Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,678 articles

Security Leaders Share Advice for Insider Threat Awareness Day

This Insider Threat Awareness Day, security leaders share their thoughts alongside advice on how to reduce insider threats.

NEWSThe Registerabout 2 months ago

Healthcare cyberattacks hit pacemakers and millions of patient records

McKesson admits breach as ShinyHunters demands $55.2M

NEWSCyberScoopabout 2 months ago

McKesson copes with fallout from data theft extortion attack

The major healthcare sector vendor did not identify the attackers, but ShinyHunters, a prolific group increasingly targeting the s…

NEWShighBleeping Computerabout 2 months ago

Cronos blockchain restarts after $74 million Tectonic exploit

The Cronos blockchain network has resumed trading activity after a price-manipulation attack on the Tectonic cryptocurrency lendin…

NEWSThe Registerabout 2 months ago

OpenClaw 2.0 pours glitter on slow-burning security dumpster fire

Making installation easier and putting a new wrapper on the interface while leaving most of the security to users is a recipe for…

NEWSBleeping Computerabout 2 months ago

Microsoft warns of TerminalFix attacks deploying reverse tunnels

A new ClickFix variant dubbed TerminalFix uses fake Cloudflare CAPTCHA prompts on compromised websites to trick victims into runni…

NEWSCyberScoopabout 2 months ago

‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help

The six-month program will be overseen by the Office of the National Cyber Director and Texas Cyber Command to “find out what work…

NEWShighThe Registerabout 2 months ago

Attack hides malware in PNGs and drops custom reverse tunnel on victims' machines

Next-level ClickFix wave sets off multi-stage attack chain

NEWSThe Hacker Newsabout 2 months ago

North Korean Job Fraud Expands Beyond IT Into Healthcare and Sales

Threat actors with ties to the Democratic People's Republic of Korea (aka DPRK or North Korea) have been observed seeking job oppo…

NEWSSecurity Magazineabout 2 months ago

Only 33% of AI Agents Provisioned With Least-Privilege Access

Only 33% of AI agents are provisioned with least-privileged access, yet 94% are confident their agents don't have more access than…

NEWSBleeping Computerabout 2 months ago

Microsoft Exchange Online outage causes email failures, auth issues

Microsoft is investigating a widespread service issue causing authentication issues and email delays and failures for Exchange Onl…

NEWSBleeping Computerabout 2 months ago

OpenAI confirms ChatGPT outage as users report errors

ChatGPT Work is experiencing a partial outage, and users across multiple subscription plans may be unable to start or continue tas…

NEWSThe Registerabout 2 months ago

Anthropic cracks down on hijacked user accounts mining AI tokens

Commodity malware steals authenticated sessions, letting thieves freeload on victims' paid usage

NEWSSecurity Magazineabout 2 months ago

Bureau of Alcohol, Tobacco, Firearms and Explosives Discloses Cyber Incident

The bureau confirmed an incident after the Qilin ransomware group claimed a breach.

NEWSSecurity Magazineabout 2 months ago

Hasbro Breach Exposes Employee Information

Hasbro experienced a data breach in March.

NEWShighBleeping Computerabout 2 months ago

Chinese Fire Ant hackers turn Cisco routers into spying platforms

The researchers discovered Fire Ant's new tactic after finding an active GRE (Generic Routing Encapsulation) tunnel interface on a…

NEWShighSecurityWeekabout 2 months ago

Nightmare Eclipse Drops ‘HardBreacher’ Kaspersky Product Exploit

Kaspersky told SecurityWeek that it patched the vulnerability affecting its Endpoint Security product. The post Nightmare Eclipse…

NEWSBleeping Computerabout 2 months ago

File servers are here to stay. Here’s how to manage them securely

File servers remain a critical part of many IT environments, but managing access securely can become complex as permissions accumu…

NEWScriticalSecurityWeekabout 2 months ago

ServiceNow Patches 3 Critical Code Injection Vulnerabilities

Attackers could exploit the security defects to execute arbitrary code and access or tamper with data. The post ServiceNow Patches…

NEWShighSecurity Magazineabout 2 months ago

Security Leaders Weigh in on Recent PaperCut Vulnerabilities

On August 27, PaperCut announced that hackers were exploiting a vulnerability to access sensitive information.

NEWShighThe Hacker Newsabout 2 months ago

⚡ Weekly Recap: Chinese Spy Proxy, AI Agents Go Off-Task, Router Backdoors and More

The boring parts caused most of the trouble. A router shipped ready to listen. A fake check turned the user into the installer. T…

NEWScriticalBleeping Computerabout 2 months ago

Berlin confirms data theft after Rhysida ransomware attack claims

Berlin's city administration has confirmed that cybercriminals are attempting to extort the city after the Rhysida ransomware gang…

NEWScriticalSecurityWeekabout 2 months ago

McKesson Confirms Data Breach as Attacker Deadline Looms

The ShinyHunters extortion group has claimed the theft of 284 million records from the company’s systems. The post McKesson Confir…

NEWSSecurityWeekabout 2 months ago

What the Hugging Face Incident Teaches Security Leaders About AI Agent Access

Security teams must treat autonomous agents as highly privileged identities. The post What the Hugging Face Incident Teaches Secur…

NEWShighThe Hacker Newsabout 2 months ago

ValleyRAT Backdoor Hides in Signed Adware That Users Add to Antivirus Exclusions

The threat actor known as Silver Fox has been observed distributing the ValleyRAT backdoor disguised as a signed Chinese adware ap…

NEWShighSecurityWeekabout 2 months ago

Anthropic Warns Claude Users of Infostealer Malware Infections

The AI giant is logging customers out of their accounts and removing payment data to prevent unauthorized Claude usage. The post A…

NEWSThe Hacker Newsabout 2 months ago

Aurora Ransomware Operators Use Cursor AI in Attacks Against 10 Targets

Threat actors associated with Aurora (aka Aur0ra) ransomware have been observed using SpaceX's artificial intelligence (AI)-powere…

NEWSThe Hacker Newsabout 2 months ago

Securing Claude Code: The New Compliance API, Local Visibility, and Identity Governance

Claude Code reads files, runs shell commands, invokes MCP tools, and acts through the credentials available on a developer’s machi…

NEWScriticalSecurityWeekabout 2 months ago

Critical Ruby on Rails Vulnerability in Attackers’ Crosshairs

Named KindaRails2Shell, the arbitrary file read flaw allows attackers to extract secrets and execute arbitrary code remotely. The…

NEWSSecurityWeekabout 2 months ago

Boston Scientific Still Recovering From Cyberattack

The company has called in CrowdStrike and others to investigate the attack that caused global network disruption. The post Boston…