickFix attacks are surging as cybercriminals use fake AI installers, malicious search results, and trusted chatbot platforms to…

NEWSInfosecurity Magazine4 days ago

Symantec Uncovers AI Agent Hijacking Models for Autonomous Cyber-Attacks

Researchers at Symantec have uncovered an AI agent designed to operate a full cyber-attack without human intervention

NEWShighWired Security4 days ago

AI Guardrails Aren’t Stopping Criminal Hackers

Hackers around the world are all-in on using agentic AI to wage attacks—and manipulating tools like Anthropic’s Claude to help the…

NEWScriticalThe Hacker News4 days ago

PHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge

PHP has released emergency updates that fix two critical flaws in the language itself, letting an attacker without an account run…

NEWScriticalCyberScoop4 days ago

Prepare yourselves: PHP to release emergency fixes for 2 critical vulnerabilities

The project overseeing the programming language is releasing patches Wednesday, with the internet racing to patch the 9.2 rated fl…

NEWSSecurityWeek4 days ago

Asymptote Labs Lands $5.5 Million Seed for AI Agent Runtime Security

Asymptote Labs raises $5.5M seed led by Tower Research Ventures to commercialize its Beacon AI agent runtime security platform. Th…

NEWSThe Hacker News4 days ago

Google Chrome Adds ClickFix Warnings to Stop Users From Running Malicious Commands

Google on Tuesday said it's rolling out improved safeguards in its Chrome browser to secure users against ClickFix attacks when En…

NEWSHackread4 days ago

INC and The Gentlemen Ransomware Affiliates Expose 8,257 AI Messages

SOCRadar has found seven exposed servers linked to INC and The Gentlemen ransomware affiliates, holding AI chats, stolen…

NEWSSecurityWeek4 days ago

Memory Bugs Account for Most of Chrome’s 353 New Security Fixes

The update fixes 353 flaws, including 163 memory corruption and 125 use-after-free vulnerabilities. The post Memory Bugs Account f…

NEWSWired Security4 days ago

A Design Flaw in Share Links Exposes Users’ Personal Conversations With Meta’s Muse

The company is suspending the feature after security researchers discovered how easy it was to access sensitive information shared…

NEWSSecurityWeek4 days ago

OpenAI Agents Silenced Security Team Alerts, Removed Misalignment Monitor

In two internal incidents, agents read routine coding instructions as permission to weaken monitoring, and one gave a false answer…

NEWSBleeping Computer4 days ago

Microsoft PowerToys adds CursorHide, Button Lock mouse tools

Microsoft has released PowerToys 0.102, with two new mouse utilities, new command-line tools, and Command Palette improvements. [.…

NEWShighThe Hacker News4 days ago

China-Aligned Bronze Sandcastle Abuses Sandboxie DLL Sideloading to Deploy Backdoors

Cybersecurity researchers have disclosed details of a previously undocumented China-aligned threat cluster known as Bronze Sandcas…

NEWSThe Register4 days ago

AI has 'potential' to turn script kiddies into sophisticated infrastructure attackers

Consider this the wake-up call

NEWScriticalInfosecurity Magazine4 days ago

Ransomware Attacks Rise as Rival Gangs Vie For Market Supremacy

Cybercriminal groups The Gentlemen and Qilin dominate ransomware attacks - and both are evolving their tactics in an attempt to ou…

NEWSThe Hacker News4 days ago

Generative AI Is Erasing Behavioral Tells, Weakening Behavior-Only Detection, Proofpoint Reports

Generative AI has changed what a malicious email looks like. Messages that once gave themselves away through clumsy wording, gener…

NEWSThe Register4 days ago

Nvidia picks OpenShell to tame AI gents

Give your agents freedom to do useful work by locking them down

NEWSSecurityWeek4 days ago

Browsers Block eMudhra Intermediate CAs Over Recoverable Private Keys

The private keys associated with eight certificates were compromised, and root programs and trust stores are blocking them. The po…