Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,666 articles

NEWScriticalCyberScoopabout 2 months ago

GitLab’s critical flaw is already drawing internet-wide probes

One flaw allows an unauthenticated attacker to read files from the server. GitLab urged operators of self-managed installations to…

NEWScriticalSecurity Magazineabout 2 months ago

Critical Infrastructure Cyberattack Encrypts Central IT Structures

Municipal utility Stadtwerke Landsberg experienced a cyberattack that encrypted its central IT systems.

NEWSThe Registerabout 2 months ago

More JFrog Artifactory bugs under attack, and all 3 have patches

If you're waiting for a sign to upgrade to a fixed version: this is it

NEWShighBleeping Computerabout 2 months ago

Passkey-themed phishing attacks lead to Microsoft 365 data theft

Microsoft says threat actors linked to ShinyHunters, Helix, and other extortion gangs are using passkey and single sign-on-themed…

NEWShighSecurityWeekabout 2 months ago

Phishing Research Challenges Conventional Security Awareness Testing

Analysis of 2.47 million simulated attacks shows why organizations should measure credential leaks and reporting, not just clicks.…

NEWSCVE-2026-8570610.0 CRITICALThe Hacker Newsabout 2 months ago

GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure

GitLab has released patches to address multiple flaws, including a maximum-severity security vulnerability that has witnessed in-t…

NEWShighBleeping Computerabout 2 months ago

Artifactory flaws chained in attacks deploying backdoor malware

Threat actors are exploiting critical and high-severity vulnerabilities in JFrog Artifactory to bypass authentication, gain admini…

NEWSThe Hacker Newsabout 2 months ago

Anthropic Says Seven China-Based AI Labs Ran Industrial-Scale Claude Distillation Attacks

Anthropic on Thursday said it identified and disrupted industrial-scale illicit distillation attacks against Claude from seven lab…

NEWShighSecurityWeekabout 2 months ago

GitLab Vulnerability Exploited One Day After Disclosure

The critical-severity path traversal flaw allows unauthenticated attackers to read arbitrary files from the GitLab server. The pos…

NEWSSecurity Magazineabout 2 months ago

A Fourth Claude Model Escaped Guardrails

Another Anthropic model breached guardrails during testing.

NEWShighThe Hacker Newsabout 2 months ago

Claude Used to Automate Exploitation and Data Theft Across Multiple Victims

Anthropic has warned that cybercriminals and state-sponsored hackers alike are using its Claude models for cyber attacks, weapons…

NEWSSecurityWeekabout 2 months ago

In Other News: InjectEave Attack, SIM Swapper Sentenced, Glasswing Findings Review

Noteworthy stories that might have slipped under the radar: Invisible Unicode slips past phishing filters, US puts $10 million bou…

NEWShighThe Hacker Newsabout 2 months ago

Russian State-Sponsored Hackers Use Claude to Rebuild Malware After Detection

Anthropic on Thursday revealed it disrupted a campaign mounted by a Russian state-sponsored threat actor that abused Claude for de…

NEWSBleeping Computerabout 2 months ago

How Threat Actors Are Turning Trusted AI Platforms Into an Attack Surface

Threat actors are abusing trusted AI platforms to host malicious content, poison search results, and trick users into installing m…

NEWShighInfosecurity Magazineabout 2 months ago

Hackers Favor US Eastern Business Hours in M365 Phishing Campaign

KnowBe4 researchers observed a new phishing campaign leveraging Microsoft 365’s Direct Send to send malicious emails

NEWShighSecurityWeekabout 2 months ago

Trezor Says 347,000 Users Received Phishing Emails After Brevo Hack

Hackers compromised the Brevo marketing platform and used that access to send phishing emails to users of Trezor, BitBox, and Coin…

NEWSThe Registerabout 2 months ago

Ukrainian lawyer's second career as a Conti coder earns him 4 years behind bars

Swapping legal work for malware development ended in extradition and a guilty plea

NEWShighThe Registerabout 2 months ago

EU's Cyber Resilience Act starts the 24-hour vulnerability clock

Manufacturers must now disclose actively exploited flaws and severe security incidents through ENISA's new reporting platform

NEWScriticalThe Hacker Newsabout 2 months ago

Your Critical Vulnerabilities Might Not Be Your Biggest Risk

Security teams have become exceptionally talented at finding vulnerabilities. Now, it’s time to turn our attention to optimizing t…

NEWSSecurityWeekabout 2 months ago

Ukrainian Conti Ransomware Developer Sentenced to 4 Years in US Prison

Oleksii Oleksiyovych Lytvynenko has been sentenced to 4 years in prison after he was arrested in Ireland in 2023. The post Ukraini…

NEWSCVE-2023-282510.0 CRITICALBleeping Computerabout 2 months ago

GitLab urges users to patch max severity path traversal flaw

GitLab urged users on Thursday to patch their servers immediately against a maximum-severity path traversal vulnerability tracked…

NEWScriticalCVE-2026-851029.8 CRITICALSecurityWeekabout 2 months ago

Check Point Patches Critical VPN Vulnerabilities

Tracked as CVE-2026-85102 and CVE-2026-85103, the flaws could be exploited for remote code execution. The post Check Point Patches…

NEWSSecurityWeekabout 2 months ago

Kiteworks Acquires Bonfy.AI to Fill the AI Gap in Data Governance

Financials have not been disclosed, but the estimated cost is in the tens of millions of dollars. The post Kiteworks Acquires Bonf…

NEWShighSecurityWeekabout 2 months ago

Surfshark Systems Targeted by Hackers

A misconfigured test server containing engineering material, including internal configurations, was accessed by threat actors. The…

NEWSBleeping Computerabout 2 months ago

Microsoft fixes Teams, Outlook launch failures on ARM Windows PCs

Microsoft has fixed a bug that prevented Teams and Outlook from launching on ARM-based Windows devices after installing updates re…

NEWSInfosecurity Magazineabout 2 months ago

Most Organizations Skip Permissions Reviews Before Deploying AI Tools

A new Syskit study has shown that only 43% of organizations with AI agents deployed in Microsoft 365 environments completed a perm…

NEWSWired Securityabout 2 months ago

The US and Mexico Announce They’re Teaming Up Against Drones

The new joint operation uses laser-based technology capable of detecting, tracking, and disabling commercial drones linked to huma…

NEWShighSecurityWeekabout 2 months ago

Anthropic Says Russian Hackers Used Claude AI to Automate Malware Evasion

Anthropic reveals how criminal groups are increasingly targeting AI vendors' own infrastructure, including to steal a pre-release…

NEWShighSecurityWeekabout 2 months ago

PaperCut Flaws Exploited in AI-Powered Attacks

A Russian threat actor used AI to build, test, and deploy exploits against hundreds of organizations worldwide. The post PaperCut…

NEWShighBleeping Computerabout 2 months ago

Trezor: 347,000 users targeted in phishing attacks after Brevo breach

Trezor has revealed that phishing attacks against its customers earlier this week targeted 347,000 email addresses and affected 2,…