Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

2,821 articles

FortiBleed Credential Theft Connected to INC and Lynx Ransomware

FortiBleed, the Fortinet credential theft campaign, is now connected to INC Ransom and Lynx, with a Nextcloud zero-day vulnerabili…

NEWSThe Registerabout 1 month ago

Ctrl+Alt+Oops: FortiBleed criminal's logins stitch two gangs together

Researchers scoured logs, finding opsec fail for at least one person who was working with INC and Lynx simultaneously

NEWSCyberScoopabout 1 month ago

Alleged longstanding member of Scattered Spider extradited to US

Peter Stokes boasted on social media about the luxurious globetrotting life he enjoyed while he was still a child. The post Allege…

NEWSThe Hacker Newsabout 1 month ago

ThreatsDay: AI Compute Hijacking, Apple Email Flaw, BlueHammer Ransomware + 14 Stories

This week’s security news is mostly about weak spots. Browsers, bots, sandboxes, AI systems, and email flows all show the same pr…

NEWSBleeping Computerabout 1 month ago

Google loses final appeal to overturn €4.1 billion EU fine

Court of Justice of the European Union (CJEU) has dismissed Google's final appeal against a €4.1 billion ($4.7 billion) antitrust…

NEWShighSecurityWeekabout 1 month ago

New CitrixBleed Vulnerability Exploited Immediately After Public Disclosure

Hackers are targeting NetScaler appliances using public PoC code to retrieve arbitrary memory content in the HTTP response. The po…

NEWShighThe Registerabout 1 month ago

Microsoft said exploitation was 'less likely' ... but CISA just added SharePoint RCE to KEV list

Attackers need little more than a valid SharePoint account to execute code on vulnerable on-prem servers

NEWSBleeping Computerabout 1 month ago

ConsentFix and ClickFix: How Microsoft 365 Accounts are Hijacked in 3 Seconds

ConsentFix and ClickFix attacks steal Microsoft 365 tokens in seconds using fake prompts and OAuth flows. Learn how these MFA bypa…

NEWSSecurityWeekabout 1 month ago

How to Conduct a Successful Audit of AI-Driven Software Development

As AI-generated code becomes commonplace, CISOs need new audit strategies to measure developer practices, govern AI tool usage, an…

NEWShighThe Hacker Newsabout 1 month ago

ToddyCat-Linked Umbrij Malware Abuses OAuth to Access Gmail via Google API

The threat actor known as ToddyCat has been attributed to a new malware called Umbrij that's designed to gain surreptitious access…

NEWSThe Registerabout 1 month ago

Pacemaker manufacturer Medtronic warns patients cybercrooks may have swiped health data

Company that also makes insulin pumps and other devices tells users what was exposed months after ShinyHunters attack

NEWScriticalInfosecurity Magazineabout 1 month ago

Researcher Behind 'Exploitarium' Explains Release of Undisclosed Zero-Day Exploits

Infosecurity spoke with the researcher who dumped over 30 proof-of-concept exploits without disclosing the vulnerabilities first

NEWScriticalSecurityWeekabout 1 month ago

FortiBleed Campaign Linked to INC, Lynx Ransomware Attacks

Researchers say credentials harvested from hundreds of thousands of FortiGate firewalls are being used to facilitate ransomware at…

NEWSBleeping Computerabout 1 month ago

Microsoft fixes bug that removed Copilot buttons in Outlook

Microsoft has fixed a known issue causing the Copilot Chat or Copilot buttons in Classic Outlook to disappear for Windows users wi…

NEWShighInfosecurity Magazineabout 1 month ago

Cybercriminals Pose as Interpol in Phishing Emails to Infect Victims With Ransomware

Bitdefender researchers warned of curious ransomware campaign which has targeted businesses around the world

NEWSThe Registerabout 1 month ago

India gives WhatsApp three days to defend username rollout amid security fears

Government of the messenger's largest market demands a pause while Meta explains how it plans to stop impersonators

NEWShighBleeping Computerabout 1 month ago

Cisco finally confirms attackers exploiting Unified CM flaw

Cisco confirmed that attackers are now exploiting a Unified Communications Manager (Unified CM) vulnerability patched in early Jun…

NEWSThe Hacker Newsabout 1 month ago

Identity Lifecycle Management Wasn't Built for AI Agents

Identity lifecycle management was architected around a person with an employment record, a manager, and a departure date. AI agent…

NEWSSecurityWeekabout 1 month ago

Trump Administration Lifts Restrictions on Anthropic’s Claude Models After Cybersecurity Alarm

Anthropic said Tuesday night that its AI model called Claude Fable 5 is now widely available. The post Trump Administration Lifts…

NEWScriticalBleeping Computerabout 1 month ago

CISA: Microsoft SharePoint RCE flaw now actively exploited

CISA warned on Wednesday that attackers have begun exploiting a high-severity Microsoft SharePoint remote code execution vulnerabi…

NEWShighSecurityWeekabout 1 month ago

Cisco Confirms In-the-Wild Exploitation of Unified CM Vulnerability

A PoC exploit has been available since public disclosure, and the first exploitation attempts were observed last week. The post Ci…

NEWSBleeping Computerabout 1 month ago

Opera rolls out Paste Protect feature to fight ClickFix attacks

Opera has introduced Paste Protect, a security feature designed to block ClickFix-style attacks that trick users into executing ma…

NEWSSecurityWeekabout 1 month ago

‘BioShocking’ Attack Tricks AI Browsers Into Stealing Credentials

Researchers show how context manipulation can cause agentic browsers to abandon safety guardrails and exfiltrate sensitive credent…

NEWScriticalThe Registerabout 1 month ago

Oracle E-Business Suite was under attack via critical flaw before the public exploit code was even released

Attackers appear to have reverse-engineered Big Red's patch

NEWScriticalCVE-2026-456598.8 HIGHSecurityWeekabout 1 month ago

CISA Warns of Actively Exploited Microsoft SharePoint Vulnerability

CISA says threat actors are exploiting a recently patched SharePoint remote code execution vulnerability (CVE-2026-45659). The po…

NEWSHackreadabout 1 month ago

Sysdig Details JADEPUFFER, the First Documented Agentic Ransomware Operation

A new Sysdig report traces how an LLM agent abused a Langflow flaw, stole credentials, reached production MySQL, and destroyed Nac…

NEWSInfosecurity Magazineabout 1 month ago

NCSC Shares Tips on How to Make a Pen Tester’s Job Harder

The NCSC has shared best practice advice from pen testers which could help improve system resilience

NEWScriticalThe Hacker Newsabout 1 month ago

AI Agent Exploits Langflow RCE to Automate Database Ransomware Attack

Security firm Sysdig says it has found what it believes is the first ransomware attack run from start to finish by an AI agent. I…

NEWShighBleeping Computerabout 1 month ago

Alleged Scattered Spider hacker extradited to the United States

A dual United States and Estonian citizen has been extradited to the U.S. to face charges alleging he was a member of the Scattere…

NEWSInfosecurity Magazineabout 1 month ago

Alleged Scattered Spider Member Extradited to US

A teenager accused of hacking as part of Scattered Spider has been arrested