Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,664 articles

NEWSInfosecurity Magazineabout 1 month ago

Most Fraudulent Hires Receive Credentials Before Detection

A new report highlights the vast growth in fraudulent candidates, presenting significant insider threat challenges to organization…

NEWShighBleeping Computerabout 1 month ago

BambooToken malware controls Windows and Linux systems via MQTT

A previously unknown malware framework called BambooToken, active since at least 2023, is now using the Message Queuing Telemetry…

NEWSThe Registerabout 1 month ago

Who's governing your AI? A trust framework for enterprise agents and models

SPONSORED FEATURE: DigiCert wants to hand every agent a passport, complete with an expiry date and a named human owner

NEWShighBleeping Computerabout 1 month ago

Hackers target WordPress sites via third-party WooCommerce plugin

Hackers are actively exploiting a critical vulnerability in the WooCommerce Wholesale Lead Capture premium plugin for WordPress to…

NEWSInfosecurity Magazineabout 1 month ago

Most Firms Unable to Recover Quickly from Ransomware

Fenix24 found only four of more than 800 clients came close to stated ransomware recovery targets of 24-48 hours

NEWScriticalBleeping Computerabout 1 month ago

What Zero-Day Response Should Be in the Post-Mythos Era

AI is shrinking the time between vulnerability disclosure and exploitation, leaving defenders less time to wait for patches or pub…

NEWSInfosecurity Magazineabout 1 month ago

Black Axe Members Extradited to US Over Internet Fraud Claims

Alleged Black Axe leaders extradited to the US over romance scams, BEC and money laundering claims

NEWShighSecurityWeekabout 1 month ago

Thai Broadband Provider Hacked via Fortinet Vulnerability

The hackers staged numerous scripts for reconnaissance and CVE probing, along with brute-force utilities and privilege escalation…

NEWSThe Registerabout 1 month ago

Swiss court sentences 52-year-old Ukrainian ransomware dev to nearly 13 years in the cooler

The man allegedly wrote the code that powered the Lockergoga, MegaCortex, and Nefilim operations

NEWSInfosecurity Magazineabout 1 month ago

AI the Top Priority for New Spend as Cyber Budgets Flatline

IANS finds AI is dominating net-new budgets even as overall funding for the function is flat

NEWSSecurityWeekabout 1 month ago

OpenAI Investigates Report Linking AI Agents to RubyGems Attack

The incident occurred in May, when RubyGems maintainers suspended new account registrations due to what appeared like malicious ac…

NEWScriticalBleeping Computerabout 1 month ago

CISA: Critical VMware RCE flaw now exploited by ransomware gangs

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned security teams that ransomware gangs have now joined ongoi…

NEWShighThe Hacker Newsabout 1 month ago

Human Attacker Exploits Marimo RCE, Reaches SSH Bastion in Eight Seconds

With artificial intelligence (AI) shrinking the window between vulnerability discovery and exploitation and lowering the barrier t…

NEWScriticalSecurityWeekabout 1 month ago

240,000 Hit by Data Breach at Japan’s Digital Agency

Hackers exploited a vulnerability in a VPN product to steal the personal information of roughly 240,000 people. The post 240,000 H…

NEWSThe Hacker Newsabout 1 month ago

Attack Chains, Not Just Attack Surfaces: Why Testing Individual Techniques Misses the Point

Introduction Security teams have gotten pretty good at testing against what can hurt them. Can this EDR agent catch this payload?…

NEWShighThe Hacker Newsabout 1 month ago

Mass-Scanning Campaign Exploits Vite Flaw to Extract Cloud Credentials From Exposed Dev Servers

Cybersecurity researchers have disclosed details of a mass-scanning campaign that has targeted Vite deployments siphon sensitive d…

NEWShighSecurityWeekabout 1 month ago

Apple Patches 200 Vulnerabilities With New iOS 27, macOS Golden Gate 27 Releases

The updates resolve kernel vulnerabilities that could lead to memory corruption, privilege escalation, system termination, and inf…

NEWSBleeping Computerabout 1 month ago

Suspected Black Axe gang leaders face cybercrime charges in the US

Five alleged leaders of the Black Axe cybercrime syndicate, known for its involvement in global-scale cyber-enabled financial frau…

NEWSSecurityWeekabout 1 month ago

Microsoft AI Code of Conduct Sets Cyberattack Boundaries, Chain of Command, Safety Constraints

The Humanist AI Code of Conduct draws a line between defensive cyber research and operational attack capability. The post Microsof…

NEWShighSecurityWeekabout 1 month ago

Hacked HBO Max Reddit Account Used for Malware Delivery via ClickFix Attack

Ads led to a ClickFix page designed to trick macOS and Windows users into installing malware. The post Hacked HBO Max Reddit Accou…

NEWSBleeping Computerabout 1 month ago

Microsoft confirms KB5002914 Excel update breaks copy and paste

Microsoft has confirmed that copy and paste may silently fail for some Excel users after installing the September 2026 KB5002914 s…

NEWScriticalInfosecurity Magazineabout 1 month ago

Microsoft Releases Emergency Patch to Fix RDS Snafu

Microsoft has been forced to issue an out-of-band fix for several issues stemming from this month’s Patch Tuesday

NEWScriticalBleeping Computerabout 1 month ago

Cisco patches Secure Email Gateway zero-day exploited in attacks

Cisco warned customers to patch a critical Secure Email Gateway zero-day security flaw that threat actors have been exploiting in…

NEWSThe Hacker Newsabout 1 month ago

LiteSpeed Enterprise Flaw Could Let One Hosting Account Gain Root Access on a Shared Server

A critical vulnerability in LiteSpeed Web Server Enterprise could let a low-privilege website user gain root access on a shared-ho…

NEWShighCVE-2026-764619.8 CRITICALThe Hacker Newsabout 1 month ago

Cisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command Execution

Cisco has warned that a new critical vulnerability impacting AsyncOS Software for Cisco Secure Email Gateway has come under active…

NEWScriticalThe Hacker Newsabout 1 month ago

China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy GRIMWEDGE

A Chinese threat actor has been attributed to a spear-phishing campaign that exploits recently patched security flaws in Google Ch…

NEWScriticalCVE-2026-764619.8 CRITICALSecurityWeekabout 1 month ago

Root RCE Zero-Day in Cisco Secure Email Gateway Under Active Exploitation

An unauthenticated attacker can exploit CVE-2026-76461 to execute arbitrary commands on the underlying OS with root privileges. Th…

NEWSThe Registerabout 1 month ago

The latest AI doomsayer is China’s intelligence boss

Beijing’s response is to ‘firmly grasp technological sovereignty’ and broad regulations

NEWSCyberScoopabout 1 month ago

Supreme Court denies Trump request to allow USPS mail ballot changes

One justice said the attempt to change the rules ahead of the 2026 elections would be "arbitrary and capricious” and violated the…

NEWSThe Registerabout 1 month ago

HBO Max Reddit account compromised to serve ClickFix attacks

Part of a 'massive 48-hour malvertising blitz' targeting macOS and Windows machines with malware