Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,645 articles

NEWScriticalCVE-2026-581389.8 CRITICALSecurityWeekabout 1 month ago

Critical Orkes Conductor Vulnerability Exploited in Attacks

CVE-2026-58138 is an unauthenticated remote code execution vulnerability that attackers can exploit via inline workflow definition…

NEWSInfosecurity Magazineabout 1 month ago

Manufacturing Accounts for 22% of all Ransomware Victims

Black Kite has found that manufacturing remained the most targeted sector for ransomware attacks, and saw a big jump in incidents…

NEWSBleeping Computerabout 1 month ago

Microsoft fixes broken copy and paste for Excel 2016 users

Microsoft has fixed a known issue that causes copy-and-paste failures for some Excel users after installing the September 2026 KB5…

NEWSSecurityWeekabout 1 month ago

MIND Secures $72 Million for AI-Powered DLP

The company will use the funding to accelerate platform development and expand its presence in key enterprise markets. The post MI…

NEWShighSecurityWeekabout 1 month ago

Check Point, Kaspersky, Tanium Patch Product Vulnerabilities

Check Point Security Management and Log Servers are affected by a critical vulnerability that can allow remote code execution with…

NEWShighThe Hacker Newsabout 1 month ago

RatHat Android Malware Abuses ADB to Retain Shell Access After Uninstall

Cybersecurity researchers have flagged a new Android malware called RatHat that's assessed to be operated by China-based threat ac…

NEWSThe Registerabout 1 month ago

USA’s Venezuela takeover comes with bonus exposure to Chinese AI surveillance tech

Think tank points out that companies banned by Washington will help run the regime that Uncle Sam now controls

NEWSThe Registerabout 1 month ago

AI coding agents' 0-click RCE flaw could hand attackers keys to the kingdom

Plugin4Shell attack affects all the major coding agents, researchers say

NEWShighBleeping Computerabout 1 month ago

New RatHat Android malware uses AI to automate device control

A new Android malware called RatHat has been discovered, targeting users with an AI-powered subsystem that helps operators remotel…

NEWScriticalCyberScoopabout 1 month ago

Cisco alerts customers to second actively exploited zero-day in as many days

The latest zero-day has a maximum-severity rating and affects Cisco Identity Services Engine, a product hit with three actively ex…

NEWSThe Registerabout 1 month ago

Researchers find way to listen in on headphones from afar

Eve's dropping in on Alice and Bob

NEWShighCyberScoopabout 1 month ago

The AI hacking apocalypse is not inevitable

While large language models present real risks to society, experts say they can be tested and largely controlled using well-worn c…

NEWSBleeping Computerabout 1 month ago

OpenAI details more cases of AI agents taking unauthorized actions

OpenAI has presented new examples of what they call "AI model misalignment" from the past six months, including unauthorized file…

NEWScriticalThe Hacker Newsabout 1 month ago

Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root

A critical vulnerability in Check Point's Security Management and Log Servers could allow an attacker without login credentials to…

NEWShighThe Registerabout 1 month ago

China's Salt Typhoon backdoors Latin American orgs with new snooping malware

Beware the SparroWocky, my son! The backdoor that bites…

NEWSThe Hacker Newsabout 1 month ago

ThreatsDay: Self-Rewriting Agents, 800+ Flaws Patched, Insider SIM Swaps and 22 More New Stories

Attackers keep finding new keys. The funny part is that defenders keep inventing where to store them. This week, those keys sit i…

NEWSBleeping Computerabout 1 month ago

Brevo supply-chain attack injected ClickFix scripts on customer sites

Brevo confirmed that attackers stole a Cloudflare API key and used it to inject malicious ClickFix scripts into its websites and J…

NEWSSecurityWeekabout 1 month ago

Cyberattacks on Two Oil Tankers Prompt Coast Guard, FBI to Board Vessels

The Coast Guard confirmed evidence of malicious cyber activity on the VL Prosperity, but has not attributed the attack to Iran. Th…

NEWSSecurityWeekabout 1 month ago

OpenAI Says Its Models Searched GitHub for Leaked API Keys During Training

OpenAI published a framework for disclosing model misalignment alongside six reports describing problematic behavior. The post Ope…

NEWScriticalCVE-2026-77179The Hacker Newsabout 1 month ago

Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files

Malicious code running inside a Docker Sandboxes virtual machine on macOS could escape the project directory shared into it and re…

NEWSThe Registerabout 1 month ago

London property manager breach may have exposed bank details and lockbox codes

City Relay says intruders accessed its Metabase Cloud instance twice and extracted customer data

NEWShighInfosecurity Magazineabout 1 month ago

FamousSparrow Swaps SparrowDoor For New SparroWocky Backdoor

ESET said FamousSparrow has replaced SparrowDoor with SparroWocky

NEWShighSecurityWeekabout 1 month ago

CISA Retires Weekly Vulnerability Bulletin in Risk-Based Pivot

The decision follows BOD 26-04, which directs federal organizations to prioritize vulnerabilities based on real-world risk. The po…

NEWShighThe Hacker Newsabout 1 month ago

Iran-Linked Handala Hack Tied to HEAVYGRAM Telegram Backdoor That Can Steal Passwords

The Iran-linked "hacktivist" persona known as Handala Hack has been attributed to a Telegram-based surveillance backdoor called HE…

NEWSBleeping Computerabout 1 month ago

What Recent AI-Powered Attacks Mean for Your Identity Security

AI is making credential theft faster and easier to scale, giving attackers more opportunities to abuse valid identities. Specops e…

NEWScriticalInfosecurity Magazineabout 1 month ago

CISA Urges Critical Infrastructure to Plant Decoys Inside Networks

CISA released guidance on using cyber decoys to detect & disrupt malicious activity inside networks

NEWScriticalSecurityWeekabout 1 month ago

Revolut Data Breach: 5 Months, 680 High-Profile Accounts, $3M Ransom

Revolut allegedly fed customer information to hackers impersonating an Italian government agency for five months. The post Revolut…

NEWSCyberScoopabout 1 month ago

Authorities seize popular, long-running DDoS-for-hire service domains

Cybercriminals used NightmareStresser to launch hundreds of thousands of DDoS attacks since at least 2022. Threat actors behind th…

NEWSBleeping Computerabout 1 month ago

Windows 11 24H2 Home and Pro reach end of support in October

Microsoft reminded customers this week that devices running Windows 11 24H2 Home and Pro editions will stop receiving updates next…

NEWShighInfosecurity Magazineabout 1 month ago

New Chinese-Made ‘RatHat’ Android Malware Leverages AI to Steal Financial Data

Researchers at Zimperium have uncovered a new Android malware strain, dubbed RatHat, with spyware and backdoor capabilities