Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,680 articles

NEWScriticalSecurityWeekabout 2 months ago

Critical Ruby on Rails Vulnerability in Attackers’ Crosshairs

Named KindaRails2Shell, the arbitrary file read flaw allows attackers to extract secrets and execute arbitrary code remotely. The…

NEWSSecurityWeekabout 2 months ago

Boston Scientific Still Recovering From Cyberattack

The company has called in CrowdStrike and others to investigate the attack that caused global network disruption. The post Boston…

NEWScriticalSecurityWeekabout 2 months ago

Extortion Group Claims Manchester Airports Group Data Breach

FulcrumSec says it stole over 80 GB of data from Manchester Airports Group and plans to leak it online. The post Extortion Group C…

NEWSBleeping Computerabout 2 months ago

Microsoft says Windows 11 KB5120998 update resets mouse settings

Microsoft has confirmed that mouse settings are being reverted on Windows 11 systems after installing the KB5120998 August 2026 no…

NEWSCyberScoopabout 2 months ago

The AI Kill Switch Act is repeating the Clipper Chip’s mistakes

Mandating ‘kill switches’ for AI agents would threaten the security of America’s critical infrastructure and undercut U.S. AI lead…

NEWSWired Securityabout 2 months ago

ATM Flaws Reveal Key Weaknesses in the Software Supply Chain

A security researcher discovered nine vulnerabilities impacting ATM encryption and authentication software. But the problems exten…

NEWSBleeping Computerabout 2 months ago

Nigerians extradited to US for sextortion, deaths of two teens

Two Nigerian men extradited to the U.S. on Thursday have been charged with involvement in sextortion schemes that resulted in the…

NEWSSecurityWeek2 months ago

Judge Says Pentagon’s Measures Against Anthropic Were ‘Illegal and Baseless’

The ruling is part of Anthropic's legal battle against the Pentagon after the government labeled the company as a supply chain ris…

NEWSThe Hacker News2 months ago

China-Linked Fire Ant Hijacks Cisco Routers to Steal Credentials and Blind Security Logs

A China-nexus cyber espionage actor tracked as Fire Ant has expanded a long-running campaign beyond VMware hypervisors to compromi…

NEWSSecurityWeek2 months ago

Berlin Won’t Pay Extortion Group Claiming Data Theft

The Rhysida ransomware group has claimed the exfiltration of over 5TB of data, including personal information and credentials. The…

NEWSBleeping Computer2 months ago

Microsoft asks users to ignore 'Antivirus is turned off' errors

Microsoft asked customers this week to ignore incorrect alerts that Defender Antivirus has been turned off after installing the la…

NEWShighThe Hacker News2 months ago

DoJ Corrects China Hacking Claim, Says U.S. Agencies Were Targets, Not Victims

The U.S. Department of Justice (DoJ) on Friday corrected a previously issued press statement that several of its agencies were vic…

NEWShighCVE-2026-82078SecurityWeek2 months ago

More Details Emerge on Exploited PaperCut Vulnerabilities

PaperCut has released a second emergency patch for the exploited vulnerabilities, which are now tracked as CVE-2026-82078 and CVE-…

NEWShighBleeping Computer2 months ago

FulcrumSec claims Manchester Airports hack, theft of 86 GB of data

FulcrumSec claims it stole 86 GB of data from Manchester Airports Group. BleepingComputer validated one traveller's record, while…

NEWShighBleeping Computer2 months ago

Anthropic warns infostealer malware is hijacking Claude sessions to drain usage

Anthropic is warning some Claude users that infostealer malware on their PCs has stolen active Claude login sessions, allowing att…

NEWSBleeping Computer2 months ago

Chrome Web Store extensions caught stealing crypto, browser data

Multiple extensions for Google Chrome and Microsoft Edge delivered a malware framework that deployed modules to steal cryptocurren…

NEWSThe Register2 months ago

Turns out Brits would quite like their private messages to stay private

Polling finds two-thirds don't trust this government, or any future one, with access to their encrypted chats

NEWShighThe Hacker News2 months ago

TerminalFix Uses Fake Cloudflare CAPTCHAs to Deploy Reverse-Tunnel Backdoor

Microsoft has disclosed details of a new ClickFix variant, dubbed TerminalFix, that aims to trick users into running a malicious c…

NEWSBleeping Computer2 months ago

Anthropic is cutting Claude Code's current weekly limits by 17%

Anthropic is permanently increasing Claude Code's standard weekly usage limits by 25% for Pro, Max, Team, and seat-based Enterpris…

NEWScriticalCVE-2026-765819.8 CRITICALThe Hacker News2 months ago

Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE

Multiple critical security flaws have been disclosed in WordPress plugins and themes, including WPMU DEV Dashboard, Avada, Transla…

NEWSBleeping Computer2 months ago

Brave browser adds email aliases to help users evade tracking

The latest version of the Brave browser, 1.94, introduces a feature called 'Email Aliases' that allows users to generate disposabl…

NEWScriticalSecurityWeek2 months ago

Hasbro Data Breach Exposed Employee Personal Information

A cyberattack caused disruptions at the toy and game giant earlier this year and the company is now disclosing a data breach. The…

NEWSWired Security2 months ago

The Cybersecurity Apocalypse Is Coming in ‘Months,’ AI Giants Warn

Plus: Hackers target over 100 US water systems, ICE puts in an order for robot dogs, and you’ll never guess what “MrChildPorn” was…

NEWSBleeping Computer2 months ago

McKesson discloses breach after ShinyHunters claims patient data theft

Healthcare and pharmaceutical distribution giant McKesson has disclosed a cybersecurity incident involving unauthorized access to…

NEWShighThe Hacker News2 months ago

Berlin Refuses to Pay Hackers Who Stole Data From the City's State Network

Berlin's state government has confirmed that it is the target of an extortion attempt following the August compromise of the city'…

NEWSThe Register2 months ago

Researcher shows how Claude Code can be tricked simply by asking it to summarize a website

More prompt-injection hijinks from wunderwuzzi

NEWShighThe Hacker News2 months ago

Cosmos EVM Flaw Exploited After Cosmos Labs Knew Every Blockchain Running It Was Vulnerable

Cosmos Labs has warned that a critical balance-handling flaw in the shared Cosmos EVM module was exploited to drain funds from six…

NEWSCyberScoop2 months ago

ATF confirms cyberattack hit system containing info on its investigation targets

The prolific ransomware group Qilin claimed responsibility for the attack. ATF insists the incident was limited to a standalone sy…

NEWScriticalBleeping Computer2 months ago

PaperCut releases second emergency patch for exploited flaws

PaperCut has released a second emergency security update for two actively exploited vulnerabilities in its PaperCut NG and MF prin…

NEWSWired Security2 months ago

Microsoft Teams Has Become a Haven for Scammers in China

Fraudsters are exploiting enterprise chat apps like Teams and Webex to trick Chinese victims into transferring large sums of money…