Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

2,131 articles

Patch Tuesday, May 2026 Edition

Artificial intelligence platforms may be just as susceptible to social engineering as human beings, but they are proving remarkabl…

NEWSInfosecurity Magazine2 months ago

OpenAI Launches 'Daybreak' to Help Build Secure By Design Software

With Daybreak, OpenAI wants its frontier AI models to be used to deploy secure by design software from the ground up

NEWSInfosecurity Magazine2 months ago

Mini Shai-Hulud Hits TanStack npm Packages

Mini Shai-Hulud compromises TanStack npm packages and spreads across PyPI

NEWSInfosecurity Magazine2 months ago

End‑to‑End Encrypted RCS Messaging Arrives Across iPhone and Android

Apple begins rolling out end-to-end encrypted RCS messaging between iPhone and Android in iOS 26.5

NEWSInfosecurity Magazine2 months ago

Attackers Combine ClickFix With PySoxy Proxying to Maintain Persistence

Exploitation of open-source tools allows attackers to maintain persistent access after initial social engineering, warn ReliaQuest…

NEWSInfosecurity Magazine2 months ago

Malicious Hugging Face Repository Typosquats OpenAI

HiddenLayer reveals infostealer malware in a Hugging Face repository

NEWScriticalInfosecurity Magazine2 months ago

South Staffordshire Water Fined £1m After Data Breach

The ICO has fined South Staffordshire Water nearly £1m for a series of data protection failings

NEWSInfosecurity Magazine3 months ago

TrickMo Variant Routes Android Trojan Traffic Through TON

ThreatFabric finds new TrickMo Android banking trojan variant routing C2 through The Open Network

NEWShighInfosecurity Magazine3 months ago

Rushed Patches Follow Broken Embargo on New Linux Kernel Vulnerabilities

Two new high-severity vulnerabilities, dubbed ’Dirty Frag’ when chained, have been found in the Linux kernel, affecting most Linux…

NEWSInfosecurity Magazine3 months ago

Fake Claude Code Page Pushes PowerShell Stealer at Devs

Ontinue uncovers fake Claude Code installer pushing PowerShell stealer abusing Chrome's IElevator2

NEWScriticalInfosecurity Magazine3 months ago

Hackers Observed Using AI to Develop Zero-Day for the First Time

Google Threat Intelligence Group details how cybercriminals attempted to launch a campaign based around an AI-developed Zero-Day t…

NEWSInfosecurity Magazine3 months ago

US: FCC Relaxes Foreign-Made Router Ban to Allow for Security Updates

The same extension applies to security updates shipped to US-based users of foreign-made drones

NEWSInfosecurity Magazine3 months ago

ShinyHunters Escalates Canvas Extortion with School by School Ransom Campaign

ShinyHunters has escalated its Canvas extortion campaign, defacing hundreds of school login pages and threatening to leak stolen d…

NEWScriticalInfosecurity Magazine3 months ago

Zara Data Breach Impacts Nearly 200,000 Customers

ShinyHunters gets away with emails and other data on 200,000 Zara customers

NEWSInfosecurity Magazine3 months ago

Police Shut Relaunched Crimenetwork Dark Web Marketplace

Spanish police have arrested the suspected administrator of German dark web marketplace Crimenetwork

NEWSInfosecurity Magazine3 months ago

Australian Cyber Security Centre Issues Alert Over ClickFix Attacks

ACSC warns over a campaign targeting organizations which uses ClickFix to deliver Vidar infostealer malware

NEWSInfosecurity Magazine3 months ago

PCPJack Campaign Boots TeamPCP Off Compromised Machines

SentinelOne believes the PCPJack campaign may be the brainchild of a former TeamPCP member

NEWSKrebs on Security3 months ago

Canvas Breach Disrupts Schools & Colleges Nationwide

An ongoing data extortion attack targeting the widely-used education technology platform Canvas disrupted classes and coursework a…

NEWSInfosecurity Magazine3 months ago

Legacy Security Tools Failing Data Protection, Capital One Software Report Finds

Traditional network security tools are undermining data protection, with Forrester and Capital One Software research warning AI ad…

NEWSInfosecurity Magazine3 months ago

Cline Kanban Flaw Lets Websites Hijack AI Coding Agents

Oasis Security finds critical Cline kanban WebSocket flaw exposing AI coding agents to hijack

NEWScriticalInfosecurity Magazine3 months ago

OpenAI and Anthropic LLMs Used in Critical Infrastructure Cyber-Attack, Warns Dragos

Commercial AI models were used to help plan and conduct cyber-attack against operational technology of a water and drainage facili…

NEWShighInfosecurity Magazine3 months ago

Fake Claude AI Site Drops Beagle Backdoor on Windows Users

Sophos finds fake Claude site spreading DonutLoader and a new Beagle backdoor via DLL sideloading

NEWSInfosecurity Magazine3 months ago

Daemon Tools Developer Confirms Software Was Trojanized

A China-linked threat actor backdoored a version of Daemon Tools to infect thousands

NEWShighInfosecurity Magazine3 months ago

Researchers Spot Uptick in Use of Vercel for Phishing Campaigns

Cofense has warned of a “significant” increase in phishing campaigns abusing Vercel platform

NEWShighInfosecurity Magazine3 months ago

CloudZ Malware Abuses Phone Link to Steal SMS OTPs

Cisco Talos uncovers CloudZ RAT and Pheno plugin abusing Microsoft Phone Link to intercept SMS OTPs

NEWScriticalInfosecurity Magazine3 months ago

CISA Urges Critical Infrastructure Providers to Make Plans to Remain Operational if hit by Cyber-Attack

CISA’s CI Fortify initiative aim for critical infrastructure operators to build isolation & recovery

NEWSInfosecurity Magazine3 months ago

Iran-Linked APT Posed as Chaos Ransomware Member in Espionage Campaign

Rapid7 reveals an Iranian false flag operation masquerading as a Chaos ransomware attack

NEWSInfosecurity Magazine3 months ago

One in Eight Workers Has Sold Their Corporate Logins

Cifas says that 13% of employees admit selling company credentials to a former colleague

NEWShighInfosecurity Magazine3 months ago

Microsoft Flags Mass Phishing Campaign Using Fake Compliance Emails

Microsoft researchers warn of a large-scale phishing campaign using fake compliance emails to steal credentials, targeting 35,000…

NEWSInfosecurity Magazine3 months ago

North Korean APT Targets Yanbian Gamers via Trojanized Platform

ESET warns that North Korean hackers compromised a Yanbian gaming site in a supply‑chain attack, trojanizing Windows and Android s…