Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,669 articles

NEWShighCVE-2025-252498.1 HIGHSecurityWeekabout 2 months ago

Fortinet Code Execution Flaw Exploited in PivotC2 RAT Attacks

The high-severity, unauthenticated vulnerability tracked as CVE-2025-25249 was patched in January 2026. The post Fortinet Code Exe…

NEWSThe Registerabout 2 months ago

Anthropic reveals fourth likely crime committed by its AI

Claude's Felony Bench rap sheet is now as long as OpenAI's

NEWShighThe Registerabout 2 months ago

Novel Blue Moon kit targeting Chrome and Windows reflects new reality of AI-driven exploits

Mind the patch gap, please and thank you

NEWShighCVE-2026-2007910.0 CRITICALBleeping Computerabout 2 months ago

Cisco confirms CVE-2026-20079 Secure FMC flaw exploited in attacks

Cisco has confirmed that a maximum-severity authentication bypass vulnerability tracked as CVE-2026-20079 in its Secure Firewall M…

NEWSBleeping Computerabout 2 months ago

AdaptHealth confirms 4.1 million people exposed in July cyberattack

Healthcare company AdaptHealth has confirmed that data of 4.1 million people was exposed in a cyberattack discovered in July that…

NEWScriticalCyberScoopabout 2 months ago

Chinese espionage groups swarm to exploit triple-link chain of zero-days

Multiple China-aligned threat groups exploited the defects quickly to target various organizations. Proofpoint said the activity i…

NEWSWired Securityabout 2 months ago

San Francisco Orders Meta to Stop ‘Allowing’ AI Child Abuse Ads

The City Attorney’s Office has asked Meta to explain how the harmful ads repeatedly ran on Facebook and Instagram. The company cla…

NEWSBleeping Computerabout 2 months ago

Skullcandy Dime 3 earbuds expose users to Bluetooth hijacking

The Carnegie Mellon University CERT Coordination Center (CERT/CC) is warning that Skullcandy Dime 3 wireless earbuds accept Blueto…

NEWSCyberScoopabout 2 months ago

FTC rescinds policy requiring health apps to notify customers after a breach

The policy, passed under the Biden administration, forced health apps to disclose when users’ personal health records were exposed…

NEWSWired Securityabout 2 months ago

Apple Doesn’t Want You to Worry About the New Apple Watch’s Listening Features

The new Apple Watch includes several “intelligent” listening features that have privacy and security baked in. But the protections…

NEWShighCyberScoopabout 2 months ago

Lawmakers call on Treasury to sanction hackers-for-hire

The groups have allegedly targeted American citizens and companies, including the wife of GOP Senate candidate Mike Rogers, a form…

NEWSThe Hacker Newsabout 2 months ago

U.S. Disrupts Xinbi Guarantee Scam Marketplace, Freezes $52.8 Million in Crypto

The U.S. Department of Justice (DoJ) on Wednesday announced coordinated actions aimed at an illicit online marketplace called Xinb…

NEWSSecurity Magazineabout 2 months ago

Healthcare Tech Company Veradigm Exposed in Third-Party Breach

Stolen data includes Social Security Numbers; however, no clinical or medical information appears to be involved.

NEWShighSecurity Magazineabout 2 months ago

Backdoor Discovered in AI Workflows, Security Leaders Discuss

Security leaders discuss Workflow Identity Hijacking.

NEWSSecurityWeekabout 2 months ago

HelmGuard Raises $7.3 Million for Agentic GRC and Security

The company will increase its US market presence and will expand its engineering and go-to-market teams. The post HelmGuard Raises…

NEWScriticalThe Registerabout 2 months ago

Serial Microsoft 0-day hunter drops yet another Defender exploit

A bypass of a bypass of a bypass

NEWSSecurity Magazineabout 2 months ago

Avoid “PR Spin” in IT/OT Outages, CISA Advises

CISA and the FBI released best practices for organizations needing to communicate under the pressure of an outage or other disrupt…

NEWSSecurityWeekabout 2 months ago

AI Is Giving Lesser-Resourced Attackers Nation-State-Level Reach, Google Warns

Criminal and state-sponsored adversaries are increasingly using AI to automate and scale their attacks, according to GTIG. The pos…

NEWSBleeping Computerabout 2 months ago

US says Chinese firms extracted billions of tokens from frontier AI models

U.S. cybersecurity and intelligence agencies say that six Chinese AI companies conducted industrial-scale distillation attacks on…

NEWShighThe Hacker Newsabout 2 months ago

Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week

Multiple espionage-motivated threat activity clusters have been found deploying a previously undocumented exploit kit called BlueM…

NEWShighSecurityWeekabout 2 months ago

Android’s September 2026 Updates Patch 180 Vulnerabilities

The security updates resolve critical flaws across Android’s Framework, System, and Kernel components. The post Android’s Septembe…

NEWSWired Securityabout 2 months ago

You Can Now Destroy Flock Cameras for Cash in GTA V

A new GTA mod lets you smash and shoot Flock’s automatic license plate readers around the fictional Los Santos.

NEWShighSecurityWeekabout 2 months ago

Chipmaker Patch Tuesday: Nvidia, AMD, Arm Issue Security Advisories

Major chipmakers announced patches for vulnerabilities recently discovered in their products. The post Chipmaker Patch Tuesday: Nv…

NEWScriticalBleeping Computerabout 2 months ago

Veradigm warns of patient data breach after ransomware gang claims attack

Healthcare technology company Veradigm disclosed a data breach after a cybersecurity incident at one of its third-party vendors ex…

NEWSCyberScoopabout 2 months ago

FBI cyber chief worries private sector not sharing enough cyber threat information

Brett Leatherman said that industry has the wrong idea about what the FBI does with the data it collects during incidents, which i…

NEWSInfosecurity Magazineabout 2 months ago

Researchers Build WeChat Zero-Click Worm Hijacking Phones via Calls

The hacking tool, built using a combination of AI models, is effective against Android and iOS devices

NEWScriticalSecurityWeekabout 2 months ago

Fortinet Patches Critical Vulnerabilities in FortiMonitorOnSight, Chrome Extension

The critical, unauthenticated bugs allow attackers to bypass authentication and proxy a user’s browser traffic. The post Fortinet…

NEWSInfosecurity Magazineabout 2 months ago

Gigabud Uses Android App Cloning to Evade Fraud Detection

Gigabud clones banking apps into a work profile to break the link between malware alerts and fraud

NEWSThe Hacker Newsabout 2 months ago

Infostealer Logs Expose Replayable AI Tokens That Can Bypass MFA

Cybercriminals are hijacking artificial intelligence (AI) user accounts via information stealer logs to create "stolen keys" that…

NEWSBleeping Computerabout 2 months ago

MFA's Weakest Link: Account Recovery Is the New Attack Path

MFA makes account takeover harder, but attackers are increasingly targeting the recovery processes used to reset passwords and aut…