Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,631 articles

Viral AI actress' hotline face-scans every caller, watches their mood

AI actress Tilly Norwood went viral after glitching into Chinese on Piers Morgan Uncensored last night. Her "Talking Tilly" video…

NEWShighWired Securityabout 1 month ago

Forget the AI Slowdown—the Vulnerability Explosion Is Already Happening

AI labs are toying with an industry-wide pact to slow development. Meanwhile, widely available AI chatbots are already helping unc…

NEWSThe Hacker Newsabout 1 month ago

Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws

Three researchers at the security firm Hacktron used Anthropic's Claude Opus 5 to chain two flaws and take over the ChatGPT and Co…

NEWSCVE-2026-283268.8 HIGHThe Hacker Newsabout 1 month ago

SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE

SolarWinds has released security updates to address a high-severity flaw in Access Rights Manager (ARM) that, if successfully expl…

NEWSWired Securityabout 1 month ago

6 Best VPN Services (2026), Tested and Reviewed

Every VPN says it’s the best, but only some of them are telling the truth.

NEWScriticalCVE-2026-581389.8 CRITICALThe Hacker Newsabout 1 month ago

Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild

A critical vulnerability impacting Orkes Conductor is being actively exploited in the wild, according to Fortinet. The vulnerabil…

NEWSThe Hacker Newsabout 1 month ago

Google Gemini Broke Into Real Company Systems After Security Test Domain Mix-Up

Google's Gemini model has become the latest artificial intelligence (AI) system to access the internet and break into other compan…

NEWSThe Hacker Newsabout 1 month ago

CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories

An attacker copied about 170 of CrowdSec's private GitHub repositories on May 22 using the account of an employee who had just lef…

NEWShighCVE-2025-396829.8 CRITICALThe Hacker Newsabout 1 month ago

CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added three security flaws impacting the Linux kernel t…

NEWSWired Securityabout 1 month ago

Flock Offers Employees Buyouts as Customers Flee

As dozens of cities end contracts for its controversial license plate readers, Flock is rolling out a voluntary severance program,…

NEWSHackreadabout 1 month ago

How to Comply with MiCA Regulations for Crypto Asset Service Providers in the European Market?

MiCA compliance requires crypto firms entering the EU to address authorization, governance, capital, client asset protection and o…

NEWSHackreadabout 1 month ago

Why Small Businesses Shouldn’t Go It Alone With Cloud Migration

Moving business systems to the cloud can look straightforward from the outside. Choose a provider, transfer the data…

NEWSHackreadabout 1 month ago

Local Presence, Global Reach: How Virtual Numbers Support International Customer Communication

Expanding into another country creates a practical communication problem for businesses. Customers may be thousands of miles away,…

NEWSHackreadabout 1 month ago

Integrating AI Tools Into Research Teams: Productivity Benefits and Risks

AI tools are finding a place in research workflows, particularly for tasks such as transcription, summarization, and qualitative…

NEWSCyberScoopabout 1 month ago

Early Scattered Spider member pleads guilty to cybercrime spree

Ahmed Elbadawy pocketed massive proceeds from his crimes. Prosecutors are seeking the forfeiture of about $17.6 million in virtual…

NEWShighThe Hacker Newsabout 1 month ago

Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root

A security researcher has released working exploit code for four Linux kernel flaws that each let a local user gain root, the high…

NEWSCyberScoopabout 1 month ago

Researchers use AI to find widespread software decoder flaw

The bug, since patched, gave attackers remote code execution privileges and access to user accounts and production environments, i…

NEWShighThe Registerabout 1 month ago

Researchers used Claude to hack OpenAI employees' ChatGPT accounts

Agentic exploits for the win (again)

NEWSThe Hacker Newsabout 1 month ago

New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution

WordPress today released patches to fix a new set of vulnerabilities in its core software, one of which could allow a crafted web…

NEWSThe Registerabout 1 month ago

North Korea's fake job interviews infected 30,000 devices

WaterPlum recruiters used bogus coding tests to backdoor jobseekers and raid more than 7,000 crypto wallets

NEWSThe Registerabout 1 month ago

FBI: Fake cop and government impersonation scams cost victims $1.6B

AI, fake uniforms, and mock government offices help crooks sell the con

NEWShighBleeping Computerabout 1 month ago

Gyazo server flaw exploited to steal 23.6 million user records

The Gyazo image-sharing platform has confirmed it suffered a data breach after hackers exploited a server vulnerability that allow…

NEWShighWired Securityabout 1 month ago

An Undercover Google Analyst Infiltrated a Notorious Supply Chain Hacking Gang

TeamPCP pulled off the worst-ever software supply chain hacking spree and breached thousands of companies. Now Google’s threat int…

NEWShighCyberScoopabout 1 month ago

International security agencies warn about North Korean hackers exploiting job seekers to steal crypto, data

The U.S., Japan, Germany and Australia said WaterPlum operators pose as prospective employers and have infected more than 30,000 d…

NEWShighThe Hacker Newsabout 1 month ago

Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repositories for C2

The Pakistan-aligned threat group tracked as Transparent Tribe (aka APT36 and Earth Karkaddan) has been attributed to a fresh set…

NEWSBleeping Computerabout 1 month ago

Fake LastPass Authenticator GitHub repos push new Rapuncel infostealer

An ongoing malware campaign uses SEO-optimized GitHub repositories to impersonate well-known software firms to push a previously u…

NEWScriticalSecurityWeekabout 1 month ago

In Other News: Ransomware Developer Sentenced, Plugin4Shell AI Attack, Critical SAP Flaw

Noteworthy stories that might have slipped under the radar: Mandiant's 2026 AI risk report, PhantomRaven malware used by bug bount…

NEWSBleeping Computerabout 1 month ago

Secure enterprise sharing with access reviews for Microsoft 365

Microsoft 365 makes sharing files easy, but access can remain long after its original purpose has ended, leaving organizations wit…

NEWSBleeping Computerabout 1 month ago

Microsoft Teams will let admins block custom file extensions

Microsoft Teams will soon let administrators tweak the list of file extensions commonly associated with security threats to meet t…

NEWSInfosecurity Magazineabout 1 month ago

New Settra Ransomware Variant Deployed in Attacks on Retail and Manufacturing

Huntress researchers highlighted a new ransomware variant, named Settra, and the post-compromise techniques used in two recent att…