Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,678 articles

Dogged Russia-based botnet dismantled after 23-year run

Sality’s peer-to-peer infrastructure allowed it to evade system-wide disruption efforts for an exceptionally long period. Authorit…

NEWSThe Hacker Newsabout 2 months ago

Fake Software Installers Disable Windows Update and Weaken Microsoft Defender

An active malware campaign is using bogus software-download websites to impersonate trusted vendors and distribute malicious insta…

NEWSThe Registerabout 2 months ago

SonicWall's SMA1000 boxes under active attack again

Miscreants use chained zero days to pwn boxen as third-party SOCs say further attacks 'almost certain'

NEWScriticalSecurity Magazineabout 2 months ago

Dropbox Data Breach: 5,000 Accounts Compromised

An unauthorized party accessed certain Dropbox accounts.

NEWScriticalCVE-2026-823299.8 CRITICALBleeping Computerabout 2 months ago

Hackers exploit critical JFrog Artifactory flaw to forge admin tokens

A critical authentication bypass vulnerability (CVE-2026-82329) in JFrog Artifactory is being exploited in attacks to create token…

NEWScriticalSecurityWeekabout 2 months ago

UK Moves to Block High-Risk Tech Suppliers From Critical Infrastructure

Late amendments to the Cyber Security and Resilience Bill would give ministers new powers to restrict risky technology providers a…

NEWSCyberScoopabout 2 months ago

Pegasus, NoviSpy variant spyware found on devices of Serbian activists

It’s the first Pegasus infection of 2026 that Citizen Lab is forensically confirming, and the SHARE Foundation said it’s the bigge…

NEWSCyberScoopabout 2 months ago

Wyden seeks upgraded NSA security guidance on commercial VPN use

it’s the latest in a sequence of letters to feds from Sen. Ron Wyden, D-Ore., on commercial VPNs. The post Wyden seeks upgraded NS…

NEWShighInfosecurity Magazineabout 2 months ago

Russian Man Extradited Over Malware Campaign Targeting Freelancers

Russian man extradited to US over malware campaign that targeted 80,000 freelance users

NEWSThe Registerabout 2 months ago

Legacy Lenovo login opens 5,000 Dropbox accounts to attackers

Cloud storage biz severs old integration and urges victims to reset credentials

NEWSThe Hacker Newsabout 2 months ago

Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code

Manifold Security has disclosed eight security flaws across seven command-line AI coding agents in which a repository's own Git co…

NEWSBleeping Computerabout 2 months ago

Ransomware protection for MSPs: A 6-point checklist for faster recovery

Ransomware resilience requires more than backups or endpoint detection alone. Acronis outlines six capabilities MSPs should test a…

NEWSInfosecurity Magazineabout 2 months ago

Gambling Goblin Turns Brazilian Government Sites Into SEO Weapons

Gambling Goblin compromised Brazilian government sites to drive gambling traffic through SEO fraud

NEWSThe Hacker Newsabout 2 months ago

Malicious Apache Modules Hijack Brazilian Government Site Traffic to Push Betting Pages

A Chinese-speaking cybercrime cluster known as Gambling Goblin has been observed installing malicious Apache modules on compromise…

NEWSThe Hacker Newsabout 2 months ago

BGP Hijack Delivers Malicious Virtualizor Update That Establishes Persistent Root Access

Virtualizor said hackers used a Border Gateway Protocol (BGP) hijack to divert Softaculous traffic. The hackers then used the dive…

NEWShighSecurityWeekabout 2 months ago

Rockwell Automation Patches Over a Dozen Vulnerabilities Across Products

The industrial giant has released advisories for its RSLinx Classic, ArmorStart, ControlFLASH, FactoryTalk, and other products. Th…

NEWSBleeping Computerabout 2 months ago

Dropbox accounts breached through Lenovo email verification flaw

Dropbox is warning some users that an unauthorized party accessed their accounts by exploiting a flaw in Lenovo's email verificati…

NEWSThe Hacker Newsabout 2 months ago

Meta Ads Push StreamRat Android Trojan That Can Gain Near-Complete Device Control

Cybersecurity researchers have disclosed details of a new Android banking trojan called StreamRat that was promoted to Spanish-spe…

NEWShighSecurityWeekabout 2 months ago

Exploit Published for Fresh Cleo Harmony Vulnerability

The security defect allows remote attackers to bypass authentication through argument bearer manipulation. The post Exploit Publis…

NEWSSecurityWeekabout 2 months ago

Anthropic Details Response to Security Incidents, Unveils Enterprise Safeguards

Anthropic introduced Enterprise Frontier Safeguards (EFS), a system that combines zero data retention with automated monitoring fo…

NEWSSecurityWeekabout 2 months ago

Malicious Virtualizor Update Served via BGP Hijacking

Using a technically valid TLS certificate for Softaculous’ domains, a threat actor diverted traffic to fake software updates. The…

NEWSThe Hacker Newsabout 2 months ago

How to Secure Enterprise AI: From Adoption to Incident Readiness

The debate about whether AI delivers business value is over. The challenge now is implementing it at scale and securely across eve…

NEWScriticalCVE-2026-83548The Hacker Newsabout 2 months ago

Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain

SonicWall has released security updates to address two security flaws impacting its Secure Mobile Access (SMA) 1000 series VPN app…

NEWShighInfosecurity Magazineabout 2 months ago

Nutex Health Says Patient Data Stolen, Hackers Threaten Leak

The US healthcare provider confirmed that sensitive patient and employee data, alongside financial and business information, were…

NEWScriticalSecurityWeekabout 2 months ago

OpenAI’s Astra Becomes First Model to Cross Critical Cybersecurity Threshold

The designation applies when a model can independently find and exploit zero-day vulnerabilities across many well-defended systems…

NEWSBleeping Computerabout 2 months ago

Microsoft Defender flags legitimate Google search links as malicious

Microsoft is investigating an issue causing the Defender for Office 365 security software to mistakenly block access to legitimate…

NEWSThe Registerabout 2 months ago

UK cyber bill targets AI users, not the vendors building it

Ministers reject proposed red lines and emergency shutdown powers, pointing instead to voluntary safeguards

NEWSThe Hacker Newsabout 2 months ago

GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends

Two vulnerabilities in GeoNetwork can be chained to achieve unauthenticated remote code execution (RCE) on the open-source geospat…

NEWShighSecurityWeekabout 2 months ago

Chrome and Firefox Updates Patch Dozens of Vulnerabilities

The browser refreshes fix multiple use-after-free, sandbox escape, and privilege escalation bugs. The post Chrome and Firefox Upda…

NEWShighThe Hacker Newsabout 2 months ago

Extradited Russian Hacker Faces Charges Over Excel Malware Campaign That Infected Thousands

The U.S. Department of Justice (DoJ) has charged a Russian national, extradited from Cyprus on August 28, with using roughly 255 f…