Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

2,132 articles

NEWScriticalSecurityWeekabout 1 month ago

Ransomware Attack Shuts Down Mills of Australia’s Second-Largest Sugar Producer

Mackay Sugar was targeted in a cyberattack carried out by a threat group known as The Gentlemen. The post Ransomware Attack Shuts…

NEWScriticalSecurity Magazineabout 1 month ago

Breaking Down the Novo Nordisk Data Breach

Experts break down the risks of Novo Nordisk data breach.

NEWSThe Hacker Newsabout 1 month ago

One-Click Microsoft 365 Copilot Flaw Could Have Let Attackers Steal Emails, Files, and MFA Codes

A single click on a trusted Microsoft link could have let an attacker pull emails, calendar details, and indexed files out of Micr…

NEWScriticalSecurity Magazineabout 1 month ago

Maine Data Breach Reporting Portal Abused, Taken Offline

Two organizations had false data breach notices filed against them, causing the Office of the Maine Attorney General to remove its…

NEWShighSecurityWeekabout 1 month ago

Chinese Hackers Target Medical, Military, and AI Research in North America

Google’s Threat Intelligence Group has been tracking the cyberespionage group as UNC6508 since early 2025. The post Chinese Hacker…

NEWSBleeping Computerabout 1 month ago

Vibe coders are gonna vibe code: How CISOs are tackling code sprawl

Employees are increasingly building automations, agents, and apps with AI tools outside traditional security oversight. Tines expl…

NEWSThe Registerabout 1 month ago

PRC-linked spies hid inside medical and military networks for more than a year, snooping through Gmail and stealing data

Google says the intruders were on the hunt for everything from drone tech to pathogens

NEWShighBleeping Computerabout 1 month ago

Chinese hackers breach REDCap servers, steal medical research

A China-linked espionage campaign targeted exposed REDCap servers to deploy the InfiniteRed malware and steal sensitive data from…

NEWScriticalThe Hacker Newsabout 1 month ago

⚡ Weekly Recap: Chrome 0-Day, UniFi Exploits, macOS Stealers, VPN Flaw and More

Stuff broke again. Not in a movie way. An old tool was left exposed. An abandoned package was abused. A deprecated feature was sti…

NEWSHackreadabout 1 month ago

Feds Seize CFAKE and SOCFAKE Over Explicit Deepfakes of Famous Women

Both CFAKE and SOCFAKE (CFAKE.com and SOCFAKE.com) were seized after prosecutors said they hosted nonconsensual nude digital forge…

NEWSThe Registerabout 1 month ago

Arch Linux locks down AUR signups amid wave of malicious commits

Community repo freezes new accounts after attackers swamp it with poisoned package updates

NEWSSecurityWeekabout 1 month ago

NewCore Emerges From Stealth Mode With $66 Million in Funding

The startup has built a security-first identity platform to protect humans, machines, and AI agents. The post NewCore Emerges From…

NEWSBleeping Computerabout 1 month ago

New attack turned Microsoft 365 Copilot into 1-click data theft tool

A critical vulnerability chain dubbed SearchLeak in Microsoft 365 Copilot Enterprise could allow attackers to steal sensitive data…

NEWScriticalBleeping Computerabout 1 month ago

Infinite Campus data breach affects 137,000 school staff accounts

The ShinyHunters extortion gang stole personal information from more than 137,000 school staff accounts in a Salesforce data theft…

NEWShighBleeping Computerabout 1 month ago

Webinar: How behavioral AI stops phishing and account takeovers

Modern phishing, BEC, and account takeover attacks increasingly bypass traditional email defenses and create operational strain fo…

NEWShighHackreadabout 1 month ago

Handala Hacking Group Claims Breach of California Water Service

The Handala hacking group claims it has targeted California Water Service, leaking 5GB of customer database and GPS network files…

NEWSSecurityWeekabout 1 month ago

Ukrainian Man Pleads Guilty in US to Conti Ransomware Charges

Oleksii Oleksiyovych Lytvynenko admitted to working on the development of a loader for the Conti gang. The post Ukrainian Man Plea…

NEWSThe Hacker Newsabout 1 month ago

The Onboarding Password Mistake That Creates Unnecessary Risk

Employee onboarding is a busy time for IT teams. New starters need devices, accounts, access permissions, and passwords, all deliv…

NEWShighSecurityWeekabout 1 month ago

Ozempic Maker Novo Nordisk Says Hackers Breached IT Systems

The pharmaceutical giant says the attackers gained access to personal data stored on the compromised systems. The post Ozempic Ma…

NEWShighSecurityWeekabout 1 month ago

French Government Messaging Platform Breached by Mysterious ‘Misere’ Hacker

French officials say roughly 73,000 government accounts were affected, while the threat actor claims to have stolen messages and u…

NEWSThe Hacker Newsabout 1 month ago

152 Chrome Wallpaper Extensions with 105K Installs Linked to Adware and Fake Traffic

Cybersecurity researchers have discovered a network of 152 Google Chrome extensions that act as new tab live wallpaper add-ons to…

NEWShighSecurityWeekabout 1 month ago

ShinyHunters Claims Council of Europe Hack

The extortion group threatens to leak 297 GB of data allegedly stolen from the Council of Europe, including employee personal info…

NEWSInfosecurity Magazineabout 1 month ago

Cybersecurity Experts Urge US to Lift Ban on Anthropic's Frontier AI Models

Access to two Anthropic large language models, Mythos 5 and Fable 5, has effectively been banned to any non-US nationals by the Tr…

NEWSHackreadabout 1 month ago

Over 50 Android Apps Found Spreading MagicAd Trojan via Official Stores

Over 50 Android apps on official stores spread MagicAd trojan, using system tricks to force background ads even after infected app…

NEWShighThe Hacker Newsabout 1 month ago

Popular WordPress Plugin Scripts Tampered to Plant Hidden Backdoors on Sites

An attacker tampered with trusted JavaScript files used by WordPress sites running PushEngage, OptinMonster, and TrustPulse, turni…

NEWShighSecurityWeekabout 1 month ago

FBI, Google Dismantle ‘Outsider Enterprise’ Phishing Service

The platform used more than 9,000 phishing sites, stealing nearly 4 million credit cards and causing roughly $1.9 billion in losse…

NEWShighInfosecurity Magazineabout 1 month ago

UK Government Finds 400+ Vulnerabilities in AI Hackathons

Government departments find hundreds of vulnerabilities after testing frontier models

NEWSInfosecurity Magazineabout 1 month ago

Maine Takes Breach Reporting Portal Offline After Fake Entries

The Office of the Maine Attorney General has suspended its breach reporting portal

NEWSWired Securityabout 1 month ago

Meta Tapped a Pentagon Supplier to Prototype Face Recognition for Its Glasses

Rank One, whose board includes a former CIA deputy director and a former FBI science chief, supplied face recognition to Meta for…

NEWScriticalSecurityWeekabout 1 month ago

Maine Disables Data Breach Portal Due to Fake Submissions

Someone posted fake VRChat and Discord data breach reports on the system, prompting the Maine AG to take action. The post Maine Di…