Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,693 articles

Spark RAT Targets Cambodia, Abuses Vulnerable OPSWAT Driver to Disable Security Tools

Individuals and organizations in Cambodia have emerged as the target of a new campaign that delivers an open-source remote access…

NEWShighInfosecurity Magazine2 months ago

CISA Warns of Six Exploited Flaws in Microsoft, Linux, Red Hat and Citrix Products

CISA added six new bugs to its Known Exploited Vulnerabilities catalog on August 26, showing signs of active exploitation in the w…

NEWSSecurityWeek2 months ago

Cyberattack Causes Global Disruption at Boston Scientific

The cybersecurity incident has disrupted Boston Scientific’s ability to process and ship customer orders. The post Cyberattack Cau…

NEWSInfosecurity Magazine2 months ago

Boston Scientific Reveals Global Disruption After Cyber Incident

MedTech giant Boston Scientific has revealed IT outages following a cyber incident

NEWSSecurityWeek2 months ago

The Future of AI-Driven Security Depends on Complete Data

For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality. The post The Fut…

NEWShighThe Hacker News2 months ago

GoCaracal Malware Uses Ethereum Smart Contract to Fetch Replacement C2 Address

Threat actors linked by Arctic Wolf to Dark Caracal with medium confidence deployed a previously undocumented Go-based malware fra…

NEWSBleeping Computer2 months ago

CISA orders feds to patch Citrix NetScaler RCE flaw by Saturday

CISA has ordered U.S. government agencies to patch their Citrix NetScaler appliances against an actively exploited remote code exe…

NEWSInfosecurity Magazine2 months ago

OpenAI: Hugging Face Incident a “Warning Shot” to the World

OpenAI reveals that unauthorized message boards were at the heart of the recent Hugging Face breach

NEWScriticalSecurityWeek2 months ago

US Disrupts Chinese Hacking Platform Used in Military and Critical Infrastructure Attacks

The operation focused on a group named QTFY, which offers hacking services to the Chinese government and others. The post US Disru…

NEWSBleeping Computer2 months ago

ATF confirms “major incident” after recent Qilin breach claims

ATF, the regulatory agency that enforces federal laws governing firearms and explosives in the United States, has confirmed that o…

NEWSThe Hacker News2 months ago

New GPUThor Rowhammer Defeats ECC on NVIDIA RTX A6000 to Gain Host Root Access

Academic researchers have disclosed a Rowhammer attack impacting NVIDIA workstation GPUs with GDDR6 memory that defeats error corr…

NEWShighSecurityWeek2 months ago

Pro-Russian Hackers Claim Responsibility for Major Cyberattack on Norway’s Public Digital Services

The pro-Russian hacker group Server Killers claimed responsibility for the attack. The post Pro-Russian Hackers Claim Responsibili…

NEWShighCVE-2019-10688.8 HIGHThe Hacker News2 months ago

CISA Adds Six Exploited Flaws to KEV, Including NetScaler, Linux, and SQL Server Bugs

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added six flaws to its Known Exploited Vulnerabiliti…

NEWShighCVE-2026-84529.8 CRITICALSecurityWeek2 months ago

Recent Citrix NetScaler Vulnerability Exploited in the Wild

CISA is urging government agencies to immediately patch the Citrix NetScaler vulnerability tracked as CVE-2026-8452. The post Rece…

NEWShighSecurity Magazine2 months ago

AI Models are Finding Vulnerabilities Faster

A report by SentinelOne and Tenable Holdings analyzed vulnerability discovery, exposure, and exploitation.

NEWSSecurity Magazine2 months ago

Medical Device Manufacturer Boston Scientific Faces Cyberattack

Boston Scientific, a U.S. medical device manufacturer, announced a cyberattack affecting their global operations.

NEWScriticalThe Register2 months ago

FBI seizes hacking tools it says China used to attack NASA, DOE, US Senate and other critical networks

Beijing's botnets busted.

NEWSThe Register2 months ago

OpenAI explains how its naughty AI agents attacked Hugging Face

Biz describes its act of automated irresponsibility as 'a warning shot'

NEWSCyberScoop2 months ago

Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure

The order says any foreign-produced equipment deemed to pose national security risks can’t be purchased or installed. The post Cyb…

NEWScriticalBleeping Computer2 months ago

Critical Avada WordPress theme flaw enables zero-click RCE

A critical vulnerability chain in the popular Avada theme for WordPress can be exploited by an unauthenticated attacker to execute…

NEWSCyberScoop2 months ago

Officials disrupt Chinese espionage operation that hit multiple federal agencies

The full hacking suite, seized by authorities, allowed Chinese government funded attackers to intrude highly sensitive networks un…

NEWShighWired Security2 months ago

OpenAI’s Hugging Face Hack Debrief Raises More Questions Than It Answers

The AI giant acknowledges that it could have done far more to prevent its AI agents from going rogue. But it still fails to explai…

NEWSThe Register2 months ago

More than 100 water systems were hit in July cyberattacks

'These are test runs for a larger-scale attack'

NEWSCyberScoop2 months ago

OpenAI: Agent behavior that led to Hugging Face intrusion formed in May

The company says the breach stemmed from a systemic failure of alignment and security, and has taken measures to prevent agents fr…

NEWSBleeping Computer2 months ago

New GPUThor attack defeats NVIDIA ECC protection for root access

A newly disclosed Rowhammer attack called GPUThor can bypass error-correcting code (ECC) protections on NVIDIA GPUs, enabling deni…

NEWSCyberScoop2 months ago

Three 10.0 security flaws fixed across Ubiquiti’s UniFi line

The communications product company disclosed 22 total Wednesday, all but one of which was rated “critical” at 9.0 or higher. The p…

NEWShighWired Security2 months ago

FBI Disrupts Chinese Proxy Tools Used in Mass Hacking of US Agencies and Infrastructure

China’s hacking campaign targeted NASA, the Federal Reserve, the US Senate, the Justice Department, and more, according to the DOJ…

NEWSSecurity Magazine2 months ago

100+ Internet-Exposed Water Systems Faced Cyberattacks Last Month

More than 100 water systems were targeted with cyberattacks. Security leaders weigh in.

NEWShighSecurity Magazine2 months ago

A Look Inside the Phishing Service Attacking Organizations

Research examined artifacts from the campaign and discovered hundreds of organizations targeted.

NEWSThe Hacker News2 months ago

FBI Disrupts China-Linked QTFY Infrastructure Used to Steal Data From U.S. Organizations

The U.S. Department of Justice (DoJ) on Wednesday announced the disruption of two hacking platforms named QScan and QTRouter opera…