Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,681 articles

NEWScriticalBleeping Computer2 months ago

PaperCut releases second emergency patch for exploited flaws

PaperCut has released a second emergency security update for two actively exploited vulnerabilities in its PaperCut NG and MF prin…

NEWSWired Security2 months ago

Microsoft Teams Has Become a Haven for Scammers in China

Fraudsters are exploiting enterprise chat apps like Teams and Webex to trick Chinese victims into transferring large sums of money…

NEWShighBleeping Computer2 months ago

GiveWP WordPress donation plugin flaw lets hackers execute server commands

A maximum-severity vulnerability in the GiveWP plugin for WordPress allows an unauthenticated attacker to execute arbitrary comman…

NEWSThe Hacker News2 months ago

Attackers Chain Two PaperCut Flaws to Execute Code Without Authentication

Malicious actors are exploiting a newly patched security flaw in PaperCut NG and MF to execute arbitrary code on susceptible insta…

NEWSSecurity Magazine2 months ago

Meta Pays $18B Settlement, Plans Platform Changes

Meta will be making adjustments to its platforms following an $18 billion settlement.

NEWSBleeping Computer2 months ago

68-year-old imprisoned after making $1.3 million by pirating IPTV services

A 68-year-old has been sentenced in the U.K. to more than six years in prison for operating an illegal IPTV (Internet Protocol Tel…

NEWSThe Hacker News2 months ago

Android 17 Adds OS-Wide ECH to Hide Website Visits From Network Providers

Google on Thursday announced new network security protections in Android 17 to bolster connection privacy, address cellular vulner…

NEWSSecurity Magazine2 months ago

Security Leaders Discuss OpenAI’s Call for Collaboration on Cyber Defense

100 technology firms released an open letter calling for “collective action” for cyber defense.

NEWShighCVE-2023-491059.8 CRITICALThe Hacker News2 months ago

ownCloud Flaw Exploited to Steal Nuclear Records From Philippine Research Body

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a critical security flaw impacting ownCloud to…

NEWShighSecurityWeek2 months ago

In Other News: Log4j RCE Scare, Minimus Shutdown, Iranian Hacker Sanctions

Noteworthy stories that might have slipped under the radar: Manchester Airports Group cyberattack, Carhartt breach data was partly…

NEWSThe Hacker News2 months ago

19 Chrome and Edge Extensions Found With Wallet-Stealing and Crypto-Draining Code

Cybersecurity researchers have discovered a cluster of 18 Google Chrome and one Microsoft Edge extensions that were published over…

NEWSThe Register2 months ago

US government snitch-finder pleads guilty to leaking state secrets to foreign spies

The IT specialist began contacting a foreign government within days of being assigned to the DIA’s Insider Threat Division

NEWShighBleeping Computer2 months ago

AI Is Accelerating Vulnerability Discovery. Can Defenders Keep Up?

AI is accelerating vulnerability discovery, putting pressure on systems built to enrich, prioritize, and remediate flaws at a slow…

NEWSSecurityWeek2 months ago

ATF Confirms Cyber Incident After Ransomware Group Claims Attack

The Bureau of Alcohol, Tobacco, Firearms and Explosives has described it as a ‘major incident’ and it’s conducting an investigatio…

NEWShighInfosecurity Magazine2 months ago

Fake Voicemail SVG Attachments Fuel Large-Scale Phishing Campaign

A large-scale phishing campaign used fake voicemail SVG attachments to bypass email defenses, targeting 5527 organizations with ov…

NEWSBleeping Computer2 months ago

Over 8,300 Gitea servers vulnerable to code execution attacks

Over 8,300 Internet-exposed Gitea instances are still unpatched against a critical security flaw exploited in ongoing remote code…

NEWShighCVE-2026-533627.8 HIGHSecurityWeek2 months ago

OpenAI Agents Exploited Linux Kernel Flaw on Company’s Own Systems

CISA has added the exploited flaw, CVE-2026-53362, to its KEV catalog, alongside a JFrog vulnerability exploited by OpenAI agents.…

NEWSCVE-2026-766398.8 HIGHThe Hacker News2 months ago

Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over Bluetooth

Security researcher Olivier Laflamme has disclosed two independent root remote code execution (RCE) chains affecting the Unitree G…

NEWSSecurity Magazine2 months ago

Manchester Airports Breach Impacts 8.7M

8.7 million customers’ data was accessed in an airport breach, most information being emails and Wi-Fi sign ups.

NEWScriticalBleeping Computer2 months ago

Toy-making giant Hasbro disclose data breach affecting employees

Hasbro, one of the world's largest toy and game companies, has disclosed that attackers have accessed the personal and financial i…

NEWSThe Hacker News2 months ago

Key Reasons Why Identity Fabric Matters in 2026

An Identity Fabric knits fragmented identity systems into a coherent layer that observes how identities behave across applications…

NEWShighThe Register2 months ago

CISA: Most exploited vulnerabilities should have been eradicated decades ago

Organizational culture and systemic gaps in Secure by Design adoption blamed for sorry state of affairs

NEWSThe Hacker News2 months ago

Three CVSS 10.0 ServiceNow Flaws Could Let Unauthenticated Attackers Execute Code and SQL

ServiceNow has released patches for four security flaws impacting the ServiceNow AI Platform, three of them rated 10.0 on the CVSS…

NEWSSecurityWeek2 months ago

Tech, Cybersecurity Giants Unite Behind OpenAI-Led Cyber Defense Pledge

Nearly 130 tech and cybersecurity companies back a collective call to boost cyber defenses as AI-enabled attacks grow more sophist…

NEWSThe Register2 months ago

Industry that built the problem offers to sell you the solution

100+ tech giants warn AI attacks are coming, skip the part where they pay for defenses

NEWSCVE-2026-742329.8 CRITICALThe Hacker News2 months ago

China-Made ZBT Routers Ship With Two Implants Giving Unauthenticated Attackers Root Access

VulnCheck has disclosed two previously undocumented factory implants in firmware for routers built by Shenzhen Zhibotong Electroni…

NEWSSecurityWeek2 months ago

Think You’ve Eliminated Chinese AI? Check the Model’s Lineage, Cisco Says

New research shows that country-of-origin labels can obscure an AI model’s upstream dependencies, inherited behaviors and potentia…

NEWShighBleeping Computer2 months ago

ServiceNow warns of three max severity security vulnerabilities

ServiceNow released security patches for three new maximum-severity AI Platform vulnerabilities that can be exploited in code inje…

NEWScriticalCVE-2026-65643The Hacker News2 months ago

Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server

cPanel has released patches for a security flaw affecting domain parking and addon domain functionality in cPanel and WebHost Mana…

NEWSInfosecurity Magazine2 months ago

Window to Tackle Surge in AI-Enabled Cyber Attacks Narrowing, Tech Giants Warn

More than 100 companies, including OpenAI, Anthropic, Google and Microsoft, have urged collective action to unlock the power of AI…