Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,697 articles

FBI Disrupts Chinese Proxy Tools Used in Mass Hacking of US Agencies and Infrastructure

China’s hacking campaign targeted NASA, the Federal Reserve, the US Senate, the Justice Department, and more, according to the DOJ…

NEWSSecurity Magazine2 months ago

100+ Internet-Exposed Water Systems Faced Cyberattacks Last Month

More than 100 water systems were targeted with cyberattacks. Security leaders weigh in.

NEWShighSecurity Magazine2 months ago

A Look Inside the Phishing Service Attacking Organizations

Research examined artifacts from the campaign and discovered hundreds of organizations targeted.

NEWSThe Hacker News2 months ago

FBI Disrupts China-Linked QTFY Infrastructure Used to Steal Data From U.S. Organizations

The U.S. Department of Justice (DoJ) on Wednesday announced the disruption of two hacking platforms named QScan and QTRouter opera…

NEWSBleeping Computer2 months ago

Meta agrees to $18 billion settlement over teen social media harms

Meta has reached a proposed settlement worth up to approximately $18 billion with a bipartisan coalition of 52 attorneys generals…

NEWSThe Register2 months ago

Boston Scientific discloses 'global disruption' in ongoing cyberattack

No timeline to restore IT systems as probe remains ongoing

NEWShighThe Hacker News2 months ago

Nimbus Manticore Expands Toolset With TWOSTROKE-Like Backdoor and SSH Tunneler

Cybersecurity researchers have discovered additional infrastructure and previously undocumented malware associated with Nimbus Man…

NEWShighSecurityWeek2 months ago

AI Speeds Up Malware Development, Not Its Success Rate: Analysis

Palo Alto Networks Unit 42 analyzed 405 AI-linked malware samples and found only 12 reached production endpoints. The post AI Spee…

NEWSBleeping Computer2 months ago

Boston Scientific says cyberattack disrupted operations globally

Medical technology company Boston Scientific has been targeted in a cyberattack that disrupted some of its IT systems, causing ope…

NEWScriticalThe Register2 months ago

Carhartt data breach affects 12.9M, half of what ShinyHunters claimed

One AI and two trained eyes delved into the heavily padded leaks

NEWSSecurity Magazine2 months ago

Red Team Discoveries Support Organizations in Assessing Risk

Red team tests were conducted at the behest of two critical infrastructure organizations.

NEWShighBleeping Computer2 months ago

Hackers target Microsoft SharePoint RCE chain with PoC exploit

Attackers are now targeting a chain of two Microsoft SharePoint vulnerabilities that can allow them to execute arbitrary code on u…

NEWShighInfosecurity Magazine2 months ago

Tortoiseshell Expands Malware Toolset With New Backdoor, SSH Tunnel

Group-IB uncovered new Tortoiseshell infrastructure, including a backdoor and SSH tunneling tool

NEWSBleeping Computer2 months ago

FBI disrupts proxy network enabling Chinese espionage operations

The FBI has disrupted infrastructure associated with a technical "quartermaster" that provided reconnaissance, proxy management, a…

NEWSBleeping Computer2 months ago

Snowflake ends service-account passwords. Now comes the hard part

Snowflake is ending password authentication for legacy service accounts, forcing organizations to migrate them to passwordless met…

NEWSThe Hacker News2 months ago

NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions

Cybersecurity researchers have disclosed details of a new adversary-in-the-middle (AitM) phishing toolkit called NovaCookies that'…

NEWSCyberScoop2 months ago

Election official says Tina Peters would be consultant, won’t have access to election systems

Shasta County registrar Clint Curtis told CyberScoop he needs Peters to help manage the county’s 2026 elections and he’s not conce…

NEWSInfosecurity Magazine2 months ago

Interpol Operation Jackal IV Identifies 263 Cybercrime Suspects

Interpol operation leads to 58 arrests and identifies 263 suspects across 22 countries

NEWShighBleeping Computer2 months ago

Ubiquiti patches three max severity security vulnerabilities

Ubiquiti has released security patches for three new maximum-severity vulnerabilities that threat actors can exploit remotely with…

NEWScriticalThe Hacker News2 months ago

CISA Red Team Compromised Two Critical Infrastructure Orgs, One Detected Nothing

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has published the results of two red team assessments it conducte…

NEWSInfosecurity Magazine2 months ago

Four in Five AI Tools Run with No IT Oversight, New Research Finds

Reco report reveals growing shadow AI problem and surge in vulnerability disclosures

NEWShighSecurityWeek2 months ago

Adobe and Nvidia Patch Dozens of Vulnerabilities

Adobe and Nvidia each published several advisories, including ones that address critical vulnerabilities in their products. The po…

NEWSBleeping Computer2 months ago

Microsoft tests new privacy controls for Windows 11 desktop apps

Microsoft has begun testing new privacy controls that will let Windows 11 users choose which desktop applications can access their…

NEWSInfosecurity Magazine2 months ago

Average Cyber Insurance Losses Increase Despite Fewer Claims

Chubb reported that growing privacy litigation has contributed to surging cyber claim costs in the US

NEWSCVE-2026-19913The Hacker News2 months ago

Unpatched Kaltura mwEmbed Flaws Could Let Remote Attackers Read Files and Run Code

The CERT Coordination Center (CERT/CC) has disclosed two unpatched vulnerabilities in Kaltura's HTML5 video player library that al…

NEWSThe Hacker News2 months ago

Imagine the SOC Without a Queue: From Alert Backlog to AI Hypothesis Engine

The SOC we've always known was built around a model that guarantees most of the alert queue will never receive analyst review. The…

NEWSSecurityWeek2 months ago

CISA: Over 100 Internet-Exposed Water Systems Targeted in July Cyberattacks

The agency has released guidance on reducing internet exposure in the wake of the recent Iran-linked hacker attacks. The post CISA…

NEWScriticalBleeping Computer2 months ago

Hackers now exploit critical Gitea flaw in code injection attacks

Attackers are now exploiting a critical-severity vulnerability in the Gitea self-hosted Git service, according to the U.S. Cyberse…

NEWSSecurityWeek2 months ago

The MFA Identity Trap: When Authentication Creates a False Sense of Security

Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the…

NEWSThe Hacker News2 months ago

Claude Opus 4.6 Bypasses Gym Booking Limit, Cancels Other Users' Reservations in Tests

Aikido Security has published research that recreates the Australian gym-booking incident in a synthetic environment, finding that…