Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,674 articles

How to secure hybrid meeting rooms without sacrificing user experience

SPONSORED FEATURE: With regulators tightening rules and attack surfaces widening, meeting-room kit must bake in security without p…

NEWScriticalSecurity Magazineabout 2 months ago

CISA Cuts Critical Infrastructure Security Resources

CISA will be rolling back services that support critical infrastructure.

NEWShighBleeping Computerabout 2 months ago

SAP warns of maximum severity 'OVERPASS' kernel vulnerability

SAP has addressed 20 vulnerabilities across multiple products in its September 2026 security updates, including a maximum-severity…

NEWScriticalSecurityWeekabout 2 months ago

SAP Patches Critical Extended Passport Processing Vulnerability

Affecting the SAP kernel code, the flaw allows unauthenticated, remote attackers to run arbitrary commands, recover secrets, and m…

NEWShighThe Hacker Newsabout 2 months ago

Liquid Hackers Return 3,400 Bitcoin Taken via Elements Bug, Still Holding $47M in BTC

Whoever took nearly 4,000 bitcoin from the Liquid Network on Sunday, September 6, returned 3,400 of it the next day, Bitcoin's pub…

NEWScriticalBleeping Computerabout 2 months ago

OpenAI says GPT-6 Astra can find zero-days, but is also harder to monitor

OpenAI confirmed that GPT-6 Astra is the first model it has broadly deployed to reach the "Critical level" for cybersecurity capab…

NEWSInfosecurity Magazineabout 2 months ago

France Establishes New Government-Focused Cyber Incident Response Unit

After a major cyber-attack targeted France's national tax authority, the Prime Minister called for the establishment of a new dedi…

NEWSThe Hacker Newsabout 2 months ago

ChatGPT Flaw Let a Planted Prompt Send a Victim's Gmail Data to Another Account

Check Point Research said in a report published today that a single instruction planted in a ChatGPT conversation could cause Chat…

NEWSThe Registerabout 2 months ago

LG accused of 'egregious invasion of privacy' over TV data collection

Claims follow scrutiny over monitors installing adware without user consent

NEWSSecurity Magazineabout 2 months ago

Cybersecurity Information Sharing Act of 2015 Temporarily Extended

The House of Representatives approved a temporary extension of the Cybersecurity Information Sharing Act of 2015.

NEWSThe Hacker Newsabout 2 months ago

Autonomous AI Agents Compromise Thousands of Credentials in Under Six Hours

Threat actors are continuing to leverage artificial intelligence (AI) to streamline their operations, with one financially motivat…

NEWScriticalCVE-2026-7565010.0 CRITICALBleeping Computerabout 2 months ago

Adobe fixes critical Magento zero-day exploited to backdoor servers

Adobe has released an emergency fix for CVE-2026-75650, an actively exploited max-severity zero-day vulnerability dubbed StyleSmug…

NEWShighThe Registerabout 2 months ago

BigBear phishing crew nets thousands of Microsoft 365 credentials

Researchers got inside the crooks' admin panel and found 5,137 stolen records tied to 461 organizations

NEWSSecurityWeekabout 2 months ago

Party’s Over for Crypto Scammers Who Went on a Spending Spree After a $240 Million Bitcoin Theft

The scammers purchased fleets of sports cars, flew on private jets, hired security guards and rented mansions in Miami and the Ham…

NEWSInfosecurity Magazineabout 2 months ago

Grindr Settles UK Data Privacy Claims for £26m

Grindr settled UK claims over alleged unlawful processing of sensitive user data

NEWSBleeping Computerabout 2 months ago

Webinar: The forgotten Google Workspace access that can lead to a breach

Third-party applications connected to Google Workspace can retain access long after their original purpose is forgotten. This webi…

NEWShighBleeping Computerabout 2 months ago

Hackers build AI frameworks for widescale credential theft

Threat actors are increasingly switching from AI-powered coding assistants to multi-agent frameworks that automate every stage of…

NEWSInfosecurity Magazineabout 2 months ago

AI Coding Tools Now a Prime Target for Threat Actors, Google Warns

Google warned that the rapid integration of AI-assisted coding tools has significantly expanded software supply chain risks

NEWSThe Registerabout 2 months ago

Extortion crews have their eyes on high-value AI data, Google warns

Companies 'don't want their IP exposed, so they're willing to pay'

NEWSWired Securityabout 2 months ago

Meta Failed to Catch Hundreds of AI Child Abuse Ads. Some Included Images of Real Kids

Images of real children—including a member of a European royal family—were used to create some of the 350 ads containing child sex…

NEWSBleeping Computerabout 2 months ago

Microsoft: Windows Server 2025 changes causing app crashes

Microsoft warned customers last week that they may experience application crashes on some Windows Server 2025 due to recent memory…

NEWSThe Hacker Newsabout 2 months ago

WeChat Zero-Click Worm Took Over Accounts on iPhone and Android via Incoming Calls

Researchers at the security firm Calif have built a worm that takes over a WeChat account via an incoming call and demonstrated it…

NEWSThe Hacker Newsabout 2 months ago

What It Took to Reach 1 Billion Build Manifests

In the last six months, Chainguard doubled its output from 500 million to more than 1 billion container build manifests. We also s…

NEWSThe Hacker Newsabout 2 months ago

FreeIPA Flaw Chain Lets Anonymous Clients Create Reusable Administrator Credentials

A flaw in FreeIPA lets a client that has never logged in create a Kerberos identity of its own choosing in the directory and end u…

NEWSInfosecurity Magazineabout 2 months ago

THost9 Android RAT Pairs Packed Loader With ADB Worm

THost9 hides its payload and uses ADB to spread across exposed Android devices and containers

NEWScriticalSecurityWeekabout 2 months ago

MikroTik Patches Critical Flaws Chained to Hack Routers

Dubbed MikroTrick, the bugs allow attackers to bypass authentication, overwrite configuration files, and take over devices. The po…

NEWScriticalSecurityWeekabout 2 months ago

Mathspace Data Breach Exposes Over 1 Million People

Hackers stole the information of students, teachers, staff, and parents/guardians from a self-hosted Metabase instance. The post M…

NEWScriticalSecurityWeekabout 2 months ago

N-able Patches Critical Zero-Day in N-central

Administrators are advised to check their deployments for newly created user accounts they don’t recognize. The post N-able Patche…

NEWSCyberScoopabout 2 months ago

In most cities, nobody owns the whole network

July’s intrusions reached water controllers that sat on a cellular link no city network scan would find. Naming an owner and payin…

NEWSInfosecurity Magazineabout 2 months ago

BigBear 2 PhaaS Campaign Steals 5000+ Microsoft Credentials

CloudSEK has uncovered BigBear 2.0, a new phishing-as-a-service operation targeting Microsoft 365