Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,664 articles

CISOs Race to Control AI Agents Without Destroying Their Value

Security leaders are struggling to modernize cyber hygiene and prevent over-privileged agents from causing unintended harm. The po…

NEWShighInfosecurity Magazineabout 2 months ago

Hackers Exploit Maximum Severity Flaw in GitLab

CISA warns that threat actors are exploiting a vulnerability with a CVSS score of 10.0

NEWSSecurityWeekabout 2 months ago

Telus Warns Customers of Account Breaches

Stolen credentials were used in a multi-month campaign to access subscriber personal data and billing records. The post Telus Warn…

NEWSBleeping Computerabout 2 months ago

Microsoft: September updates cause RDS failures on Windows Server

Microsoft has confirmed reports that the September 2026 security updates cause Remote Desktop Services (RDS) failures on Windows S…

NEWShighSecurityWeekabout 2 months ago

Three JFrog Artifactory Flaws Exploited for Backdoor Deployment

The vulnerabilities can allow attackers to bypass authentication and elevate their privileges to administrator. The post Three JFr…

NEWSThe Registerabout 2 months ago

UK.gov begins killing off passwords for 23 million users

Passkeys promise fewer phishing headaches – and £600 a day off Whitehall's SMS bill

NEWShighInfosecurity Magazineabout 2 months ago

OpenAI Agent Swarm Hacks RubyGems Package Manager

Researchers confirm that OpenAI agents uploaded hundreds of malicious packages to RubyGems

NEWScriticalBleeping Computerabout 2 months ago

Revolut discloses data breach exposing financial info, passports

Fintech company Revolut has disclosed a data breach after sharing data from an undisclosed number of customers with a threat actor…

NEWShighSecurityWeekabout 2 months ago

ConnectWise Patches ScreenConnect Vulnerability Exploited in Worm-Like Attacks

The flaw allows attackers to send files and execute them without authorization through an active remote session. The post ConnectW…

NEWSBleeping Computerabout 2 months ago

Microsoft: September updates break audio on some Windows PCs

Microsoft has confirmed that USB audio devices may fail on some Windows systems after installing the KB5124008and KB5124012 Septem…

NEWSThe Hacker Newsabout 2 months ago

Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users

A malicious cross-store Twitch browser extension has leaked OAuth tokens associated with nearly 31,000 users to proxy servers oper…

NEWShighBleeping Computerabout 2 months ago

CISA: Hackers now exploit max severity GitLab flaw in attacks

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that hackers are now exploiting a maximum-severity GitLab…

NEWShighCVE-2026-51990Bleeping Computerabout 2 months ago

Hackers exploit Tencent app flaw to deploy GrayRabbit malware

Threat actors linked to a China-aligned espionage group are exploiting a critical vulnerability (CVE-2026-51990) in Tencent's Sogo…

NEWSSecurityWeekabout 2 months ago

Anthropic CEO Dario Amodei Says AI Industry Needs to Give Safety Measures Time to Catch Up

Dario Amodei warned that within six to 12 months AI could be capable of leading a swarm of agents that could take over the entire…

NEWSThe Registerabout 2 months ago

Security through obscurity is dead, and AI delivered the fatal blow

RIP, you won't be mourned

NEWShighThe Hacker Newsabout 2 months ago

Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data

Microsoft has disclosed details of two campaigns in which threat actors are abusing third-party email delivery infrastructure to b…

NEWScriticalCVE-2026-420168.1 HIGHThe Hacker Newsabout 2 months ago

CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added five security flaws impacting JFrog Artifactory, Connec…

NEWScriticalCVE-2026-851029.8 CRITICALBleeping Computerabout 2 months ago

Dutch NCSC: Critical Check Point VPN flaws exploitation is imminent

The Dutch Nationaal Cyber Security Centrum (NCSC) is warning of imminent exploitation of two critical flaws in Check Point VPN tra…

NEWScriticalSecurityWeekabout 2 months ago

BlueMoon Exploit Kit Chains Recent Chrome, Windows Zero-Days

Multiple espionage-motivated threat actors have adopted BlueMoon in opportunistic, rushed deployments. The post BlueMoon Exploit K…

NEWShighWired Securityabout 2 months ago

From Hacks to Bioweapons, Claude Misuse Is Now Everywhere

Plus: The US disrupts the internet’s biggest black market, a Conti ransomware hacker gets prison time, Meta fails to stop AI-gener…

NEWSThe Hacker Newsabout 2 months ago

When the Whole Company Adopts AI: What It Does to Your SOC

Over the past year, we watched a new class of alert appear in enterprise security operations centers and grow faster than anything…

NEWSThe Hacker Newsabout 2 months ago

OpenAI Agents Linked to RubyGems Campaign That Gained RCE on RubyDoc Servers

The "major malicious attack" that targeted RubyGems in May 2026 was the work of a swarm of OpenAI agents, according to a new repor…

NEWSSecurityWeekabout 2 months ago

Users in Houthi-Held Yemen Tried to Develop Advanced Weapons With AI, Anthropic Says

Anthropic said the users did not succeed in “fielding an operational device” but did carry out a failed test of a guided rocket. T…

NEWShighCyberScoopabout 2 months ago

Researchers say OpenAI agents were behind May hacking campaign targeting RubyGems

OpenAI confirmed their agents were behind a campaign in May that researchers say flooded the popular online code repository with m…

NEWSCyberScoopabout 2 months ago

Cyberattack causes a flight delay? Airlines won’t owe you a hotel or meal

A Department of Transportation rule published last week says that airlines complying with cybersecurity regulations will have redu…

NEWShighBleeping Computerabout 2 months ago

Hackers abused Claude to extract secrets from 1.8M Android apps

Anthropic says multiple threat groups, including the financially motivated and state-sponsored espionage groups linked to Russia a…

NEWSBleeping Computerabout 2 months ago

Florida confirms DMV database breached via stolen police account

The Florida Department of Highway Safety and Motor Vehicles (FLHSMV) has confirmed that its DAVID driver database suffered a data…

NEWSWired Securityabout 2 months ago

Meta Sued Over Training Data for Its AI and Face-Recognition Systems

The proposed class action alleges Meta illegally harvested people’s Facebook and Instagram photos to train its AI image-generation…

NEWScriticalCyberScoopabout 2 months ago

GitLab’s critical flaw is already drawing internet-wide probes

One flaw allows an unauthenticated attacker to read files from the server. GitLab urged operators of self-managed installations to…

NEWScriticalSecurity Magazineabout 2 months ago

Critical Infrastructure Cyberattack Encrypts Central IT Structures

Municipal utility Stadtwerke Landsberg experienced a cyberattack that encrypted its central IT systems.