Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,623 articles

Volexity spots another China-aligned threat group exploiting Chrome and Microsoft defects

The threat group Volexity tracks as UTA0565 showcased a variance in tactics, but it used the same exploit kit as multiple Chinese…

NEWScriticalCVE-2026-936169.8 CRITICALThe Hacker Newsabout 1 month ago

Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks

Attackers exploited a previously unknown flaw in Check Point's Security Management Server in a handful of targeted attacks on July…

NEWShighBleeping Computerabout 1 month ago

New ClosedQuorum Windows malware uses AI for attack decisions

A new Windows malware named ClosedQuorum uses Google Gemini, DeepSeek, Qwen, and Mistral AI models to autonomously determine the a…

NEWScriticalThe Hacker Newsabout 1 month ago

WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers

WordPress has fixed a critical flaw in its core software that lets an attacker with no account make a site load a PHP file from ou…

NEWSThe Hacker Newsabout 1 month ago

Malicious npm Package Poses as Twilio Bug-Bounty Probe, Can Exfiltrate Credentials

Cybersecurity researchers have disclosed details of a malicious npm package named "tw-pkgprobe-7731" that masquerades as a securit…

NEWShighSecurityWeekabout 1 month ago

BigCommerce Data Stolen via Ribon Apps Hack

The attackers used a compromised BigCommerce application key held by Ribon to access customer data. The post BigCommerce Data Stol…

NEWShighThe Registerabout 1 month ago

ShinyHunters claims FBI hack: 'This is NOT financially motivated'

This time it's personal

NEWSBleeping Computerabout 1 month ago

Reducing shadow IT visibility gaps with Wazuh

Shadow IT can leave security teams unaware of unmanaged endpoints, unauthorized software, and other assets that fall outside exist…

NEWShighThe Hacker Newsabout 1 month ago

Microsoft Takes Down EvilTokens Device-Code Phishing Service Tied to 12,000 Inbox Compromises

Microsoft on Tuesday announced the takedown of the EvilTokens device code phishing service that it said used artificial intelligen…

NEWShighHackreadabout 1 month ago

RatHat Android Malware Uses AI to Target Banking Credentials in Real Time

RatHat Android malware uses generative AI to navigate infected devices, steal banking credentials, intercept OTP codes and reinsta…

NEWShighSecurity Magazineabout 1 month ago

Gemini AI Autonomously Hacked 3 Companies, Google Confirms

Three more companies were compromised due to an enterprise AI breach.

NEWScriticalCVE-2026-908989.8 CRITICALThe Hacker Newsabout 1 month ago

Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials

A critical vulnerability in Bifrost, an open-source AI gateway that routes requests to more than 20 LLM providers, allows an unaut…

NEWScriticalThe Registerabout 1 month ago

NightmareEclipse's latest zero-day leaves Microsoft Defender stuck in the past

BigDiskBuster leaves Microsoft's antivirus running but unable to install updates

NEWScriticalBleeping Computerabout 1 month ago

Check Point warns of Management Server zero-day exploited in attacks

Check Point Software released emergency hotfixes to address a critical Security Management Server vulnerability that could let att…

NEWScriticalThe Hacker Newsabout 1 month ago

Researcher Drops BigDiskBuster Zero-Day PoC That Blocks Microsoft Defender Updates

A zero-day proof-of-concept tool that stops Microsoft Defender from installing platform and signature updates by filling all avail…

NEWSThe Registerabout 1 month ago

Z.ai says sorry for slurping up your code, open sources ZCode

China’s AI darling goes on the defense after engineer highlighted Grok-esque security flaws

NEWShighHackreadabout 1 month ago

MovieReaper Malware Uses The Odyssey Torrents to Infect Users Worldwide

MovieReaper malware spreads through compromised Odyssey torrents, infecting hundreds of victims while using Solana to locate comma…

NEWSCyberScoopabout 1 month ago

Citing China, President Trump doubles down on hands-off approach to AI regulation

Following a series of chaotic agentic hacks, Trump and administration officials have consistently expressed fears of Chinese AI do…

NEWSBleeping Computerabout 1 month ago

EvilTokens PhaaS disrupted after compromising 12,000 Microsoft accounts

The EvilTokens platform that compromised more than 12,000 Microsoft accounts at over 10,000 organizations has been disrupted in an…

NEWShighThe Registerabout 1 month ago

UK Cops arrest 2 EvilTokens suspects, Microsoft seizes 50 phishing kit websites

Used by crims to compromise 12K+ email inboxes across 10K+ global orgs

NEWSThe Registerabout 1 month ago

Who signed off on that AI agent? Nobody? Thought so.

SPONSORED FEATURE: AI agents may be unpredictable. Who they are, what they can do, and who owns them shouldn’t be.

NEWSCyberScoopabout 1 month ago

Microsoft and partners disrupt EvilTokens, a comprehensive cybercrime service for financial fraud

The popular phishing-as-a-service platform used AI throughout the attack chain, allowing cybercriminals to steal tokens for accoun…

NEWSSecurity Magazineabout 1 month ago

Trump Announces AI Force, Security Leaders Discuss

Trump intends to establish a federal AI force.

NEWSSecurityWeekabout 1 month ago

Cyera Raises $400 Million at $12+ Billion Valuation

The data security company received the new investment from Goldman Sachs Alternatives, extending its Series G funding round. The p…

NEWSInfosecurity Magazineabout 1 month ago

North Korean Attackers Hit 30,000 Devices and Steal $10.7m

WaterPlum compromised 30,000 devices and took funds or credentials from 7000 crypto wallets

NEWSSecurity Magazineabout 1 month ago

Why Security Needs to Stay Alert in the ShinyHunters, Clop Feud

Security leaders are encouraged to remain alert for escalating and evolving threats.

NEWShighSecurityWeekabout 1 month ago

Nightmare Eclipse Drops New Microsoft Defender Exploit After Revealing Identity

Abdelhamid Naceri, a former Microsoft Germany employee, is the exploit leaker Nightmare Eclipse, aka Chaotic Eclipse. The post Ni…

NEWSHackreadabout 1 month ago

Aembit Launches Support for Okta Cross App Access, Extending Enterprise Identity Controls to AI Agents

Silver Spring, Maryland, USA, 22nd September 2026, CyberNewswire

NEWSInfosecurity Magazineabout 1 month ago

AI Incident Response Readiness Lags Behind AI Adoption, ISACA Finds

A new report by ISACA found that 71% of orgs have not run AI incident response exercises as teams face rising pressure

NEWSBleeping Computerabout 1 month ago

Webinar tomorrow: Inside real-world Google Workspace breaches

Tomorrow's webinar examines real Google Workspace breaches involving social engineering and malicious OAuth applications, from ini…