Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,666 articles

NEWShighThe Hacker Newsabout 2 months ago

Attackers Chain JFrog Artifactory Flaws to Gain Admin Control and Plant Backdoors

Attackers have chained two flaws in JFrog Artifactory, the repository that software build pipelines pull from, to take administrat…

NEWShighThe Hacker Newsabout 2 months ago

China-Linked UNC3569 Exploited Sogou Input Method Flaw to Deploy GRAYRABBIT Backdoor

A China-linked hacking group exploited a flaw in Sogou Input Method, one of the most widely used tools for typing Chinese characte…

NEWSBleeping Computerabout 2 months ago

Conti ransomware gang member sentenced to 4 years in prison

A Ukrainian national has been sentenced to four years in prison for his role in Conti ransomware attacks between 2021 and 2022. [.…

NEWScriticalThe Hacker Newsabout 2 months ago

PaperCut Replaces Emergency Patches With Fixes for Two Actively Exploited Flaws

PaperCut on Thursday released a new security maintenance release that replaces all previously published emergency patches that wer…

NEWShighCVE-2026-2007910.0 CRITICALThe Hacker Newsabout 2 months ago

Cisco FMC Flaws Exploited to Steal Credentials and Deploy Qilin Ransomware

Cisco has revealed that three distinct threat clusters linked to ransomware and state-sponsored attacks have been exploiting two r…

NEWSThe Registerabout 2 months ago

Latest Anthropic horror story chills with tales of kamikaze drone swarms and bioweapons research

Everyone from ShinyHunters to Russian freelancers is in on the illicit model fun

NEWShighBleeping Computerabout 2 months ago

New Android malware encrypts files, steals data, and harasses victims

A new Android malware strain called Mantax Otax combines ransomware and spyware capabilities to encrypt files, steal sensitive dat…

NEWSBleeping Computerabout 2 months ago

September Windows Server updates break Remote Desktop Services

Windows admins report that the September 2026 security updates are causing Remote Desktop Services (RDS) failures on Windows Serve…

NEWSCyberScoopabout 2 months ago

Conti ransomware crew member sentenced to four years in prison

Oleksii Lytvynenko joined the notorious group in 2021 and was directly involved in attacks on at least 12 companies. The post Cont…

NEWSSecurityWeekabout 2 months ago

Mandiant Founder Kevin Mandia Joins Amazon Board

Mandiant founder and cybersecurity veteran brings more than 30 years of public and private sector experience to Amazon’s board. Th…

NEWSCyberScoopabout 2 months ago

Hawley probes OpenAI over Hugging Face breach

The Republican lawmaker called OpenAI’s leadership decisions “reckless,” and used recent warnings about the existential risk of AI…

NEWSSecurity Magazineabout 2 months ago

Cybersecurity Readiness Doesn't Match Confidence Levels

According to a report by ManageEngine, cybersecurity readiness doesn't match security leaders' cybersecurity confidence.

NEWSThe Registerabout 2 months ago

Watch out: Apple timepiece can grab snippets of conversation without both speakers' consent

War is peace. Freedom is slavery. Privacy is surveillance

NEWShighCyberScoopabout 2 months ago

AI lets small actors run state-level hacking campaigns, Anthropic report finds

The report details a Russian-aligned espionage campaign against more than 20 organizations, an exploit foundry run by Chinese unde…

NEWShighBleeping Computerabout 2 months ago

Surfshark VPN says hackers breached internal testing, proxy servers

Surfshark disclosed that hackers accessed one of its internal test servers after a configuration error exposed it to the internet.…

NEWSBleeping Computerabout 2 months ago

Microsoft Excel KB5002914 update breaks copy and paste for some users

Microsoft Excel users report that this week's KB5002914 Office security update is breaking copy-and-paste operations and formula d…

NEWSThe Registerabout 2 months ago

Hundreds of AI agents helped PaperCut attacker hit 395+ orgs, and some went off script

Human operator: don't touch CIS orgs. AI agents: look a squirrel!

NEWSSecurity Magazineabout 2 months ago

Could AI Agents Be the Next Insider Threat?

AI agents could become a highly targeted attack vector.

NEWScriticalSecurity Magazineabout 2 months ago

4.1M Impacted by AdaptHealth Data Breach

AdaptHealth experienced a cyberattack that compromised certain personal information.

NEWSSecurity Magazineabout 2 months ago

FBI Veteran Shares Perspective on the Agency’s New Cyber Strategy

The FBI published a new cyber strategy, and a veteran of the agency is sharing his thoughts.

NEWShighThe Hacker Newsabout 2 months ago

ThreatsDay: 200 Android Flaws, Browser-Built Phishing, 119K Scam Shops + 23 More Stories

A lot of this week’s security news has the same awkward answer to one question: “Why was that allowed to work?” An extension asks…

NEWSSecurity Magazineabout 2 months ago

Security Experts Discuss CISA’s Insider Threat Guide Updates

CISA recently updated its Insider Threat Mitigation Guide.

NEWSSecurityWeekabout 2 months ago

Cybersecurity M&A Roundup: 33 Deals Announced in August 2026

Significant cybersecurity M&A deals announced by Brinqa, Cribl, Echo, Fortinet, Kiteworks, Palo Alto Networks, and Visa. The post…

NEWShighBleeping Computerabout 2 months ago

AI-powered attack exploited PaperCut flaws to hack 395 organizations

A threat actor, likely Russian-speaking, used hundreds of AI agents to develop and launch a global exploitation campaign targeting…

NEWShighBleeping Computerabout 2 months ago

Cisco FMC flaws exploited by ransomware gang, state-sponsored hackers

Cisco Talos says two recently patched Secure Firewall Management Center (FMC) vulnerabilities have been exploited by three separat…

NEWSBleeping Computerabout 2 months ago

IDScan confirms breach tied to 153 million stolen driver’s licenses

Identity verification company IDScan has confirmed that hackers accessed customer data stored in its cloud platform, days after re…

NEWSSecurityWeekabout 2 months ago

Anthropic Researcher Resigns With Warning About the Dangers of AI Development

Both Anthropic and OpenAI have seen high-profile resignations in recent years that were tied to safety concerns. The post Anthropi…

NEWSThe Hacker Newsabout 2 months ago

Google Play Early Access Abused to Push Thousands of Deceptive Android Apps

Bad actors are misusing Google Play's Early Access program to push deceptive apps that claim to offer money, rewards, casino winni…

NEWShighSecurityWeekabout 2 months ago

Hacker Conversations: Vinnie Liu, Performer Turned Ringmaster

Vinnie Liu was recruited by the NSA when he was just 17 years old. He is now the CEO of Bishop Fox. The post Hacker Conversations:…

NEWScriticalBleeping Computerabout 2 months ago

New 'BlueMoon' kit exploited Windows and Chrome zero-day flaws

Multiple cyber-espionage groups deployed an exploit kit dubbed "BlueMoon" that leveraged zero-day vulnerabilities in Microsoft Win…