Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

3,196 articles

AryStinger Malware Infects 4,300 Legacy Routers to Build Reconnaissance Proxy Network

A new malware family is turning forgotten home routers into a distributed reconnaissance and proxy network, not the DDoS botnet th…

NEWShighThe Hacker News2 months ago

INTERPOL Warns Phishing, Ransomware, and AI Scams Are Rising Across Asia-Pacific

A new report from INTERPOL has revealed a "dramatic increase" in cybercrime in Asia and the South Pacific, fueled by rapid digital…

NEWScriticalSecurityWeek2 months ago

Texas Parks & Wildlife Data Breach Affects 3 Million Individuals

Hackers stole personal information after breaching the systems of a third-party license vendor serving TPWD. The post Texas Parks…

NEWSBleeping Computer2 months ago

AryStinger botnet infected thousands of D-Link routers worldwide

A previously undocumented malware botnet named AryStinger has compromised more than 4,000 outdated routers to turn them into proxi…

NEWScriticalWired Security2 months ago

A Critical Deadline Is Approaching for Windows and Linux Security

The cryptographic keys that secure your computer's boot sequence will start to expire on June 24. Here's what that means for you.

NEWSBleeping Computer2 months ago

New Prinz Eugen ransomware prioritizes recent files for encryption

A new ransomware operation named 'Prinz Eugen' prioritizes recently modified files for encryption and leaves no ransom note on the…

NEWSThe Register2 months ago

Why Amazon hates 'human-in-the-loop' AI governance

VP Eric Brandwine explains people aren't all that great, actually

NEWShighBleeping Computer2 months ago

Microsoft links Mastra AI supply chain attack to North Korean hackers

Microsoft has attributed a recent Mastra AI supply chain attack that compromised more than 140 npm packages to the North Korean ha…

NEWSHackread2 months ago

MDR Provider Comparison: Time to Discover and Respond to Threats

A detailed MDR provider comparison covering tiers, response speed, coverage, threat intelligence, pricing, and breach warranties t…

NEWShighCVE-2026-40207.5 HIGHThe Hacker News2 months ago

Hackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API Keys

Threat actors are exploiting a recently patched security flaw impacting Gravity SMTP, a WordPress plugin that's installed on about…

NEWSSecurityWeek2 months ago

French President Urges US to Share Cutting-Edge AI and Democracies to Cooperate on Regulation

French President Emmanuel Macron urged the world’s wealthy democracies to work together on regulating advanced AI systems. The pos…

NEWShighWired Security2 months ago

Hackers Claim to Leak Stolen Madison Square Garden Data

Plus: Gay bars in San Francisco using face scanners, France quits Palantir, Apple plans to change its private email and more.

NEWShighBleeping Computer2 months ago

Klue OAuth breach victim list grows as Icarus hackers claim attack

Market intelligence platform Klue has publicly confirmed a recent security incident that allowed threat actors to steal OAuth toke…

NEWShighBleeping Computer2 months ago

Hackers exploit info disclosure bug in Gravity SMTP WordPress plugin

Threat actors are exploiting an unauthenticated information disclosure vulnerability in the WordPress plugin Gravity SMTP, active…

NEWShighThe Hacker News2 months ago

Unpatchable 'usbliter8' Exploit Breaks Apple A12 and A13 SecureROM Boot Chain

Security researchers at Paradigm Shift have published a working exploit, dubbed usbliter8, that achieves arbitrary code execution…

NEWSThe Hacker News2 months ago

The Gentlemen RaaS Uses GentleKiller EDR Framework Targeting 400 Security Processes

The Gentlemen ransomware-as-a-service (RaaS) operation is actively developing and maintaining a suite of endpoint detection and re…

NEWSHackread2 months ago

Meteor 3.0 Migration Helped Rocket.Chat Move Off End-of-Life Node.js Runtime

Meteor 3.0 helped Rocket.Chat move from Node.js 14 to Node.js 20, cutting runtime debt after Fibers removal and reducing supply-ch…

NEWScriticalBleeping Computer2 months ago

Texas govt data breach exposes over 3 million driver’s licenses

The Texas Parks and Wildlife Department (TPWD) disclosed a data breach at its license system vendor that exposed personal informat…

NEWShighThe Register2 months ago

Researchers drop checkm8-style BootROM exploit for A12 and A13 iPhones

Owners of affected iPhones can stop checking for patches now: the fix for this SecureROM bug comes in a new handset

NEWSThe Hacker News2 months ago

AutoJack Attack Lets One Web Page Hijack AI Agent for Host Code Execution

Microsoft researchers have detailed an exploit chain, named AutoJack, that turns an AI browsing agent into a delivery vehicle for…

NEWSSecurityWeek2 months ago

In Other News: Apple Patches Beats Eavesdropping Flaw, DOT Closes Delta CrowdStrike Probe, AWS Continuum

Other noteworthy stories that might have slipped under the radar: Android TV botnet Popa linked to Israeli firm, Velvet Ant mainta…

NEWSThe Hacker News2 months ago

Operation Endgame Disrupts SocGholish Servers, Cleans 14,971 WordPress Sites

Dutch law enforcement authorities, along with counterparts from Canada , Germany, and the U.S., have disrupted malicious infrast…

NEWSHackread2 months ago

Gcore Helps Ucom Safeguard Public Live Broadcast Infrastructure During Armenia’s Parliamentary Elections

Luxembourg, Luxembourg, 19th June 2026, CyberNewswire

NEWSThe Hacker News2 months ago

CISA Warns Fortinet Customers as FortiBleed Hits 86,644 FortiGate Devices

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday urged Fortinet customers with FortiGate appliances to…

NEWSHackread2 months ago

Nintendo America Employee Data Exposed After Shadowbyt3$ Targets TinyPulse

Nintendo America employee records were exposed via TinyPulse after Shadowbyt3 claimed theft of HR files, tax forms, bank data, and…

NEWSHackread2 months ago

eFAQ Publishes Investigation Into Alleged Scam Activity and Coordinated Reputation Attacks

New York, USA, 19th June 2026, CyberNewswire

NEWSBleeping Computer2 months ago

Every AI Agent Is an Identity. Most Organizations Don't Treat Them That Way

AI agents can access data, trigger workflows, deploy code, and interact with critical business systems, often with little oversigh…

NEWScriticalThe Register2 months ago

Everything's bigger and better in Texas – even data breaches

Hunting and fishing license incident catches 3M residents

NEWSBleeping Computer2 months ago

Webinar: How attackers bypass MFA and how defenders can respond

Modern phishing attacks, including Device Code phishing, can undermine MFA protections and grant attackers access to corporate acc…

NEWSThe Hacker News2 months ago

From Assistive to Agentic: The AI Shift That's Redefining Threat Management

Introduction The average enterprise security team has 40 or more security tools, giving a lot of visibility into internal telemet…