Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,450 articles

PHP warns admins of two critical flaws, emergency patches coming tomorrow

The PHP security team is warning administrators to prepare for emergency security updates tomorrow to address two critical vulnera…

NEWSHackread5 days ago

Live Video Moderation Challenges Traditional Content Safety Systems

Learn how live video moderation handles frame sampling, end-to-end encryption, behavioural signals, privacy and content retention…

NEWShighCyberScoop5 days ago

Nigerian sentenced to 8 years for long-running tax business hacking and fraud scheme

Chukwuemeka Victor Amachukwu hacked tax preparation businesses, filed false tax returns and enticed victims to send him money for…

NEWSBleeping Computer5 days ago

Zeabur shutting down after second security breach in two months

Development platform Zeabur has disclosed details of a cybersecurity incident in which an attacker used leaked internal credential…

NEWSBleeping Computer5 days ago

OpenAI says GPT-6.1 Sol is dramatically better at migrating legacy code

OpenAI confirmed that its newer models are much better at writing and migrating software in older programming languages. [...]

NEWShighCyberScoop5 days ago

Russian GRU hackers hit NATO shipbuilder, aircraft engine maker, law enforcement agency in espionage campaign

It’s the work of the infamous group behind the attacks on Democrats during the 2016 presidential election, Symantec said. The post…

NEWSThe Register5 days ago

Palo Alto's firewall OS has been under attack from multiple ransomware groups since June

Unit 42 investigates network compromises across numerous industries

NEWSHackread5 days ago

BAE Systems Cyber Incident Disrupts US Bankruptcy Notices

A cyber incident affecting BAE Systems halted US bankruptcy notices, forcing federal courts to change service procedures and…

NEWScriticalThe Hacker News5 days ago

Eight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and Software

The private keys of eight eMudhra intermediate certificate authority (CA) certificates are compromised, Mozilla and Google's Chrom…

NEWShighThe Register5 days ago

Swamped curl maintainers take low-level flaws public to survive vulnerability 'avalanche'

From October 26, only high and critical cases stay private as project seeks help sharing the workload

NEWSCyberScoop5 days ago

ConnectWise customers hit by supply-chain attack linked to compromised API secret

Hundreds of customers are confirmed impacted, as attackers use a sensitive credential to break into connected Microsoft 365 applic…

NEWSSecurity Magazine5 days ago

Only 7% of CISOs at Large Companies Own AI Governance

How is AI responsibility being structured in organizations?

NEWSSecurityWeek5 days ago

US Agencies Detail Incident Response Practices for Rogue AI Agents

NIST, CISA and NSA share ten voluntary practices for preparing for, detecting, responding to, recovering from, and reporting rogue…

NEWScriticalCVE-2026-1061739.8 CRITICALThe Hacker News5 days ago

Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution

Cybersecurity researchers have released a proof-of-concept (PoC) exploit for a recently patched critical security flaw impacting F…

NEWShighCVE-2026-02579.1 CRITICALThe Hacker News5 days ago

Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA

Palo Alto Networks has disclosed that it's continuing to observe exploitation of a now-patched security flaw impacting PAN-OS and…

NEWSCyberScoop5 days ago

DOJ escalates fight for election supremacy with California raids

The arrests were paired with comments from DOJ and DHS officials, threatening to investigate, arrest or prosecute tens of thousand…

NEWSInfosecurity Magazine5 days ago

Head of AI Security Roles Surge in Large Organizations

A new IANS report has found that despite the growth of the head of AI security role, accountability for AI governance in firms rem…

NEWSBleeping Computer5 days ago

DHS bans DeepSeek products across US federal civilian agencies

The U.S. Department of Homeland Security (DHS) is ordering federal civilian agencies to stop using DeepSeek products and remove th…

NEWShighThe Hacker News5 days ago

Hackers Use Autonomous AI Agents to Breach Company Websites, Target Over 1,200 Sites

A Chinese-speaking criminal pointed autonomous AI agents at company websites and let them break in with almost no help, and a secu…

NEWScriticalSecurity Magazine5 days ago

Security Leaders Share Concerns About California Student Data Breach

California students and families were recently notified of a data security incident, and security leaders are sharing their concer…

NEWScriticalInfosecurity Magazine5 days ago

Researchers Warn OpenCode Quietly Patched Critical RCE Flaw, Leaving Users At Risk

OpenCode silently patched a critical RCE flaw, leaving vulnerable users unaware of the security risk, researchers at Pillar Securi…

NEWSSecurityWeek5 days ago

AOMEI Backupper Compromised in Short-Burst Supply Chain Campaign

Across multiple short compromise windows, users were served a downloader for the ShinyRoad modular backdoor framework. The post AO…

NEWSBleeping Computer5 days ago

CJIS v6.1 Compliance: 5 Practical Priorities for Agencies

CJIS v6.1 requires agencies to maintain strong authentication, account security, and audit controls while demonstrating ongoing co…

NEWSThe Register5 days ago

'Password1' and a forgotten test account land Welsh outfits in hot water

ICO reprimands Ogi Networks and Data Cymru after ransomware breach exposes info of 3,300 people, mostly children

NEWSSecurityWeek5 days ago

The Key to AI Software Security Isn’t Speed, It’s Maturity

Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk. The post The Key to…

NEWShighBleeping Computer5 days ago

Hacker gets 8 years for stealing $3.3 million from taxpayers

A Nigerian national was sentenced to eight years in prison for his involvement in a series of spearphishing attacks targeting US t…

NEWSSecurityWeek5 days ago

Ahold Delhaize Restoring Services Disrupted by Cyberattack

The company has restored many websites and apps in Europe and expects e-commerce brands in the US to be restored in days. The post…

NEWSThe Hacker News5 days ago

Pegasus Spyware Infection Confirmed on Serbian University Rector's iPhone Days Before Election

The iPhone of Vladan Đokić, rector of the University of Belgrade and a prominent supporter of Serbia's student protest movement, w…

NEWShighSecurityWeek5 days ago

AI Platform Cairn Abused to Hack Over 100 Organizations

At least three threat actors have been abusing Cairn for persistent access and financial theft. The post AI Platform Cairn Abused…

NEWSSecurityWeek5 days ago

Ex-OpenAI Worker Accused of Bugging Conference Room Planned to Fly to Saudi Arabia, Prosecutors Say

Abdulrahman Alfozan’s wife and young son also left the country the day after the 35-year-old Saudi national’s arrest. The post Ex-…