Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

3,752 articles

NEWSThe Register7 days ago

Claude Mythos only model to complete full cyber kill chain, experts say

Cyber Weapon Index finds AI attacks 'imminent'

NEWSCyberScoop7 days ago

Jail time for Maine child in 764 marks turning point in federal law enforcement

Researcher tracking 764 said the first-of-its-kind case has a wider impact that will cause ripples across the landscape of violent…

NEWShighCVE-2026-95869.8 CRITICALBleeping Computer7 days ago

Hackers exploit Sangoma Switchvox flaw to deploy reverse shells

Attackers are actively exploiting CVE-2026-9586, an unauthenticated SQL injection vulnerability in the Sangoma Switchvox VoIP plat…

NEWSSecurityWeek7 days ago

OpenLeash Adds a Human Check to Risky AI Agent Actions

The security tool intercepts potentially dangerous agent actions, blocking clear threats and requesting human approval when intent…

NEWSBleeping Computer7 days ago

WordPress backup plugin flaw exposes millions of sites to takeover attacks

An SQL injection vulnerability in the All-in-One WP Migration and Backup plugin for WordPress could allow unauthenticated attacker…

NEWSSecurity Magazine7 days ago

Compromising 5.4% of Texas’ Battery Fleet Could Black Out the Grid

The entire Texas grid could be destabilized if just 5.4% of the batteries were compromised.

NEWScriticalThe Register7 days ago

AI agents carried out every step of this ransomware attack – then left the victim an 80-page security audit

Adding insult to injury

NEWSThe Hacker News7 days ago

Google, Anthropic, and OpenAI Unveil Cyber AI Models, Safeguards, and Access Programs

Google on Wednesday announced Gemini 3.8 Flash Cyber, which it described as its most capable cybersecurity model, and has made it…

NEWSCyberScoop7 days ago

The FCC wants consumers to rate their telecom’s anti-robocall protections

The agency also booted 14 phone service providers from U.S. networks for violating existing robocalling regulations. The post The…

NEWSCyberScoop7 days ago

Dogged Russia-based botnet dismantled after 23-year run

Sality’s peer-to-peer infrastructure allowed it to evade system-wide disruption efforts for an exceptionally long period. Authorit…

NEWSThe Hacker News7 days ago

Fake Software Installers Disable Windows Update and Weaken Microsoft Defender

An active malware campaign is using bogus software-download websites to impersonate trusted vendors and distribute malicious insta…

NEWSThe Register7 days ago

SonicWall's SMA1000 boxes under active attack again

Miscreants use chained zero days to pwn boxen as third-party SOCs say further attacks 'almost certain'

NEWScriticalSecurity Magazine7 days ago

Dropbox Data Breach: 5,000 Accounts Compromised

An unauthorized party accessed certain Dropbox accounts.

NEWScriticalCVE-2026-823299.8 CRITICALBleeping Computer7 days ago

Hackers exploit critical JFrog Artifactory flaw to forge admin tokens

A critical authentication bypass vulnerability (CVE-2026-82329) in JFrog Artifactory is being exploited in attacks to create token…

NEWScriticalSecurityWeek7 days ago

UK Moves to Block High-Risk Tech Suppliers From Critical Infrastructure

Late amendments to the Cyber Security and Resilience Bill would give ministers new powers to restrict risky technology providers a…

NEWSCyberScoop7 days ago

Pegasus, NoviSpy variant spyware found on devices of Serbian activists

It’s the first Pegasus infection of 2026 that Citizen Lab is forensically confirming, and the SHARE Foundation said it’s the bigge…

NEWSCyberScoop7 days ago

Wyden seeks upgraded NSA security guidance on commercial VPN use

it’s the latest in a sequence of letters to feds from Sen. Ron Wyden, D-Ore., on commercial VPNs. The post Wyden seeks upgraded NS…

NEWShighInfosecurity Magazine7 days ago

Russian Man Extradited Over Malware Campaign Targeting Freelancers

Russian man extradited to US over malware campaign that targeted 80,000 freelance users

NEWSThe Register7 days ago

Legacy Lenovo login opens 5,000 Dropbox accounts to attackers

Cloud storage biz severs old integration and urges victims to reset credentials

NEWSThe Hacker News7 days ago

Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code

Manifold Security has disclosed eight security flaws across seven command-line AI coding agents in which a repository's own Git co…

NEWSBleeping Computer7 days ago

Ransomware protection for MSPs: A 6-point checklist for faster recovery

Ransomware resilience requires more than backups or endpoint detection alone. Acronis outlines six capabilities MSPs should test a…

NEWSInfosecurity Magazine7 days ago

Gambling Goblin Turns Brazilian Government Sites Into SEO Weapons

Gambling Goblin compromised Brazilian government sites to drive gambling traffic through SEO fraud

NEWSThe Hacker News7 days ago

Malicious Apache Modules Hijack Brazilian Government Site Traffic to Push Betting Pages

A Chinese-speaking cybercrime cluster known as Gambling Goblin has been observed installing malicious Apache modules on compromise…

NEWSThe Hacker News7 days ago

BGP Hijack Delivers Malicious Virtualizor Update That Establishes Persistent Root Access

Virtualizor said hackers used a Border Gateway Protocol (BGP) hijack to divert Softaculous traffic. The hackers then used the dive…

NEWShighSecurityWeek7 days ago

Rockwell Automation Patches Over a Dozen Vulnerabilities Across Products

The industrial giant has released advisories for its RSLinx Classic, ArmorStart, ControlFLASH, FactoryTalk, and other products. Th…

NEWSBleeping Computer7 days ago

Dropbox accounts breached through Lenovo email verification flaw

Dropbox is warning some users that an unauthorized party accessed their accounts by exploiting a flaw in Lenovo's email verificati…

NEWSThe Hacker News7 days ago

Meta Ads Push StreamRat Android Trojan That Can Gain Near-Complete Device Control

Cybersecurity researchers have disclosed details of a new Android banking trojan called StreamRat that was promoted to Spanish-spe…

NEWShighSecurityWeek7 days ago

Exploit Published for Fresh Cleo Harmony Vulnerability

The security defect allows remote attackers to bypass authentication through argument bearer manipulation. The post Exploit Publis…

NEWSSecurityWeek7 days ago

Anthropic Details Response to Security Incidents, Unveils Enterprise Safeguards

Anthropic introduced Enterprise Frontier Safeguards (EFS), a system that combines zero data retention with automated monitoring fo…

NEWSSecurityWeek7 days ago

Malicious Virtualizor Update Served via BGP Hijacking

Using a technically valid TLS certificate for Softaculous’ domains, a threat actor diverted traffic to fake software updates. The…