Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,450 articles

Scammers Abuse Frame.io Notifications to Steal Microsoft 365 Credentials

Ocean Security found a phishing campaign, dubbed Phantom Preview, that abused legitimate Frame.io notifications and hidden PDF lin…

NEWSThe Register5 days ago

Bullhorn sees red after cyberattack knocks recruitment platform offline

Staffing software giant calls in CrowdStrike as customers face login headaches and questions remain over possible data theft

NEWSInfosecurity Magazine5 days ago

AI Agent Adoption Creates Risk as Oversight Struggles to Keep Pace, Splunk Finds

Rapid adoption of agentic AI comes with potential business benefits. But if done incorrectly it also carries risks around AI activ…

NEWSHackread5 days ago

Samsung Black Friday 2026: Galaxy Offers to Look Out For

Black Friday 2026 is coming! Explore Samsung Galaxy S25 Ultra, S24, foldable phones, tablets and watches, plus refurbished…

NEWSThe Hacker News5 days ago

WhatsApp Hid Instructions in Help Pages Telling Its AI Chatbot Not to Recommend Privacy Regulators

WhatsApp's help pages carried hidden instructions for its support chatbot that told it not to recommend a data protection authorit…

NEWSThe Hacker News5 days ago

What Security Teams Can Do To Tame Wild Code

A sales manager builds an AI-assisted workflow to route leads. It connects to customer records, summarizes inbound requests, and p…

NEWScriticalThe Hacker News5 days ago

Go Issues Emergency Update Blocking Eight CA Keys Over Undisclosed Security Concerns

Go 1.27.3 and Go 1.26.10, released on October 20, make Go's certificate verifier reject any certificate chain that passes through…

NEWShighBleeping Computer5 days ago

OVHcloud CLI releases backdoored on GitHub to steal developer secrets

French cloud and hosting provider OVHcloud is warning users that attackers compromised its open-source command-line interface (CLI…

NEWSSecurityWeek5 days ago

Microsoft Targets Rogue AI Agents With Dynamic Permissions, Risk Scoring

Microsoft says companies should treat AI agents as insiders, and is adding controls that grant access per task and tighten it as a…

NEWSBleeping Computer5 days ago

Windows Server 2025 gets support for quick machine recovery

Microsoft announced that IT administrators can now use quick machine recovery on Windows Server 2025 after installing the October…

NEWSBleeping Computer5 days ago

Ahold Delhaize: Cyberattack affects services across US and Europe

Ahold Delhaize, one of the world's largest food retail chains, confirmed that last week's cyberattack disrupted services at stores…

NEWSThe Hacker News5 days ago

Russian APT28 Breaches NATO Naval Shipbuilder in NATO Country, Deploys New Reflective Loader

The Russia-linked state-sponsored threat actor tracked as APT28 (aka BlueDelta, Fancy Bear, and Forest Blizzard) has been attribut…

NEWSThe Hacker News5 days ago

ConnectWise Resets Credentials as Cloud Backup Remains Offline After Security Incident

ConnectWise on Monday said it has taken remediation measures, including strengthening administrative-access protections and resett…

NEWShighHackread5 days ago

Nearly 480,000 Phishing Emails Traced to Computer Hidden Behind Hotel Fridge

Japanese police arrested a Chinese couple accused of hiding a computer in a Kobe hotel to send phishing emails and using stolen cr…

NEWSThe Register5 days ago

Whitehall shuts the front door on digital ID but leaves the back open

Ministers may have scrapped the national scheme, but One Login, digital wallets and 80-plus planned credentials are still very muc…

NEWShighInfosecurity Magazine5 days ago

Siemens Customers Targeted by ClickFix Attackers Exploiting DLL Side-Loading Flaw

Siemens identified the activity to be from the Romulus multi-platform ClickFix campaign, with Siemens Software Center users urged…

NEWShighSecurityWeek5 days ago

Hackers Steal 1.8 Million Records From Nikkei

The compromised information includes names, addresses, email addresses, phone numbers, and dates of birth. The post Hackers Steal…

NEWSThe Register5 days ago

UK finance watchdog wants firms to report AI failures and close calls

FCA seeks clear accountability as financial services embrace increasingly autonomous agents

NEWSBleeping Computer5 days ago

Revolut outage disrupts online banking operations worldwide

Fintech company Revolut is working to resolve a massive outage that disrupted most of its services worldwide earlier today. [...]

NEWSHackread5 days ago

Guide to Compliance and Cybersecurity in Healthcare Software Development

Compare five healthcare software development firms and learn how to build secure, compliant products under HIPAA, GDPR and FDA req…

NEWScriticalSecurityWeek5 days ago

970,000 Medi-Cal Members Affected by Paradigm Healthcare Data Breach

Paradigm Healthcare Services detected an intrusion in October 2025, but it took nearly a year to start notifying affected individu…

NEWShighThe Hacker News5 days ago

Hackers Hijack Five OVHcloud CLI Releases to Distribute Secret-Stealing Malware

An attacker used a contributor's GitHub account to replace the download archives on five existing releases of OVHcloud's command-l…

NEWSThe Register5 days ago

Why cyber resilience is now a boardroom priority for UK public services

PARTNER CONTENT: What happens after the inflection point?

NEWShighCVE-2026-1109366.7 MEDIUMThe Hacker News5 days ago

ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access Trojan

Siemens has addressed a DLL sideloading vulnerability impacting Siemens Software Center that it said has been exploited in ClickFi…

NEWSThe Hacker News5 days ago

Ex-OpenAI Engineer Detained in Spy Device Case as Saudi Royal Contacts Emerge

A U.S. court on Monday granted the U.S. government's request to detain a former OpenAI engineer accused of planting a recording de…

NEWShighThe Hacker News5 days ago

Hackers Use New ROMULUS ClickFix Platform to Deliver LegionLoader and Other Malware

Cybersecurity researchers have disclosed details of a ClickFix delivery platform called ROMULUS that's being used to distribute ma…

NEWSSecurity Magazine5 days ago

Over Half of Financial Service Leaders Miss Spoofed AI Traffic

A report by Fingerprint analyzed the state of artificial intelligence (AI) traffic within financial services organizations.

NEWSThe Register6 days ago

ICANN testing tech to let law enforcement access non-public WHOIS info

Single sign-on to help address imminent threats to life, critical infrastructure, or kids

NEWSThe Register6 days ago

DeepSeek deep-sixed at all US federal civilian agencies

Order disallowing use of Chinese AI service is unhelpfully vague and broad

NEWScriticalBleeping Computer6 days ago

Nikkei discloses third data breach in a month, 1.8M records exposed

Nikkei Inc. disclosed a new data breach, the third in about a month, that exposed 1.83 million personal information records. [...]