Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,625 articles

NEWSInfosecurity Magazineabout 1 month ago

AI Incident Response Readiness Lags Behind AI Adoption, ISACA Finds

A new report by ISACA found that 71% of orgs have not run AI incident response exercises as teams face rising pressure

NEWSBleeping Computerabout 1 month ago

Webinar tomorrow: Inside real-world Google Workspace breaches

Tomorrow's webinar examines real Google Workspace breaches involving social engineering and malicious OAuth applications, from ini…

NEWScriticalCVE-2026-8629610.0 CRITICALBleeping Computerabout 1 month ago

D-Link warns of max severity zero-day bug in DIR-822A routers

D-Link warned customers of a maximum-severity vulnerability (CVE-2026-86296) with public proof-of-concept (PoC) exploit code and n…

NEWSThe Hacker Newsabout 1 month ago

AI Agents Are Rewriting the Rules of Lateral Movement

Security teams have spent decades asking whether an identity has too much access. AI agents raise a harder question: how can we de…

NEWScriticalCVE-2026-9395210.0 CRITICALThe Hacker Newsabout 1 month ago

New CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setups

Attackers are exploiting a new flaw in on-premises VeloCloud Orchestrator (VCO), the server that manages the Edge devices in a Vel…

NEWSSecurityWeekabout 1 month ago

Only 13% of OT Network Segments Are Fully Isolated: Analysis

Forescout’s new network segmentation research shows that OT and medical devices often share network segments with other enterprise…

NEWSInfosecurity Magazineabout 1 month ago

Network Segmentation Failures Are Expanding the Corporate Attack Surface

Forescout warns that incomplete network segmentation is widening the potential blast radius of attacks

NEWShighSecurityWeekabout 1 month ago

Recent ZyXEL Switch Vulnerability Exploited by Chinese Hackers

A Chinese threat actor has exploited the bug to exfiltrate sensitive information from nearly 1,000 ZyXEL switches. The post Recent…

NEWSThe Hacker Newsabout 1 month ago

DORA Year Two: Can Your SOC Actually See the Attack?

When the Digital Operational Resilience Act (DORA) became enforceable across the European Union in January 2025, it triggered an a…

NEWSCVE-2026-897759.3 CRITICALThe Hacker Newsabout 1 month ago

New Linux Kernel Flaw Gives ARM64 KVM Guests Read-Write Access to Host Memory

A new flaw in the Linux kernel's KVM virtualization code for ARM64 processors can leave a freed piece of host memory exposed to a…

NEWSSecurityWeekabout 1 month ago

Malicious B-tree NPM Package Accumulates Millions of Downloads

Posing as the legitimate sorted-btree package, indexed-btree hides a malware trigger in its prototype method. The post Malicious B…

NEWSCVE-2026-656608.8 HIGHThe Hacker Newsabout 1 month ago

SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCE

A SharePoint Server vulnerability that Microsoft initially classified as a spoofing flaw with a CVSS score of 6.5 actually enables…

NEWShighHackreadabout 1 month ago

New TASK#STOMP Windows Backdoor Enables Continuous Document Theft

TASK#STOMP Windows backdoor uses PowerShell, scheduled tasks and runtime C# compilation to steal business documents and maintain r…

NEWSInfosecurity Magazineabout 1 month ago

AI Drives Surge in Bot and API Threats

Akamai report warns of increase in bot traffic, API threats, chatbot leaks and other AI-related threats

NEWShighSecurityWeekabout 1 month ago

WordPress Patches ‘Click2Shell’ Vulnerability

The bug lets attackers automatically install and preview themes and could lead to remote code execution. The post WordPress Patche…

NEWSCyberScoopabout 1 month ago

Another worry for water systems: infostealer exposure

SpyCloud’s study found 1,787 of the approximately 10,000 U.S. organizations had it, including one infected device that saved login…

NEWShighWired Securityabout 1 month ago

A New Tool Found Malware That’s Guided by an AI Hive Mind—No Humans in Sight

Cisco Talos researchers created a new framework for identifying malware and hacking tools that rely on AI chatbots—and quickly dis…

NEWScriticalBleeping Computerabout 1 month ago

New Windows Defender zero-day blocks Microsoft antivirus updates

Over the weekend, security researcher Abdelhamid Naceri (also known as Nightmare Eclipse) released another Microsoft Defender zero…

NEWSThe Hacker Newsabout 1 month ago

Malicious npm Package indexed-btree Hid Its Loader in Runtime Code Before Removal

A malicious npm package named "indexed-btree" has been observed hiding its malicious behavior within application code rather than…

NEWSInfosecurity Magazineabout 1 month ago

CISOs Must Update Incident Response Playbooks for Multimodal Deepfakes, Gartner Warns

Gartner warns that CISOs must update incident response playbooks as AI-powered deepfakes make social engineering attacks more conv…

NEWSWired Securityabout 1 month ago

How to Use AI With Your Privacy Intact

Your conversations with AI chatbots are both highly personal and deeply vulnerable to surveillance. Here’s how you can protect you…

NEWShighBleeping Computerabout 1 month ago

CISA orders feds to patch Zyxel flaw exploited for data theft

Attackers are now actively exploiting a high-severity vulnerability in Zyxel GS1900 series switches, according to the U.S. Cybers…

NEWSSecurityWeekabout 1 month ago

Japan Dismantles First North Korean Laptop Farm as US and Allies Detail Wider Scheme

The US, Japan, Germany and Australia have published a joint report detailing the scope of North Korea’s WaterPlum campaign. The po…

NEWShighThe Hacker Newsabout 1 month ago

SideCopy Broadens India Targeting to Academia With ReverseRAT Spear-Phishing

The threat actor known as SideCopy has been observed using spear-phishing lures to target academic institutions in India, expandin…

NEWShighThe Hacker Newsabout 1 month ago

One Hidden Meta Muse Setting Could Let Attackers Turn the AI Assistant Into a Backdoor

Malware already running on a Mac can quietly take over Meta's Muse assistant and use the broad access its owner granted the app, s…

NEWSCVE-2026-934857.1 HIGHThe Hacker Newsabout 1 month ago

WordPress Comment2Shell Flaw Can Turn Anonymous Comment XSS Into RCE via Admin Session

A new flaw in WordPress core let an anonymous visitor leave a comment that planted a hidden script on the page. If a logged-in adm…

NEWShighCVE-2026-72738.8 HIGHThe Hacker Newsabout 1 month ago

Zyxel and Veeam Flaws Under Active Exploitation With Command and SYSTEM Access

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a now-patched security flaw impacting Zyxel GS190…

NEWSSecurityWeekabout 1 month ago

US Proposes AI Incident Alert System in Talks With China, Bessent Says

Trump has resisted calls to slow down AI development, saying that would help China catch up to U.S. companies. The post US Propose…

NEWSHackreadabout 1 month ago

Using Paybis as a Crypto On-Ramp in 2026: Fees, Wallets and Checks

Paybis offers crypto on-ramp and off-ramp services with cards, bank transfers and wallets. Learn about its fees, verification, sec…

NEWSThe Registerabout 1 month ago

Anthropic-linked CVEs pile up, attackers mostly shrug

Of 225 flaws found by Glasswing and tracked by VulnCheck researcher, just one has confirmed exploitation in the wild