Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

2,132 articles

ShinyHunters is actively extorting universities after exploiting an unpatched Oracle flaw

Oracle still hasn't patched the vulnerability the group has been using in its attacks since late May. The post ShinyHunters is act…

NEWShighSecurity Magazineabout 1 month ago

Security Experts Discuss Validity of Handala’s Cal Water Hacking Claim

Handala claims to have the ability to disrupt U.S. water supply, but what is the truth?

NEWSSecurity Magazineabout 1 month ago

Security Experts Discuss the Claude Fable 5 Launch

The model does not come without risks. Security experts share their perspective on this launch.

NEWScriticalHackreadabout 1 month ago

ShinyHunters Target Universities in Oracle PeopleSoft Zero-Day Attack

Google says ShinyHunters exploited Oracle PeopleSoft zero-day to steal data from 100+ organisations, with universities making up m…

NEWSBleeping Computerabout 1 month ago

Early Warning Signs of Supply-Chain Attacks Live in the Dark Web

GitHub access sales, leaked repositories, and stolen API keys can all become supply-chain attack footholds. Flare explores how und…

NEWSInfosecurity Magazineabout 1 month ago

Ransomware Payment Crypto Laundering Platform Taken Out by FBI and Europol

Domain of dark web money laundering platform AudiA6 seized and suspects arrested in joint operation by the FBI, Europol and others

NEWSThe Registerabout 1 month ago

Novo Nordisk reports cyberattack as UK gives Wegovy pill the nod

Clinical trial participant data stolen, but pharma giant says exposed records were pseudonymized

NEWSHackreadabout 1 month ago

The SpaceX Pre-IPO Market: How Crypto Rails Are Opening Synthetic Access

SpaceX Pre-IPO demand is growing as crypto exchanges offer synthetic exposure to its reported $1.75T valuation without direct equi…

NEWSThe Registerabout 1 month ago

Microsoft has mostly repaired a flaw in Surface hardware that allowed unprotected devices to be bricked by a single packet

And it was Microsoft Copilot that unwittingly revealed the longstanding vulnerability

NEWSInfosecurity Magazineabout 1 month ago

GitHub to Update npm to Thwart Software Supply Chain Attacks

NPM, part of GitHub, announced a new version of the npm package manager with several security improvements, including disabling in…

NEWSSecurityWeekabout 1 month ago

Industry Reactions to Claude Fable 5: Feedback Friday

Industry professionals comment on various aspects of Fable 5, including dual-use capabilities, safeguards, and tiered access. The…

NEWShighThe Registerabout 1 month ago

Google fires sueball at alleged Chinese phishers over AI-powered fraud ops

Telegram-based 'Outsider Enterprise' accused of sending millions of scam texts and impersonating trusted brands

NEWSThe Hacker Newsabout 1 month ago

Agentjacking Attack Tricks AI Coding Agents Into Running Malicious Code

Cybersecurity researchers have described what they say is a new class of attack that can trick artificial intelligence (AI) coding…

NEWSCyberScoopabout 1 month ago

CyberCorps is adapting to AI. The budget isn’t keeping up.

CyberCorps is evolving to tackle AI threats. But budget cuts could derail it before the work even starts. The post CyberCorps is a…

NEWSBleeping Computerabout 1 month ago

Microsoft fixes Windows update failures linked to WUSA installer

Microsoft has fixed a known issue that caused Windows updates released since May 2025 to fail when installed via the Windows Updat…

NEWShighSecurityWeekabout 1 month ago

Iranian Cyber Group Handala Claims Cal Water Hack

The hackers published 5GB of data, including customer personal information and credentials for the RTKBase platform. The post Iran…

NEWSThe Hacker Newsabout 1 month ago

Rethinking MDR as Attackers and Defenders Embrace AI

For most of the past decade, managed detection and response was the answer to a real problem. Security teams couldn't staff around…

NEWShighInfosecurity Magazineabout 1 month ago

Over 80% of Sports Organizations Targeted by Hackers in the Last Year

As the FIFA World Cup 2026 kicks off, a new Darktrace report warns that sports teams and bodies are a major target for cyber crimi…

NEWSThe Registerabout 1 month ago

Plymouth council exposes hundreds in latest local government email gaffe

Authority admits mass message to home-schooling families revealed recipients' addresses, prompting ICO report and apology

NEWSThe Registerabout 1 month ago

UK digital ID gets brain trust to 'challenge' ministers on policy

CEO of Mumsnet among the six-member team

NEWSBleeping Computerabout 1 month ago

Pharma giant Novo Nordisk discloses breach of clinical trials data

Danish pharmaceutical giant Novo Nordisk, the world's largest producer of insulin, disclosed a data breach affecting patient infor…

NEWSHackreadabout 1 month ago

Feds Seize AudiA6 and Dark2Web in $389M Crypto Laundering Case

Feds seized AudiA6 and Dark2Web in a major crypto laundering case, arresting two suspects linked to over $389M in alleged illicit…

NEWSThe Hacker Newsabout 1 month ago

LangGraph Flaw Chain Exposes Self-Hosted AI Agents to Remote Code Execution

Cybersecurity researchers have disclosed details of three now-patched security flaws impacting LangGraph, including a critical vul…

NEWShighSecurityWeekabout 1 month ago

Ivanti Sentry Exploitation Attempts Hitting Honeypots

The critical-severity OS command injection vulnerability allows attackers to execute arbitrary code with root privileges. The post…

NEWShighSecurityWeekabout 1 month ago

Chrome 149 Update Patches 28 Vulnerabilities

The browser refresh resolved critical and high-severity security defects, including a dozen use-after-free bugs. The post Chrome 1…

NEWSThe Registerabout 1 month ago

BOFH: For one ambitious security type, chaos is a ladder

Mission Control sends its regards

NEWShighThe Hacker Newsabout 1 month ago

INTERPOL Operation Takes Down Sniper Dz Phishing Platform, Arrests Administrator

An INTERPOL-led operation last month resulted in the disruption of Sniper Dz, a decade-long phishing-as-a-service (PhaaS) platform…

NEWSSecurityWeekabout 1 month ago

Anthropic Disputes Fable 5 AI Jailbreak

An AI hacker claims to have achieved a prompt-based jailbreak shortly after Fable 5’s launch, but Anthropic says it’s not a real j…

NEWScriticalBleeping Computerabout 1 month ago

CISA orders feds to patch actively exploited Ivanti flaw by Sunday

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) ordered government agencies to patch an actively exploited Ivanti…

NEWSBleeping Computerabout 1 month ago

Over 73,000 French govt employees affected in Tchap messenger breach

The French government revealed that a recent breach of its Tchap encrypted messaging platform affects the accounts of over 73,000…