Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

3,200 articles

Anthropic’s Mythos Model Found Vulnerabilities in Classified US Government Systems, Official Says

Come vulnerabilities were found within hours, but that does not mean the model was able to exploit them within that time, the offi…

NEWShighCVE-2026-202308.6 HIGHBleeping Computer2 months ago

Cisco Unified CM flaw CVE-2026-20230 now exploited in attacks

A high-severity SSRF vulnerability, tracked as CVE-2026-20230, in Cisco Unified Communications Manager Server is now being exploit…

NEWShighBleeping Computer2 months ago

Tata Electronics confirms cyberattack as hackers leak data

Tata Electronics has confirmed in a statement to BleepingComputer that it was the target of a cyberattack that impacted parts of i…

NEWSBleeping Computer2 months ago

Windows 11 KB5095093 update rolls out new Point-in-Time restore feature

Microsoft has released the KB5095093 preview cumulative update for Windows 11 24H2 and 25H2, which fixes numerous bugs and begin…

NEWScriticalBleeping Computer2 months ago

Healthtech firm Xolis suffers data breach impacting 1.4 million people

Healthcare technology company Xsolis says that sensitive data belonging to nearly 1.4 million individuals was compromised in a phi…

NEWSHackread2 months ago

Internet Society Foundation Opens Global Call for Common Good Cyber Fund to Strengthen Cybersecurity

DC, United States, 23rd June 2026, CyberNewswire

NEWShighWired Security2 months ago

Dialog Claims It Was Hacked. A Misconfigured Website Left Its Members Exposed

The private events group, cofounded by Peter Thiel, says a “criminal” hacker is behind a breach that exposed members’ personal det…

NEWSCyberScoop2 months ago

Justice Department seizes infrastructure used by cyber scam and criminal marketplace

lso Tuesday, the Treasury Department took action against the same Cambodian company, Huione Group, and affiliates. The post Justi…

NEWSBleeping Computer2 months ago

New macOS ClickFix attack silently mounts DMGs to push infostealer

A new macOS ClickFix campaign is using Terminal commands to silently download, mount, and launch info-stealing malware from malici…

NEWScriticalHackread2 months ago

LastPass Confirms Customer Data Breach After Klue OAuth Token Theft

LastPass has confirmed it was affected by the Klue supply chain incident, saying an unauthorised actor used stolen…

NEWSThe Hacker News2 months ago

FortiBleed Targeted FortiGate Firewalls in 110 Million-Credential Harvesting Operation

A Russian-speaking initial access broker (IAB) driven by financial gain is assessed to be behind a large-scale credential-harvesti…

NEWSThe Register2 months ago

Mythos discovers 'Squidbleed,' a memory leak that's gone undetected since Clinton era

Plus more blasts from the past: NetWare, FTP, and HTTP

NEWSSecurityWeek2 months ago

Dragos Unveils AI for OT Security

Named EmberAI, the new capability is built on Dragos’ massive operational technology cybersecurity dataset. The post Dragos Unveil…

NEWSHackread2 months ago

‘Cordyceps’ CI/CD Flaw Exposes Microsoft, Google, Apache Repos to Pipeline Hijacking

Novee Security reveals Cordyceps, a CI/CD vulnerability in GitHub Actions workflows that let anonymous users poison builds and exp…

NEWShighKrebs on Security2 months ago

Scattered Spider Hackers Plead Guilty on Day 1 of Trial

Two men pleaded guilty in the United Kingdom this week to criminal charges stemming from an August 2024 cyberattack that crippled…

NEWSHackread2 months ago

The Rise of AI-Powered Academic Fraud: Beyond Traditional Plagiarism

AI has changed academic fraud. It now creates original-looking work, fake sources, and hidden misconduct that schools must learn t…

NEWSSecurityWeek2 months ago

Data Exposure Flaws Threaten Dify AI Platform Used by 1 Million Apps

Attackers could abuse Dify's multi-tenant cloud service to read private chats, preview other tenants' documents, and reach interna…

NEWShighBleeping Computer2 months ago

Scattered Spider members plead guilty to hacking Transport for London

Two members of the 'Scattered Spider' cybercrime group pleaded guilty to hacking the Transport for London (TfL) systems in 2024. […

NEWSThe Hacker News2 months ago

Fake AI Agent Skill Passed Security Scans and Reportedly Reached 26,000 Agents

Security firm AIR built a fake AI agent skill, pushed it through a popular skill marketplace and an Instagram ad, and says it reac…

NEWSThe Hacker News2 months ago

Trump Order Sets 2030 Deadline for Federal Post-Quantum Crypto Migration

President Trump signed an executive order on June 22 setting hard deadlines for federal agencies to move high-value assets and hig…

NEWSInfosecurity Magazine2 months ago

Lookalike npm Package Hides a Multi-Stage Windows RAT

JFrog found an npm package impersonating postcss-selector-parser to drop a multi-stage Windows RAT

NEWSCyberScoop2 months ago

Algerian man charged with running two cybercrime marketplaces

Abdellah Belmili allegedly ran two black-market websites selling stolen financial credentials and custom-built phishing kits targe…

NEWSThe Hacker News2 months ago

GitHub Updates actions/checkout to Block Common Pwn Request Attack Patterns

GitHub is moving to strengthen software supply chain security by updating "actions/checkout" to block pwn request attacks that exp…

NEWSInfosecurity Magazine2 months ago

OpenAI Expands Daybreak to Help Defenders Patch Flaws

OpenAI expanded Daybreak with a full GPT-5.5-Cyber release to help defenders patch software flaws

NEWShighBleeping Computer2 months ago

The Exploit Doesn't Exist. You Can Still Prove It Works Against You

Attackers can now weaponize newly disclosed vulnerabilities far faster than most organizations can patch them. Picus Security expl…

NEWSInfosecurity Magazine2 months ago

Trump Issues Executive Order to Fast-Track Post-Quantum Migration

All US federal agencies will have to complete their post-quantum cryptography transition by 2031, according to a new Trump Executi…

NEWScriticalBleeping Computer2 months ago

LastPass confirms data breach in Klue supply chain attack

LastPass announced that hackers accessed customer data from its Salesforce environment after stealing the company's OAuth tokens i…

NEWSInfosecurity Magazine2 months ago

GTA 6 Scams Emerge as Pre-Orders Open

Cybercriminals launch fake GTA 6 pre-order sites offering early access for crypto payments

NEWSSecurityWeek2 months ago

Eight-Year-Old Samsung KNOX Flaw Exposed Millions of Galaxy Devices to Kernel Attacks

The high-severity use-after-free vulnerability in Samsung's KNOX security framework affected Android-powered Galaxy devices from t…

NEWSSecurityWeek2 months ago

CISO Conversations: Carl Froggett – Combining CISO and CIO at Deep Instinct

Carl Froggett combines CISO and CIO. He currently occupies both positions at Deep Instinct. Before then, he was CISO at Citi for a…