Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

2,131 articles

Free Apps Are Quietly Turning Smart TVs Into Web-Scraping Proxies for AI

A researcher has reverse-engineered the iOS SDK that Bright Data embeds in consumer apps and documented how it turns devices, incl…

NEWScriticalCVE-2026-283187.5 HIGHThe Hacker Newsabout 2 months ago

CISA Adds Actively Exploited SolarWinds Serv-U DoS Flaw to KEV Catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity security flaw impacting SolarWinds Serv…

NEWScriticalThe Hacker Newsabout 2 months ago

AI Agent Uncovers 21 Zero-Days in FFmpeg; Chrome Patches Record 429 Bugs

Two things landed within days of each other this week. A security startup reported 21 previously unknown vulnerabilities in FFmpeg…

NEWSThe Registerabout 2 months ago

Oxford Uni student data pwned yet again - this time via career platform breach

Totally different attack from the break-in last month. Oh so that's OK then

NEWSThe Hacker Newsabout 2 months ago

Miasma Worm Hits 73 Microsoft GitHub Repositories in Major Supply Chain Attack

Microsoft's GitHub repositories have become the latest to fall victim to the ongoing Miasma self-replicating supply chain attack c…

NEWScriticalCVE-2026-202457.8 HIGHThe Hacker Newsabout 2 months ago

Cisco Catalyst SD-WAN Manager CVE-2026-20245 Flaw Actively Exploited – No Patch Available

Cisco has warned that a high-severity security flaw impacting Catalyst SD-WAN Manager has come under active exploitation. The vul…

NEWSThe Registerabout 2 months ago

If you don't fall for these extortionists' calls, they'll show up with USB sticks

When 'Chatty Spider' morphs into tech services cosplay spider

NEWSThe Hacker Newsabout 2 months ago

IronWorm and New Miasma Worm Variant Hit npm in Supply Chain Attacks

Multiple software supply chain attacks have hit the npm ecosystem, with threat actors using both malicious and poisoned versions o…

NEWScriticalThe Registerabout 2 months ago

Yet another Cisco SD-WAN 0-day under attack, and no patch in sight

Good luck, sys admins

NEWSSecurity Magazineabout 2 months ago

93% of Organizations Use or Plan to Use AI Agents for Sensitive Security Tasks

Organizations are handing AI the keys to sensitive systems before securing guardrails around those identities.

NEWScriticalSecurity Magazineabout 2 months ago

2.6M Accounts Exposed in DentaQuest Data Breach

Threat actors released the sensitive data of 2.6 million accounts.

NEWSThe Hacker Newsabout 2 months ago

Android Spyware Asin Targets Arabic Users via Fake News, PDF and War Map Apps

Arabic-speaking users have emerged as the target of a new Android spyware codenamed Asin, according to findings from ESET. The Sl…

NEWSCyberScoopabout 2 months ago

Nightmare Eclipse incident shows the researcher-vendor fights may never fully go away

When a researcher went public with Microsoft vulnerabilities, it laid bare a conflict that has never really been solved. The post…

NEWSThe Registerabout 2 months ago

World Food Programme breach exposes data of 600k vulnerable Gazan families

Those receiving aid in the famine-threatened, war-torn territory told support will remain

NEWSThe Hacker Newsabout 2 months ago

New Threat Cluster OP-512 Targets Microsoft IIS Servers with Custom Web Shell Framework

Cybersecurity researchers have discovered a previously unreported threat cluster dubbed OP-512 (where "OP" stands for "opponent")…

NEWSInfosecurity Magazineabout 2 months ago

Infosecurity Europe: Practical Lessons From Lloyds' Agentic AI Security Playbook

Lloyds Banking Group shared its approach for securing agentic AI workflows, with a mix of hands on experimentation and cross funct…

NEWSThe Hacker Newsabout 2 months ago

Only 10% of SOCs Say They’re Getting Excellent Value From AI. Here’s What the Second Wave Has to Deliver

Eighteen months ago, the AI SOC was a marketing line. Today it's a budget item. The category has crossed over from interesting to…

NEWSInfosecurity Magazineabout 2 months ago

Infosecurity Europe: OWASP Introduces Agentic AI Security Maturity Framework

The OWASP agentic AI security framework helps organizations assess governance maturity vs adoption and adjust governance as needed

NEWSThe Registerabout 2 months ago

Council in UK's City of York outs hundreds of disabled residents with a single email blunder

Blue Badge holders exposed to each other after BCC function proves too complex

NEWSInfosecurity Magazineabout 2 months ago

Infosecurity Europe: AI Coding Tools Need Built-In Security for Agentic Development Era

Ox Security field CTO, Boaz Barzel, makes the case for vibe security to tackle AI agent coding risks

NEWScriticalCVE-2026-33009.8 CRITICALThe Hacker Newsabout 2 months ago

Hackers Exploit Critical Everest Forms Pro WordPress Plugin Flaw to Take Over Sites

Threat actors are actively exploiting a critical security flaw in Everest Forms Pro, a WordPress plugin with about 4,000 active in…

NEWSInfosecurity Magazineabout 2 months ago

Infosecurity Europe: Reactive Security Is Failing Healthcare Organizations, Experts Warn

A perfect storm of legacy devices, hyper connectivity and human fatigue is bad news for the healthcare sector, warns Cyber Salus

NEWShighThe Hacker Newsabout 2 months ago

FIFA World Cup 2026 Scams Are Already Live: Fake Sites, Banking Malware, and Stolen Logins

Security researchers and the FBI are warning that a wave of FIFA-themed fraud is already hitting World Cup 2026 fans, days before…

NEWSThe Hacker Newsabout 2 months ago

PCPJack Hijacks 230 AWS, Google Cloud, and Azure Servers for Covert SMTP Relay Network

The threat actor known as PCPJack has hijacked cloud servers associated with Amazon Web Services (AWS), Google Cloud, and Microsof…

NEWSThe Registerabout 2 months ago

Pink is the latest goon squad to use fake helpdesk calls to steal creds

A familiar tactic popularized by chaotic crime crew Lapsus$

NEWSCyberScoopabout 2 months ago

Hill Dems hammer GOP for $250M CISA budget cut

A House Appropriations subcommittee is set to mark up fiscal 2027 DHS funding legislation Friday. The post Hill Dems hammer GOP fo…

NEWSThe Registerabout 2 months ago

OpenAI's agent chained decade-old DoS attacks to crash web servers in seconds

Codex drops an HTTP/2 Bomb

NEWSCyberScoopabout 2 months ago

Your AI agent could become your biggest insider threat

New research details how the increasing integration of AI agents into businesses is making it easier than ever for insiders - mali…

NEWSSecurity Magazineabout 2 months ago

7 Data Security Stories to Know About (May 2026)

Security magazine takes a look at 7 data security stories from this month.

NEWSWired Securityabout 2 months ago

Meta Silently Added Face-Recognition Code for Its Smart Glasses to Millions of Phones

Code reviewed by WIRED uncovered an unreleased face-recognition system embedded in Meta’s smart glasses platform. It’s designed to…