Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

2,131 articles

Researchers Build Self-Replicating AI Worm That Operates Entirely on Local, Open-Weight Models

University of Toronto researchers have built and tested a proof-of-concept AI-driven computer worm that uses a locally hosted open…

NEWScriticalCVE-2026-116458.8 HIGHThe Hacker Newsabout 2 months ago

Chrome V8 Zero-Day CVE-2026-11645 Exploited in the Wild - Patch Now

Google has released security updates to address 74 vulnerabilities, including one that has come under active exploitation in the w…

NEWSSecurityWeekabout 2 months ago

Over 100 NPM, PyPI Packages Hit in New Shai-Hulud Supply Chain Attacks

The most recent variants of the self-propagating attacks are named Miasma and Hades. The post Over 100 NPM, PyPI Packages Hit in N…

NEWSThe Hacker Newsabout 2 months ago

The Hidden Security Risk in Modern Networks: The Work Between Tools

Organizations have more visibility than ever. Growing tech stacks provide greater coverage, and network security teams are increas…

NEWSThe Registerabout 2 months ago

France probes compromise of gov messaging platform after account hijack

Authorities say the breach only exposed public chat rooms, but alleged attacker claims to have accessed far more data

NEWScriticalHackreadabout 2 months ago

Maine Govt Portal Lists 10M Discord Data Breach Notice, But Filing Shows Red Flags

Maine Attorney General portal lists a Discord breach notice claiming 10 million affected, but odd filing details leave it unverifi…

NEWSSecurityWeekabout 2 months ago

Will AI Kill the Bug Bounty Industry?

Anthropic's Mythos is accelerating vulnerability discovery to machine speed, forcing the bug bounty industry and offensive securit…

NEWSBleeping Computerabout 2 months ago

French govt messaging service breached in account hijacking attack

DINUM, the digital affairs directorate of the French government, warned that hackers used a hijacked user account to breach Tchap,…

NEWShighHackreadabout 2 months ago

Handala Claims Israeli Radar Hack, But Evidence Shows Phone Admin Panel

An Iranian-linked hacker group called Handala claimed to have hit Israeli military targets with massive cyberattacks on Sunday,…

NEWShighCVE-2026-116458.8 HIGHInfosecurity Magazineabout 2 months ago

Google Releases Patch for Chrome Vulnerability Exploited in the Wild

The flaw, CVE-2026-11645, can allow a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page

NEWSThe Hacker Newsabout 2 months ago

New FROST Attack Lets Websites Track What Sites and Apps You Open via SSD Timing

A malicious website can work out which sites you visit and which apps you open, using nothing but JavaScript and the timing of you…

NEWScriticalSecurityWeekabout 2 months ago

Check Point VPN Zero-Day Exploited in Qilin Ransomware Attacks

The authentication bypass vulnerability allows attackers to establish VPN connections without a valid password. The post Check Poi…

NEWScriticalInfosecurity Magazineabout 2 months ago

Check Point Warns Critical Auth Bypass Bug Exploited in the Wild

Check Point says a critical vulnerability in its Remote Access VPN and Mobile Access solutions has been exploited by Qilin

NEWSThe Registerabout 2 months ago

Qilin NHS breach tally grows as Essex trust confirms stolen records

Two years on from ransomware attack, hospitals are still trying to identify and warn patients

NEWSThe Hacker Newsabout 2 months ago

Hades PyPI Attack: 19 Packages Poisoned to Auto-Run Bun Credential Stealer

The Miasma supply chain campaign has sparked a fresh attack wave called Hades, this time involving 37 malicious wheel artifacts ac…

NEWSInfosecurity Magazineabout 2 months ago

Infosecurity Europe: Why JLR’s CISO Enforced In-Person Password Resets Following Cyber-Attack

Speaking at Infosecurity Europe, Ashish Shrestha, former CISO at Jaguar Land Rover revealed why he wanted over 30,000 employees to…

NEWScriticalBleeping Computerabout 2 months ago

CISA gives feds 3 days to patch Check Point VPN bug exploited as zero-day

CISA has ordered U.S. government agencies to secure their Check Point Remote Access VPN and Mobile Access deployments against a cr…

NEWShighInfosecurity Magazineabout 2 months ago

WhatsApp Discovers NSO Group-Linked Spearphishing Attempts

Meta’s WhatsApp demands contempt ruling after users report NSO Group-linked phishing

NEWScriticalBleeping Computerabout 2 months ago

Google patches new Chrome zero-day flaw exploited in the wild

Google has released emergency updates to patch another Chrome zero-day vulnerability that has been exploited in the wild, the fift…

NEWShighCVE-2026-422718.8 HIGHThe Hacker Newsabout 2 months ago

LiteLLM Flaw CVE-2026-42271 Exploited in the Wild, Chains to Unauthenticated RCE

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a high-severity flaw impacting BerriAI LiteLLM to…

NEWSHackreadabout 2 months ago

WhatsApp Says It Blocked Pegasus Spyware Campaign Linked to NSO

WhatsApp says it blocked Israeli firm NSO’s Pegasus spyware activity and is asking a US court to treat the targeting as an injunct…

NEWSThe Registerabout 2 months ago

Norks blast 250+ fake job offers to developers over 6 weeks to try and snarf creds and crypto

When an unsolicited job offer sounds too good to be true …

NEWShighBleeping Computerabout 2 months ago

NFCShare Android malware spreads via fake banking app updates on GitHub

New variants of the NFCShare Android malware are being distributed as fake updates for legitimate banking apps hosted on GitHub. […

NEWScriticalBleeping Computerabout 2 months ago

SoFi confirms third-party data breach at Hong Kong subsidiary

SoFi Hong Kong is warning that it suffered a data breach after hackers gained access to a database at a third-party vendor contain…

NEWSBleeping Computerabout 2 months ago

New Apple feature automatically changes your compromised passwords

At WWDC 26, Apple announced an Apple Intelligence-powered feature that can automatically fix weak and compromised passwords. This…

NEWSBleeping Computerabout 2 months ago

New Shai-Hulud attack trojanizes 19 science-focused PyPI packages

Hackers compromised 19 packages on the PyPI, collectively downloaded hundreds of thousands of times, in a new Shai-Hulud supply-ch…

NEWShighCVE-2026-231117.8 HIGHThe Hacker Newsabout 2 months ago

One-Character Linux Kernel Flaw Enables Local Root Access, Exploits Now Public

Security researchers have published a detailed, working exploit for a Linux kernel use-after-free that lets an unprivileged local…

NEWSSecurity Magazineabout 2 months ago

Did Handala Disrupt Israeli Radar Systems?

On the same day Israel and Iran exchanged missile strikes, Iranian-linked hacker group Handala claimed to disrupt Israeli radar sy…

NEWSSecurity Magazineabout 2 months ago

Whistleblower Accuses IBM, AT&T of Covering Up Breaches

A whistleblower accused IBM and AT&T of covering up data breaches.

NEWShighHackreadabout 2 months ago

Operation FlutterBridge Uses Fake Google Ads to Spread macOS Backdoor

Operation FlutterBridge uses fake Google ads and shell companies to deploy FlutterShell, a new macOS backdoor targeting unsuspecti…