Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,664 articles

NEWScriticalBleeping Computerabout 1 month ago

Microsoft releases emergency Windows updates to fix RDS failures

Microsoft has released emergency out-of-band Windows updates to fix Remote Desktop Services failures caused by this month's securi…

NEWSBleeping Computerabout 1 month ago

Japan's Digital Agency says VPN flaw exposed 246,000 personnel records

Japan's Digital Agency has discovered a data breach that may have exposed around 246,000 record rows containing personal informati…

NEWSBleeping Computerabout 1 month ago

Homebrew 7.0.0 gets built-in GUI, better security controls

Homebrew package manager version 7.0.0 has been released with a built-in vulnerability scanner, stronger security controls, and th…

NEWSBleeping Computerabout 1 month ago

Twitch extension with 30K installs exposes users’ OAuth tokens

A browser extension called Twitch Enhanced Viewer | JeetBot, available in the official Chrome and Firefox stores, sends users' Twi…

NEWSCyberScoopabout 1 month ago

Five alleged leaders of Black Axe’s operations in South Africa extradited to US

Officials said the five individuals concocted various long-running romance scams to trick U.S.-based victims into sending them mon…

NEWShighBleeping Computerabout 1 month ago

Hackers hijack HBO Max Reddit account to push malware in ClickFix ads

Hackers compromised HBO Max's official Reddit account and used it to push malicious ads that launched ClickFix attacks to infect W…

NEWSThe Registerabout 1 month ago

New hardware device can RAM into encrypted memory, expose your data

Attackers would need physical access to the server to pull off the DDR5 trick

NEWSThe Registerabout 2 months ago

OpenAI's malicious bot swarm attacked RubyGems

Ruby are you ok? Ruby are you ok? Are you ok Ruby?

NEWShighThe Hacker Newsabout 2 months ago

3BB Attacker Used MeshCentral Backdoor for Root Access, Targeted Subscriber Credentials

An attacker was operating inside the network of 3BB, one of Thailand's largest broadband providers, and maintained remote control…

NEWSThe Hacker Newsabout 2 months ago

Telegram Desktop Flaw Lets Hidden JavaScript Exfiltrate Messages From HTML Exports

A flaw in Telegram Desktop let a bot's message plant hidden JavaScript inside chats that users exported to HTML files, security re…

NEWSThe Hacker Newsabout 2 months ago

New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential Computing

Researchers have disclosed a new hardware attack, called DDRop, that breaks the memory protection in Intel and AMD confidential co…

NEWShighThe Hacker Newsabout 2 months ago

Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six Countries

A Chinese threat actor tracked as Red Heron has been attributed to the rapid exploitation of a recently disclosed security vulnera…

NEWSWired Securityabout 2 months ago

New York Seizes a Dozen Celebrity Deepfake Websites

In the biggest-ever legal action against harmful deepfake websites, the Manhattan District Attorney’s Office has seized 12 sites t…

NEWShighBleeping Computerabout 2 months ago

Hackers target exposed Vite dev servers to steal AWS, Azure secrets

A mass-scanning campaign targeting internet-exposed Vite development servers is attempting to steal cloud credentials and configur…

NEWSThe Hacker Newsabout 2 months ago

WordPress Adds Automated Plugin Reviews to Block High-Risk Updates Before Distribution

WordPress has announced it's launching an automated security review for every release of a plugin before it's distributed through…

NEWSInfosecurity Magazineabout 2 months ago

Malicious Twitch Extension Exposes 31,000 Users' OAuth Tokens

Socket has discovered a Twitch browser extension forwarding users' OAuth tokens to a Russian bot service

NEWSThe Hacker Newsabout 2 months ago

⚡ Weekly Recap: Rogue AI Agents, WeChat Worm, PaperCut Attacks, AI Espionage, and Rootkits

AI keeps showing up in the wrong places. Attackers are using it to speed up exploits, test defenses, and automate more of the job.…

NEWSThe Registerabout 2 months ago

Perfect-10 GitLab bug under attack days after patch lands

CISA confirms active exploitation as watchTowr spots miscreants probing internet-facing servers

NEWSSecurityWeekabout 2 months ago

Beijing Hits Back at Anthropic CEO’s Call to Curb China’s AI Development

China’s Ministry of Foreign Affairs responded to a question about Amodei’s essay by saying that all parties should work together o…

NEWShighInfosecurity Magazineabout 2 months ago

Human Attacker Hits Machine-Speed Exploitation of Marimo RCE

A human attacker exploited a Marimo RCE and reached an SSH bastion in eight seconds

NEWSBleeping Computerabout 2 months ago

Why Patch Automation Needs Brakes, Not Just an Accelerator

Patch automation can help IT teams keep pace with growing update volumes, but deploying faster also means bad updates can spread f…

NEWSSecurityWeekabout 2 months ago

New Warnings About the Risks of AI to Humanity Revive a Long-Running Debate

Concerns over the potential risks of the technology are rising as new AI models become more powerful, heightening both the potenti…

NEWScriticalSecurityWeekabout 2 months ago

Personal, Financial Info Exposed in Revolut Data Breach

The company unintentionally disclosed users’ information to a third party impersonating a government agency. The post Personal, Fi…

NEWSSecurityWeekabout 2 months ago

The Race to Control AI and Protect What Makes Us Human

As researchers warn that misaligned AI could threaten human survival, even beneficial systems may erode the critical thinking that…

NEWSInfosecurity Magazineabout 2 months ago

Defense Cyber Spending Set to Surge Amid Rising Attacks on Military Systems

MarketsandMarkets has projected the cyber warfare market to double by 2031, amid growing demand for defensive and offensive cyber…

NEWSBleeping Computerabout 2 months ago

Webinar: How malicious OAuth apps can lead to Google Workspace breaches

Attackers can combine social engineering with malicious OAuth applications to gain access to Google Workspace data without relying…

NEWSThe Hacker Newsabout 2 months ago

AI Changed the Exposure Problem. Validation Needs to Change With It.

There's a lot of noise around AI and cybersecurity right now. What’s actually important is far simpler, if often lost in the hubbu…

NEWScriticalSecurityWeekabout 2 months ago

Chinese Hackers Exploit Critical Tencent Software Flaw for One-Click Code Execution

The Chinese-language input method editor for Windows can allow attackers to execute arbitrary code remotely. The post Chinese Hack…

NEWScriticalInfosecurity Magazineabout 2 months ago

Revolut Confirms Data Breach Through Fake Government Requests

An unauthorized party used a legitimate government email domain to fraudulently request Revolut customer data

NEWSWired Securityabout 2 months ago

Sexually Explicit Deepfake Sites Target 100-Plus Politicians in Europe

An analysis of 160 deepfake websites reveals politicians in 22 countries appear on them. Nearly all of them are women.