Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,676 articles

NEWSInfosecurity Magazineabout 2 months ago

US and Canadian Court Records Breached Following Thomson Reuters Incident

Thomson Reuters has disclosed a cyber incident affecting its C-Track court management software, potentially exposing court records…

NEWSSecurityWeekabout 2 months ago

AI Agent Firewall Startup AIR Security Emerges From Stealth With $50 Million

The startup’s firewall evaluates AI skills, plugins and MCP servers for malicious instructions, excessive permissions and software…

NEWShighThe Hacker Newsabout 2 months ago

US Becomes Top Target in RMM Phishing Campaign Spanning 46 Countries

An RMM phishing campaign initially associated with Canadian targeting due to its use of Canada Revenue Agency (CRA) tax forms as l…

NEWShighBleeping Computerabout 2 months ago

Plex warns users to patch security vulnerabilities immediately

Plex urged users this week to update their desktop clients and media servers immediately to patch multiple security vulnerabilitie…

NEWSSecurityWeekabout 2 months ago

153 Million Driver License Images Offered on Dark Web

Cybercriminals are offering digital scans of US and Canadian driver’s licenses, likely stolen from IDScan.net. The post 153 Millio…

NEWShighThe Hacker Newsabout 2 months ago

Attackers Turn Trusted Node.js Runtime Into Malware Delivery Tool in Targeted Attacks

Threat actors are leveraging the trusted Node.js JavaScript runtime in multiple cyber attacks as a way to deploy malicious payload…

NEWShighCVE-2026-199498.8 HIGHSecurityWeekabout 2 months ago

Over 3 Million WordPress Sites Affected by Migration Plugin Vulnerability

The high-severity SQL injection flaw (CVE-2026-19949) could allow unauthenticated attackers to achieve remote code execution. The…

NEWSThe Hacker Newsabout 2 months ago

Shai-Hulud's Reach Just Grew to 469 Credential Locations. Here's What That Means

In early August, GitGuardian researchers found that a recent Shai-Hulud infostealer worm variant had evolved to scan for credentia…

NEWScriticalSecurityWeekabout 2 months ago

Cisco Warns of Unpatched Secure Email Flaws, Patches Critical Switch Vulnerabilities

Publicly disclosed S/MIME flaws could expose encrypted email content, while critical IOS XR and Nexus bugs could enable remote cod…

NEWSWired Securityabout 2 months ago

This Is Flock’s AI Search Tool for Cops

WIRED rebuilt Flock’s latest search tool from code the company sends to a police officer’s browser. Its AI can keep watch across m…

NEWSInfosecurity Magazineabout 2 months ago

FBI Probes Possible Breach of 153 Million Driver’s Licenses

The FBI is investigating how scans of over 153 million driver’s licenses are being sold on the dark web

NEWSThe Registerabout 2 months ago

UK's Online Safety Act has made 'absolutely no difference,' kids say

Children's Commissioner also furious with Ofcom over a string of failures

NEWSBleeping Computerabout 2 months ago

Microsoft Teams, Outlook fail to launch on ARM-based Windows PCs

Microsoft is working to fix a known issue that causes crashes and launch failures for Microsoft Teams and New Outlook users after…

NEWShighThe Hacker Newsabout 2 months ago

Pegasus Zero-Click Spyware Exploit Infects Serbian Student Movement Member's iPhone

The iPhone belonging to a member of Serbia's student protest movement was infected with NSO Group's Pegasus spyware, according to…

NEWSInfosecurity Magazineabout 2 months ago

International Operation Disrupts Sality P2P Botnet

US-led action sinkholes machines caught up in Sality botnet

NEWSThe Registerabout 2 months ago

Terminated employee cost company hundreds of thousands of dollars because nobody revoked access

They had more access than the average Joe, and IT didn't track what needed to be cut off

NEWShighThe Registerabout 2 months ago

To keep the AI hacking genie bottled up, try one-way networks

Sandboxes, permissions, and VMs aren't enough to keep frontier models at bay. "Data diodes" might do the job

NEWSThe Hacker Newsabout 2 months ago

Researcher Releases FalconFlank PoC Showing Privilege Escalation in CrowdStrike Falcon

The security researcher known as Chaotic Eclipse (aka INFINITE NIGHTMARE, MSNightmare, and Nightmare-Eclipse) has dropped a new ze…

NEWShighCVE-2026-83548The Hacker Newsabout 2 months ago

CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added seven security flaws to its Known Exploited Vu…

NEWSThe Registerabout 2 months ago

Claude Mythos only model to complete full cyber kill chain, experts say

Cyber Weapon Index finds AI attacks 'imminent'

NEWSCyberScoopabout 2 months ago

Jail time for Maine child in 764 marks turning point in federal law enforcement

Researcher tracking 764 said the first-of-its-kind case has a wider impact that will cause ripples across the landscape of violent…

NEWShighCVE-2026-95869.8 CRITICALBleeping Computerabout 2 months ago

Hackers exploit Sangoma Switchvox flaw to deploy reverse shells

Attackers are actively exploiting CVE-2026-9586, an unauthenticated SQL injection vulnerability in the Sangoma Switchvox VoIP plat…

NEWSSecurityWeekabout 2 months ago

OpenLeash Adds a Human Check to Risky AI Agent Actions

The security tool intercepts potentially dangerous agent actions, blocking clear threats and requesting human approval when intent…

NEWSBleeping Computerabout 2 months ago

WordPress backup plugin flaw exposes millions of sites to takeover attacks

An SQL injection vulnerability in the All-in-One WP Migration and Backup plugin for WordPress could allow unauthenticated attacker…

NEWSSecurity Magazineabout 2 months ago

Compromising 5.4% of Texas’ Battery Fleet Could Black Out the Grid

The entire Texas grid could be destabilized if just 5.4% of the batteries were compromised.

NEWScriticalThe Registerabout 2 months ago

AI agents carried out every step of this ransomware attack – then left the victim an 80-page security audit

Adding insult to injury

NEWSThe Hacker Newsabout 2 months ago

Google, Anthropic, and OpenAI Unveil Cyber AI Models, Safeguards, and Access Programs

Google on Wednesday announced Gemini 3.8 Flash Cyber, which it described as its most capable cybersecurity model, and has made it…

NEWSCyberScoopabout 2 months ago

The FCC wants consumers to rate their telecom’s anti-robocall protections

The agency also booted 14 phone service providers from U.S. networks for violating existing robocalling regulations. The post The…

NEWSCyberScoopabout 2 months ago

Dogged Russia-based botnet dismantled after 23-year run

Sality’s peer-to-peer infrastructure allowed it to evade system-wide disruption efforts for an exceptionally long period. Authorit…

NEWSThe Hacker Newsabout 2 months ago

Fake Software Installers Disable Windows Update and Weaken Microsoft Defender

An active malware campaign is using bogus software-download websites to impersonate trusted vendors and distribute malicious insta…