Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

3,195 articles

CryptoBandits Malware Doubles as a Backdoor, Abuses Tor

CryptoBandits uses a local SOCKS5 proxy for traffic routing, blending data theft with remote code execution. The post CryptoBandit…

NEWSThe Register2 months ago

Britain's privacy watchdog quits after 'poor judgment' admission

John Edwards says his position had become 'untenable' following investigation into conduct including inappropriate attempts at hum…

NEWSThe Register2 months ago

Rights groups brand Home Office's AI age guesser for asylum-seekers as biased and inaccurate

Campaigners say tech is unable to reliably distinguish between kids and adults at the boundary where use is planned

NEWShighInfosecurity Magazine2 months ago

AWS Unveils 'Continuum,' an AI-Powered Vulnerability Management Platform

Working with frontier AI models, this new platform aims to help discovering, prioritizing, validating and remediating code vulnera…

NEWSSecurityWeek2 months ago

FortiBleed: 86,000 Fortinet Device Credentials Compromised

The large-scale credential theft campaign hit roughly half of the internet-accessible Fortinet firewalls and VPNs. The post FortiB…

NEWScriticalBleeping Computer2 months ago

CISA: Splunk Enterprise flaw actively exploited, patch by Sunday

CISA has urged U.S. federal agencies to secure their systems by Sunday against a critical Splunk Enterprise vulnerability that is…

NEWSThe Hacker News2 months ago

Forget Data Leakage: Shadow AI's Real Threat Is Access Control

The first wave of enterprise AI concern was straightforward. It was simply employees pasting sensitive data into public AI tools.…

NEWShighInfosecurity Magazine2 months ago

Operation Endgame Disrupts Malware Network Linked to Major Ransomware Gang

SocGholish malware has been removed from 15,000 sites associated with Evil Corp hackers

NEWShighHackread2 months ago

FIFA World Cup 2026: Hackers Target Football Fans With Fake Tickets Sites

Cybersecurity experts warn that active hacking networks are using fake hotel bookings, cloned websites, and live chat features to…

NEWSSecurityWeek2 months ago

Cybersecurity Firms Impacted by Klue Supply Chain Attack

The hackers exfiltrated data from Salesforce instances of Klue customers, such as Huntress and Recorded Future. The post Cybersecu…

NEWSThe Hacker News2 months ago

Salesforce Disables Klue App Integration After OAuth Token Abuse Exposes Customer Data

Salesforce has revealed that it disabled the Klue Battlecards app integration within its platform in response to a security incide…

NEWSInfosecurity Magazine2 months ago

Confidence Lacks in Threat Detection Across Non-Email Channels like Slack and Teams

Half of cybersecurity leaders lack confidence in detecting threats on Slack, Teams and other non-email platforms, despite growing…

NEWSBleeping Computer2 months ago

NY man charged after harassing college student with AI-generated nudes

A New York man faces cyberstalking charges after allegedly sharing AI-generated nude images and fabricated racist messages using f…

NEWSSecurityWeek2 months ago

Cisco to Acquire WideField Security to Boost Splunk’s Agentic SOC

WideField will accelerate Agentic SOC capabilities by expanding the lens on threat investigation to include identity, credentials,…

NEWSBleeping Computer2 months ago

CISA warns Fortinet users to secure devices after FortiBleed leak

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) urged Fortinet customers to secure their devices after nearly 74,…

NEWSSecurityWeek2 months ago

15,000 WordPress Websites Cleaned Up in SocGholish Botnet Takedown

Law enforcement and private partners took down 106 SocGholish C&C servers and domains as part of Operation Endgame. The post 15,00…

NEWSCVE-2025-20701The Hacker News2 months ago

Apple Patches Beats Studio Buds Flaw Letting Nearby Attackers Spy via Microphone

Apple has updated its Beats Studio Buds wireless earbuds to patch a high-severity vulnerability that could be exploited by nearby…

NEWShighCVE-2026-202539.8 CRITICALSecurityWeek2 months ago

Splunk Enterprise Vulnerability Exploited in Attacks Days After Disclosure

CISA has given federal agencies only three days to patch CVE-2026-20253, which can be exploited for unauthenticated remote code ex…

NEWSBleeping Computer2 months ago

Gentlemen ransomware uses multiple EDR killers to disable defenses

The Gentlemen ransomware-as-a-service (RaaS) is actively developing and maintaining a suite of endpoint detection and response (ED…

NEWSWired Security2 months ago

How the Peter Thiel-Linked Dialog Club Secretly Ranks Its Members

Leaked files show the invite-only network grades members by their money and fame, shaping who’s in, who’s out, and who pays.

NEWSCyberScoop2 months ago

Authorities disrupt Evil Corp’s SocGholish botnet

Cybersecurity firms, researchers and officials took down 106 servers and remediated nearly 15,000 sites that were infected with th…

NEWSCyberScoop2 months ago

Congress tees up No FAKES Act, aiming at AI-generated deepfakes

While preventing third parties from profiting off unauthorized deepfakes of artists and performers is a bipartisan concern, some b…

NEWSHackread2 months ago

MacBook Neo vs Windows Laptops for Cybersecurity Tasks

There is no one-size-fits-all cybersecurity laptop. We’ll examine real-world work scenarios, tool compatibility, and trade-offs th…

NEWShighHackread2 months ago

Operation Endgame Disrupts SocGholish Malware Infrastructure

International law enforcement dismantled TA569's SocGholish infrastructure, taking down over 100 C2 servers and remediating nearly…

NEWSBleeping Computer2 months ago

Nintendo confirms data stolen in WebMD subsidiary cyberattack

Nintendo of America has confirmed to BleepingComputer that threat actors stole survey data from the third-party TinyPulse service…

NEWSKrebs on Security2 months ago

‘Popa’ Botnet Linked to Publicly-Traded Israeli Firm

For the past four years, a sprawling Android-based botnet called Popa has forced millions of consumer TV boxes to relay Internet t…

NEWScriticalCVE-2026-425308.1 HIGHThe Hacker News2 months ago

F5 Patches Two Critical NGINX Open Source Flaws Enabling Remote Code Execution

F5 has released security updates to address two critical security flaws in NGINX Open Source that could be exploited to achieve co…

NEWSSecurityWeek2 months ago

Majority of Internet-Accessible REDCap Servers Outdated

These servers are regularly targeted by China-linked UNC6508 for initial access and backdoor deployment. The post Majority of Inte…

NEWShighBleeping Computer2 months ago

USB worm spreads crypto-stealing malware via Windows shortcut files

Threat actors targeting cryptocurrency wallets have been distributing clipboard-stealing malware with self-spreading capabilities…

NEWShighSecurity Magazine2 months ago

Chinese Hackers Targeting AI, Cyber and National Defense Research

The campaign was undetected for more than one year.