Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,669 articles

NEWSInfosecurity Magazineabout 2 months ago

ClickFix Moves into the Browser to Steal Cryptocurrency

ClickFix campaign uses browser-injected JavaScript and Google Sheets to steal cryptocurrency

NEWSCyberScoopabout 2 months ago

FBI officials say AI is bolstering adversaries, emphasizing need to focus on cyber basics, patching

The remarks, to both CyberScoop and at the Billington CyberSecurity Summit, dovetail with the release of a new bureau cyber strate…

NEWShighInfosecurity Magazineabout 2 months ago

NHIs Now the Number One Corporate Entry Point for Hackers

SpyCloud claims non-human identities are the most likely route into the enterprise

NEWSThe Registerabout 2 months ago

WeChat worm could pwn a friend before they even answered the call

Calif says AI helped turn a VoIP memory bug into cross-platform RCE before Tencent shut it down

NEWSSecurityWeekabout 2 months ago

US Agencies Warn China Is Systematically Extracting Frontier AI Capabilities

Distillation is an ‘attack’ against an AI model designed to capture outputs, understand reasoning processes, and subsequently trai…

NEWSSecurityWeekabout 2 months ago

Meta Launches Personal AI Agent, Muse, Emphasizes Safety and Privacy

Muse runs on a dedicated, secure virtual machine that houses both the agent and the user’s data. The post Meta Launches Personal A…

NEWSThe Hacker Newsabout 2 months ago

Webinar: Learn How to Answer “Are We Exposed?” Faster After a New CVE

A major vulnerability is disclosed. The alert lands immediately. Then comes the harder question: Are we actually exposed? For man…

NEWSThe Hacker Newsabout 2 months ago

DeepSeek Harness Flaw Let AI Agents Disable Their Own File Sandbox Without Approval

A flaw in DeepSeek Harness, DeepSeek's open-source tool for running AI coding agents on a developer's machine, let a sandboxed age…

NEWScriticalSecurityWeekabout 2 months ago

ICS Patch Tuesday: Schneider Electric, Siemens Fix Critical Flaws

AVEVA and Rockwell Automation also released patches for vulnerabilities affecting industrial control system products. The post ICS…

NEWScriticalThe Hacker Newsabout 2 months ago

Alby Hub Critical Flaw Could Let Attackers Take Over Internet-Exposed Bitcoin Wallets

Bitcoin wallet company Alby has warned of a critical flaw in Alby Hub that could have let an attacker take over a wallet and send…

NEWScriticalSecurityWeekabout 2 months ago

Ivanti Patches Critical Flaws Across Enterprise Security Products

Six critical vulnerabilities in Neurons for ITSM could enable remote code execution, while Sentry and EPMM received patches for au…

NEWSBleeping Computerabout 2 months ago

Over 36,000 exposed Plex servers vulnerable to recent flaws

Over 36,000 Plex Media servers exposed online remain unpatched against multiple security vulnerabilities and are vulnerable to att…

NEWSSecurityWeekabout 2 months ago

This Key Will Self-Destruct: An Open Standard for Revocable API Keys

Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.…

NEWShighSecurityWeekabout 2 months ago

New Phishing Attack Creates Malicious Pages Inside the Victim’s Browser

Attackers are using trusted Microsoft services and blob URLs to generate stealthy phishing pages that leave defenders with no stat…

NEWScriticalSecurityWeekabout 2 months ago

Chrome 153 Patches Seventh Zero-Day of 2026

The Chrome update includes 230 security fixes, and users are advised to update their browsers as soon as possible. The post Chrome…

NEWShighInfosecurity Magazineabout 2 months ago

Microsoft Shatters Patch Tuesday Record With 974 CVE Fixes in September 2026

The update contained 119 critical flaws and two zero days, with security teams needing to prioritize updates

NEWSThe Hacker Newsabout 2 months ago

U.S. Agencies Accuse China AI Firms of Distilling Claude, GPT, Gemini, and Grok

U.S. cybersecurity and intelligence agencies have accused China-based artificial intelligence (AI) companies of conducting "system…

NEWScriticalCVE-2026-874918.8 HIGHThe Hacker Newsabout 2 months ago

Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandbox

Google on Thursday released updates to patch 230 security vulnerabilities, including one that has come under active exploitation i…

NEWSBleeping Computerabout 2 months ago

Man gets 15 years for extorting women with AI-generated porn videos

An Ohio man was sentenced to 15 years in prison for multiple cybercrimes, including sextortion and cyberstalking of numerous victi…

NEWSThe Hacker Newsabout 2 months ago

New cPanel Flaw Lets a Hosting Account With Mail Privileges Run Code as Root

cPanel has patched a flaw that it says lets a single hosting account take control of an entire server. An authenticated account ho…

NEWSInfosecurity Magazineabout 2 months ago

SAP Patches Maximum Severity “Overpass” Flaw

Onapsis urges SAP customers to patch “Overpass” vulnerability, which has a CVSS score of 10.0

NEWShighThe Hacker Newsabout 2 months ago

F5 BIG-IP APM Malware Injects a PHP Web Shell Into Memory, Evading Disk Scans

Malware linked to break-ins at F5 BIG-IP Access Policy Manager appliances hides a PHP web shell in memory instead of in a file on…

NEWScriticalBleeping Computerabout 2 months ago

New Microsoft Defender 'ShieldCrash' zero-day grants SYSTEM access

An anonymous security researcher known as Nightmare Eclipse has released a new Microsoft Defender zero-day exploit named "ShieldCr…

NEWSCVE-2026-694147.8 HIGHThe Hacker Newsabout 2 months ago

Researcher Drops New Microsoft Defender PoC Showing ShieldBreak Patch Can Be Bypassed

The security researcher known as Chaotic Eclipse has dropped a proof-of-concept (PoC) for yet another zero-day in Microsoft Defend…

NEWScriticalBleeping Computerabout 2 months ago

Google warns of new Chrome zero-day bug exploited in attacks

Google has patched 230 vulnerabilities on Tuesday, including another actively exploited Chrome zero-day bug, the seventh such vuln…

NEWSCVE-2026-4475610.0 CRITICALThe Hacker Newsabout 2 months ago

SAP Patches CVSS 10.0 Kernel Flaw Enabling Unauthenticated Remote Code Execution

SAP has released security updates to address multiple vulnerabilities, including a maximum-severity flaw in SAP Extended Passport…

NEWScriticalThe Hacker Newsabout 2 months ago

Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-Days

Microsoft on Tuesday broke Patch Tuesday records by addressing an earth-shattering 974 vulnerabilities spanning its software portf…

NEWShighCVE-2026-862189.8 CRITICALThe Hacker Newsabout 2 months ago

N-able N-central Pre-Auth RCE Flaw Exploited in the Wild

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a maximum-severity security flaw impacting N-abl…

NEWSBleeping Computerabout 2 months ago

Microsoft adds age-awareness APIs that can tell if users are children, teens, or adults

Microsoft is adding new age-awareness APIs to Windows 11 that will allow apps to determine whether someone is a child, teenager, o…

NEWShighThe Registerabout 2 months ago

Microsoft breaks Patch Tuesday record with 974-CVE deluge

Adobe also brought goodies to the patch party and they deserve immediate attention