Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,699 articles

Imagine the SOC Without a Queue: From Alert Backlog to AI Hypothesis Engine

The SOC we've always known was built around a model that guarantees most of the alert queue will never receive analyst review. The…

NEWSSecurityWeek2 months ago

CISA: Over 100 Internet-Exposed Water Systems Targeted in July Cyberattacks

The agency has released guidance on reducing internet exposure in the wake of the recent Iran-linked hacker attacks. The post CISA…

NEWScriticalBleeping Computer2 months ago

Hackers now exploit critical Gitea flaw in code injection attacks

Attackers are now exploiting a critical-severity vulnerability in the Gitea self-hosted Git service, according to the U.S. Cyberse…

NEWSSecurityWeek2 months ago

The MFA Identity Trap: When Authentication Creates a False Sense of Security

Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the…

NEWSThe Hacker News2 months ago

Claude Opus 4.6 Bypasses Gym Booking Limit, Cancels Other Users' Reservations in Tests

Aikido Security has published research that recreates the Australian gym-booking incident in a synthetic environment, finding that…

NEWShighSecurityWeek2 months ago

Chrome 152 Patches Over 300 Vulnerabilities

Most of the flaws were discovered by Google using AI, but researchers are still discovering high-value Chrome vulnerabilities. The…

NEWSThe Hacker News2 months ago

OpenAI Bans Russian ChatGPT Accounts Used to Run Influence Operation

OpenAI on Tuesday said it banned a cluster of Russian ChatGPT accounts that used VPNs to bypass access restrictions and run an inf…

NEWSInfosecurity Magazine2 months ago

Linux Foundation Introduces TRACE Standard for AI Runtime Evidence

This new open standard offers hardware-attested runtime and compliance evidence for AI agents

NEWSInfosecurity Magazine2 months ago

DDoS Attack Hits Norwegian Government Services

A coordinated DDoS campaign has caused disruption among Norwegian government services

NEWSThe Hacker News2 months ago

INTERPOL Operation Jackal IV Arrests 58, Identifies 263 in Global Cyber Fraud Crackdown

An eight-month INTERPOL operation targeting West African organized crime groups has led to arrests of 58 people and the identifica…

NEWScriticalSecurityWeek2 months ago

Sensitive Information Exposed in Nutex Health Data Breach

Nutex Health has informed the SEC that it recently detected unauthorized access and data exfiltration. The post Sensitive Informat…

NEWShighThe Hacker News2 months ago

Newly SLEEPWALKER Backdoor Waits for One Crafted Packet, Then Runs Its Own Bytecode

An independent malware researcher has documented a previously unreported Windows backdoor, dubbed SLEEPWALKER, that stays inert in…

NEWScriticalCVE-2026-600049.8 CRITICALThe Hacker News2 months ago

Critical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like Payload

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday warned of active exploitation efforts targeting a rece…

NEWSThe Hacker News2 months ago

Fake Apple Support AI Calls Target Stolen-Device Owners for Passcodes and 2FA Codes

Cybersecurity researchers have disclosed details of a phishing-as-a-service (PhaaS) platform built to strip Apple's Activation Loc…

NEWShighCVE-2026-600049.8 CRITICALSecurityWeek2 months ago

CISA Warns of Exploited Gitea Vulnerability

CVE-2026-60004 is a remote code execution vulnerability patched by Gitea developers in late July with the release of version 1.27.…

NEWScriticalBleeping Computer2 months ago

LACMA data breach last year exposed social security and medical data

The Los Angeles County Museum of Art (LACMA) has announced that a breach last year exposed customer and employee information. [...…

NEWShighBleeping Computer2 months ago

Hackers abuse npm mirrors to host phishing redirect pages

Threat actors are abusing npm and its mirrors to host malicious HTML pages that impersonate Cloudflare CAPTCHAs to redirect visito…

NEWSCyberScoop2 months ago

The GTA VI leaks are breaking the internet. Security researchers have seen this before.

A memecoin, a manifesto, and a week of daily leaks — but to researchers, it's a familiar extortion playbook with an unusually larg…

NEWShighBleeping Computer2 months ago

AnonyMousKIT PhaaS uses voice AI agents to phish iPhone passcodes

A newly uncovered phishing-as-a-service (PhaaS) platform called AnonyMousKIT automates the retrieval of codes used to unlock stole…

NEWShighCyberScoop2 months ago

Arrested man allegedly impersonated NSA elite hacking unit, Supreme Court chief justice

Joshua Culver, aka “Maverick Young,” is accused of imitating the head of the NSA’s Tailored Access Operations unit during a time i…

NEWScriticalThe Hacker News2 months ago

U.S. Sanctions Iran-Linked Hackers Behind Critical Infrastructure Breaches

The U.S. Department of the Treasury has announced fresh sanctions on Iranian cyber actors as part of what it called an "unpreceden…

NEWSCyberScoop2 months ago

Water sector passes, government sector fails attempts to spot and halt simulated CISA attack

Agency red-teamers got initial access to both organizations they tested, but one quickly isolated and shut down the attempts from…

NEWSSecurityWeek2 months ago

Linux Foundation to Govern TRACE, an Open Standard for AI Runtime Attestation

TRACE was developed by AMD, Intel, Microsoft, OPAQUE, and TII and contributed to the Linux Foundation. The post Linux Foundation t…

NEWSThe Register2 months ago

You could've applied all 1,449 Oracle patches and still been hit by this attack

Attackers now ready to exploit how things work, rather than just break them, says Oracle support expert

NEWSBleeping Computer2 months ago

Massive DDoS attack disrupts Norway’s government digital services

A large distributed denial-of-service (DDoS) attack has disrupted Norway's shared government digital infrastructure since Monday,…

NEWSBleeping Computer2 months ago

Hospital operator Nutex Health says data stolen in cyberattack

Healthcare and services provider Nutex is investigating a data breach incident where an unauthorized third party exfiltrated infor…

NEWShighInfosecurity Magazine2 months ago

ZeroTokens Phishing Platform Steers Attacks in Real Time

ZeroTokens gives phishing operators live control of victim sessions targeting 53 financial brands

NEWSCyberScoop2 months ago

Interpol targets Black Axe’s illicit financial web in latest international sting

The multi-country sting targeted Black Axe financial networks, seizing millions in assets and uncovering Crime-as-a-Service infras…

NEWSSecurityWeek2 months ago

Alice Raises $140M to Expand AI Model Defenses and Enterprise Guardrails

The company, previously known as ActiveFence, has raised a total of $280 million from investors. The post Alice Raises $140M to Ex…

NEWSThe Hacker News2 months ago

A Malicious Webpage Could Poison Your Local AI Model Behind NVIDIA NemoClaw

Oasis Security has disclosed a weakness in NVIDIA NemoClaw that could let an attacker-controlled webpage take unauthenticated cont…