Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

2,132 articles

After AI Reaches Production: 12 Ways Security Teams Can Take Control

Security teams need more than visibility into AI applications, they need a repeatable framework for monitoring, investigating, and…

NEWSInfosecurity Magazineabout 2 months ago

New Fable 5 Is a "Mythos-Class" LLM Available to All, Anthropic Announces

Anthropic unveils Claude Mythos 5 and Fable 5, a restricted-access frontier AI model and guardrailed version for everyone to use

NEWSThe Hacker Newsabout 2 months ago

Your Automated Pentest Looks Clean. See What It Missed in This Expert Webinar

Your pentest report looks clean. That might be the problem. Run automated pentesting long enough, and the new findings start to d…

NEWSInfosecurity Magazineabout 2 months ago

Over a Quarter of Identity Crime Victims Hit by Multiple Incidents, ITRC Data Shows

Nearly 26% of identity crime victims faced multiple incidents in the past year, as ITRC warns of a growing "multi-layered crisis"

NEWSWired Securityabout 2 months ago

Soccer Fans, You’re Being Watched

From anti-drone tech to face recognition, 2026 World Cup stadiums in the US, Canada, and Mexico are subjecting fans to an array of…

NEWSWired Securityabout 2 months ago

Mapping Every Flock License Plate Reader Near US World Cup Stadiums

Most US World Cup stadiums are surrounded by surveillance cameras. Want to know if you’re being watched on your way to a match? Th…

NEWSWired Securityabout 2 months ago

Amnesty International Warns That World Cup Fans Face Potential Human Rights Violations

The organization claims that the FIFA tournament could have impacts on the rights of local people and visiting soccer fans in all…

NEWScriticalBleeping Computerabout 2 months ago

Microsoft patches YellowKey, GreenPlasma, MiniPlasma zero-days

On Tuesday, Microsoft patched two zero-day vulnerabilities that let attackers gain SYSTEM privileges on fully patched Windows syst…

NEWShighSecurityWeekabout 2 months ago

ServiceNow Patches Vulnerability Exploited Against Some Customers

The company updated hosted customer instances to patch a security issue it reportedly had known about since April 7. The post Serv…

NEWScriticalThe Hacker Newsabout 2 months ago

Microsoft Patches Record 206 Flaws, Including Three Zero-Days and Critical RCE Bugs

Microsoft on Tuesday released fixes for a record 206 security vulnerabilities impacting its software portfolio, including three fl…

NEWScriticalHackreadabout 2 months ago

Microsoft June 2026 Patch Tuesday Fixes 206 Flaws and 3 Zero-Days

Microsoft’s June 2026 patch Tuesday resolves 206 vulnerabilities, including 3 critical zero-days and severe 9.8 CVSS kernel, netwo…

NEWScriticalSecurityWeekabout 2 months ago

Critical Vulnerabilities Patched in Fortinet, Ivanti Products

Two OS command injection flaws can be exploited remotely, without authentication, for arbitrary code execution. The post Critical…

NEWShighInfosecurity Magazineabout 2 months ago

Microsoft Fixes 200 CVEs in June Patch Tuesday

Microsoft has patched 200 vulnerabilities including three zero-days

NEWShighSecurityWeekabout 2 months ago

ICS Patch Tuesday: Vulnerabilities Fixed by Siemens, Schneider, Phoenix Contact

In addition, Rockwell Automation announced some enhancements to its SecureOT cybersecurity solution for OT. The post ICS Patch Tue…

NEWSThe Hacker Newsabout 2 months ago

Anthropic Releases Claude Fable 5, Its Most Powerful AI Yet, With Cyber Safeguards

On June 9, Anthropic released Claude Fable 5, the most capable model it has ever made, generally available. It also did something…

NEWShighThe Hacker Newsabout 2 months ago

ServiceNow Flaw Exploited to Gain Unauthorized Access to Customer Instances

ServiceNow has warned about a security incident in which unknown threat actors exploited a flaw to obtain deeper unauthorized acce…

NEWShighSecurityWeekabout 2 months ago

No Patch Planned for Exploited Arista EOS Vulnerability

Organizations are advised to apply vendor-supplied mitigations or discontinue the vulnerable devices. The post No Patch Planned fo…

NEWSBleeping Computerabout 2 months ago

Ivanti: Max severity Sentry flaw allows code execution as root

Ivanti has patched two critical vulnerabilities in its Sentry secure mobile gateway solution, including a maximum-severity flaw th…

NEWScriticalThe Hacker Newsabout 2 months ago

Microsoft Defender RoguePlanet Zero-Day Grants SYSTEM Access on Updated Windows

The anonymous security researcher going by the name Chaotic Eclipse (aka Nightmare-Eclipse) has released a proof-of-concept (PoC)…

NEWShighThe Hacker Newsabout 2 months ago

Six Proto6 Vulnerabilities in protobuf.js Expose Node.js Apps to RCE and DoS

Cybersecurity researchers have flagged half a dozen vulnerabilities in protobuf.js, a JavaScript and TypeScript implementation of…

NEWSBleeping Computerabout 2 months ago

Anthropic rolls out Claude Fable 5, but it's available for a limited time

Anthropic has begun rolling out a new model called "Fable," which is based on the same underlying model as Mythos, its most powerf…

NEWScriticalBleeping Computerabout 2 months ago

Microsoft Defender 'RoguePlanet' zero-day grants SYSTEM privileges

A security researcher has released a new Microsoft Defender zero-day exploit named "RoguePlanet" just hours after Microsoft fixed…

NEWShighThe Registerabout 2 months ago

AI is making Patch Tuesday (kinda) fun again

Unless you're an admin or vulnerability manager – then you're totally screwed

NEWShighKrebs on Securityabout 2 months ago

A Record-Breaking Patch Tuesday for June 2026

Microsoft today released software updates to plug nearly 200 security holes across its Windows operating systems and supported sof…

NEWSBleeping Computerabout 2 months ago

ServiceNow discloses security incident exposing customer data

ServiceNow is warning about a security incident after attackers exploited an unauthenticated access flaw through a vulnerable API…

NEWShighBleeping Computerabout 2 months ago

OpenClaw AI agent found falling for phishing attacks, spills user data

Phishing simulation on an OpenClaw email agent with various configuration profiles showed that it was susceptible to tactics commo…

NEWShighCyberScoopabout 2 months ago

Microsoft breaks Patch Tuesday record with 206 vulnerabilities

Fears and warnings about a roaring flood of error-riddled software have materialized. And the disease is spreading. The post Micro…

NEWScriticalBleeping Computerabout 2 months ago

SAP fixes critical flaws in NetWeaver and Commerce Cloud

SAP has released fixes for 15 vulnerabilities as part of its June 2026 Security Patch package, including four critical-severity fl…

NEWShighSecurityWeekabout 2 months ago

Microsoft Patches 200 Vulnerabilities

Three of the vulnerabilities fixed with the latest Patch Tuesday updates were publicly disclosed before Microsoft addressed them.…

NEWSBleeping Computerabout 2 months ago

Microsoft releases Windows 10 KB5094127 extended security update

Microsoft has released the Windows 10 KB5094127 extended security update, which fixes the June 2026 Patch Tuesday vulnerabilities…