Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,684 articles

Think You’ve Eliminated Chinese AI? Check the Model’s Lineage, Cisco Says

New research shows that country-of-origin labels can obscure an AI model’s upstream dependencies, inherited behaviors and potentia…

NEWShighBleeping Computer2 months ago

ServiceNow warns of three max severity security vulnerabilities

ServiceNow released security patches for three new maximum-severity AI Platform vulnerabilities that can be exploited in code inje…

NEWScriticalCVE-2026-65643The Hacker News2 months ago

Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server

cPanel has released patches for a security flaw affecting domain parking and addon domain functionality in cPanel and WebHost Mana…

NEWSInfosecurity Magazine2 months ago

Window to Tackle Surge in AI-Enabled Cyber Attacks Narrowing, Tech Giants Warn

More than 100 companies, including OpenAI, Anthropic, Google and Microsoft, have urged collective action to unlock the power of AI…

NEWSBleeping Computer2 months ago

Windows 11 KB5120998 update released with 35 changes and fixes

Microsoft released the KB5120998 preview cumulative update for Windows 11 versions 25H2 and 24H2, which comes with 35 changes, inc…

NEWSWired Security2 months ago

How an Atlanta Suburb Ended Up Sharing Flock Data With More Than 2,000 Organizations

Alpharetta, Georgia, cops share data with thousands of Flock users, ranging from federal agencies to a fish and wildlife commissio…

NEWScriticalSecurityWeek2 months ago

PaperCut Releases Emergency Patch for Exploited Zero-Day

A CVE identifier has not yet been assigned, but PaperCut is urging NG/MF users to install patches and implement mitigations. The p…

NEWScriticalThe Hacker News2 months ago

PaperCut Zero-Day Exploited in Attacks, Affecting All NG and MF Versions

PaperCut has alerted customers that bad actors are actively exploiting a vulnerability impacting all versions of its PaperCut NG a…

NEWShighThe Hacker News2 months ago

APT28-Linked HOOKEDGE Backdoor Targets European Government and Diplomatic Organizations

Cybersecurity researchers have flagged a fresh set of campaigns targeting government and diplomatic organizations in Romania, Spai…

NEWSInfosecurity Magazine2 months ago

Threat Actors Abuse Cursor Agent AI to Assist Ransomware Operations

Aurora ransomware operators are abusing SpaceX’s Cursor Agent AI tool to conduct tasks such as reconnaissance and exploitation act…

NEWScriticalThe Register2 months ago

Print management outfit PaperCut is under 0-day attack, and it’s drawing customers’ blood

The fix is either an unvalidated and unofficial emergency patch or taking the server offline

NEWSSecurity Magazine2 months ago

Report Finds AI Security Fails to Match AI Usage

A report by Guardrail Technologies analyzed how S&P 500 companies document their AI usage alongside their AI cybersecurity measure…

NEWSThe Register2 months ago

Australian cops cuff alleged TeamPCP masterminds

Alleged crew behind the Shai-Hulud worm and other supply chain attacks nabbed with help from the FBI

NEWSBleeping Computer2 months ago

Nearly 700 rogue AI agents coordinated in the Hugging Face attack

New details about the July attack on Hugging Face reveal that hundreds of AI agents driven by OpenAI's internal IM1 model coordina…

NEWShighThe Register2 months ago

CRPx0 hacking service for dummies claims victim count more than quintupled

It's 'built to be operated by a human with no technical background'

NEWSThe Register2 months ago

AI girlfriend review site's secrets were exposed to the world for three weeks

Even testing and staging sites need protection from prying eyes

NEWScriticalThe Hacker News2 months ago

OpenAI Says Reward Hacking Drove AI Agents to Exploit Zero-Days and Breach Hugging Face

OpenAI on Wednesday revealed that reward hacking was a key driver behind the artificial intelligence (AI)-powered hack of Hugging…

NEWSCyberScoop2 months ago

Unit 42 warns AI has shifted balance of power from defenders to attackers

Palo Alto Networks’ threat intelligence team said the early waves of threats riding on agentic AI models have broken in the wild,…

NEWSCyberScoop2 months ago

100-plus companies call for ‘global surge’ in AI-powered cyber defense

OpenAI, Anthropic, Google, Microsoft, and others say there’s a narrow “defenders’ window” to strengthen security before AI-powered…

NEWSWired Security2 months ago

A Georgia Cop Used Flock to Track 2 Other Cops: His Ex and Her Friend

After an affair with a fellow police officer ended, a Georgia cop used Flock to track her movements—and those of a man whose vehic…

NEWSCyberScoop2 months ago

Former sexual abuse victims say Grok used their images, videos to train deepfake capabilities

Elon Musk claimed he was aware of “literally zero” CSAM content created through Grok. A new lawsuit from thousands of real victims…

NEWSThe Register2 months ago

Omarchy distro gains serious backing

Polarizing opinions while tech heavyweights put up $10M

NEWScriticalBleeping Computer2 months ago

PaperCut warns of NG, MF flaw exploited in zero-day attacks

PaperCut is warning that hackers are actively exploiting a vulnerability in all versions of its PaperCut NG and PaperCut MF print…

NEWShighBleeping Computer2 months ago

Manchester Airports Group says hackers stole travelers' data

The Manchester Airports Group (MAG) disclosed that hackers breached its systems and stole customer data, including Wi-Fi sign-ups…

NEWShighSecurity Magazine2 months ago

DOJ, NASA, Others Among Victims of Chinese State-Sponsored Hack

The DOJ and other federal entities were targeted by a Chinese state-sponsored actor.

NEWSThe Register2 months ago

ATF responds to 'major' cybersecurity incident after ransomware gang's claims

US Justice Department investigating the breach

NEWScriticalCVE-2026-75604The Hacker News2 months ago

Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE

Credit: Hacktron Vercel has released security patches for two critical-severity vulnerabilities in the Next.js web framework, both…

NEWSThe Hacker News2 months ago

ThreatsDay: 296K IoT Botnet, 100+ Water Systems Targeted, SharePoint RCE Chain + 27 New Stories

A fake login page. A fake security scan. A fake productivity app. Apparently, pretending to be useful is still one of the easier w…

NEWSThe Register2 months ago

Schrödinger's backup: not actually recovered until you try to restore IT

SPONSORED FEATURE: Verify and survive: your backup isn't real 'til you test it

NEWSCyberScoop2 months ago

Two alleged TeamPCP members arrested and charged after months of software supply-chain chaos

The two men face 14 charges combined. Private researchers traced one suspect through leaked passwords and a decade-old gaming prof…