Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

2,131 articles

NEWShighCVE-2026-202308.6 HIGHThe Hacker Newsabout 2 months ago

Cisco Patches CVE-2026-20230 in Unified CM as Exploit Code Goes Public

Cisco has patched a bug in Unified Communications Manager that lets an unauthenticated attacker on the network write files to the…

NEWShighInfosecurity Magazineabout 2 months ago

Everest Forms Pro Vulnerability Allows Remote Code Execution on WordPress Sites

Critical Everest Forms Pro RCE flaw exploited to create rogue WordPress admin accounts

NEWSSecurity Magazineabout 2 months ago

Security Experts Discuss Threats to FIFA World Cup 2026

This year’s World Cup presents an attractive opportunity for cybercriminals.

NEWSThe Hacker Newsabout 2 months ago

Claude Code GitHub Action Flaw Let One Malicious Issue Hijack Repositories

A security researcher found a flaw in Anthropic's Claude Code GitHub Action that let an attacker take over vulnerable public repos…

NEWSThe Hacker Newsabout 2 months ago

Agentic AI Is Transforming Defense, But Only Secure IT Infrastructure Will Maximize It

Over the past several weeks, the cybersecurity community has been reminded how quickly frontier and agentic AI in defense networks…

NEWSCyberScoopabout 2 months ago

Inside the race to adapt to an AI-powered security world

AI is breaking things faster than anyone can fix them. Security leaders across the industry are racing to figure out what comes ne…

NEWShighThe Hacker Newsabout 2 months ago

ThreatsDay Bulletin: AI Agents Gone Wrong, Sketchy C2 Tools, ClickFix Tricks, JS Backdoors & 20+ New Stories

It got stupid again. The internet still feels held together with tape. Bad plugins, old bugs, fake tools, trusted apps doing shad…

NEWSInfosecurity Magazineabout 2 months ago

Chinese-Speaking Actor TA4922 Widens Its Global Reach

Newly named Chinese-speaking actor TA4922 expands from East Asia into Europe and Africa

NEWShighInfosecurity Magazineabout 2 months ago

Infosecurity Europe: AI Adoption Creates New Opportunities for Attackers to Distribute Malware, Microsoft Warns

Microsoft Detection and Response Team (DART) details how it has uncovered malicious AI applications as cyber criminals manipulate…

NEWShighInfosecurity Magazineabout 2 months ago

Infosecurity Europe: Mythos Outperforms GPT5.5 on Google Chrome Vulnerability Exploits, Says New Benchmark

A Bugcrowd researcher has unveiled ExploitBench, an independent benchmark of AI models for vulnerability exploitation

NEWSInfosecurity Magazineabout 2 months ago

Infosecurity Europe: How Proton Fights Against Cybercriminals Using Its Services

Proton uses machine learning models to detect abuse of its services – especially email addresses used by cybercriminals

NEWShighThe Hacker Newsabout 2 months ago

China-Linked TA4922 Expands Phishing Attacks to U.K., Germany, Italy, and South Africa

A new China-linked cybercrime group known as TA4922 has expanded its targeting focus to target European organizations in the U.K.,…

NEWSThe Registerabout 2 months ago

Five Eyes: Watch out for odd LinkedIn connection requests, China's back on the hunt for state secrets

Cash-for-intel tradecraft continues to concern intelligence officials years after it was first spotted

NEWShighThe Hacker Newsabout 2 months ago

FlutterShell Backdoor Spreads to macOS via Malicious Google and YouTube Ads

Cybersecurity researchers have shed light on a macOS malvertising campaign codenamed Operation FlutterBridge that spreads a new ba…

NEWSThe Registerabout 2 months ago

Duo who sold car crash victims' data must repay £118k

Fresh penalties secured after initial prison, community service sentences for RAC double act

NEWShighThe Hacker Newsabout 2 months ago

Fake Sites Mimicking Open-Source Tools Rank High on Google to Deliver Malware via TDS

Cybersecurity researchers have flagged a large-scale operation that impersonates open-source and freeware projects to funnel unsus…

NEWShighThe Hacker Newsabout 2 months ago

Hackers Spied on a Stock Exchange Executive's Outlook Mailbox for Five Months

Unknown attackers spent at least five months inside the Outlook mailbox of a senior executive at a major global stock exchange, co…

NEWSInfosecurity Magazineabout 2 months ago

Infosecurity Europe: How Businesses Can Prepare for a Cybersecurity Crisis with Effective Plans

Cybersecurity and business leaders with experience of dealing with major incidents from within the NCSC and at JLR detail what you…

NEWSInfosecurity Magazineabout 2 months ago

Infosecurity Europe: Ukraine’s Experience Highlights the Need for Preparation and Resilience in Cybersecurity

Former Ukrainian foreign minister, Dmytro Kuleba, urges Infosecurity Europe attendees to fight the good fight

NEWSInfosecurity Magazineabout 2 months ago

Infosecurity Europe: Raise Security Concerns with Procurement Now, Because Quantum Can’t Wait

Forescout VP of security intelligence, Rik Ferguson, warns that Q-day is fast approaching

NEWScriticalThe Registerabout 2 months ago

Nobody needs Mythos or 0-days to build a chaos-causing computer worm – free open source models work just fine

'Attackers can now cheaply operationalize known vulnerabilities at scale,' boffins tell The Reg

NEWSThe Hacker Newsabout 2 months ago

DoJ Disrupts Southeast Asia Crypto Fraud Networks, Freezes $3.8 Million in Assets

The U.S. Department of Justice (DoJ) on Wednesday announced the results of a sweeping action undertaken by government authorities…

NEWSThe Registerabout 2 months ago

All the passwords were stored in Active Directory description fields

It was far too easy for a hacker to get the information

NEWSThe Registerabout 2 months ago

Commvault says it's time to rethink resiliency as AI crooks leave victims in a 'dark, dead' state

Those backup plans need backup testing

NEWSThe Registerabout 2 months ago

Bend the beam like Beckham to defeat anti-jamming tech

It's hard to stop a signal jammer if you can't locate the source, say Rice University researchers

NEWSThe Hacker Newsabout 2 months ago

WhatsApp, Slack Notifications Could Hijack Google Gemini on Android

A single poisoned notification from WhatsApp, Slack, SMS, Signal, Instagram, or Messenger could have hijacked Google Gemini's voic…

NEWSWired Securityabout 2 months ago

xAI Asks Court to Strip Alleged Grok Deepfake Nudes Victims of Anonymity

Four people suing Elon Musk's AI firm under pseudonyms due to the risks of being identified may face a difficult choice: Reveal yo…

NEWScriticalSecurity Magazineabout 2 months ago

Only 9% of Organizations Patch Critical Vulnerabilities in 24 Hours

Only 9% remediate high-severity flaws in production within 24 hours; 74% do so in one to seven days.

NEWSThe Hacker Newsabout 2 months ago

Microsoft Fixes One-Click GitHub Dev Attack That Let Attackers Steal OAuth Tokens

Cybersecurity researchers have disclosed a one-click attack via Microsoft Visual Studio Code (VS Code) that makes it possible to s…

NEWShighCVE-2026-234798.8 HIGHThe Hacker Newsabout 2 months ago

Autonomous AI Tool Finds 2-Year-Old RCE Flaw in Redis (CVE-2026-23479)

Redis has patched a use-after-free in its blocking-client code that lets an authenticated user run arbitrary OS commands on the…