Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,648 articles

NEWScriticalSecurityWeekabout 1 month ago

Revolut Data Breach: 5 Months, 680 High-Profile Accounts, $3M Ransom

Revolut allegedly fed customer information to hackers impersonating an Italian government agency for five months. The post Revolut…

NEWSCyberScoopabout 1 month ago

Authorities seize popular, long-running DDoS-for-hire service domains

Cybercriminals used NightmareStresser to launch hundreds of thousands of DDoS attacks since at least 2022. Threat actors behind th…

NEWSBleeping Computerabout 1 month ago

Windows 11 24H2 Home and Pro reach end of support in October

Microsoft reminded customers this week that devices running Windows 11 24H2 Home and Pro editions will stop receiving updates next…

NEWShighInfosecurity Magazineabout 1 month ago

New Chinese-Made ‘RatHat’ Android Malware Leverages AI to Steal Financial Data

Researchers at Zimperium have uncovered a new Android malware strain, dubbed RatHat, with spyware and backdoor capabilities

NEWSSecurityWeekabout 1 month ago

Comp AI Raises $34 Million for AI-Native Compliance and Security

The company plans to expand into continuous cybersecurity, offering security testing across applications and infrastructure. The p…

NEWScriticalThe Registerabout 1 month ago

Cisco drops another exploited zero-day, this time a perfect 10

ISE authentication bypass under active attack just days after another Cisco zero-day sent admins scrambling to patch

NEWShighSecurityWeekabout 1 month ago

ISC Patches 14 Vulnerabilities in BIND 9 Security Update

Attackers could exploit the flaws to increase resource usage, trigger an unexpected program exit, or terminate the named process.…

NEWScriticalCVE-2026-81642The Hacker Newsabout 1 month ago

Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS Zone

Every release of the Unbound DNS resolver before 1.26.1 has a critical heap overflow in its DNSSEC validator, maintainer NLnet Lab…

NEWScriticalSecurityWeekabout 1 month ago

Ransomware Attacks on Manufacturers Surge as Supply Chain Risk Grows

Research shows attacks on manufacturers rose 40% in early 2026, as ransomware groups increasingly exploit the supply-chain disrupt…

NEWSSecurityWeekabout 1 month ago

Cisco Fixes Dozens of Flaws Across FMC, ISE and Nexus Dashboard

The vulnerabilities may lead to root access, command execution, bypasses, SQL injection, and remote code execution. The post Cis…

NEWSInfosecurity Magazineabout 1 month ago

Cyber Essentials Has Record Year but Takeup Remains Low

New government figures reveal a 20% annual increase in certifications

NEWShighThe Hacker Newsabout 1 month ago

Can You Prove a New CVE Is Exploitable Before Attackers Do? Learn How in This Webinar

A new CVE drops. Your scanner finds it. The severity score looks ugly. But that still does not answer the question that matters:…

NEWSBleeping Computerabout 1 month ago

US takes down NightmareStresser DDoS-for-hire platform

The U.S. Federal Bureau of Investigation (FBI) seized the domains used by NightmareStresser, one of the world's longest-running di…

NEWSThe Registerabout 1 month ago

Test environment let anyone access live customer data

Even a temporary staging server needs to be locked down.

NEWScriticalInfosecurity Magazineabout 1 month ago

Cisco Warns of Active Exploitation of Critical ISE Flaw

Cisco urged ISE customers to apply a software update, as well as check for signs of exploitation

NEWSThe Hacker Newsabout 1 month ago

CISO's Expert Guide to Agentic Pentesting for Websites

Attackers now weaponize new vulnerabilities in about five days (Mandiant, part of Google Cloud). The median organization takes 43…

NEWSThe Registerabout 1 month ago

Ofcom discovers issuing Online Safety Act fines is easier than collecting them

Platforms comply just enough to avoid being blocked, leaving the regulator chasing debt

NEWShighThe Hacker Newsabout 1 month ago

China-Aligned FamousSparrow Deploys SparroWocky Backdoor Across Latin America

The China-aligned state-sponsored threat actor known as FamousSparrow has been observed deploying a previously unreported backdoor…

NEWSCyberScoopabout 1 month ago

America’s cyber strategy overlooks the infrastructure that actually keeps the military moving

Ports, railroads, and utilities keep the military operational. They're all vulnerable to Iranian cyberattacks. The post America’s…

NEWSThe Hacker Newsabout 1 month ago

OpenAI Reveals Six Model Incidents Involving Hidden Failures and Unauthorized Uploads

OpenAI on Wednesday disclosed six new instances of "unexpected or concerning model behavior" that took place over the past six mon…

NEWShighBleeping Computerabout 1 month ago

Chinese hackers use SparroWocky malware in govt espionage attacks

The China-linked espionage group FamousSparrow has been using a new backdoor named SparroWocky in attacks on government organizati…

NEWSWired Securityabout 1 month ago

Flock Once Touted Its Cameras as ‘Made in the USA.’ Now It’s Not So Clear

Flock reveals little about where its license plate readers are assembled, but the answer could have geopolitical and cybersecurity…

NEWSInfosecurity Magazineabout 1 month ago

AI Agent Carries Out Multi-Stage Data Theft Attack

Spanish data protection agency AEPD reveals the country’s first AI-powered data breach

NEWSBleeping Computerabout 1 month ago

Microsoft shares workaround for Windows domain login issues

Microsoft shared a temporary fix on Wednesday for a known issue that prevents Windows 11 users from logging in with valid domain c…

NEWSThe Hacker Newsabout 1 month ago

BIND 9 Update Fixes 14 Flaws, Including an Unauthenticated Crash Over DNS-over-HTTPS

The Internet Systems Consortium (ISC) has released BIND 9.20.29 and 9.21.26 to fix fourteen security flaws it disclosed on 16 Sept…

NEWSSecurityWeekabout 1 month ago

CISA Releases Guidance on Deploying Cyber Decoys

Complementing Zero Trust models, decoys enable organizations to detect, observe, and block malicious activity in their environment…

NEWSSecurityWeekabout 1 month ago

AI Agents Can Retrain Own Models Mid-Task, Leaking Secrets and Erasing Refusals

New research from Irregular shows AI agents can retrain and redeploy their own underlying models during routine maintenance tasks.…

NEWSThe Hacker Newsabout 1 month ago

Gyazo Breach Exposes 23.62 Million User Records and 490 Million Image Metadata Records

A security breach at Gyazo, Helpfeel's image-sharing service, exposed about 23.62 million user records, including email addresses…

NEWScriticalBleeping Computerabout 1 month ago

Cisco warns of max severity ISE zero-day exploited in attacks

Cisco has released security updates to address a maximum-severity Identity Services Engine vulnerability that attackers are active…

NEWScriticalCVE-2026-7646010.0 CRITICALThe Hacker Newsabout 1 month ago

Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacks

Cisco has warned of a fresh maximum-severity security flaw impacting Identity Services Engine (ISE) that has come under active exp…