Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,662 articles

NEWShighCVE-2026-87886SecurityWeekabout 1 month ago

Acronis Patches Exploited Vulnerability in cPanel Backup Plugin

CVE-2026-87886 is a high-severity insecure file permissions flaw that can lead to local privilege escalation. The post Acronis Pat…

NEWSBleeping Computerabout 1 month ago

Windows Server 2022 reaches end of mainstream support next month

Microsoft has reminded customers that Windows Server 2022 will reach the end of mainstream support next month and enter extended s…

NEWSInfosecurity Magazineabout 1 month ago

Major Cyber Threat Detection Vendors Shift from MITRE to UK Testing Program

A group of cyber threat detection providers, including CrowdStrike, Palo Alto Networks and Sophos, have joined SE Labs’ PIVOT prog…

NEWShighCVE-2026-543010.0 CRITICALSecurityWeekabout 1 month ago

Enterprises Warned of Attacks Exploiting WSO2 Vulnerability

The vulnerability, tracked as CVE-2026-5430, can be exploited to gain access to valuable enterprise data. The post Enterprises War…

NEWSInfosecurity Magazineabout 1 month ago

NCSC and Allies Warn of Iranian Spyware Campaign

The UK’s National Cyber Security Centre says Iranian Chosen Brick spyware is designed to snoop on dissidents

NEWShighSecurityWeekabout 1 month ago

Oracle Patches 800+ Vulnerabilities in September 2026 Security Update

The security updates resolve over 800 vulnerabilities across 17 product families, including over 100 critical-severity flaws. The…

NEWScriticalBleeping Computerabout 1 month ago

Google fixes actively exploited Android zero-day on Pixel devices

Google has released the September 2026 security patches to address 110 vulnerabilities affecting its Pixel devices, including one…

NEWSThe Registerabout 1 month ago

Mythos has made 2026 patching hell. It might make 2027 a breeze

Gartner sees huge amounts of technical debt paid down, and better scanning that could make software safer sooner

NEWShighThe Hacker Newsabout 1 month ago

Attackers Exploit WooCommerce Wholesale Lead Capture Flaw to Plant PHP Web Shells

Threat actors are exploiting a critical security flaw in WooCommerce Wholesale Lead Capture, a premium WordPress plugin that has m…

NEWShighCVE-2026-543010.0 CRITICALThe Hacker Newsabout 1 month ago

Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens

A critical security flaw in WSO2 API Manager has come under active exploitation in the wild, according to findings from watchTowr.…

NEWSThe Registerabout 1 month ago

The vulnpocalypse rains iBugs down on Apple with record-setting number of patches

September Patch Tuesday part 2?

NEWScriticalBleeping Computerabout 1 month ago

Acronis warns of actively exploited flaw in its cPanel backup plugin

Acronis disclosed a high-severity Linux local privilege escalation vulnerability in its backup plugin for cPanel, WebHost Manager…

NEWShighBleeping Computerabout 1 month ago

Malcious Admin Menu Editor Pro plugin backdoors 1,500 WordPress sites

Malicious versions of the Admin Menu Editor Pro plugin for WordPress have been distributed to more than 200 customers after a thre…

NEWSSecurityWeekabout 1 month ago

Microsoft Commits to Sweeping AI Privacy Rules for Students. Will Other Tech Giants Follow?

Microsoft agreed to adopt guardrails and privacy standards for its AI in schools, as negotiated with the American Federation of Te…

NEWSCyberScoopabout 1 month ago

What’s next for CISA’s CDM program that gives cybersecurity tools to federal agencies

Three feds spoke about future plans for the Continuous Diagnostics and Mitigation program, and lessons they’ve learned. The post W…

NEWSThe Registerabout 1 month ago

Low-quality casino sites conceal highly dangerous threat actors

Security firm Infoblox shines light on malicious infrastructure lurking beneath illegal gambling sites

NEWSSecurityWeekabout 1 month ago

“We Think the Security Control Is Working” Is No Longer Good Enough

Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security c…

NEWSSecurity Magazineabout 1 month ago

Majority of Organizations Have Over 50 AI Agents

A report by Zentera Systems analyzed the deployment of AI agents within organizations.

NEWShighThe Hacker Newsabout 1 month ago

KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens

Cybersecurity researchers have shed light on a previously undocumented Brazilian banking malware operation that delivers a toolkit…

NEWShighThe Registerabout 1 month ago

Iranian spies hit Windows machines with Chosen Brick data-stealing malware

'Enemies of the regime' on notice

NEWSBleeping Computerabout 1 month ago

CenterPoint Energy confirms customer data stolen in cyberattack

CenterPoint Energy disclosed a breach compromising some customers' personal information after an attacker leaked data allegedly st…

NEWShighThe Hacker Newsabout 1 month ago

Iranian Hackers Use Telegram-Controlled Malware to Spy on Dissidents and Journalists

Cybersecurity agencies in the United States, the United Kingdom, and the Netherlands have detailed a Windows malware that they say…

NEWSThe Registerabout 1 month ago

Cisco email security boxes can be rooted by... an email

Attackers already exploiting the critical flaw, and Cisco warns they may be able to cover their tracks once they're in

NEWSSecurityWeekabout 1 month ago

$1 Million Sandbox Challenge Uncovers Linux Kernel Flaws

AI-assisted researchers flooded Vercel with reports, forcing the company to automate vulnerability triage. The post $1 Million San…

NEWSSecurityWeekabout 1 month ago

Exein Secures $270M at $1.7B Valuation for Physical AI Security

The cybersecurity startup is building a proprietary foundation model and plans to accelerate global expansion. The post Exein Secu…

NEWScriticalCyberScoopabout 1 month ago

Cisco warns customers of actively exploited zero-day in email gateways

The company confirmed the defect was exploited before it was disclosed and patched, but it did not describe the nature of the atta…

NEWShighSecurityWeekabout 1 month ago

Texas Utility CenterPoint Energy Confirms Breach After Hacker Leaks Data

A hacker claims to have stolen 7.5 million customer records after breaching the company’s systems. The post Texas Utility CenterPo…

NEWShighThe Hacker Newsabout 1 month ago

BambooToken Malware Uses MQTT to Control Windows and Linux Systems

Cybersecurity researchers have disclosed details of a multi-platform campaign that uses the Message Queueing Telemetry Transport (…

NEWSInfosecurity Magazineabout 1 month ago

Most Fraudulent Hires Receive Credentials Before Detection

A new report highlights the vast growth in fraudulent candidates, presenting significant insider threat challenges to organization…

NEWShighBleeping Computerabout 1 month ago

BambooToken malware controls Windows and Linux systems via MQTT

A previously unknown malware framework called BambooToken, active since at least 2023, is now using the Message Queuing Telemetry…