Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

2,131 articles

NEWScriticalSecurity Magazine2 months ago

Texas Tech University Constructing Critical Infrastructure Security Site

The university has started construction to expand its institute devoted to examining U.S. critical infrastructure vulnerabilities.

NEWShighInfosecurity Magazine2 months ago

Chinese Threat Actors Ditch Static Phishing Pages for Live Credential Interception

Almost all organizations impersonated by Chinese phishing platforms are non-Chinese entities, suggesting operators deliberately av…

NEWSSecurity Magazine2 months ago

600,000 Lithuanian National Register Entries Leaked

Lithuanian officials believe this was the result of foreign activity.

NEWSInfosecurity Magazine2 months ago

BTMOB Android RAT Spreads Through No-Code Builder Tooling

BTMOB Android RAT sold as a service with a no-code builder for fast, regional phishing lures

NEWSInfosecurity Magazine2 months ago

India's CERT-In Sets 12-Hour Patch Deadline for Exposed Flaws

CERT-In urges 12-hour patching of exposed flaws as AI compresses exploitation timelines

NEWSWired Security2 months ago

US Law Enforcement Warns of ‘Anti-Tech Extremism’ as AI Hatred Grows

As Americans stew over the looming risk of job-stealing AI and data centers in their back yards, the feds are raising the alarm ab…

NEWShighInfosecurity Magazine2 months ago

Iran-Linked Hackers Target US Aviation with Phishing and SEO Poisoning Campaign

Iran's Nimbus Manticore pushes AI-built MiniFast backdoor via phishing and SEO poisoning

NEWSKrebs on Security2 months ago

Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks

Authorities in the Netherlands have arrested the co-owners of two related Internet hosting companies for operating IT infrastructu…

NEWSWired Security2 months ago

The AI Era Is Creating a Bug-Hunting Arms Race

As attackers ramp up their AI exploit development, the search for software vulnerabilities is changing rapidly.

NEWShighInfosecurity Magazine2 months ago

FBI Warns 'Kali365' Phishing Kit Hijacks Microsoft 365 OAuth Tokens

The Kali365 phishing-as-a-service platform lowers the barrier of entry for cybercriminals, said the FBI

NEWSInfosecurity Magazine2 months ago

Fake Streams, Counterfeit Merch and Other Scams: How Fraudsters Target F1 Fans

From fake F1 streams to counterfeit merch, fraudsters are exploiting fans online and the Bitdefender Cybersecurity Grand Prix Fan…

NEWSWired Security2 months ago

The FBI Wants ‘Near Real-Time’ Access to US License Plate Readers

Plus: Google publishes a live exploit for an unpatched flaw, the feds arrest two men accused of creating thousands of nonconsensua…

NEWSKrebs on Security2 months ago

Lawmakers Demand Answers as CISA Tries to Contain Data Leak

Lawmakers in both houses of Congress are demanding answers from the U.S. Cybersecurity & Infrastructure Security Agency (CISA) aft…

NEWSSecurity Magazine2 months ago

Why CISA Accepting KEV Nominations Is So Important

CISA announced that it will be accepting nominations to its Known Exploited Vulnerabilities (KEV) catalog.

NEWSInfosecurity Magazine2 months ago

Fake Gemini and Claude Code Sites Spread Infostealers Through SEO Poisoning

The infostealer payload in this campaign collect a vast amount of data, from collaboration authentication keys to cryptocurrency w…

NEWSInfosecurity Magazine2 months ago

Apple Blocked $2.2bn in App Store Fraud in the Last Year

Total figure for fraudulent transactions Apple has blocked since 2020 now stands at over $11bn

NEWSKrebs on Security2 months ago

Alleged Kimwolf Botmaster ‘Dort’ Arrested, Charged in U.S. and Canada

Canadian authorities on Wednesday arrested a 23-year-old Ottawa man on suspicion of building and operating Kimwolf, a fast spreadi…

NEWSWired Security2 months ago

‘Creepy’ Listening Tool for Targeted Ads Didn’t Actually Work, FTC Says

Three firms will pay nearly $1 million for selling “Active Listening” technology that they claimed tapped people’s phones for adve…

NEWSInfosecurity Magazine2 months ago

Cybercriminal VPN Dismantled in Europol Crackdown

First VPN, a service used by ransomware actors and fraudsters, was dismantled by Europol

NEWSSecurity Magazine2 months ago

Security Leaders Should Prepare for World Cup Scams

It’s likely that cybercriminals will increase scam activity leading up to and during this event.

NEWSInfosecurity Magazine2 months ago

GitHub Breach Traced to Malicious 'Nx Console' VS Code Extension

A threat actor compromised an Nx developer and posed as a legitimate maintainer to publish a malicious extension on Visual Studio…

NEWSSecurity Magazine2 months ago

Strategies, Expert Insights from the 2026 Verizon DBIR

The overarching theme of this year’s report is “keeping a strong foundation in the face of change.”

NEWSInfosecurity Magazine2 months ago

Three-Quarters of Firms Knowingly Ship Vulnerable Code

AI risks threaten to permeate supply chains through unvetted code and unaudited suppliers

NEWSInfosecurity Magazine2 months ago

Nine-Year-Old Linux Kernel Flaw Leaks SSH Keys and Password Hashes

Qualys finds nine-year-old Linux ptrace flaw exposing SSH keys and password hashes locally

NEWShighWired Security2 months ago

A Hacker Group Is Poisoning Open Source Code at an Unprecedented Scale

GitHub is just the latest victim of TeamPCP, a gang that has carried out a spree of software supply chain attacks that has impacte…

NEWSInfosecurity Magazine2 months ago

Grafana Labs Says Code Breach Stemmed from TanStack Attack

Grafana Labs has confirmed a recent data breach was caused by the TanStack supply chain attack

NEWShighInfosecurity Magazine2 months ago

Android Malware Campaign Used Hundreds of Fake Apps to Silently Charge Users

Premium Deception campaign uses 250 Android apps to silently sign victims up to paid services

NEWSInfosecurity Magazine2 months ago

Mini Shai-Hulud Hits Hundreds of npm Packages in AntV Ecosystem

Mini Shai-Hulud worm hits Alibaba AntV ecosystem in largest npm supply chain wave to date

NEWSSecurity Magazine2 months ago

GitHub Breached, Internal Repositories Exposed

GitHub experienced a cyber incident.

NEWSInfosecurity Magazine2 months ago

China-Linked Webworm APT Evolves Tactics, Expands to European Targets

China-linked Webworm APT expands beyond Asia, targeting European government organizations and refining its cyber espionage tactics…