Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,678 articles

NEWShighBleeping Computerabout 2 months ago

Hackers push malicious Virtualizor update in BGP hijacking attack

Hackers delivered malicious updates to the Virtualizor VPS management software after hijacking BGP routing for its update infrastr…

NEWSSecurity Magazineabout 2 months ago

Could AI Elevate Women in Cybersecurity?

September 1 is International Women in Cyber Day, and this year, Security magazine is discussing how AI could uplift women in the f…

NEWSInfosecurity Magazineabout 2 months ago

Attackers Steal METR API Key and Burn $600,000 in AI Credits

Attackers used a stolen METR API key for three weeks, consuming model credits worth $600,000

NEWScriticalBleeping Computerabout 2 months ago

Novocure data breach affects more than 1,400 cancer patients

Healthtech company Novocure says the data of an undisclosed number of employees and more than 1,400 U.S. cancer patients has been…

NEWSThe Hacker Newsabout 2 months ago

13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet Seeds

Cybersecurity researchers have identified a set of 13 malicious Composer theme packages on Packagist that are designed to inject J…

NEWSBleeping Computerabout 2 months ago

Why Even the Best Edge Security Still Misses High-Risk Sessions

Attackers can hide behind residential proxies, VPNs, and other infrastructure that makes malicious sessions appear legitimate to e…

NEWSCyberScoopabout 2 months ago

Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots

The Federal Ballot Mail Portal is described by a federal official as one of several IT systems that will be used to potentially de…

NEWSInfosecurity Magazineabout 2 months ago

65% of Enterprises Have Seen AI Agents Act Out of Scope

EMA survey finds 65% of enterprises have seen AI agents act beyond intended scope

NEWShighThe Hacker Newsabout 2 months ago

Iranian Hackers Pose as Recruiters to Deliver Cross-Platform RATs Through Coding Tests

The Iranian Nimbus Manticore hacking group has been attributed to two previously undocumented malware families that highlight the…

NEWSInfosecurity Magazineabout 2 months ago

White House Launches Pilot Program in Texas to Protect Water Infrastructure

Project Watershed 250 will see water providers in Texas provided with federal and private sector cybersecurity resources amid risi…

NEWSBleeping Computerabout 2 months ago

Nearly 22,000 Microsoft Exchange servers vulnerable to hijack attacks

Nearly 22,000 Microsoft Exchange servers exposed online remain unpatched against a high-severity authentication bypass vulnerabili…

NEWShighSecurityWeekabout 2 months ago

Experiment: Porting a PLC Exploit With AI Takes Hours and Hundreds of Dollars

Forescout researchers used Claude AI to port a remote code execution exploit between WAGO PLC models. The post Experiment: Porting…

NEWScriticalCVE-2026-07689.8 CRITICALSecurityWeekabout 2 months ago

Hackers Start Exploiting Critical Langflow Vulnerability

Tracked as CVE-2026-0768, the security defect allows unauthenticated attackers to execute arbitrary Python code remotely. The post…

NEWSThe Registerabout 2 months ago

33-hour BGP hijack of Softaculous traffic prompts security scramble

Hosting software vendor tells customers to reset credentials and hunt for malicious packages

NEWSWired Securityabout 2 months ago

Using High-Energy Laser, US Shoots Down Drones Near Mexico Border

The US Army’s laser system is part of a new generation of directed-energy weapons capable of detecting, tracking, and destroying d…

NEWSThe Hacker Newsabout 2 months ago

Threat Actors Don’t Want Better Attacks. They Want Repeatable Ones

The most common way into a company last year was to ask. A web page tells the visitor to prove they are not a robot. While they r…

NEWSSecurityWeekabout 2 months ago

Five Venezuelans Plead Guilty in US Court to ATM Jackpotting

The defendants unsuccessfully attempted to physically install malware on ATMs to force them to dispense cash. The post Five Venezu…

NEWScriticalSecurityWeekabout 2 months ago

Ransomware Gang Claims Nutex Health Data Breach

The company has notified the SEC that hackers accessed patient, employee, provider, business, and financial information. The post…

NEWSCyberScoopabout 2 months ago

The Collective Cyber Defense letter wrote your next vendor questionnaire

More than 200 companies have now signed to an August 27 letter about improving cyber defenses in the age of AI. Buried in it are t…

NEWScriticalCVE-2026-823299.8 CRITICALSecurityWeekabout 2 months ago

Critical JFrog Artifactory Vulnerability Reportedly Exploited in the Wild

Exploitation of the authentication bypass vulnerability CVE-2026-82329 started just days after its public disclosure. The post Cri…

NEWSInfosecurity Magazineabout 2 months ago

Financial Stability Board Sounds the Alarm Over Frontier AI Risks

The Financial Stability Board has warned G20 banking leaders about the cyber risks of frontier AI

NEWSBleeping Computerabout 2 months ago

Five Venezuelans plead guilty to ATM jackpotting attacks in US

Five Venezuelan nationals pleaded guilty to attempting to empty automated teller machines (ATMs) using malware in a series of ATM…

NEWScriticalSecurityWeekabout 2 months ago

9.5 Million Impacted by Aesto Health Data Breach

Hackers stole personal and health information from the healthcare technology company’s AWS infrastructure. The post 9.5 Million Im…

NEWSThe Hacker Newsabout 2 months ago

Attackers Steal METR API Key and Consume AI Credits Worth About $600,000

METR (short for Model Evaluation and Threat Research and pronounced "Meter"), a research non-profit that evaluates frontier artifi…

NEWScriticalSecurityWeekabout 2 months ago

WatchGuard Patches Critical Vulnerabilities

Three critical issues in the Fireware OS iked process could allow unauthenticated attackers to execute arbitrary code remotely. Th…

NEWShighThe Hacker Newsabout 2 months ago

Russia-Aligned UAC-0099 Plants Nuclear Weapon Prompt in Malware to Disrupt AI Analysis

Cybersecurity researchers have disclosed a new technique dubbed GuardBreaker that's been put to use by a Russia-aligned threat act…

NEWScriticalInfosecurity Magazineabout 2 months ago

Healthcare Giant McKesson Investigates Data Breach Incident

ShinyHunters claims to have stolen 284 million records from McKesson

NEWScriticalBleeping Computerabout 2 months ago

Recently patched PaperCut zero-days used in data theft attacks

Two security vulnerabilities in the PaperCut NG and MF print management software, patched last week after being exploited as zero-…

NEWScriticalCVE-2026-07689.8 CRITICALThe Hacker Newsabout 2 months ago

Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity

Threat actors are exploiting two critical flaws impacting Langflow and Ruby on Rails, according to new findings from VulnCheck. T…

NEWShighCVE-2026-82078SecurityWeekabout 2 months ago

PaperCut Exploitation Escalates to Active Intrusions

CISA has added the vulnerabilities tracked as CVE-2026-82078 and CVE-2026-81578 to its KEV catalog. The post PaperCut Exploitation…