Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

2,132 articles

NEWScriticalCVE-2026-352739.8 CRITICALSecurityWeekabout 1 month ago

Google Confirms Exploitation of Oracle PeopleSoft Zero-Day by ShinyHunters

Oracle has mitigated CVE-2026-35273, but it has not publicly confirmed the vulnerability’s in-the-wild exploitation. The post Goog…

NEWSThe Hacker Newsabout 1 month ago

Europol Disrupts AudiA6 Crypto Laundering Service Used by Ransomware Gangs

Authorities in Europe have disrupted AudiA6, a cryptocurrency laundering service used by ransomware gangs and cybercriminal networ…

NEWSBleeping Computerabout 1 month ago

Japanese energy firm loses drive with data of 10.9 million clients

Kyushu Electric Power Co., Inc. has disclosed a physical security incident that affects private data of more than 10 million custo…

NEWScriticalBleeping Computerabout 1 month ago

Maine breach portal abused to publish fake data breach disclosures

In an unusual misinformation campaign, fraudulent data breach disclosures were submitted to Maine's official breach portal and pub…

NEWScriticalCVE-2026-352739.8 CRITICALThe Hacker Newsabout 2 months ago

ShinyHunters Exploits Oracle PeopleSoft Zero-Day (CVE-2026-35273) to Breach Universities

The ShinyHunters extortion crew exploited an unpatched flaw in Oracle PeopleSoft to break into enterprise systems, steal data, and…

NEWSHackreadabout 2 months ago

ShinyHunters Leak 40GB of University of Nottingham Student Data

ShinyHunters hackers leak 40GB of University of Nottingham personal and financial data, allegedly impacting 450,000 students and s…

NEWSWired Securityabout 2 months ago

Grok Is Still Hosting Sexualized Deepfakes of Famous Women

A WIRED investigation found dozens of “nudified” deepfake images and videos on Grok's website, including nonconsensual depictions…

NEWScriticalCVE-2026-352739.8 CRITICALBleeping Computerabout 2 months ago

Oracle mitigates PeopleSoft zero-day exploited in data theft attacks

Oracle is warning about a critical PeopleSoft Suite zero-day vulnerability tracked as CVE-2026-35273 that allows unauthenticated r…

NEWScriticalThe Registerabout 2 months ago

ShinyHunters claims it hacked 100 orgs by exploiting an Oracle PeopleSoft 0-day

University of Nottingham is first of many, Shiny tells The Reg

NEWScriticalThe Registerabout 2 months ago

Microsoft's worst 'Nightmare' unleashes BitLocker bypass 0-day

Another day, another Windows exploit code

NEWSThe Hacker Newsabout 2 months ago

New Attacks Trick OpenClaw AI Agent Into Running Code and Leaking Secrets

Two security teams have shown, in separate research published this week, that OpenClaw, the popular self-hosted AI agent, can be d…

NEWShighThe Hacker Newsabout 2 months ago

New GreatXML Exploit Bypasses Windows BitLocker via Recovery Partition XML Files

Security researcher Chaotic Eclipse (aka Nightmare-Eclipse and MSNightmare) has released a new Windows BitLocker bypass dubbed Gre…

NEWSCyberScoopabout 2 months ago

Russian national charged in connection with Void Blizzard espionage campaign

Denis Obrezko accused of orchestrating cyberattacks that compromised at least 11 U.S. companies as part of the Kremlin-linked grou…

NEWSThe Hacker Newsabout 2 months ago

The Gentlemen Ransomware Claims 478 Victims, Can Spread Like a Worm

A new analysis of The Gentlemen operation has revealed that the financially motivated threat group initially operated as an affili…

NEWShighHackreadabout 2 months ago

Decade-Long SniperDz Phishing Network Disrupted in Operation Ramz

Group-IB, INTERPOL and Algerian Police dismantle decade-old SniperDZ phishing network used to steal credentials, with its alleged…

NEWSWired Securityabout 2 months ago

Drug Sites Hijacked Spotify’s Search Ranking Through Fake Podcasts

A joint congressional report describes a spam operation that turned tens of thousands of fake podcasts into search-engine bait for…

NEWSThe Registerabout 2 months ago

2.4M+ VRChat users’ data accessed following cloud breach

No disclosure via official channels, no offer of identity theft monitoring, no problem

NEWSBleeping Computerabout 2 months ago

Authorities dismantle 'AudiA6' ransomware crypto-laundering service

Law enforcement has dismantled the “AudiA6” cryptocurrency service allegedly used by ransomware actors and other cybercriminals to…

NEWSSecurity Magazineabout 2 months ago

2.4M Impacted by VRChat Breach

An online virtual world platform experienced a data breach.

NEWSInfosecurity Magazineabout 2 months ago

CISA Orders Agencies to Patch by Risk, Not Severity

New CISA directive tells federal agencies to patch by real-world risk, not CVSS severity scores

NEWSSecurity Magazineabout 2 months ago

Identity Crimes Have Become Multi-Layered

Research shows identity crimes are increasingly leading to multiple fraud instances rather than creating isolated events.

NEWSHackreadabout 2 months ago

Criminal IP at Infosecurity Europe 2026: Introducing AITEM, the Next Chapter of Attack Surface Management

Torrance, United States / California, 11th June 2026, CyberNewswire

NEWSBleeping Computerabout 2 months ago

Why AI-driven threats are exposing the limits of MSP security stacks

AI-driven attacks are exposing the limits of fragmented MSP security stacks and slow response workflows. Kaseya breaks down why in…

NEWShighInfosecurity Magazineabout 2 months ago

Cybercriminals Use Fake AI Guides and Dev Tools to Spread AsyncRAT Malware

Fake AI guides hide a multi-stage chain that drops AsyncRAT, with signs of AI-assisted coding

NEWScriticalCVE-2026-352739.8 CRITICALSecurityWeekabout 2 months ago

Oracle Addresses PeopleSoft Vulnerability Amid Reports of Zero-Day Attacks

Oracle has released mitigations for CVE-2026-35273, but it has not said whether it’s a zero-day exploited in ShinyHunters attacks.…

NEWSSecurityWeekabout 2 months ago

Alert Fatigue Is Becoming a Security Threat of Its Own

As alert volumes outpace human capacity, organizations are turning to AI, automation, and deeper context to separate real threats…

NEWSThe Hacker Newsabout 2 months ago

Cybersecurity Stars Awards 2026: Winners Announced Across 95 Categories

Most good security work is invisible by design. Today is the exception. The 2026 Cybersecurity Stars Awards winners are announced…

NEWShighThe Hacker Newsabout 2 months ago

ThreatsDay Bulletin: Worm Code Leaked, AI Agent Phished, Claude Action Patch + 28 New Stories

It's been one of those weeks. You expect the usual noise: recycled malware, sloppy attacks, another easy target getting hit. Inste…

NEWShighHackreadabout 2 months ago

Hackers Use Fake Claude Code Guide and AI PDFs to Spread AsyncRAT Malware

Hackers are using fake Claude Code guide and AI PDFs to spread AsyncRAT malware via Windows attack using PowerShell and Defender…

NEWSSecurityWeekabout 2 months ago

CISA Directs Federal Agencies to Prioritize Security Patches Based on Risk

The new BOD 26-04 requires agencies to review and update vulnerability management policies with a focus on KEV catalog entries. Th…