Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

3,752 articles

OpenAI confirms ChatGPT is down ahead of 'Astra' model launch

ChatGPT and Codex are experiencing a major outage, with users reporting errors across nearly every major ChatGPT feature. [...]

NEWSBleeping Computer6 days ago

Anthropic confirms Claude is down, multiple models affected

Claude is experiencing an outage, with users encountering elevated errors when sending requests to multiple Anthropic AI models. […

NEWSThe Register6 days ago

Drowning in CVEs and thirsty for answers? Try CTEM

Boards want to know if they're less exposed than last quarter. Patching metrics aren't the solution

NEWScriticalCVE-2026-324759.0 CRITICALBleeping Computer6 days ago

Critical Elementor Pro flaw exploited to take over WordPress sites

A recently patched critical vulnerability (CVE-2026-32475) in the Elementor Pro plugin for WordPress is being exploited in attacks…

NEWSThe Hacker News6 days ago

Thomson Reuters Court Software Breach May Have Exposed SSNs and Sealed Data

Thomson Reuters disclosed on Wednesday that an unauthorized party obtained files from C-Track, the court case management platform…

NEWShighInfosecurity Magazine6 days ago

Outsider Phishing Kit Survives Takedown With 700 New Pages

Outsider phishing kit generated 700 new pages after a Google-led disruption

NEWSBleeping Computer6 days ago

Your Employee’s Password Appeared in an Infostealer Log. Now What?

Infostealers can expose far more than passwords, including authenticated sessions that may let attackers bypass MFA. Flare explain…

NEWSInfosecurity Magazine6 days ago

CREST Onboards First Cohort for AI-Enabled Pentesting Accreditation

CREST’s new AI-enabled penetration testing accreditation welcomes its first 10 providers

NEWSThe Register6 days ago

Cybercrooks trawl Fishbrain to net password hashes

Armed with password hashes and salts, attackers could already be kraken those creds

NEWSSecurityWeek6 days ago

HiddenLayer Raises $100 Million for AI Runtime Security

The Austin-based company will invest in agentic runtime security capabilities to secure AI coding agents. The post HiddenLayer Rai…

NEWSBleeping Computer6 days ago

Microsoft says KB5120998 Windows update resets desktop settings

Microsoft has confirmed that desktop settings are lost or reset on some Windows devices after installing the KB5120998 August 2026…

NEWSInfosecurity Magazine6 days ago

US and Canadian Court Records Breached Following Thomson Reuters Incident

Thomson Reuters has disclosed a cyber incident affecting its C-Track court management software, potentially exposing court records…

NEWSSecurityWeek6 days ago

AI Agent Firewall Startup AIR Security Emerges From Stealth With $50 Million

The startup’s firewall evaluates AI skills, plugins and MCP servers for malicious instructions, excessive permissions and software…

NEWShighThe Hacker News6 days ago

US Becomes Top Target in RMM Phishing Campaign Spanning 46 Countries

An RMM phishing campaign initially associated with Canadian targeting due to its use of Canada Revenue Agency (CRA) tax forms as l…

NEWShighBleeping Computer6 days ago

Plex warns users to patch security vulnerabilities immediately

Plex urged users this week to update their desktop clients and media servers immediately to patch multiple security vulnerabilitie…

NEWSSecurityWeek6 days ago

153 Million Driver License Images Offered on Dark Web

Cybercriminals are offering digital scans of US and Canadian driver’s licenses, likely stolen from IDScan.net. The post 153 Millio…

NEWShighThe Hacker News6 days ago

Attackers Turn Trusted Node.js Runtime Into Malware Delivery Tool in Targeted Attacks

Threat actors are leveraging the trusted Node.js JavaScript runtime in multiple cyber attacks as a way to deploy malicious payload…

NEWShighCVE-2026-199498.8 HIGHSecurityWeek6 days ago

Over 3 Million WordPress Sites Affected by Migration Plugin Vulnerability

The high-severity SQL injection flaw (CVE-2026-19949) could allow unauthenticated attackers to achieve remote code execution. The…

NEWSThe Hacker News6 days ago

Shai-Hulud's Reach Just Grew to 469 Credential Locations. Here's What That Means

In early August, GitGuardian researchers found that a recent Shai-Hulud infostealer worm variant had evolved to scan for credentia…

NEWScriticalSecurityWeek6 days ago

Cisco Warns of Unpatched Secure Email Flaws, Patches Critical Switch Vulnerabilities

Publicly disclosed S/MIME flaws could expose encrypted email content, while critical IOS XR and Nexus bugs could enable remote cod…

NEWSWired Security6 days ago

This Is Flock’s AI Search Tool for Cops

WIRED rebuilt Flock’s latest search tool from code the company sends to a police officer’s browser. Its AI can keep watch across m…

NEWSInfosecurity Magazine6 days ago

FBI Probes Possible Breach of 153 Million Driver’s Licenses

The FBI is investigating how scans of over 153 million driver’s licenses are being sold on the dark web

NEWSThe Register6 days ago

UK's Online Safety Act has made 'absolutely no difference,' kids say

Children's Commissioner also furious with Ofcom over a string of failures

NEWSBleeping Computer6 days ago

Microsoft Teams, Outlook fail to launch on ARM-based Windows PCs

Microsoft is working to fix a known issue that causes crashes and launch failures for Microsoft Teams and New Outlook users after…

NEWShighThe Hacker News6 days ago

Pegasus Zero-Click Spyware Exploit Infects Serbian Student Movement Member's iPhone

The iPhone belonging to a member of Serbia's student protest movement was infected with NSO Group's Pegasus spyware, according to…

NEWSInfosecurity Magazine6 days ago

International Operation Disrupts Sality P2P Botnet

US-led action sinkholes machines caught up in Sality botnet

NEWSThe Register6 days ago

Terminated employee cost company hundreds of thousands of dollars because nobody revoked access

They had more access than the average Joe, and IT didn't track what needed to be cut off

NEWShighThe Register6 days ago

To keep the AI hacking genie bottled up, try one-way networks

Sandboxes, permissions, and VMs aren't enough to keep frontier models at bay. "Data diodes" might do the job

NEWSThe Hacker News6 days ago

Researcher Releases FalconFlank PoC Showing Privilege Escalation in CrowdStrike Falcon

The security researcher known as Chaotic Eclipse (aka INFINITE NIGHTMARE, MSNightmare, and Nightmare-Eclipse) has dropped a new ze…

NEWShighCVE-2026-83548The Hacker News6 days ago

CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added seven security flaws to its Known Exploited Vu…