Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

3,169 articles

Anthropic Says It Has Taken Its Latest AI Models Offline to Comply With New Export Controls

Anthropic takes Fable 5 and Mythos 5 offline to comply with a directive from the Trump administration to prevent use by foreign na…

NEWSThe Hacker News2 months ago

U.S. Orders Anthropic to Suspend Fable 5 and Mythos 5 Access for Foreign Nationals

Anthropic said on Friday it will "abruptly disable" its most advanced artificial intelligence (AI) models, Claude Fable 5 and Myth…

NEWSThe Register2 months ago

NanoClaw now armed with JFrog for safer packages

AI agents can't be trusted, so don't give them dangerous powers

NEWSCyberScoop2 months ago

FBI takes down massive China-based cybercrime network that caused $1.9B in losses

Outsider provided phishing kits and infrastructure for cybercriminals to scam victims with lures claiming they missed packages, ha…

NEWScriticalBleeping Computer2 months ago

Maine disables data breach notification portal after fake disclosures

Maine has taken its public data breach reporting portal offline after fraudulent breach disclosures were published on the state's…

NEWSThe Hacker News2 months ago

Over 400 Arch Linux AUR Packages Hijacked to Deploy Infostealer and eBPF Rootkit

Attackers took over more than 400 packages in the Arch User Repository (AUR) this week and rewrote their build scripts to install…

NEWSThe Hacker News2 months ago

400+ Arch Linux AUR Packages Hijacked to Install Rust Credential Stealer

Attackers took over more than 400 packages in the Arch User Repository (AUR) this week and rewrote their build scripts to install…

NEWShighThe Hacker News2 months ago

Google Sues Chinese Smishing Network Accused of Using Gemini AI in Phishing

Google on Friday said it's pursuing legal action against a Chinese cybercrime network, accusing it of using its Gemini artificial…

NEWSThe Register2 months ago

Fired IT worker jailed for 21 months after sabotaging old school district

Iowan’s scheme undone after misplacing trust in former coworker

NEWSCyberScoop2 months ago

US, France, and Italian authorities shut down massive deepfake porn site

The website specialized in non-consensual sexual images of famous women, including politicians, first ladies, royalty, journalists…

NEWSBleeping Computer2 months ago

phpBB forum fixes auth bypass bug lurking for a decade

A 10-year-old authentication bypass vulnerability discovered in the phpBB forum software allows an attacker to log in as any user,…

NEWShighThe Hacker News2 months ago

China-Linked Hackers Backdoored Linux Login Software to Hide for Nearly a Decade

Instead of hiding on the laptops and servers defenders watch most closely, a China-nexus group spent close to a decade hidden insi…

NEWShighHackread2 months ago

Atomic Arch Campaign Hijacks 20+ Linux AUR Packages to Deliver Malware

Over 20 Linux packages were compromised in the Atomic Arch campaign, which abuses AUR ownership transfers to drop rootkit-like mal…

NEWSBleeping Computer2 months ago

Ukrainian national pleads guilty to role in Conti ransomware operation

A Ukrainian national extradited from Ireland to the United States last year has pleaded guilty to conspiracy charges tied to the C…

NEWSCyberScoop2 months ago

Conti ransomware group member pleads guilty, faces up to 20 years in prison

Oleksii Lytvynenko, a 44-year-old Ukrainian national, admitted to joining the prolific cybercrime group in 2021. Officials said he…

NEWSBleeping Computer2 months ago

Over 400 Arch Linux packages compromised to push rootkit, infostealer

More than 400 packages in the Arch User Repository (AUR) are distributing a Linux rootkit and infostealer malware targeting creden…

NEWSSecurityWeek2 months ago

In Other News: Google Security Layoffs, AudiA6 Takedown, $400 Million Coupang Fine

Other noteworthy stories that might have slipped under the radar: ICS device exposure remains flat as attack surface widens, Micro…

NEWShighCyberScoop2 months ago

ShinyHunters is actively extorting universities after exploiting an unpatched Oracle flaw

Oracle still hasn't patched the vulnerability the group has been using in its attacks since late May. The post ShinyHunters is act…

NEWShighSecurity Magazine2 months ago

Security Experts Discuss Validity of Handala’s Cal Water Hacking Claim

Handala claims to have the ability to disrupt U.S. water supply, but what is the truth?

NEWSSecurity Magazine2 months ago

Security Experts Discuss the Claude Fable 5 Launch

The model does not come without risks. Security experts share their perspective on this launch.

NEWScriticalHackread2 months ago

ShinyHunters Target Universities in Oracle PeopleSoft Zero-Day Attack

Google says ShinyHunters exploited Oracle PeopleSoft zero-day to steal data from 100+ organisations, with universities making up m…

NEWSBleeping Computer2 months ago

Early Warning Signs of Supply-Chain Attacks Live in the Dark Web

GitHub access sales, leaked repositories, and stolen API keys can all become supply-chain attack footholds. Flare explores how und…

NEWSInfosecurity Magazine2 months ago

Ransomware Payment Crypto Laundering Platform Taken Out by FBI and Europol

Domain of dark web money laundering platform AudiA6 seized and suspects arrested in joint operation by the FBI, Europol and others

NEWSThe Register2 months ago

Novo Nordisk reports cyberattack as UK gives Wegovy pill the nod

Clinical trial participant data stolen, but pharma giant says exposed records were pseudonymized

NEWSHackread2 months ago

The SpaceX Pre-IPO Market: How Crypto Rails Are Opening Synthetic Access

SpaceX Pre-IPO demand is growing as crypto exchanges offer synthetic exposure to its reported $1.75T valuation without direct equi…

NEWSThe Register2 months ago

Microsoft has mostly repaired a flaw in Surface hardware that allowed unprotected devices to be bricked by a single packet

And it was Microsoft Copilot that unwittingly revealed the longstanding vulnerability

NEWSInfosecurity Magazine2 months ago

GitHub to Update npm to Thwart Software Supply Chain Attacks

NPM, part of GitHub, announced a new version of the npm package manager with several security improvements, including disabling in…

NEWSSecurityWeek2 months ago

Industry Reactions to Claude Fable 5: Feedback Friday

Industry professionals comment on various aspects of Fable 5, including dual-use capabilities, safeguards, and tiered access. The…

NEWShighThe Register2 months ago

Google fires sueball at alleged Chinese phishers over AI-powered fraud ops

Telegram-based 'Outsider Enterprise' accused of sending millions of scam texts and impersonating trusted brands

NEWSThe Hacker News2 months ago

Agentjacking Attack Tricks AI Coding Agents Into Running Malicious Code

Cybersecurity researchers have described what they say is a new class of attack that can trick artificial intelligence (AI) coding…