Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

3,188 articles

ESET MDR vs Sophos MDR: Compared Time to discover and respond to a threat

A detailed ESET MDR vs Sophos MDR comparison covering tiers, response speed, coverage, threat intelligence, pricing, and breach wa…

NEWSThe Register2 months ago

Helpdesk scammers are making house calls to make their lies feel more real

15-year-old among six arrested after Dutch cops target suspected bank fraud call center

NEWScriticalSecurityWeek2 months ago

Microsoft Teams Relay Servers Abused in DragonForce Ransomware Attack

The attackers deployed a new Go-based backdoor that uses Microsoft Teams servers for command-and-control. The post Microsoft Teams…

NEWSThe Hacker News2 months ago

The Top 10 Attack Surface Exposures in 2026

Breaches don't always start with a zero-day. An exposed admin panel can get brute-forced, or credentials reused from a previous at…

NEWSBleeping Computer2 months ago

CISA orders feds to patch max severity Joomla plugin flaw by Friday

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch a maximum-severity flaw in…

NEWSInfosecurity Magazine2 months ago

EU Security Experts to Support Ukrainian Organizations in Case of Cyber-Attacks

Ukraine has been added to the EU Cybersecurity Reserve, which provides incident response services against large-scale incidents

NEWScriticalSecurityWeek2 months ago

Microsoft Working on Patch for ‘RoguePlanet’ Zero-Day

The public PoC code exploits a race condition in Microsoft Defender to spawn a command prompt with System privileges. The post Mic…

NEWSThe Hacker News2 months ago

Malicious JetBrains Plugins Steal AI API Keys as Chrome Extensions Capture Chatbot Chats

Cybersecurity researchers have flagged a "coordinated malware campaign" on the JetBrains Marketplace that has published no less th…

NEWSInfosecurity Magazine2 months ago

Fifteen JetBrains Marketplace Plugins Found Stealing API Keys

Aikido Security has discovered at least 15 IDE plugins on the JetBrains Marketplace

NEWSSecurityWeek2 months ago

Oracle’s Second Monthly Security Updates Deliver 245 Patches

Oracle has released its June 2026 Critical Security Patch Update to fix vulnerabilities in Communications, EBS, Enterprise Manager…

NEWScriticalSecurity Magazine2 months ago

Organizations’ Emergency Response Fails to Match Confidence Levels

Organizations overestimate their emergency response; Almost 50% of organizations faced a lateral movement attack in the last year.

NEWSInfosecurity Magazine2 months ago

Staffing Is Top SOC Challenge Even as AI Proliferates, Says SANS

SANS Institute study finds few SOCs have built AI into defined workflows, despite widespread adoption

NEWScriticalBleeping Computer2 months ago

Microsoft working on Defender patch for RoguePlanet zero-day

Microsoft confirmed that it's working on a security patch for a Defender zero-day vulnerability named "RoguePlanet," disclosed one…

NEWScriticalSecurityWeek2 months ago

Chrome and Firefox Updated to Patch Critical, High-Severity Vulnerabilities

The browser updates address multiple memory safety bugs that could potentially lead to remote code execution. The post Chrome and…

NEWSHackread2 months ago

15 Malicious JetBrains Plugins Caught Stealing DeepSeek, OpenAI API Keys

Hackers are using 15 malicious JetBrains plugins posing as AI coding assistants to steal DeepSeek, OpenAI, and other developer API…

NEWSThe Hacker News2 months ago

144 Mastra npm Packages Compromised via Hijacked Contributor Account

As many as 144 npm packages associated with the Mastra namespace ("@mastra/*"), a popular open-source JavaScript and TypeScript fr…

NEWShighSecurityWeek2 months ago

Joomla, LiteSpeed Vulnerabilities Exploited in Attacks

The flaws allow attackers to execute arbitrary PHP code and gain root privileges on shared hosting servers. The post Joomla, LiteS…

NEWScriticalBleeping Computer2 months ago

Kodak confirms data breach claimed by ShinyHunters extortion gang

Kodak has confirmed that it's working with external cybersecurity experts to investigate a security breach after hackers gained ac…

NEWShighSecurityWeek2 months ago

3 Recently Patched Fortinet FortiSandbox Vulnerabilities in Hacker Crosshairs

SOCRadar has detected 30,000 compromised Fortinet firewalls that expose networks to hacking. The post 3 Recently Patched Fortinet…

NEWScriticalCVE-2026-489079.8 CRITICALThe Hacker News2 months ago

CISA Warns of Actively Exploited Joomla JCE Flaw Allowing PHP Code Execution

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a maximum-severity security flaw impacting Widge…

NEWSThe Register2 months ago

Cyberattack sees crops kept in the ground

Bitter harvest for Australia's Mackay Sugar, attacked in peak cane crushing season

NEWSBleeping Computer2 months ago

Malicious JetBrains Marketplace plugins steal AI API keys from developers

At least 15 malicious plugins found on the JetBrains Marketplace were designed to steal AI API keys from developers. [...]

NEWSCyberScoop2 months ago

Lawmakers leary about Trump administration’s Anthropic order

Some panned it, some said they needed more information, but caution figured into all of the responses. The post Lawmakers leary ab…

NEWSCyberScoop2 months ago

AI’s constant patching treadmill can be a security problem

The breakneck speed of model releases may be creating short, silent security gaps as developers must choose between performance an…

NEWSWired Security2 months ago

Leak Exposes Members of Peter Thiel’s Secretive ‘Dialog’ Society

More than 200 of the world's elites registered for a retreat whose agenda runs from panels on cult-building and sex to prepping fo…

NEWSThe Register2 months ago

Python dev saved from disaster by intuition...and AI

I'm sorry, Dave. I can't install that repo that will totally hose your system.

NEWShighBleeping Computer2 months ago

New Rokarolla Android malware targets 217 banking, crypto apps

A new Android banking trojan named Rokarolla is targeting 217 banking and cryptocurrency applications using an extensive set of 13…

NEWSThe Hacker News2 months ago

Google Vertex AI SDK Flaw Let Attackers Hijack Model Uploads via Bucket Squatting

A flaw in the Google Cloud Vertex AI SDK for Python let an attacker with no access to a victim's project hijack the victim's machi…

NEWShighBleeping Computer2 months ago

Steam Workshop abused to spread malware via Wallpaper Engine app

Threat actors are abusing Steam Workshop, Valve's community hub for downloading game-related content, to push various malware hidd…

NEWScriticalThe Register2 months ago

Three critical Fortinet sandbox bugs splattered by unknown attackers

All have patches, so make sure you upgrade to a fixed version