Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

2,131 articles

Google Launches Gemini 3.5 Flash Cyber AI to Find and Fix Software Vulnerabilities

Google's DeepMind on Tuesday announced the release of Gemini 3.5 Flash Cyber, a specialized artificial intelligence (AI) model bui…

NEWScriticalSecurity Magazine4 days ago

Healthcare Software Provider Craneware Announces Data Breach

A software provider for the healthcare sector revealed it experienced a data breach.

NEWSHackread4 days ago

Fig Expands SecOps Engineering Lifecycle as Security Teams Seek More Resilient Infrastructure

Learn how Fig adds testing, deployment, and continuous verification to SecOps, helping security teams keep detections reliable as…

NEWScriticalCVE-2026-505229.8 CRITICALThe Hacker News4 days ago

Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC

A third SharePoint Server flaw patched by Microsoft as part of its Patch Tuesday update for July 2026 has come under active exploi…

NEWScriticalCVE-2026-02579.1 CRITICALThe Hacker News5 days ago

Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass for Initial Access

Threat actors have been observed exploiting a now-patched high-severity Palo Alto Networks PAN-OS vulnerability as an entry point…

NEWScriticalBleeping Computer5 days ago

Closing the Identity Gaps in Critical Infrastructure Security

Critical infrastructure attacks often begin with stolen credentials, compromised devices, or trusted accounts. Specops Software ex…

NEWShighInfosecurity Magazine5 days ago

Russian Hacker Turns Jailbroken Claude Into Pentest Platform

Russian-speaking actor Trim built a commercial offensive AI pentest tool on jailbroken Claude models

NEWScriticalThe Register5 days ago

AI music platform Suno hits bum note as 55M users exposed in data breach, claims infosec expert

Have I Been Pwned confirms scale for first time

NEWScriticalThe Hacker News5 days ago

Zimbra Patches Critical SNMP Command Injection and Four XSS Vulnerabilities

Zimbra has rolled out fixes to address multiple critical security issues, including a command injection flaw in the Simple Network…

NEWSThe Register5 days ago

Intel fortifies Foundry with an actual customer: Fortinet

Firewall maker looks to safeguard its custom ASIC production with homegrown silicon

NEWSInfosecurity Magazine5 days ago

A New Ransomware Threat Actor Emerges Every Week, Warns Report

Analysis by Black Kite warns that ransomware ecosystem is becoming bigger and more fragmented

NEWScriticalSecurity Magazine5 days ago

79% of Ransomware Attacks Start with Compromised Identities

The most common method used to enact ransomware is the abuse of compromised credentials.

NEWSSecurityWeek5 days ago

Empirical Security Raises $25 Million in Series A Funding

The startup will use the investment to accelerate the development of its threat prediction and discovery products. The post Empiri…

NEWScriticalSecurityWeek5 days ago

SecurityWeek Launches Critical Impact Awards to Recognize Excellence in Industrial Cybersecurity

Independently judged and sponsor-neutral, the new awards program honors the people, organizations, and technologies delivering pro…

NEWSHackread5 days ago

Fake FBI Agents Use IC3 Complaint Scams to Target Fraud Victims

Fake FBI agents are using deepfake videos, spoofed IC3 websites and false recovery claims to steal money and personal information…

NEWSInfosecurity Magazine5 days ago

FBI Warns of Deepfake Videos Impersonating IC3 Leadership

FBI warned of deepfake videos of IC3 leadership directing users to spoofed complaint sites

NEWSThe Hacker News5 days ago

Open-Source Android AI Agents Could Let Invisible Screen Text Run Code on Host PCs

An Android app that can draw over other windows and write to shared storage can slip instructions to the AI agent driving that pho…

NEWShighSecurityWeek5 days ago

New HollowGraph Malware Abuses Microsoft 365 Calendar for C&C Communication

Part of a larger toolkit, HollowGraph uses a compromised 365 account’s calendar as a two-way dead-drop. The post New HollowGraph M…

NEWSThe Hacker News5 days ago

N-day is Becoming N-Hour. Patching Faster Won't Save You.

Every patch is a confession. The moment a vendor ships a security fix, the diff between the old code and the new code tells anyon…

NEWSSecurityWeek5 days ago

CISO Conversations: Andreas Gaetje – From Economics to CISO at Körber AG

Gaetje’s story shows that you don’t need to be a ‘deep bit-crawler’ to become a Chief Information Security Officer. The post CISO…

NEWShighThe Hacker News5 days ago

New Bit2Watt Attack Could Let Cloud Tenants Disrupt Power Grids Without an Exploit

A cloud tenant using nothing but ordinary GPU access can push a data center's power draw up and down fast enough to threaten the g…

NEWScriticalSecurityWeek5 days ago

Estée Lauder Discloses Impact From Oracle EBS Zero-Day Hack

Hackers exfiltrated personal, financial, and health information from the company’s Oracle EBS instance in August 2025. The post Es…

NEWSBleeping Computer5 days ago

US seizes over 1,000 websites in FIFA World Cup piracy crackdown

The U.S. Justice Department has seized more than 1,000 websites and blocked 1,970 domains used to stream FIFA World Cup 2026 match…

NEWShighSecurityWeek5 days ago

Meta Paid $78,000 Bounty for Vulnerability Exposing Customer Support Data

A security researcher discovered a broken access control vulnerability in Meta’s support infrastructure. The post Meta Paid $78,00…

NEWScriticalBleeping Computer5 days ago

Critical Palo Alto VPN bug now exploited by Qilin ransomware gang

The Qilin ransomware gang is exploiting a critical PAN-OS GlobalProtect authentication bypass flaw to breach victims' networks, ac…

NEWSCyberScoop5 days ago

What the World Cup can teach us about cybersecurity resilience

Future major events can’t rely on yesterday's playbook. Lessons from the World Cup show why true cyber resilience starts months be…

NEWShighWired Security5 days ago

A Device Hidden in Cars Across the US Leaves Them Vulnerable to Hacking and Paralysis. Patch It Now

Dealerships installed alarms in millions of vehicles—and left them in even if the buyer didn’t want them. Now researchers warn the…

NEWSInfosecurity Magazine5 days ago

US Hospital Finance Software Provider Craneware Reports Data Theft

Craneware, a provider of financial software for US healthcare organizations, has disclosed a cyber incident involving unauthorized…

NEWScriticalSecurityWeek5 days ago

Clover Health Investments Discloses Data Breach

Using social engineering, hackers compromised employee accounts with access to personal and health information. The post Clover He…

NEWSInfosecurity Magazine5 days ago

Researchers Uncover North Korean 'ClickFake' Campaign Targeting Web3 Pros

In a new campaign, North Korean hacking group Famous Chollima targeted crypto professionals through ClickFix lures to deliver Wind…