Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

2,131 articles

NEWShighCVE-2026-452479.8 CRITICALThe Hacker Newsabout 2 months ago

CISA Adds Exploited Magento RCE Flaw CVE-2026-45247 to KEV Catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a critical flaw impacting Mirasvit Cache Warme…

NEWSThe Hacker Newsabout 2 months ago

Google DoubleClick Abused in New Malspam Campaign to Deliver .NET Loader

Cybersecurity researchers have flagged a new malspam campaign that makes use of Google's DoubleClick domain as a way to evade dete…

NEWSSecurity Magazineabout 2 months ago

OpenAI and CEO Sam Altman Accused of Prioritizing Profit Over Safety in Lawsuit

Florida has sued OpenAI and CEO Sam Altman, claiming they place the profits over safety.

NEWScriticalThe Hacker Newsabout 2 months ago

Beyond the Zero-Day: See Your Network Like an Attacker | Webinar with HD Moore

Assume the breach. Zero-days keep shipping, AI is writing exploits faster than anyone patches, and "patch everything in time" stop…

NEWSThe Hacker Newsabout 2 months ago

Microsoft 365 Android Apps Let Any App Steal Account Tokens via Leftover Debug Flag

A development flag left switched on in production builds of several Microsoft 365 Android apps disabled the check that limits acco…

NEWShighThe Registerabout 2 months ago

Another bug hunter leaks Microsoft exploits in defiance of company’s handling of vulnerability disclosures

Researchers follow in Nightmare Eclipse’s footsteps, flipping off Redmond in favor of insta-leaks

NEWShighInfosecurity Magazineabout 2 months ago

Infosecurity Europe: Vulnerability Management Innovator Konvu Wins Cyber Startup Award

Inaugural Infosecurity Europe Cyber Startup Award Winner Impresses Panel with Ability Help Prioritize Vulnerabilities in AI era

NEWSThe Hacker Newsabout 2 months ago

Shrinking the IAM Attack Surface through Identity Visibility and Intelligence Platforms (IVIP)

The Fragmented State of Modern Enterprise Identity Enterprise IAM is approaching a breaking point. As organizations scale, identi…

NEWSThe Registerabout 2 months ago

UK banks offered access to OpenAI’s GPT-5.5 amid exclusion from Anthropic’s Glasswing expansion

150 new organizations inducted to cyber’s Soho House, including the first outside the US

NEWSInfosecurity Magazineabout 2 months ago

Trump Signs Order Inviting Voluntary Review of Frontier AI Models

Trump's executive order invites voluntary pre-release review of frontier AI models

NEWShighCVE-2026-338294.3 MEDIUMThe Hacker Newsabout 2 months ago

Unpatched Windows Search URI Vulnerability Lets Attackers Steal NTLMv2 Hashes

Cybersecurity researchers have disclosed details of an unpatched issue that could be exploited to disclose a user's NTLMv2 hash to…

NEWSInfosecurity Magazineabout 2 months ago

Infosecurity Europe: How to Get Boards to Prioritize Cyber Risk Quantification

Cybersecurity leaders major companies discuss how they got support from the board on cyber risk

NEWSInfosecurity Magazineabout 2 months ago

Anthropic Expands Mythos Access to 150 More Organizations

Anthropic widens Project Glasswing access to 150 more firms as patching becomes the bottleneck

NEWSInfosecurity Magazineabout 2 months ago

Infosecurity Europe: Patch Responsibility Remains Up for Grabs as AI Unearths Decades of Flaws

The emergence of AI models capable to autonomously find and fix vulnerabilities at scale is having a significant impact on patchin…

NEWSInfosecurity Magazineabout 2 months ago

Infosecurity Europe: Execs Must Treat Cyber Threats as Statecraft, ISACA Expert Say

Private firms are being targeted by nation-state groups for reasons beyond finance, argued ISACA’s Bharat Thakrar

NEWSInfosecurity Magazineabout 2 months ago

Infosecurity Europe: AI-Powered Cybercrime Tools Surge on Dark Web

Halcyon’s Cynthia Kaiser lifts the lid on the dark web market for AI cybercrime tools

NEWSThe Registerabout 2 months ago

'Dumbass' criminal breaks the 'first rule of ransomware club'

You don't infect anyone in Russia or other CIS countries

NEWSThe Registerabout 2 months ago

Cisco sings Mythos' praises - but doesn't say how many bugs the model uncovered

Meanwhile, Anthropic adds 150 partners to Project Glasswing

NEWSWired Securityabout 2 months ago

Android Is Fighting Phone Scams With a New Feature to Prove Who’s Calling

Available for Android 12 and later, the anti-scam feature is baked into Google Dialer, which sends a silent “confirmation signal”…

NEWSSecurity Magazineabout 2 months ago

Trump Signs Executive Order for Oversight of AI Models, Security Experts Discuss

President Trump has signed an executive order requesting AI companies to show models to the federal government. Security experts d…

NEWShighSecurity Magazineabout 2 months ago

Hackers Tricked Instagram’s AI Chatbot to Hijack Accounts

Hackers deceived Instagram’s AI chatbot, prompting it to provide access to user accounts.

NEWSInfosecurity Magazineabout 2 months ago

Infosecurity Europe: NCSC Urges Immediate Action to Boost Resilience as Uncertainty Persists

NCSC director of operations, Paul Chichester, says it’s time to future-proof cybersecurity today

NEWSInfosecurity Magazineabout 2 months ago

Infosecurity Europe: Cybersecurity Teams Which Don’t Leverage AI are "Doomed to Fail"

Humans still need to be part of cyber defense, but refusing to deploy AI is no longer optional against AI-enhanced cyber threats,…

NEWSThe Registerabout 2 months ago

Russian spy agency says foreign spies turned officials' smartphones into surveillance devices

FSB claims large-scale snoop op compromised phones of senior officials, but gives no technical evidence to back allegations

NEWSInfosecurity Magazineabout 2 months ago

Infosecurity Europe: Bayer Reinvents Security Awareness Training to Counter AI Threats

Bayer’s security awareness training now focuses on psychological approaches rather than technical methods for detecting social eng…

NEWScriticalThe Registerabout 2 months ago

Microsoft reaches for olive branch after public dustup with 0-day researcher

Following days of criticism from the security community, Redmond dials back rhetoric, insists vulnerability hunters not in its leg…

NEWSThe Registerabout 2 months ago

Claude celebrates Anthropic's stock market float with blockbuster ... outage

Chatbot has no respect for timing of its maker's financial announcement

NEWSInfosecurity Magazineabout 2 months ago

Threat Actor Uses AI to Build EDR Evasion Tools

A threat actor used AI coding tools to build and test EDR evasion malware, Sophos finds

NEWSThe Registerabout 2 months ago

Northern Ireland cops issue PSA after official phone number spoofed by scammers

If you’re going to impersonate an officer, perhaps choose a more sophisticated way to nick cash than asking for gift cards…

NEWSInfosecurity Magazineabout 2 months ago

Attackers Hijack Red Hat npm Scope to Steal Cloud Secrets

Attackers backdoored 32 packages in Red Hat's official npm scope to steal cloud and CI secrets