Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

2,131 articles

Microsoft shares manual fix for WSUS sync delays and timeouts

Microsoft has shared manual mitigations to help IT administrators fix Windows Server Update Services (WSUS) servers affected by a…

NEWShighCVE-2026-630309.8 CRITICALThe Hacker News5 days ago

WordPress wp2shell Exploitation Grows as Public Exploit Fuels Mass Scanning

Attackers have begun to exploit two critical vulnerabilities in WordPress that, when combined together, enable unauthenticated rem…

NEWShighCVE-2026-6875SecurityWeek5 days ago

Exploitation of ServiceNow Vulnerability Seen Days After Disclosure

The ServiceNow AI platform vulnerability tracked as CVE-2026-6875 can be exploited for remote code execution. The post Exploitatio…

NEWScriticalSecurityWeek5 days ago

Zimbra Update Patches Critical Vulnerabilities

The latest Zimbra refresh resolves command injection, XSS, restriction bypass, and SSRF security defects. The post Zimbra Update P…

NEWScriticalBleeping Computer5 days ago

Windows LegacyHive zero-day flaw gets free, unofficial patches

Free unofficial patches are available for a recently disclosed Windows zero-day flaw that allows attackers to escalate privileges…

NEWSThe Hacker News5 days ago

New ENCFORGE Ransomware Targets AI Model Files in Langflow RCE Attack

Researchers at Sysdig have linked a second attack on the same Langflow server to JADEPUFFER, the AI-agent-driven operator it first…

NEWScriticalCVE-2026-6875The Hacker News5 days ago

Critical ServiceNow AI Platform Flaw Exploited for Unauthenticated Code Execution

Threat actors are now exploiting a recently disclosed critical security flaw impacting ServiceNow AI Platform, according to Defuse…

NEWSSecurity Magazine5 days ago

Cyberattack Halts Coca-Cola’s Fairlife Productions

A company owned by Coca-Cola paused operations following a cyberattack.

NEWScriticalThe Register5 days ago

OVH reveals semi-secret plan to fix critical Januscape bug with mass reboots – and an Australian crash-test dummy

French cloud backported a patch into Debian and didn’t seek customer consent, despite chance of downtime

NEWScriticalBleeping Computer5 days ago

Estée Lauder discloses data breach via Oracle E-Business flaw

Cosmetics giant Estée Lauder is notifying customers of a data breach after hackers exploited a flaw in Oracle E-Business Suite tha…

NEWScriticalBleeping Computer5 days ago

SonicWall SMA1000 flaws exploited as zero-days to push custom malware

Two recently disclosed SonicWall SMA1000 vulnerabilities were exploited in zero-day attacks for weeks, allowing threat actors to i…

NEWShighBleeping Computer5 days ago

Hackers steal $23.7 million in crypto from Ostium in off-chain attack

The Ostium trading platform announced that an attacker stole $23.75 million from its liquidity provider vault last week, after com…

NEWScriticalThe Register5 days ago

Attackers pummel critical WordPress vuln to create all sorts of mischief

Plus dozens of PoCs in the public domain

NEWSBleeping Computer5 days ago

Cursor, Codex, Gemini CLI, Antigravity hit by sandbox escapes

Researchers escaped the sandboxes in Cursor, Codex, Gemini CLI and Antigravity by having the AI agent write files that trusted hos…

NEWSBleeping Computer5 days ago

JadePuffer agentic attacks now target AI model data with ransomware

The JadePuffer autonomous AI agent has upgraded with custom malware called EncForge that focuses on encrypting AI assets, such as…

NEWSHackread5 days ago

Hugging Face Says Autonomous AI Agent System Breached Production Infrastructure

An AI-led cyberattack breached limited Hugging Face datasets and service credentials, while public models, Spaces and published pa…

NEWSThe Register5 days ago

Scammers impersonate FBI on social media, prey on crime victims

IC3 says any account claiming to represent it is fake

NEWSThe Register5 days ago

Malicious cloud customers can bring down the power grid

Datacenters tax utilities normally, so just imagine what they could do if workloads were designed to destroy

NEWSThe Register5 days ago

Frontier LLMs couldn't help Hugging Face fight off evil agents

Chinese open-weight model GLM 5.2 happily obliged

NEWShighThe Hacker News5 days ago

FakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware

Cybersecurity researchers have discovered nearly 7,600 malicious GitHub repositories, out of which more than 800 pose as artificia…

NEWSCyberScoop5 days ago

Director of Commerce AI standards office out after three months

The Center for AI Standards and Innovation has quietly become a key hub for the federal government to assess potential threats and…

NEWShighBleeping Computer5 days ago

New HollowGraph malware uses Microsoft Graph for stealthy C2 comms

A malicious component dubbed HollowGraph uses the calendar feature in compromised Microsoft 365 mailboxes as a command-and-control…

NEWShighThe Hacker News5 days ago

Exposed Server Reveals AI-Assisted Phishing Toolkit Behind WebDAV Malware Campaign

A malware operator left its delivery server wide open, and Rapid7 pulled down the whole toolkit: 1,048 files spanning lure templat…

NEWScriticalSecurity Magazine5 days ago

Hugging Face Confirms Data Breach Caused by Autonomous AI Agent

A host platform for AI models and datasets confirmed it had experienced a data breach.

NEWSInfosecurity Magazine6 days ago

Cruciferra Crypter Uses Process Ghosting to Evade Detection

Cruciferra crypter used process ghosting and 90 custom ciphers to hide payloads for multiple actors

NEWSThe Register6 days ago

Microsoft 365 calendars become spy drop boxes in HOLLOWGRAPH campaign

Malware hides commands in appointments set for 2050 and uses Redmond's own cloud to phone home

NEWSSecurityWeek6 days ago

Neo Emerges From Stealth With $100M to Control and Secure Enterprise AI Software

Neo raised money across seed and Series A funding rounds from Andreessen Horowitz, Bessemer Venture Partners, and others. The post…

NEWSHackread6 days ago

LG Monitors Spotted Installing Adware-Like App on Windows PCs

Connecting certain LG monitors prompts Windows Update to install an LG app without consent, while the software runs at startup and…

NEWShighThe Hacker News6 days ago

HollowGraph Malware Hides C2 and Stolen Files in Microsoft 365 Events Dated 2050

A newly discovered espionage implant has been using a hijacked Microsoft 365 calendar as its command channel, planting operator in…

NEWSCyberScoop6 days ago

Why blocking AI models won’t stop the cyber threats they create

AI companies can find vulnerabilities and write patches. But only the government can build the long-term defense strategy America…