Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,675 articles

NEWShighBleeping Computerabout 2 months ago

Hackers exploit new MikroTik RouterOS flaws to hijack routers

Hackers are exploiting a chain of two recently disclosed vulnerabilities in MikroTik routers to take control of devices with SSH s…

NEWSBleeping Computerabout 2 months ago

ConnectWise warns of new ScreenConnect flaw without patch

ConnectWise has shared temporary mitigation measures for a new ScreenConnect Remote Access vulnerability that it plans to patch la…

NEWSThe Registerabout 2 months ago

UK food supply chain at risk from hostile attacks

Defending against cyber foes is among factors hitting food price inflation, report finds

NEWSThe Registerabout 2 months ago

Peers ask why UK cyber bill leaves execs off the personal liability hook

Ministers say £17M corporate fines and forthcoming board-level governance rules provide sufficient accountability

NEWSInfosecurity Magazineabout 2 months ago

Multiple Class Action Lawsuits Filed Against IDScan

Several victims of a recent breach of driver’s license information have sued the company they believe responsible

NEWSSecurity Magazineabout 2 months ago

AI Tools Are Provided Full Enterprise Access

A recent report by Ospin analyzed enterprise production environments in 2026.

NEWSSecurity Magazineabout 2 months ago

Organizations Pledge Cooperation in Open Secure AI Alliance

A number of organizations announced the establishment of an open secure AI alliance.

NEWSThe Hacker Newsabout 2 months ago

N-able Issues Fourth N-central Hotfix in Five Weeks for Unauthenticated RCE Flaw

Every on-premises N-central build below 2026.3.1.14 — including servers updated to Hotfix 3 a day earlier — needs Hotfix 4. N-able…

NEWSThe Registerabout 2 months ago

OpenAI's rebel agent swarm died young, but its chilling logs live on

'The Collective' learned to communicate, organize, cheat, and apparently sacrifice its own

NEWScriticalInfosecurity Magazineabout 2 months ago

Researcher Publishes CrowdStrike Privilege Escalation Zero Day

A security researcher has posted a zero-day exploit in CrowdStrike which could allow hackers to escalate privileges

NEWShighThe Hacker Newsabout 2 months ago

JSCeal Malware Can Bypass Google Authentication Using Stolen Session Cookies

Cybersecurity researchers have unpacked JSCeal, a sophisticated compiled V8 JavaScript (JSC) malware with credential harvesting, s…

NEWSBleeping Computerabout 2 months ago

N-able patches max severity N-central flaw amid ongoing attacks

N-able has released an emergency hotfix for a maximum-severity remote code execution (RCE) flaw affecting its N-central remote mon…

NEWSBleeping Computerabout 2 months ago

ChatGPT Astra is now rolling out to $20 Plus subscription

OpenAI is now rolling out ChatGPT Astra, its most powerful model to date, to those with a $20 Plus subscription, but there's no wo…

NEWShighBleeping Computerabout 2 months ago

Attackers conceal phishing lures using invisible Unicode characters

Threat actors have adopted the ASCII smuggling technique in phishing campaigns, using invisible Unicode characters to evade email…

NEWSThe Hacker Newsabout 2 months ago

Attackers Hijack MikroTik Routers Through Internet-Exposed SSH Without Authentication

Attackers are exploiting MikroTik routers with their Secure Shell (SSH) remote-access service, which is reachable from the interne…

NEWSThe Hacker Newsabout 2 months ago

Four REVSTEALER-Linked Modules Disable Windows Update and Defender to Run a Crypto Miner

Elastic Security Labs has documented four previously unreported programs associated with REVSTEALER, an emerging Windows informati…

NEWScriticalThe Hacker Newsabout 2 months ago

Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores

Attackers are exploiting a new unpatched vulnerability in Magento Open Source and Adobe Commerce that lets them run malicious code…

NEWSThe Hacker Newsabout 2 months ago

Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials

JetBrains is urging Cadence users to revoke and rotate all credentials following a security incident last month in which unidentif…

NEWScriticalCVE-2026-593469.3 CRITICALThe Hacker Newsabout 2 months ago

Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code

Broadcom has released security updates for two security flaws impacting VMware Workstation and Fusion, including one critical bug…

NEWShighBleeping Computerabout 2 months ago

Over 5,400 hacked sites serve ClickFix payloads stored on the blockchain

A massive cybercriminal operation is leveraging thousands of compromised small-business websites to deliver ClickFix payloads stor…

NEWSThe Hacker Newsabout 2 months ago

Trezor Says ShipMonk Breach Exposed 67,000 U.S. Customers' Data It Said Was Deleted

Hardware wallet manufacturer Trezor on Friday disclosed that another 67,000 customers from the U.S. have been impacted in a breach…

NEWShighCVE-2026-324759.0 CRITICALSecurityWeekabout 2 months ago

Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites

Tracked as CVE-2026-32475 (CVSS score of 9.8), the bug described as an arbitrary file upload issue in the function that handles fo…

NEWSBleeping Computerabout 2 months ago

OpenAI admits it didn't disclose rogue AI wiki hijacking incident

OpenAI admits it did not disclose an incident where autonomous AI agents hijacked a German wiki, created 18,000 posts, shared answ…

NEWShighWired Securityabout 2 months ago

OpenAI Agents Hacked Another Website

Plus: Tens of millions of US and Canadian drivers’ licenses go up for sale on the dark web, the US military finally tries to tackl…

NEWSThe Hacker Newsabout 2 months ago

Thousands of OpenAI Agents Quietly Turned an Abandoned Wiki Into Their Coordination Channel

A group of AI safety researchers says a fleet of autonomous agents that identified themselves as OpenAI systems left about 18,000…

NEWShighCVE-2026-815789.8 CRITICALThe Hacker Newsabout 2 months ago

Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities

Threat actors are exploiting the newly disclosed PaperCut flaws to facilitate credential theft in attacks targeting the education…

NEWSCyberScoopabout 2 months ago

European parliament members call for slowdown of Serbia’s EU entry over spyware use

The letter follows revelations about Serbian student activists being infected with Pegasus and NoviSpy, and coincides with other p…

NEWSThe Registerabout 2 months ago

ASCII smuggling isn't just an AI security risk

Phishers find a new use for invisible Unicode tag characters

NEWScriticalBleeping Computerabout 2 months ago

IDScan sued over alleged data breach affecting 153 million drivers

Multiple lawsuits have been filed against identity verification company IDScan after hackers allegedly breached the service and of…

NEWShighSecurityWeekabout 2 months ago

In Other News: Microsoft’s Cloud Patches, Hacked Dropbox Accounts, Guardio’s $1.1B Valuation

Noteworthy stories that might have slipped under the radar: Microsoft rolled out patches for cloud services, hackers compromised 5…