Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,668 articles

Hacker Conversations: Vinnie Liu, Performer Turned Ringmaster

Vinnie Liu was recruited by the NSA when he was just 17 years old. He is now the CEO of Bishop Fox. The post Hacker Conversations:…

NEWScriticalBleeping Computerabout 2 months ago

New 'BlueMoon' kit exploited Windows and Chrome zero-day flaws

Multiple cyber-espionage groups deployed an exploit kit dubbed "BlueMoon" that leveraged zero-day vulnerabilities in Microsoft Win…

NEWSBleeping Computerabout 2 months ago

The Top 4 Threats We Found by Investigating Every Alert for a Quarter

Identity was the target in roughly half of all confirmed malicious activity. Prophet Security breaks down the four main attack pat…

NEWSInfosecurity Magazineabout 2 months ago

CISA Updates Insider Threat Guide With New Mitigation Advice

CISA has updated its insider threat guide with new advice on remote work, AI and risk detection

NEWSCyberScoopabout 2 months ago

Governments ‘buying time’ in race between innovation, security, national cyber director says

Sean Cairncross also said AI has shown long-standing issues in cyber rather than creating new ones. The post Governments ‘buying t…

NEWShighSecurityWeekabout 2 months ago

Deceptive Android Apps Exploit Google Play Early Access to Evade Reviews

Deceptive apps in Early Access are being used by dishonest developers for their own benefit. The post Deceptive Android Apps Explo…

NEWSSecurityWeekabout 2 months ago

Webinar Today: Keep Pace With AI – A New Operating Model for Endpoint Remediation

Join the webinar for a focused, 20-minute discussion on Frontier Pace Governance, an approach to balancing automation, policy, and…

NEWSThe Registerabout 2 months ago

ShinyHunters expose 6.4M in attack on medical supplier McKesson

Have I Been Pwned logs leaked records spanning patients, staff, and providers

NEWShighInfosecurity Magazineabout 2 months ago

MantaxOtax Android Malware Combines Ransomware With Spyware

MantaxOtax Android malware combines ransomware with extensive spyware capabilities

NEWScriticalCVE-2026-19490SecurityWeekabout 2 months ago

Critical NetScaler Vulnerability Exploited in Attacks

Tracked as CVE-2026-19490, the authentication bypass flaw has been exploited in the wild since at least September 3. The post Crit…

NEWSInfosecurity Magazineabout 2 months ago

FBI Publishes First-Ever Cyber Strategy, With Focus on Disrupting Threat Actors

The new document appears to be part of a broader shift by the US government towards the proactive disruption of cyber threat actor…

NEWSSecurityWeekabout 2 months ago

Widened Scan Turns Up Fourth Rogue Claude Cyber Incident

Anthropic is most concerned about Claude Mythos 5’s reckless behavior after recent incidents in which real systems were hacked. Th…

NEWSThe Hacker Newsabout 2 months ago

Check Point Discloses Two 9.8-Rated VPN Certificate Flaws Enabling Unauthenticated RCE

Check Point has patched two critical vulnerabilities in the way its firewall and management products handle VPN certificates. The…

NEWSThe Hacker Newsabout 2 months ago

PaperCut Attacker Uses Hundreds of AI Agents to Compromise 440+ Instances

A suspected Russian-speaking cyber actor has been attributed to the use of artificial intelligence (AI) to devise exploits targeti…

NEWShighThe Hacker Newsabout 2 months ago

Gigabud Creates Android Work Profiles to Hide From Banking App Malware Checks

The Gigabud banking trojan now installs a second Android app that creates a work profile on an infected phone and drops a tampered…

NEWScriticalSecurityWeekabout 2 months ago

4.1 Million Impacted by AdaptHealth Data Breach

In June 2026, hackers stole personal, health, and insurance information from AdaptHealth’s systems. The post 4.1 Million Impacted…

NEWSBleeping Computerabout 2 months ago

Microsoft says September updates fix mouse settings reset issues

Microsoft has fixed a known issue that wiped mouse settings on some Windows 11 systems after installing the KB5120998 August 2026…

NEWShighCVE-2026-2007910.0 CRITICALThe Hacker Newsabout 2 months ago

CISA Flags Exploited Cisco, Citrix, Fortinet Flaws, Sets Sept. 12 Federal Patch Deadline

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added three flaws, each impacting Cisco, Citrix, and…

NEWShighCVE-2026-2007910.0 CRITICALSecurityWeekabout 2 months ago

Organizations Warned of Cisco Secure FMC Exploitation

Cisco and CISA have flagged exploitation of CVE-2026-20079, a vulnerability disclosed in March 2026. The post Organizations Warned…

NEWSWired Securityabout 2 months ago

Clearview AI Is Testing an AI Tool That Would Let Cops Unearth Your Life Online

InquiryIQ, a previously unreported prototype, tested a model from xAI, maker of Grok, to surface associates, social accounts, and…

NEWScriticalBleeping Computerabout 2 months ago

CISA: WatchGuard RCE flaw now exploited in ransomware attacks

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that ransomware gangs are also exploiting a critica…

NEWSInfosecurity Magazineabout 2 months ago

Anthropic Reveals Yet Another Cybersecurity Incident

Anthropic has found a fourth case of its model accessing third-party systems without authorization

NEWSBleeping Computerabout 2 months ago

Microsoft fixes bug that wiped Windows desktop settings

Microsoft says the September 2026 Patch Tuesday updates fix a known issue causing desktop settings to be lost or reset on some Win…

NEWSInfosecurity Magazineabout 2 months ago

OFAC Sanctions Chinese Scam Platform Xinbi Guarantee

The US Treasury has placed sanctions on notorious Chinese cybercrime marketplace Xinbi Guarantee

NEWSThe Hacker Newsabout 2 months ago

Nearly 1 in 10 Exposed LiteLLM Gateways Accepted the Example "sk-1234" Admin Key

Nearly one in ten of the internet-facing LiteLLM servers that Wiz Research scanned in February accepted sk-1234, the example admin…

NEWScriticalSecurityWeekabout 2 months ago

New ‘ShieldCrash’ Zero-Day Exploit Targets Microsoft Defender

The exploit provides full System privileges on Windows machines running the September 2026 patches. The post New ‘ShieldCrash’ Zer…

NEWShighThe Hacker Newsabout 2 months ago

Anthropic Discloses Fourth AI Hacking Incident Involving Claude Opus 4.6

Anthropic on Wednesday disclosed a fourth incident in which its artificial intelligence (AI) model broke into real third-party sys…

NEWSThe Registerabout 2 months ago

Dental contractor set up secret account with access to 4,000 patient records then left the company

Toothless security

NEWShighBleeping Computerabout 2 months ago

Trezor warns users of email provider breach, phishing attacks

Trezor warned customers on Wednesday that threat actors who breached its third-party email provider are targeting them in phishing…

NEWShighCVE-2025-252498.1 HIGHSecurityWeekabout 2 months ago

Fortinet Code Execution Flaw Exploited in PivotC2 RAT Attacks

The high-severity, unauthenticated vulnerability tracked as CVE-2025-25249 was patched in January 2026. The post Fortinet Code Exe…