Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

3,178 articles

NEWScriticalBleeping Computer2 months ago

Critical Fortinet FortiSandbox flaws now exploited in attacks

Attackers are now exploiting several critical vulnerabilities in Fortinet's FortiSandbox cyber threat detection platform, accordin…

NEWShighBleeping Computer2 months ago

Windows version of SprySOCKS Linux malware used to attack govt orgs

Windows variants for the SprySOCKS Linux malware have been used in attacks targeting government organizations in at least four cou…

NEWSInfosecurity Magazine2 months ago

FBI Warns Courier Cash Pickups Are Driving Crypto Scams

The FBI claims couriers are being used to circumvent bank transfers in crypto investment schemes

NEWShighThe Hacker News2 months ago

Fake Microsoft Alerts Used to Deploy North Korean NarwhalRAT Malware

The North Korean state-sponsored hacking group known as ScarCruft (aka APT37) has been observed using spear-phishing messages impe…

NEWScriticalBleeping Computer2 months ago

iRhythm discloses data breach, says hackers stole patient info

Digital healthcare company iRhythm Holdings has disclosed a data breach after hackers stole patients' personal and health informat…

NEWScriticalCVE-2026-202626.5 MEDIUMSecurityWeek2 months ago

Cisco Patches Another SD-WAN Zero-Day Exploited in Attacks

Cisco recently became aware of the exploitation of CVE-2026-20262, a Catalyst SD-WAN Manager zero-day that allows arbitrary file w…

NEWScriticalCVE-2026-202626.5 MEDIUMThe Hacker News2 months ago

Cisco Releases Security Updates for Actively Exploited SD-WAN Manager Flaw

Cisco has released security updates for a medium-severity security flaw in Catalyst SD-WAN Manager that has come under active expl…

NEWShighCVE-2026-544208.5 HIGHThe Hacker News2 months ago

CISA Flags LiteSpeed cPanel Plugin Flaw Exploited for Root Privilege Escalation

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a security flaw impacting LiteSpeed cPanel Plugin to it…

NEWSBleeping Computer2 months ago

DOJ seizes CFAKE, SOCFAKE deepfake nude sites under TAKE IT DOWN Act

The U.S. Department of Justice announced Friday that it has seized the CFAKE.com and SOCFAKE.com websites, which allegedly hosted…

NEWSThe Register2 months ago

Cisco SD-WAN make-me-root bug under attack

Second Catalyst SD-WAN Manager flaw exploited as an 0-day this month

NEWSThe Register2 months ago

Feds freaked over Fable 5 after simple 'fix this code' prompt, not jailbreak, says researcher

According to the one person who actually read the research paper

NEWSCyberScoop2 months ago

Google exposes China espionage group that’s been lurking in networks undetected since 2023

The revelation mirrors an alarming pattern of Chinese espionage groups dropping backdoors into critical infrastructure to intercep…

NEWShighBleeping Computer2 months ago

SimpleHelp bug lets hackers create rogue remote support accounts

A vulnerability in the SimpleHelp remote management software allows unauthenticated attackers to create privileged technician acco…

NEWShighThe Hacker News2 months ago

Chinese Hackers Abused Google Workspace Rules to Steal Research and Defense Emails

A China-linked espionage group hid inside North American medical, academic, and military research networks for more than a year, q…

NEWShighThe Hacker News2 months ago

North Korean Hackers Are Turning Developer Tools Into Malware Delivery Channels

Cybersecurity researchers have flagged two malicious cyber campaigns that exhibit similarities with a persistent North Korean thre…

NEWShighThe Register2 months ago

Council of Europe hacked in ShinyHunters' PeopleSoft heist

Joins the ranks of Nottingham Uni and 100 other unnamed victims

NEWShighBleeping Computer2 months ago

OptinMonster WordPress plugin hacked in CDN supply-chain attack

WordPress plugins OptinMonster, TrustPulse, and PushEngage have been compromised in a supply-chain attack impacting Awesome Motive…

NEWScriticalCVE-2026-202626.5 MEDIUMBleeping Computer2 months ago

Cisco fixes SD-WAN vManage flaw exploited in zero-day attacks

Cisco has released security updates to address a vulnerability in the Catalyst SD-WAN Manager, tracked as CVE-2026-20262, that was…

NEWShighInfosecurity Magazine2 months ago

Attackers Hijack Popular WordPress Plugins to Deploy Backdoors

Tampered OptinMonster and sister plugins plant hidden backdoors on 1.2 million WordPress sites

NEWSThe Register2 months ago

Feds snooze as US datacenter law set to lapse with no replacement in site

Federal Data Center Enhancement Act (FDCEA) of 2023 covers standards including security and sustainability

NEWShighThe Hacker News2 months ago

LiteLLM Vulnerability Chain Lets Low-Privilege Users Take Over AI Gateway Servers

A default low-privilege account on a LiteLLM proxy can climb to full admin and run code on the server by chaining three vulnerabil…

NEWScriticalBleeping Computer2 months ago

Council of Europe investigates ShinyHunters data breach claims

The Council of Europe, the continent's oldest intergovernmental body, is probing claims of a data breach made by the ShinyHunters…

NEWSInfosecurity Magazine2 months ago

Adriatic Port Cyber-Attack by Anubis Sparks Warning Over Maritime Security Risks

How the Anubis ransomware group stole and leaked an Italian Adriatic port authority's data

NEWSCyberScoop2 months ago

Cybersecurity experts don’t think Anthropic’s Fable 5 presents a unique cybersecurity threat

Dozens of practitioners said the decision to place export controls on the foreign use of Fable are misguided, and recent jailbreak…

NEWSThe Register2 months ago

Microsoft site throwing warnings after someone forgot to renew cert

Connectivity checker trips browser alarms thanks to lapsed security paperwork

NEWSBleeping Computer2 months ago

FBI: Fraudsters use couriers to steal money in crypto scams

The U.S. Federal Bureau of Investigation (FBI) warned that criminals are using couriers to collect money from victims of cryptocur…

NEWScriticalSecurityWeek2 months ago

Ransomware Attack Shuts Down Mills of Australia’s Second-Largest Sugar Producer

Mackay Sugar was targeted in a cyberattack carried out by a threat group known as The Gentlemen. The post Ransomware Attack Shuts…

NEWScriticalSecurity Magazine2 months ago

Breaking Down the Novo Nordisk Data Breach

Experts break down the risks of Novo Nordisk data breach.

NEWSThe Hacker News2 months ago

One-Click Microsoft 365 Copilot Flaw Could Have Let Attackers Steal Emails, Files, and MFA Codes

A single click on a trusted Microsoft link could have let an attacker pull emails, calendar details, and indexed files out of Micr…

NEWScriticalSecurity Magazine2 months ago

Maine Data Breach Reporting Portal Abused, Taken Offline

Two organizations had false data breach notices filed against them, causing the Office of the Maine Attorney General to remove its…