Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

2,131 articles

Suno, Paidwork Data Breaches Affect Tens of Millions of Accounts

Hackers leaked names, email addresses, phone numbers, passwords, and financial information stolen from the two platforms. The pos…

NEWSCVE-2026-482947.4 HIGHThe Hacker News3 days ago

Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data

Cybersecurity researchers have disclosed details of a now-patched vulnerability chain in the Adobe Acrobat Chrome extension that h…

NEWSInfosecurity Magazine3 days ago

TrickBot Ditches HTTP for DNS Tunneling in Latest Variant

New TrickBot variant hides C2 communication inside DNS queries, replacing decade-old HTTP pattern

NEWScriticalSecurity Magazine3 days ago

55M Impacted by Suno Data Breach

Suno, an AI music generation tool, was breached.

NEWSSecurityWeek3 days ago

Palo Alto Networks to Acquire Observability Platform Provider Embrace

Acquisition follows January's Chronosphere deal, deepening Palo Alto Networks' push beyond core security into observability. The p…

NEWSSecurityWeek3 days ago

Flaw in Adobe Extension With 300M Installs Enabled WhatsApp Data Theft

An attacker only needed to convince the targeted user to visit a malicious website to exfiltrate WhatsApp messages and contacts. T…

NEWSBleeping Computer3 days ago

New InfraTrust report reveals infrastructure flaws admins should patch first

Eclypsium has launched InfraTrust, a new infrastructure cybersecurity knowledge base and monthly InfraTrust Pulse report designed…

NEWSSecurityWeek3 days ago

When Identity Verification Fails: Lessons from a Real-World SIM Swap and Near Account Takeover

Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge. The pos…

NEWSBleeping Computer3 days ago

Adobe Chrome extension flaw let sites access private WhatsApp chats

The Adobe Acrobat extension for Chrome could be used to access conversations and data rendered in WhatsApp Web without any form of…

NEWSHackread3 days ago

AppViewX Arms Enterprise CLM Teams for Post-Quantum Migration and AI Adoption in Latest Product Release

New York, United States, 22nd July 2026, CyberNewswire

NEWSThe Register3 days ago

Sneaky Windows stealer targets 300+ apps, gives crims an AI profiler to maximize profits

Move over Flipper. There's a new Dophin X in town

NEWSSecurityWeek3 days ago

StrongestLayer Raises $4.1 Million in Seed Funding Extension

The startup will use the fresh investment to accelerate its go-to-market strategy and to expand its platform. The post StrongestLa…

NEWShighSecurityWeek3 days ago

Vibe-Coded Apps Riddled With Exploitable Security Flaws

Analysis found 434 exploitable flaws in AI-generated apps, with denial-of-service, authorization and secrets exposure risks among…

NEWShighCVE-2026-290597.5 HIGHThe Hacker News3 days ago

Hackers Exploit Windmill Flaw to Read Arbitrary Server Files Without Authentication

A high-severity security flaw impacting open-source developer platform Windmill has come under active exploitation in the wild, pe…

NEWSThe Hacker News4 days ago

The Fastest Path to AI Adoption Runs Through Security

Security leaders who build fast, visible paths to AI adoption are becoming the most valued partners in their organizations. AI gov…

NEWSThe Register4 days ago

Greedy ransomware crews return for seconds after victims cough up first extortion payments

Some never saw their files again either, infosec biz Proofpoint finds

NEWScriticalBleeping Computer4 days ago

CISA orders urgent action on actively exploited Langflow RCE flaw

The Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday ordered U.S. government agencies to prioritize patching an…

NEWShighInfosecurity Magazine4 days ago

Open AI Claims Its AI Models Went Rogue and Hacked Another Company

Hugging Face recently disclosed a security breach. OpenAI has now said that it was its AI models which broke containment and hacke…

NEWShighCVE-2026-505229.8 CRITICALSecurityWeek4 days ago

Fourth SharePoint Vulnerability Exploited in Past Month’s Wave of Attacks

CVE-2026-50522 is being exploited by threat actors to steal machine keys and retain long-term access. The post Fourth SharePoint V…

NEWSThe Hacker News4 days ago

Why Modern SOCs Need Multi-Layered Detections

The cycle is over. For years, cybersecurity followed a familiar pattern: defenses improved, attackers adapted, and the back-and-fo…

NEWShighHackread4 days ago

New Ubuntu Desktop Vulnerability Turns Local Access Into Root Control

A vulnerability in snap-confine lets an unprivileged user gain root access on affected Ubuntu Desktop systems. Install the latest…

NEWSBleeping Computer4 days ago

Stop renting storage space — this lifetime 2TB plan is yours for $59

Cloud storage costs tend to creep up over time, since most services charge monthly or annually for as long as you use them. FileJu…

NEWShighInfosecurity Magazine4 days ago

Ubuntu snap-confine Vulnerability Enables Local Root Access

New Ubuntu snap-confine race condition lets local users escalate to root on default installs

NEWSBleeping Computer4 days ago

Microsoft to stop Exchange 2016 / 2019 security updates in October

Microsoft has reminded customers that it will stop shipping security updates for Exchange 2016 and 2019 through the Extended Secur…

NEWSInfosecurity Magazine4 days ago

Google Makes CodeMender Available as Managed AI Security Agent

CodeMender actively builds and runs exploits in customer-managed sandboxes to verify if vulnerabilities are truly exploitable

NEWSWired Security4 days ago

States Want ICE Agents to Show Their Faces. The Trump Administration Is Blocking Them

Federal lawyers say anti-mask laws would endanger immigration agents, citing an ICE face-recognition art project that doesn’t actu…

NEWSSecurityWeek4 days ago

Endpoint Security Firm Glow Launches With $180M in Funding at $1.2B Valuation

Using AI, the startup provides adaptive prevention through environment mapping, risk analysis, and automated policy enforcement. T…

NEWShighSecurityWeek4 days ago

Oracle Patches Over 1,400 Vulnerabilities With Quarterly Security Updates

Many of the vulnerabilities fixed with the July 2026 Critical Patch Update were likely discovered by AI. The post Oracle Patches O…

NEWSSecurityWeek4 days ago

Ransomware Group Threatening to Leak Data Stolen From Coca-Cola’s Fairlife

The Anubis ransomware group claims to have stolen 1 TB of confidential data from the Coca-Cola subsidiary. The post Ransomware Gro…

NEWSThe Register4 days ago

Council worker spared prison after four-day data-snooping spree

Herefordshire employee handed suspended sentence for breach of Computer Misuse Act