Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

2,822 articles

NEWShighThe Hacker Newsabout 1 month ago

Researcher Analyzes 3,000 Live ClickFix Payloads, Exposing API-Driven Malware Delivery

ClickFix, the trick that fools people into running malware by hand, has quietly grown a back office. New research shows the malic…

NEWSSecurity Magazineabout 1 month ago

Nearly Half of Organizations Lack "Full" Visibility Into Employee AI Usage

A recent report by Bitdefender analyzed employee AI tool usage.

NEWSCVE-2026-84517.5 HIGHThe Hacker Newsabout 1 month ago

Citrix Patches Six NetScaler Flaws Allowing File Read and Denial-of-Service

Citrix on Tuesday released security updates to address multiple flaws in NetScaler ADC (formerly Citrix ADC) and NetScaler Gateway…

NEWSBleeping Computerabout 1 month ago

Anthropic to restore Claude Fable access on Wednesday

Anthropic has confirmed that the Department of Commerce has lifted export controls on Claude's two most powerful models, Fable 5 a…

NEWSBleeping Computerabout 1 month ago

Anthropic rolls out Sonnet 5 with near-Opus 4.8 performance at a lower price

Anthropic is now rolling out Sonnet 5, and it's almost as good as the Opus range, but it is designed to be cheaper than the compan…

NEWSBleeping Computerabout 1 month ago

New BioShocking attack manipulates AI browser into data theft

A new prompt injection attack dubbed "BioShocking" could trick AI-powered browsers into treating real-world risky actions as part…

NEWSCyberScoopabout 1 month ago

Citrix patches a new NetScaler flaw with echoes of CitrixBleed

The bulletin includes six NetScaler issues, but attention is centered on a high-severity flaw with similarities to earlier activel…

NEWSBleeping Computerabout 1 month ago

Microsoft accelerates quantum-safe roadmap as risks grow

Microsoft announced today that it is accelerating its quantum-safe security roadmap, saying advances in quantum computing are brin…

NEWShighBleeping Computerabout 1 month ago

Malicious PyPI packages give hackers control of Telegram bot servers

A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram forks t…

NEWSCyberScoopabout 1 month ago

Trump budget boss Russell Vought open to re-staffing CISA

DHS Secretary Markwayne Mullin has been floating the idea of adding back 600 CISA personnel after deep Trump administration cuts.…

NEWSThe Registerabout 1 month ago

Infosec professionals sour on automated pentesting tools

29% of security pros were open to fully autonomous pentesting last year; now only 9% are

NEWSThe Hacker Newsabout 1 month ago

Microsoft Warns Poisoned MCP Tool Descriptions Can Make AI Agents Leak Data

New Microsoft research shows how attackers can hijack AI agents that act on a user's behalf, using nothing more than a poisoned to…

NEWSThe Hacker Newsabout 1 month ago

RustDuck Botnet Rebuilds in Rust to Hijack Routers and Servers for DDoS

A new two-stage malware family called RustDuck is hijacking home routers, IP cameras, Android boxes, and poorly secured servers, t…

NEWSHackreadabout 1 month ago

New EvilTokens Attack Exposes Browser Visibility Gap in Enterprise SOCs

EvilTokens phishing hides takeover clues until browser execution leaving SOC teams needing deeper visibility to validate threats f…

NEWSThe Registerabout 1 month ago

Huntress CEO says threat hunter used 'poor judgment' in alerting ransomware crim about law enforcement probe

Ex-employee claims this 'meets the definition of an insider threat'

NEWSHackreadabout 1 month ago

Modern Enterprises: How to Evaluate the Security and Compliance of Office Software

Learn how modern businesses can judge office software for ISO 27001 certification, GDPR-aligned data handling, encryption, and saf…

NEWScriticalInfosecurity Magazineabout 1 month ago

Nissan Discloses Employee Data Breach Linked to Oracle Zero-Day

Nissan says employees' data was stolen via the Oracle PeopleSoft zero-day campaign

NEWShighCVE-2026-330179.8 CRITICALThe Hacker Newsabout 1 month ago

Langflow RCE Exploited to Deploy Monero Miner on Exposed AI App Endpoints

Threat actors are continuing to exploit a critical Langflow vulnerability as part of fresh attacks designed to deliver a Monero cr…

NEWSBleeping Computerabout 1 month ago

Fake Perplexity extension on Chrome Web Store tracked searches

A malicious extension in the Chrome Web Store is masquerading as the Perplexity AI answer engine, intercepting search traffic and…

NEWSThe Hacker Newsabout 1 month ago

Silent Swap Crypto Clipper Uses Fake Google Notes Extension to Replace Wallet Addresses

Cybersecurity researchers have flagged an active browser extension campaign that is designed to steal cryptocurrency by stealthily…

NEWScriticalInfosecurity Magazineabout 1 month ago

Critical SimpleHelp Vulnerability Exploited For Malware Delivery

Attackers exploited a critical SimpleHelp RMM bug to deploy TaskWeaver and Djinn Stealer malware

NEWScriticalCyberScoopabout 1 month ago

DHS to unveil replacement council for critical infrastructure cybersecurity

The Department of Homeland Security is bringing back a key cybersecurity information sharing effort with critical infrastructure,…

NEWShighHackreadabout 1 month ago

Hackers Use Fake FIFA World Cup 2026 T-Shirt Offers to Spread Voidrift Malware

A fake FIFA World Cup 2026 T-shirt giveaway scam is spreading Voidrift malware through personalized emails using company logos and…

NEWSHackreadabout 1 month ago

NDSS Symposium Heads to Seoul in 2027 to Expand Global Cybersecurity Collaboration

DC, United States, 30th June 2026, CyberNewswire

NEWSHackreadabout 1 month ago

Reflectiz to Host Webinar, Joined by Taboola, on Securing Third-Party Marketing in the AI Era

Boston, Massachusetts, 30th June 2026, CyberNewswire

NEWSThe Hacker Newsabout 1 month ago

GuardFall Exposes Open-Source AI Coding Agents to Decades-Old Shell Injection Risks

The safety check that is supposed to stop an AI coding agent from running a dangerous command can be walked straight past using a…

NEWSBleeping Computerabout 1 month ago

Lessons from the Underground: How to Combat Business Email Compromise

Business Email Compromise is more than an email scam. It's a coordinated operation involving compromised accounts, financial resea…

NEWScriticalCVE-2026-338257.8 HIGHSecurityWeekabout 1 month ago

BlueHammer Vulnerability Exploited in Ransomware Attacks

The Microsoft Defender vulnerability CVE-2026-33825 was exploited in the wild as a zero-day before patches were released. The post…

NEWSThe Hacker Newsabout 1 month ago

282 iOS AI Apps Leak API Keys and Open AI Proxy Access in Network Traffic Study

Researchers tested 444 AI chatbot apps for iPhone and found that 282 of them, nearly two-thirds, exposed paid AI access through th…

NEWSSecurity Magazineabout 1 month ago

Security Organizations Reveal Threat Management Fails to Match Visibility

A recent report by Filigran analyzes the gap between threat visibility and threat management.