Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,674 articles

NEWScriticalCVE-2026-7565010.0 CRITICALThe Hacker Newsabout 2 months ago

Adobe Patches Magento Zero-Day Exploited to Deploy Rust Backdoor and PHP Web Shell

Adobe on Monday released security patches to address a maximum-severity flaw impacting Adobe Commerce and Magento Open Source that…

NEWSInfosecurity Magazineabout 2 months ago

Trezor Supply Chain Breach Now Impacts 81,000 Customers

Crypto wallet-maker Trezor says a data breach at supplier ShipMonk is far worse than originally thought

NEWSThe Registerabout 2 months ago

Britain reboots its space strategy with £7.8B already on the launchpad

Cross-government plan combines civil ambitions with an increasingly military view of orbit

NEWSThe Hacker Newsabout 2 months ago

BengalSEO Poisons Bing Search Results to Deliver MayaBot and Tech Support Scams

Cybersecurity researchers have disclosed details of a sprawling search engine optimization (SEO) poisoning campaign that paves the…

NEWSBleeping Computerabout 2 months ago

220 million traveler records exposed in Vietnam-linked APIS leak

Exclusive: An exposed Advance Passenger Information System (APIS) database held 220 million passenger and crew records containing…

NEWSThe Hacker Newsabout 2 months ago

Grindr to Pay £26 Million to Settle U.K. Claims Over HIV Status Data Sharing

Online dating app Grindr has opted to pay £26 million ($35.1 million) to settle a lawsuit in the U.K. over allegations that it sha…

NEWShighThe Hacker Newsabout 2 months ago

PEEP Turns Chrome and Edge Into Post-Compromise Backdoors for Host Command Execution

Cybersecurity researchers have disclosed details of a complex Chromium-based post-exploitation toolkit called PEEP that masquerade…

NEWScriticalBleeping Computerabout 2 months ago

Magento StyleSmuggler zero-day exploited to deploy Linux backdoor

A zero-day vulnerability dubbed "StyleSmuggler" affecting all versions of Magento and Adobe Commerce is being exploited in attacks…

NEWSThe Hacker Newsabout 2 months ago

Fake IT Calls Target Executives in Microsoft 365 Data Theft and Extortion Attacks

Threat hunters have disclosed details of a widespread data theft and extortion threat cluster that's targeting Microsoft 365 and o…

NEWShighBleeping Computerabout 2 months ago

BigBear Microsoft 365 phishing service bypassed MFA at 258 organizations

A phishing-as-a-service framework called BigBear 2.0 has been used to bypass multi-factor authentication at 258 organizations and…

NEWSThe Registerabout 2 months ago

Nightwing CEO has a Labor Day message for staff – and apparently The Register

Nothing says ‘For internal use only’ quite like emailing it to the press

NEWScriticalThe Hacker Newsabout 2 months ago

⚡ Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain Attack and More

Turning off email images should at least stop the pictures. This week, attackers had a workaround: a scannable QR code built out o…

NEWSInfosecurity Magazineabout 2 months ago

NCSC Warns Shadow AI Creates New Security Risks

NCSC warns unapproved AI tools can expose corporate data and create new security risks

NEWShighThe Registerabout 2 months ago

Hackers drain $320M in Bitcoin from Liquid Network, claim they're the good guys

Self-described white hats promise to return 'most' of the 4,000 BTC once the vulnerability is fixed

NEWScriticalBleeping Computerabout 2 months ago

Mathspace discloses data breach affecting over 1 million people

Online maths learning platform Mathspace disclosed over the weekend that attackers stole data from more than 1 million students, s…

NEWScriticalCVE-2026-862189.8 CRITICALInfosecurity Magazineabout 2 months ago

N-able Releases Hotfix for Critical Remote Code Execution Vulnerability

The vulnerability, CVE-2026-86218, was allocated a maximum-severity rating by the software provider itself

NEWScriticalBleeping Computerabout 2 months ago

Trezor data breach impact now reaches 81,000 customers

Cryptocurrency hardware wallet maker Trezor says an August data breach at its shipping and logistics provider, ShipMonk, affects a…

NEWScriticalSecurityWeekabout 2 months ago

Nightmare Eclipse Drops CrowdStrike, Nvidia, Avast Zero-Day Exploits

The proof-of-concept (PoC) exploits lead to privilege escalation, spawning a shell with System privileges. The post Nightmare Ecli…

NEWShighSecurityWeekabout 2 months ago

North Korean Hackers Deploy New Linux Espionage Toolkit

The stealthy toolkit embeds a backdoor in HAProxy and targets automotive and media organizations in South Korea for long-term surv…

NEWSSecurityWeekabout 2 months ago

OpenAI Agents Hijack Another Victim Website

OpenAI agents made 15,000–18,000 autonomous edits to a German wiki over three months, evading moderation and echoing tactics seen…

NEWSInfosecurity Magazineabout 2 months ago

Rhysida Publishes Berlin Government Data After €2m Extortion Demand Refused

The ransomware group’s published dataset reportedly includes Berlin state employee data, as well as highly sensitive emergency pla…

NEWScriticalSecurityWeekabout 2 months ago

Adobe Commerce Zero-Day Exploited to Backdoor Online Stores

The StyleSmuggler zero-day allows attackers to execute code and deploy a stealthy backdoor on Adobe Commerce and Magento stores. T…

NEWSSecurityWeekabout 2 months ago

Modified ScreenConnect Clients Used in Worm-Like Campaign

The attacks rely on backdoored ScreenConnect instances to transfer and execute payloads to newly connected clients. The post Modif…

NEWSThe Hacker Newsabout 2 months ago

Your Cloud Security Checklist Doesn't Work the Way You Think It Does

If managing security across multiple cloud providers wasn't hard enough, each one fails in a different way. For the 2026 Cloud Sec…

NEWSThe Hacker Newsabout 2 months ago

Rogue ScreenConnect Clients Spread Four-Stage VBScript Chain to Newly Connected Hosts

Cybersecurity researchers have disclosed details of worm-like activity that abuses ConnectWise ScreenConnect to distribute a malic…

NEWShighThe Hacker Newsabout 2 months ago

Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE — Public Exploit Released

A TantoSec proof-of-concept turns an AES-CBC "padding oracle" in Telerik UI for ASP.NET AJAX into unauthenticated remote code exec…

NEWSThe Registerabout 2 months ago

Welsh environment regulator's FoI blunder exposes diversity data of 2,000 staff

NRW says it has found no evidence data was misused after spreadsheet published in error five years ago

NEWSInfosecurity Magazineabout 2 months ago

North Korea’s Lazarus Operates Through Six Distinct Cyber Clusters

Sekoia and Kudelski Security have observed that North Korea's Lazarus umbrella is split into six distinct clusters, focused on esp…

NEWSBleeping Computerabout 2 months ago

ChatGPT can now connect to your personal apps to mimic writing style

OpenAI appears to be testing a new "Writing Style" feature for ChatGPT that can learn how you write by looking at examples from yo…

NEWShighBleeping Computerabout 2 months ago

Hackers exploit new MikroTik RouterOS flaws to hijack routers

Hackers are exploiting a chain of two recently disclosed vulnerabilities in MikroTik routers to take control of devices with SSH s…