Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,675 articles

NEWScriticalCVE-2026-737499.8 CRITICALSecurityWeekabout 2 months ago

HPE Patches Critical RCE Vulnerabilities in AOS-CX

Nearly two dozen issues, tracked collectively as CVE-2026-73749 (CVSS score of 9.8), were addressed with the updates. The post HPE…

NEWScriticalSecurityWeekabout 2 months ago

OpenAI Pledges $1 Billion to Bring Frontier AI to Critical Infrastructure Defenders

The Daybreak initiative will provide subsidized AI cyber capabilities, training and technical assistance, though OpenAI has disclo…

NEWSThe Registerabout 2 months ago

Rogue OpenAI agents used dead German web site to communicate in May, months before Hugging Face incident

Two cases of agents escaping to solve unsolvable problems paints an uncomfortable question: Is the entire internet in OpenAI's exp…

NEWShighThe Hacker Newsabout 2 months ago

Phishing Campaign Sends Millions of Emails Using Invisible Unicode to Evade Filters

Microsoft is alerting of a "high-volume phishing campaign" that's using invisible Unicode tag characters to bypass email filters.…

NEWScriticalCVE-2026-19490Bleeping Computerabout 2 months ago

Critical Citrix NetScaler auth bypass now leveraged in attacks

Attackers have begun targeting a critical-severity Citrix NetScaler auth bypass flaw (CVE-2026-19490) in the wild, according to vu…

NEWSCVE-2026-64717.2 HIGHThe Hacker Newsabout 2 months ago

PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw Enabling Replication-Role Code Execution

PostgreSQL has released updates to address a security flaw that allows an account with the REPLICATION attribute to run arbitrary…

NEWShighThe Hacker Newsabout 2 months ago

New Ted Backdoor Hides Inside Victims' Own HAProxy Builds to Intercept Web Traffic

A previously undocumented Linux toolkit has been found compiled directly into the trojanized HAProxy load balancers of two South K…

NEWSBleeping Computerabout 2 months ago

Microsoft says some users can’t open the Teams desktop client

Microsoft is working to resolve a known issue that causes delays or blocks some users from opening the Microsoft Teams desktop cli…

NEWSBleeping Computerabout 2 months ago

39 New Methods That Compromise Passkey Authentication

Passkeys eliminate many password-based attacks, but researchers have documented 39 methods for compromising authentication built a…

NEWShighCVE-2026-95869.8 CRITICALSecurityWeekabout 2 months ago

Sangoma Switchvox Vulnerabilities Exploited in the Wild

Tracked as CVE-2026-9586, the unauthenticated SQL injection flaw can be exploited remotely for arbitrary code execution. The post…

NEWScriticalBleeping Computerabout 2 months ago

New CrowdStrike 'FalconFlank' zero-day grants SYSTEM privileges

An anonymous security researcher who uses the "Nightmare Eclipse" handle released a CrowdStrike Falcon zero-day exploit named "Fal…

NEWSBleeping Computerabout 2 months ago

Exchange Online outage causes email delays, 'Server busy' errors

Microsoft is working to resolve an ongoing Exchange Online outage that is delaying email sent to and received from external domain…

NEWShighCVE-2026-64717.2 HIGHSecurityWeekabout 2 months ago

12-Year-Old PostgreSQL Vulnerability Enables Database, Server Takeover

Dubbed PostGREShell, CVE-2026-6471 turns low-level replication access into code execution, permanent superuser privileges and a pe…

NEWSSecurity Magazineabout 2 months ago

California to Regulate AI Chatbot Toys Marketed at Children

California could regulate AI chatbots for children, pending Governor Gavin Newsom's approval.

NEWSSecurityWeekabout 2 months ago

Catch Raises $5 Million for AI Executive Assistant With Guardrails

Catch promises the capabilities of a trusted executive assistant, with built-in controls governing what data and systems it can ac…

NEWScriticalBleeping Computerabout 2 months ago

Google warns of new Chrome zero-day flaw exploited in attacks

Google has updated the Chrome browser to address an actively exploited high-severity zero-day flaw in the V8 engine and 11 other v…

NEWScriticalSecurityWeekabout 2 months ago

VMware Workstation and Fusion Updates Patch Critical Vulnerability

The flaws could allow attackers with administrative access to a virtual machine to execute code on the host system. The post VMwar…

NEWScriticalSecurityWeekabout 2 months ago

Google Patches 6th Chrome Zero-Day of 2026

Google’s Chrome 152 security update resolves 12 vulnerabilities, including a high-severity type confusion flaw in the V8 engine. T…

NEWSWired Securityabout 2 months ago

ICE Wants to Know Who Bought a Certain Green Beanie From REI in the Last 2 Years

Homeland Security Investigations agents hit the outdoor retailer with a controversial subpoena as part of a dragnet search for the…

NEWSInfosecurity Magazineabout 2 months ago

OpenAI Pledges $1bn to Bring its AI Cybersecurity Tools to Essential Services

OpenAI has committed to subsidizing access to Daybreak, helping defenders deploy its AI models in its existing cybersecurity infra…

NEWSSecurityWeekabout 2 months ago

Nvidia Is Buying AI Platform Hugging Face for $13 Billion

The deal highlights Nvidia’s push to champion increasingly popular open-source AI models. The post Nvidia Is Buying AI Platform Hu…

NEWSCyberScoopabout 2 months ago

Why judgment is emerging as cybersecurity’s defining skill

AI is getting better at much of what security teams have long spent time on: analyzing information, identifying patterns, and prov…

NEWSInfosecurity Magazineabout 2 months ago

G7 Urges Fast-Track on Quantum-Safe Cybersecurity Rules

The G7 has published a call to action, urging governments to launch national strategies dedicated to the post-quantum encryption t…

NEWShighCVE-2026-148949.8 CRITICALThe Hacker Newsabout 2 months ago

Over 440,000 Exploit Attempts Target Super Forms and Elementor Pro RCE Flaws

Threat actors are exploiting two critical security flaws in WordPress plugins Super Forms and Elementor Pro, according to findings…

NEWSThe Hacker Newsabout 2 months ago

Plex Urges Immediate Updates After Patching Multiple Undisclosed Security Flaws

Plex is urging users to update their instances to the latest version following the release of an update that patches multiple secu…

NEWScriticalCVE-2026-850468.8 HIGHThe Hacker Newsabout 2 months ago

Google Releases Chrome Update to Patch Actively Exploited V8 Zero-Day

Google on Thursday released security updates to patch 12 vulnerabilities, including one that has come under active exploitation in…

NEWShighThe Hacker Newsabout 2 months ago

GPT-6 Astra Scores 100% on ExploitBench as OpenAI Blocks PoC Exploit Requests

OpenAI on Thursday officially unveiled GPT‑6 Astra, which it described as the "world's most intelligent and aligned model." The d…

NEWSThe Registerabout 2 months ago

Cisco searched for IOS XR bugs and found so many it rolled them into an update release

Three critical vulns demand your attention, one a make-me-root mess in Nexus 9000 Series Switches that you can mitigate, not fix

NEWSThe Registerabout 2 months ago

OpenAI commits $1B in AI credits to frontline cyber defenders

Daybreak program brings subsidized models, training, and support to under-resourced teams

NEWScriticalCyberScoopabout 2 months ago

Attackers exploit zero-days in consistently besieged SonicWall product

SonicWall customers have confronted a barrage of attacks for years, including five actively exploited vulnerabilities in SMA 1000…