Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

2,130 articles

Google Warns of New Threat Group Targeting BPOs and Helpdesks

Google’s threat intel team warns UNC6783, a new extortion group possibly linked to the “Raccoon” persona, is targeting BPOs and en…

NEWSInfosecurity Magazine4 months ago

Google API Keys Quietly Gain Access to Gemini on Android Devices

Google API key flaw exposes mobile apps to Gemini AI access, private files and billing risks

NEWScriticalInfosecurity Magazine4 months ago

Critical Vulnerability in Ninja Forms Exposes WordPress Sites

Ninja Forms File Upload RCE via unauthenticated arbitrary file upload; update to 3.3.27 immediately

NEWScriticalInfosecurity Magazine4 months ago

Anthropic Launches Project Glasswing to Use AI to Find and Fix Critical Software Vulnerabilities

Anthropic launches Project Glasswing, using its Claude Mythos Preview AI to autonomously identify and fix undiscovered vulnerabili…

NEWShighInfosecurity Magazine4 months ago

US Thwarts DNS Hijacking Network Controlled by Russian APT28 Hackers

The FBI deployed a method to unplug US-based routers compromised by APT28 from the threat actor’s malicious network

NEWSInfosecurity Magazine4 months ago

Claude Discovers Apache ActiveMQ Bug Hidden for 13 Years

Anthropic’s Claude AI has helped researchers find a vulnerability in Apache ActiveMQ Classic

NEWSInfosecurity Magazine4 months ago

Iran‑Backed Threat Actors Hit US CNI Providers via Internet‑Facing OT Assets

CISA has revealed Iranian attacks causing disruption and financial loss at US critical infrastructure firms

NEWShighInfosecurity Magazine4 months ago

Russian APT28 Hackers Hijack Routers to Steal Credentials, UK Security Agency Warns

Newly identified malicious campaigns are linked to virtual private servers modified by APT28 to operate as malicious DNS servers

NEWSInfosecurity Magazine4 months ago

GPU Rowhammer Attack Enables Privilege Escalation and Full System Compromise

GPUBreach uses GPU Rowhammer on GDDR6 to flip bits, corrupt page tables and escalate to system root

NEWShighInfosecurity Magazine4 months ago

GrafanaGhost Exploit Bypasses AI Guardrails for Silent Data Exfiltration

GrafanaGhost chains AI prompt injection and URL flaws to exfiltrate sensitive Grafana data

NEWSInfosecurity Magazine4 months ago

Over $17bn Lost to Cyber Fraud in the Last Year, Warns FBI

Cryptocurrency scams alone cost victims over $7 billion, while AI-enabled fraud threats are on the rise, says FBI

NEWShighInfosecurity Magazine4 months ago

Storm-1175 Exploits Flaws in High-Velocity Medusa Attacks

Microsoft has released a new report about the Storm-1175 group and its connection to Medusa ransomware

NEWScriticalInfosecurity Magazine4 months ago

Fortinet Releases Emergency Patch After FortiClient EMS Bug Is Exploited

Fortinet has updated its FortiClient EMS product after zero-day attacks surfaced

NEWShighInfosecurity Magazine4 months ago

New Phishing Platform Used in Credential Theft Campaigns Against C-Suite Execs

A large-scale credential theft campaign targeting senior executives has been linked to a previously unknown automated phishing pla…

NEWSInfosecurity Magazine4 months ago

New 'Storm' Infostealer Remotely Decrypts Stolen Credentials

This modern infostealer adopted server-side decryption of stolen credentials to bypass security controls

NEWShighInfosecurity Magazine4 months ago

NCSC Issues Security Alert Over Hackers Targeting WhatsApp and Signal Accounts

The UK’s cybersecurity agency offered advice to “high-risk’ individuals” on how to protect against social engineering and cyber-at…

NEWSInfosecurity Magazine4 months ago

Apple Expands iOS 18 Security Updates Amid DarkSword Threat

iOS/iPadOS 18.7.7 updates expanded to protect older devices from DarkSword web exploit kit

NEWShighInfosecurity Magazine4 months ago

GitHub Used as Covert Channel in Multi-Stage Malware Campaign

LNK files use GitHub C2, embedded decoders and PowerShell for persistence and data exfiltration

NEWScriticalInfosecurity Magazine4 months ago

Researchers Observe Sub-One-Hour Ransomware Attacks

Halcyon says Akira is now capable of carrying out an entire ransomware attack in less than an hour

NEWSInfosecurity Magazine4 months ago

Most CNI Firms Face Up to £5m in Downtime from OT Attacks

E2e-assure says 80% of critical infrastructure providers could face millions in downtime from cyber-attacks

NEWSInfosecurity Magazine4 months ago

Google Introduces Android Dev Verification Amid Openness Debate

Android requires dev identity verification for sideloaded apps; phased global rollout from September

NEWSInfosecurity Magazine4 months ago

New Venom Stealer MaaS Platform Automates Continuous Data Theft

Venom Stealer malware-as-a-service automates ClickFix social engineering, credential and crypto exfiltration

NEWShighInfosecurity Magazine4 months ago

Chinese Hackers Target European Governments in Espionage Campaigns

Chinese state-backed group TA416 had suspended its cyber espionage operations in Europe since 2023, noted Proofpoint

NEWSInfosecurity Magazine4 months ago

Eight in 10 UK Manufacturers Hit by Cyber Incident in a Year

Most UK manufacturers compromised last year suffered financial loss, says ESET

NEWShighInfosecurity Magazine4 months ago

Hackers Hijack Axios npm Package to Spread RATs

Threat actors hijacked the popular npm package axios to spread RAT malware after compromising an open‑source maintainer’s account,…

NEWShighInfosecurity Magazine4 months ago

Maryland Man Charged Over $53m Uranium Finance Crypto Hack

Maryland man accused of $53m Uranium Finance hack, exploited smart contract flaws, laundered funds

NEWSInfosecurity Magazine4 months ago

Phantom Project Bundles Infostealer, Crypter and RAT For Sale

Phantom Stealer .NET harvests browser credentials, cookies, cards, sessions, as stealer-as-a-service

NEWSInfosecurity Magazine4 months ago

ChatGPT Security Issue Enabled Data Theft via Single Prompt

OpenAI has patched vulnerability, which Check Point said was because of a DNS loophole

NEWShighInfosecurity Magazine4 months ago

TeamPCP Explores Ways to Exploit Stolen Supply Chain Secrets

TeamPCP is exploring ways to monetize the secrets harvested during supply chain attacks, with identified ties to the Lapsus$ and V…

NEWScriticalInfosecurity Magazine4 months ago

Employee Data Breaches Surge to Seven-Year High

Analysis from law firm Nockolds suggests non-cyber incidents are driving up employee data breaches