Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

2,131 articles

OpenAI Says Its AI Models Broke Loose and Hacked Hugging Face

The admission comes days after Hugging Face disclosed an attack powered by autonomous AI agents. The post OpenAI Says Its AI Mode…

NEWScriticalBleeping Computer4 days ago

Chick-fil-A discloses data breach after credential stuffing attacks

American fast food restaurant chain Chick-fil-A is notifying customers of a data breach after their accounts were hacked in a wave…

NEWShighThe Hacker News4 days ago

Police Dismantle Kratos Phishing Kit Built to Steal Microsoft 365 Sessions and Bypass MFA

German and US law enforcement have taken down the core infrastructure of Kratos, described by German investigators as one of the w…

NEWSThe Hacker News4 days ago

Trojanized Newtonsoft.Json Fork Hides Game-Rigging Code in a Working Library

Cybersecurity researchers have discovered a NuGet typosquat that's unlike the typical information-stealing malware distributed via…

NEWSSecurity Magazine4 days ago

Security Experts Discuss the Evolution of JADEPUFFER

Researchers have discovered a new development with the agentic threat actor JADEPUFFER.

NEWSHackread4 days ago

AccuKnox Wins Best AI Startup Award for Enterprise Agentic AI Security at BSides Bangalore

Bangalore, India, 22nd July 2026, CyberNewswire

NEWShighBleeping Computer4 days ago

OpenAI says its AI models hacked Hugging Face during testing

OpenAI says its AI models, including GPT‑5.6 Sol and a pre-release model, hacked into the Hugging Face artificial intelligence rep…

NEWSThe Hacker News4 days ago

Microsoft Azure DevOps MCP Flaw Lets Hidden PR Comments Hijack AI Review Agents

A single invisible comment in an Azure DevOps pull request can turn a reviewer's own AI coding agent against them, driving it into…

NEWSThe Hacker News4 days ago

OpenAI Says Its AI Models Escaped Sandbox, Targeted Hugging Face to Cheat Benchmark

OpenAI on Tuesday said a combination of its artificial intelligence (AI) models, including GPT-5.6 Sol and an "even more capable p…

NEWSThe Register4 days ago

OpenAI admits it was the source of the agent swarm that attacked Hugging Face

Sandboxed experiment found itself a zero day, escaped onto the open internet and stole data

NEWSKrebs on Security4 days ago

LG to Ban Residential Proxies from Smart TV Apps

The home appliance giant LG Electronics USA said this week it plans to suspend any apps built for its smart TVs that turn one's te…

NEWShighBleeping Computer4 days ago

Police dismantle Kratos phishing platform, arrest developer

Authorities in Germany and the U.S. dismantled the central infrastructure of Kratos, a phishing-as-a-service (PhaaS) platform with…

NEWShighWired Security4 days ago

OpenAI Models Escaped Containment and Hacked Hugging Face

The cybersecurity-focused models, including GPT-5.6 Sol, broke out of a testing sandbox, exploited a zero-day, and gained access t…

NEWShighCyberScoop4 days ago

OpenAI says model test was behind Hugging Face hack

At the time, Hugging Face said it wasn’t clear which LLM was used in the attack. OpenAI confirmed it was one of their models being…

NEWShighBleeping Computer4 days ago

FakeGit campaign uses 7,600 GitHub repos to push SmartLoader malware

A large-scale operation dubbed 'FakeGit' is pushing SmartLoader and StealC malware through 7,600 malicious GitHub repositories tha…

NEWSThe Register4 days ago

Cisco's open-weight bug busters take on Google and OpenAI

Don't call them chatbots

NEWScriticalCVE-2026-505229.8 CRITICALBleeping Computer4 days ago

Critical SharePoint RCE flaw exploited to steal machine keys

Hackers are actively exploiting the critical CVE-2026-50522 vulnerability in Microsoft SharePoint to steal machine keys and mainta…

NEWSThe Register4 days ago

AI's cheatin' heart will make you weep

Trust but verify doesn't work when verification is difficult

NEWSCyberScoop4 days ago

AI models keep getting caught cheating

New research from the UK shows how nearly every model tested tried to cheat, scam or cut corners on its way to solving problems. T…

NEWSBleeping Computer4 days ago

Anubis ransomware claims Coca-Cola Fairlife attack, threatens data leak

The Anubis ransomware gang has claimed responsibility for the cyberattack on Coca-Cola's Fairlife dairy subsidiary, threatening to…

NEWSThe Hacker News4 days ago

Apple Fixes Hide My Email Bug That Exposed Real Addresses in Mail Logs

Apple has moved to address a security flaw in its Hide My Email service that enabled users' real email addresses to be unmasked, e…

NEWSCyberScoop4 days ago

Where’s the Trump administration line on AI regulation?

The messy approach to U.S. AI regulation reflects both the rapid speed of model cyber capabilities and the White House’s “educatio…

NEWScriticalSecurityWeek4 days ago

Trump Orders Defense Contractors to Map Software, Suppliers Across Critical Supply Chains

New executive order calls for end-to-end visibility into defense supply chains, including software dependencies, foreign ownership…

NEWSSecurityWeek4 days ago

Cisco Launches Low-Cost AI Models for Source Code Security

The open-weight Antares models are designed to pinpoint known vulnerabilities in codebases faster and at a fraction of the cost of…

NEWScriticalCVE-2026-630309.8 CRITICALBleeping Computer4 days ago

Critical wp2shell WordPress flaws exploited to install webshells

Hackers are exploiting the "wp2shell" critical vulnerability suite (CVE-2026-63030 and CVE-2026-60137) affecting WordPress Core to…

NEWSCyberScoop4 days ago

House intel bill includes provisions on state and local threat intelligence, election security, AI

The House Intelligence Committee advanced its fiscal 2027 authorization legislation Monday. The post House intel bill includes pro…

NEWShighThe Register4 days ago

Kratos phishing-as-a-service kit loses its battle with international law enforcement

Alleged developer arrested in Indonesia after more than 200 servers slain

NEWShighWired Security4 days ago

A Sneaky Hacking Tool Targeting AI Infrastructure Is Lurking in Victims’ Blind Spots

A new type of malware can worm deep into AI coding systems to steal data and logins—and can flip a “death switch” to destroy files…

NEWSThe Hacker News4 days ago

AWS Kiro Flaw Let a Poisoned Web Page Rewrite Its Config and Run Code

Hidden text on a web page was enough to make Kiro, AWS's agentic coding IDE, rewrite its own configuration file and run an attacke…

NEWSCyberScoop4 days ago

North Korea’s IT worker scheme funds Russia’s war effort

DTEX researchers found a series of transactions in a payment wallet showing North Korean IT worker salaries flowing into sanctione…