Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

3,199 articles

Algerian Man Extradited to US for Running Cybercrime Marketplaces

26-year-old Abdellah Belmili faces up to 30 years in prison for allegedly operating the marketplaces Market0Day and Spoxy. The pos…

NEWShighHackread2 months ago

New CryptoBandits Malware Uses USB Drives and Tor to Steal Crypto

Microsoft researchers warn of a new dual-action cryptocurrency clipper (CryptoBandits Malware) spreading through USB devices to al…

NEWSSecurityWeek2 months ago

FFmpeg PixelSmash Flaw Allows RCE on Video Players, Media Servers, NAS Appliances

Attackers can send crafted media files to execute code in any application that uses FFmpeg’s libavcodec library. The post FFmpeg P…

NEWSThe Hacker News2 months ago

Agentic AI: The Weapon That No Longer Needs a Warrior

Every weapon begins as an extension of the hand that holds it. The spear lengthened the reach of the arm. The bow sent the point f…

NEWSHackread2 months ago

The Evolution of iGaming Fraud: What Security Teams Should Expect in 2027

Learn how AI, deepfakes, synthetic identities and fraud-as-a-service may reshape iGaming risk, and what security teams can do to d…

NEWSSecurityWeek2 months ago

OpenAI Refocuses Cybersecurity Efforts on Patching Over Discovery

OpenAI has expanded its Daybreak cybersecurity initiative with a new suite of tools and partnerships. The post OpenAI Refocuses Cy…

NEWSSecurityWeek2 months ago

Russian Initial Access Broker Behind FortiBleed Campaign

Using a custom sniffer, the threat actor has captured over 110 million credentials since at least February 2026. The post Russian…

NEWShighHackread2 months ago

2 Scattered Spider-Linked Hackers Plead Guilty Over £39M TfL Cyberattack

Two teenagers face sentencing after admitting to a massive Scattered Spider cyberattack that hit Transport for London (TfL) and US…

NEWSInfosecurity Magazine2 months ago

Scattered Spider Teens Convicted of TfL Cyber-Attack

Two young British men have pleaded guilty to hacking Transport for London as part of a Scattered Spider plot

NEWScriticalSecurityWeek2 months ago

Canadian Electricity Provider London Hydro Discloses Data Breach

Hackers stole customers’ names, addresses, email addresses, phone numbers, and account information. The post Canadian Electricity…

NEWSThe Hacker News2 months ago

Malicious npm Packages Pose as PostCSS Tools to Deliver Windows RAT

Cybersecurity researchers have discovered a set of malicious npm packages that are designed to deliver a Windows-based remote acce…

NEWSSecurityWeek2 months ago

Trump Signs Executive Order Accelerating Post-Quantum Cryptography Migration

Federal agencies are required to transition high-value assets and high-impact systems to use PQC by the end of 2030 and 2031. The…

NEWSInfosecurity Magazine2 months ago

Five Eyes Group Issues Urgent Call to Tackle Frontier AI Threats

The Five Eyes Alliance has published a rare call to action for organizations facing AI threats

NEWScriticalSecurityWeek2 months ago

Xsolis Data Breach Affects 1.4 Million Individuals

Threat actors gained access to personal and protected health information that Xsolis received from its clients. The post Xsolis Da…

NEWSThe Hacker News2 months ago

WhatsApp VBScript Campaign Uses Fake Documents to Install ManageEngine RMM Tool

Direct messages sent via WhatsApp are being used to distribute malicious Visual Basic Script (VBScript) files that lead to the ins…

NEWSThe Register2 months ago

Five Eyes spooks warn AI means infosec incidents can become ‘major operational and financial crises’

Bosses told to step up and get cybersecurity right

NEWSThe Hacker News2 months ago

OpenAI Expands Daybreak With GPT-5.5-Cyber to Help Defenders Patch Security Flaws

OpenAI on Monday said it's releasing an improved version of its GPT‑5.5‑Cyber model to trusted defenders as part of the Daybreak i…

NEWSThe Register2 months ago

Sniff out stale AI override advice with this open source CLI

Package dependencies can create vulnerabilities that are fiendishly hard to find and stamp out

NEWSThe Register2 months ago

OpenAI: Yoo-hoo, look over here, we do that security stuff too!

A plethora of pwn-prevention, including a 'Patch The Planet' pledge

NEWShighBleeping Computer2 months ago

WhatsApp phishing attack uses fake business docs to hack PCs

An ongoing malware campaign is targeting WhatsApp users in multiple countries with deceptive messages that push VBScript files, le…

NEWSCyberScoop2 months ago

Court rules SAVE database illegal, orders it dismantled

A judge said the administration’s database violates the Privacy Act, the Social Security Act and the Administrative Procedures Act…

NEWShighBleeping Computer2 months ago

JaredFromSubway MEV bot hacked in $15 million crypto theft

The JaredFromSubway Ethereum MEV (Maximal Extractable Value) bot suffered a $15 million loss after an attacker manipulated the opp…

NEWSBleeping Computer2 months ago

FFmpeg fixes PixelSmash flaw in widely used video decoder

A newly disclosed FFmpeg flaw dubbed 'PixelSmash' could be exploited for remote code execution on Jellyfin servers under certain c…

NEWSThe Register2 months ago

Cloudflare teams up with big browsers to help websites tell bots from people

Makers of Chrome, Edge, Firefox back bot-fraud defense called Private Access Control Tokens

NEWSBleeping Computer2 months ago

FortiBleed campaign used custom FortiGate sniffer to steal credentials

Security firm SOCRadar says the large-scale FortiBleed campaign targeting Fortinet FortiGate devices used custom sniffers to harve…

NEWSCyberScoop2 months ago

Trump administration to order agencies to speed up post-quantum migration, boost industry

President Trump signed two executive orders Monday accelerating the federal government’s transition to post-quantum encryption and…

NEWShighThe Register2 months ago

Security shops among the 'hundreds' of Klue hack victims

As yet another extortion crew Icarus exploits Salesforce-linked integrations

NEWShighThe Hacker News2 months ago

ShapedPlugin WordPress Pro Plugins Backdoored in Supply Chain Attack

Multiple WordPress plugins from ShapedPlugin were compromised in a supply chain attack after unknown threat actors managed to tamp…

NEWSHackread2 months ago

Beats Studio Buds Flaw Could Let Nearby Attackers Eavesdrop on Users

Apple has released a security update to patch a Beats Studio Buds flaw that let nearby hackers listen to conversations through the…

NEWSBleeping Computer2 months ago

Microsoft says Windows 11 26H2 is coming soon, details upgrade process

Microsoft has confirmed that Windows 11 version 26H2 will be the next feature update and that devices running Windows 11 24H2 and…