Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,630 articles

Microsoft reminds admins to migrate Entra ID users to passkeys

Microsoft has reminded admins to migrate Entra ID users to phishing-resistant authentication methods to avoid sign-in disruptions…

NEWSSecurityWeekabout 1 month ago

RatHat Android Trojan Uses AI for Automation

The malware relies on AI for real-time device navigation and control, increasing adaptability and evasion. The post RatHat Android…

NEWSThe Registerabout 1 month ago

Clop gets a taste of its own medicine after ShinyHunters hijack leak site

Rival crew demands eight figures and threatens to expose companies that paid to keep quiet

NEWShighHackreadabout 1 month ago

China-Linked FamousSparrow Deploys SparroWocky Backdoor in Latin America

FamousSparrow is targeting Latin American governments with SparroWocky, a new C++ backdoor that exfiltrates files, takes screensho…

NEWShighInfosecurity Magazineabout 1 month ago

ShinyHunters Claim Hack of Rival Ransomware Gang Clop

ShinyHunters has claimed responsibility for hacking the Clop ransomware group, defacing its leak site and alleging theft of key op…

NEWSSecurityWeekabout 1 month ago

Rust Team Members and Popular Crate Owners Targeted via Video Calls

It’s unclear if the attacks are part of previous campaigns against Rust, but the techniques used by the attackers match those used…

NEWSBleeping Computerabout 1 month ago

Microsoft: September updates break File History backup feature

Microsoft warned that the built-in File History backup feature in Windows may stop working on some systems after installing the Se…

NEWSHackreadabout 1 month ago

ClickFix Attacks Spread ChainScript RAT via Fake Spotify and Teams Installers

Blackpoint Cyber found ChainScript, a Node.js RAT spread through fake Spotify, Zoom and Teams installers that uses Polygon smart c…

NEWSSecurityWeekabout 1 month ago

CrowdSec Confirms Source Code Stolen in Supply Chain Attack

The cybersecurity firm believes the data breach was the result of the May 2026 TanStack supply chain attack. The post CrowdSec Con…

NEWSWired Securityabout 1 month ago

US and China Discuss Alerting Each Other to AI National Security Threats

Officials discussed setting up a mechanism for the two countries to notify each other of AI incidents which could threaten nationa…

NEWSThe Registerabout 1 month ago

Rustaceans warned of job interviews with a malicious payload

Attackers are courting crate owners with plausible company profiles and booby-trapped recruitment calls

NEWSSecurityWeekabout 1 month ago

Colorado Water Utilities Hit by Cyberattacks Targeting OT Systems

The hackers changed equipment settings, disabled remote access and alarms, and altered pumping cycles, officials said. The post C…

NEWShighSecurityWeekabout 1 month ago

Organizations Warned of 3 Exploited Linux Kernel Vulnerabilities

Attackers could exploit the flaws to cause denial-of-service conditions, disclose memory, or modify memory. The post Organizations…

NEWSInfosecurity Magazineabout 1 month ago

Experts Alarmed Over Gyazo’s Breach of 490 Million Metadata Records

A breach at image-sharing service Gyazo on September 11 affected over 23 million customers

NEWShighInfosecurity Magazineabout 1 month ago

Revolut Customers Targeted with New Wave of Phishing Attacks

Following a major data breach, Revolut customers are being sent convincing phishing messages

NEWSThe Hacker Newsabout 1 month ago

ClickFix Lures Deploy ChainScript RAT Using Polygon to Rotate C2 Infrastructure

Threat actors are leveraging ClickFix-like lures to deliver a previously undocumented remote access trojan (RAT) called ChainScrip…

NEWSSecurityWeekabout 1 month ago

Google Confirms Gemini AI Breached Three Firms

Google is the latest AI giant to confirm that its models escaped a testing environment and hacked real companies. The post Google…

NEWShighThe Hacker Newsabout 1 month ago

Jade Sleet Linked to Indian IT Provider Breach With FLATROOF and ROOFDECK Backdoors

The North Korean threat actor known as Jade Sleet has been attributed to the compromise of an India-based "much smaller organizati…

NEWSBleeping Computerabout 1 month ago

Malicious npm packages evade install-script defenses at runtime

An ongoing npm malware campaign involving the 'indexed-btree' package shows how threat actors bypass supply chain defenses by hidi…

NEWSBleeping Computerabout 1 month ago

Researchers escape OpenAI Codex sandbox to run commands on host

Researchers escaped OpenAI's Codex sandbox two ways, one running commands on a developer's machine from its most locked-down mode.…

NEWShighHackreadabout 1 month ago

ShinyHunters Hacks and Defaces Clop Ransomware Leak Site

ShinyHunters hacked and defaced Clop's ransomware leak site, replacing its content with ShinyHunters branding as its own onion sit…

NEWSBleeping Computerabout 1 month ago

BragJack attacks hijack AI browser agents through malicious extensions

BragJack, a proof-of-concept attack from Forever Security's Gal Weizman, hijacks the AI assistants in Chrome, Edge, Opera Neon, Pe…

NEWSSecurityWeekabout 1 month ago

TigerByte Cyber Emerges From Stealth With $3 Million in Funding

The company has secured over $7 million in contracts with US government agencies, including the US Space Force, the US Navy, and D…

NEWSThe Registerabout 1 month ago

Agentic security is the billion-dollar challenge for some clever startup to solve

High time to stop kicking the security can down the road, investor tells The Reg

NEWShighBleeping Computerabout 1 month ago

North Korean WaterPlum hackers infected 30,000 devices worldwide

A joint law enforcement advisory warns that the North Korean hacking group WaterPlum compromised at least 30,000 devices worldwide…

NEWShighBleeping Computerabout 1 month ago

ShinyHunters hacks Clop leak site, threatens to extort ransomware gang

The ShinyHunters extortion gang breached the Clop (aka Cl0p) ransomware operation's data leak site, defacing the Tor site and alle…

NEWSThe Hacker Newsabout 1 month ago

Identity Visibility in 2026: The Foundation of Identity Security

Identity visibility is a starting point for modern identity security, because stolen and misused credentials are among the most fr…

NEWSBleeping Computerabout 1 month ago

Calling viral AI actress Tilly Norwood? Agree to a face scan first

AI actress Tilly Norwood went viral after glitching into Chinese on Piers Morgan Uncensored last night. Her "Talking Tilly" video…

NEWSBleeping Computerabout 1 month ago

Viral AI actress' hotline face-scans every caller, watches their mood

AI actress Tilly Norwood went viral after glitching into Chinese on Piers Morgan Uncensored last night. Her "Talking Tilly" video…

NEWShighWired Securityabout 1 month ago

Forget the AI Slowdown—the Vulnerability Explosion Is Already Happening

AI labs are toying with an industry-wide pact to slow development. Meanwhile, widely available AI chatbots are already helping unc…