Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,678 articles

NEWShighBleeping Computerabout 2 months ago

US charges Russian for infecting 80,000 freelancers with malware

A California federal grand jury has indicted a Russian national for his role in a phishing campaign that infected thousands of fre…

NEWScriticalInfosecurity Magazineabout 2 months ago

Hackers Chain Two New SonicWall Zero-Day Vulnerabilities

SonicWall has urged customers to patch two new zero-day vulnerabilities being exploited in the wild

NEWSSecurityWeekabout 2 months ago

23-Year-Old Sality P2P Botnet Disrupted

The shutdown operation involved peer list manipulation and Sality payload URL takedown. The post 23-Year-Old Sality P2P Botnet Dis…

NEWSInfosecurity Magazineabout 2 months ago

FulcrumSec Claims Responsibility for Manchester Airport Group Breach

Threat group FulcrumSec claims MAG breach and leaks 550GB of data online

NEWSBleeping Computerabout 2 months ago

Sality botnet infrastructure dismantled in joint global takedown

International law enforcement agencies and private partners have seized Sality malware infrastructure in a joint action aiming to…

NEWShighCVE-2021-318869.8 CRITICALThe Hacker Newsabout 2 months ago

Researchers Use Claude to Port Pre-Auth RCE Exploit From One PLC Model to Another

Forescout Research - Vedere Labs said it used Anthropic's Claude to port a working pre-authentication remote code execution (RCE)…

NEWScriticalCVE-2026-95869.8 CRITICALThe Hacker Newsabout 2 months ago

Attackers Exploit Critical Switchvox Flaw to Deploy Reverse Shells Without Credentials

Threat actors are exploiting a severe security vulnerability in Sangoma Switchvox, an enterprise VoIP platform, that could allow u…

NEWShighThe Hacker Newsabout 2 months ago

Authorities Turn Sality's P2P Network Against Itself, Cutting Off New Malware Payloads

The U.S. Department of Justice (DoJ) on Tuesday announced the takedown of a long-standing peer-to-peer (P2P) botnet known as Salit…

NEWScriticalBleeping Computerabout 2 months ago

SonicWall warns of actively exploited SMA1000 zero-day flaws

SonicWall warned customers that threat actors are chaining two new SMA1000 zero-day vulnerabilities in remote code execution attac…

NEWScriticalCVE-2026-835497.8 HIGHSecurityWeekabout 2 months ago

SonicWall Warns of Two SMA1000 Zero-Days Exploited in Attacks

The vulnerabilities CVE-2026-83549 and CVE-2026-83548 can be chained for unauthenticated remote code execution. The post SonicWall…

NEWSThe Registerabout 2 months ago

Cops, CrowdStrike disrupt Sality botnet by poisoning the network and diverting into sinkholes

23-year-old botnet down

NEWSKrebs on Securityabout 2 months ago

FBI Probes Service Selling 153M+ Drivers Licenses

A new identity theft service launched on the dark web this week is selling digital scans of more than 153 million drivers licenses…

NEWShighCyberScoopabout 2 months ago

FBI raises alarm over deceptive phishing campaign targeting prominent people

The ongoing social engineering threat, which dates back to late 2025, tricks victims into granting threat actors long-term access…

NEWSThe Registerabout 2 months ago

Another Artifactory CVE under attack by AI agents or humans

Unauthenticated intruders can mint admin tokens, and exposed servers are already being hit

NEWShighBleeping Computerabout 2 months ago

Hackers abuse Faronics Deploy admin tool to install ScreenConnect

Phishing actors are abusing the legitimate Faronics Deploy endpoint-management platform to gain remote administrative control over…

NEWSThe Registerabout 2 months ago

Attacker stole a METR API key, used $600K worth of credits, and no one noticed for weeks

The model provider gave METR the credits for free. An actual customer would not have been so lucky

NEWSSecurityWeekabout 2 months ago

Palo Alto Networks Acquires AI Agent Platform Console

The cybersecurity giant announced the acquisition alongside quarterly results showing a 34% increase in revenue and strong growth…

NEWSCyberScoopabout 2 months ago

Tina Peters, through attorney, backs off formal role in Shasta County elections

Peters still left the door open to working with Shasta County on elections and doubled down on her statements that electronic voti…

NEWSThe Registerabout 2 months ago

Firefox helps iPhone users bypass ads on web sites while making money showing its own ads

Baked-in Firefox ad blocking on iOS begins rolling out slowly today, and is off by default

NEWScriticalWired Securityabout 2 months ago

OpenAI Is About to Release Its First AI Model With ‘Critical’ Cyber Abilities

The company will give select partners early access to its Astra AI model—so they have time to shore up their defenses.

NEWScriticalBleeping Computerabout 2 months ago

Aesto Health says data breach affects over 9.5 million patients

Aesto LLC, operating as Aesto Health, disclosed that a data breach discovered recently affects more than 9.5 million individuals.…

NEWSThe Registerabout 2 months ago

Anthropic pledges to try harder to keep models under control, asks partners to chip in

Security ... this time it will be different

NEWSSecurityWeekabout 2 months ago

Sevii Targets AI-Speed Attacks With Preemptive Autonomous Defense

Sevii has expanded its ADR platform with AI agents designed to investigate, contain, and remediate AI-driven attacks within minute…

NEWSSecurityWeekabout 2 months ago

Coast Guard Establishes Office of Maritime Cybersecurity Policy

The new office will serve as the central authority for cybersecurity policy covering US ports, vessels, and maritime facilities. T…

NEWScriticalCVE-2026-07689.8 CRITICALBleeping Computerabout 2 months ago

Critical Langflow flaw exploited to steal OpenAI and AWS keys

Threat actors are exploiting an unauthenticated remote code execution vulnerability (CVE-2026-0768) in Langflow, an open-source fr…

NEWScriticalCVE-2026-823299.8 CRITICALThe Hacker Newsabout 2 months ago

Attackers Exploit Critical JFrog Artifactory Flaw to Mint Admin Tokens Days After Disclosure

Threat actors are exploiting a newly patched critical security flaw impacting JFrog Artifactory merely days after public disclosur…

NEWSThe Hacker Newsabout 2 months ago

Breeze Comet Executes Hundreds of Fraudulent Transactions via Brazilian Payment Systems

Brazilian financial services, retail, and e-commerce organizations have become the target of a financially motivated threat actor…

NEWSSecurity Magazineabout 2 months ago

The Most Immediate Threat to the Global Financial System Is AI Cyberattacks

The Financial Stability Board issued a warning about the risks posed by frontier AI models.

NEWSSecurity Magazineabout 2 months ago

Majority of Senior Cybersecurity Leaders Have Limited Trust in AI

A report by Onapsis analyzed AI cybersecurity challenges for organizations.

NEWScriticalSecurity Magazineabout 2 months ago

McKesson Confirms Data Breach, Experts Weigh In

A healthcare giant experienced a data breach.