Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,705 articles

NEWShighThe Register2 months ago

Crooks push Mac malware through fake OpenAI Codex ads

Sponsored search results lead developers straight into a ClickFix malware trap

NEWShighInfosecurity Magazine2 months ago

US Sanctions Mabna Institute Hackers for Iranian Cyber-Attacks

The US has sanctioned individuals connected to hacking-for-hire group the Mabna Institute

NEWSCVE-2026-619798.1 HIGHThe Hacker News2 months ago

Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access

Bad actors are attempting to exploit two severe unauthenticated authentication bypasses in the Xecurify miniOrange SAML 2.0 Single…

NEWSSecurityWeek2 months ago

Taiwan Charges 9 Over Illegal AI Server Exports to China, Including Nvidia and Super Micro Staff

AI infrastructure, including advanced semiconductors mostly made in Taiwan, has become a key point of competition between the U.S.…

NEWShighCVE-2026-2196210.0 CRITICALSecurityWeek2 months ago

CISA Warns of Exploited Oracle WebLogic Vulnerability

The vulnerability is tracked as CVE-2026-21962 and it has been widely exploited by threat actors against WebLogic servers. The pos…

NEWScriticalCVE-2026-2196210.0 CRITICALThe Hacker News2 months ago

Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a maximum-severity security flaw impacting Oracle…

NEWSCyberScoop2 months ago

SCOTUS tosses one of two injunctions against Trump USPS mail-in ballot rules

The 6-3 decision dismisses one lawsuit brought by states, saying they have no standing to sue because the disputed sections “neith…

NEWShighThe Register2 months ago

You don't want this Sleepwalker backdoor on your Windows machine

Its own command language, 23 instructions - signs point to 'well-resourced operation rather than an opportunistic one'

NEWShighBleeping Computer2 months ago

Unpatched Calix flaw lets hackers bypass NAT to expose internal devices

An unpatched vulnerability in Calix GS7 XGS (GS5239XG) residential routers used by multiple U.S. broadband providers allows remote…

NEWSThe Register2 months ago

Browser fingerprint tool shows how easy you are to track using the latest sneaky tricks

Glassbox dev admits he had some help from Claude to build locally running tool

NEWShighBleeping Computer2 months ago

Hackers target WordPress sites in miniOrange auth bypass attacks

Hackers are attempting to exploit two critical authentication bypass vulnerabilities in the miniOrange SAML 2.0 Single Sign On plu…

NEWShighCyberScoop2 months ago

Treasury sanctions alleged Iranian hackers as part of ‘economic D-Day’

It’s a follow-up to an indictment the Justice Department unsealed last week against people affiliated with the Mabna Institute. Th…

NEWSCyberScoop2 months ago

Bipartisan Senate bill aims to prepare energy sector for Q-Day

Under the bill, FERC would consider cyber threats from quantum computers and post-quantum cryptography in its reliability standard…

NEWSSecurity Magazine2 months ago

Iranian Cyberattack Shuts Down UK Power Generator

A power plant was shut down for four days in July due to an Iranian-linked cyberattack

NEWSBleeping Computer2 months ago

TikTok reaches $400M settlement with US over COPPA violations

The U.S. Department of Justice announced a $400 million settlement with TikTok, ByteDance, and affiliated companies over allegatio…

NEWShighThe Hacker News2 months ago

Weedhack Malware Spreads via Fake Minecraft Clients and SEO Poisoning

Cybersecurity researchers have found that several websites are still actively distributing a malware family known as Weedhack to g…

NEWShighSecurityWeek2 months ago

ReliaQuest Confirms ShinyHunters Hack, but Says Impact Was Limited

A ReliaQuest employee fell victim to a phishing attack and the hackers gained access to a dashboard. The post ReliaQuest Confirms…

NEWSSecurity Magazine2 months ago

Experts Weigh in on the Medusa Ransomware Gang

The Medusa Ransomware gang has breached more than 500 organizations since June 2021.

NEWSThe Register2 months ago

Iran-linked cyberattack shut down a UK power plant

No risk to wider energy system, government tells The Reg

NEWSInfosecurity Magazine2 months ago

New Guidance Helps Businesses Verify Quantum-Safe Hardware Claims

TCG has released new guidance to help proving that trusted platform modules genuinely meet essential quantum-safe requirements

NEWSInfosecurity Magazine2 months ago

NIST Warns of Unique Security Risks in Multi-Cloud Environments

NIST has set out 23 novel challenges that arise in multi-cloud environments and has encouraged the cyber community to find solutio…

NEWSBleeping Computer2 months ago

ReliaQuest confirms failed data-theft attack after ShinyHunters breach

Cybersecurity company ReliaQuest has confirmed that one of its employees was targeted in a social engineering attack after hackers…

NEWShighInfosecurity Magazine2 months ago

Fake Codex Download Uses Google Sites to Deliver macOS Malware

Fake Codex pages used Google Sites, sponsored search and ClickFix to target Mac users

NEWScriticalSecurity Magazine2 months ago

Social Engineering Scheme Led to Apollo Data Breach

Apollo Global Management experienced a data breach due to a social engineering attack, which affected sensitive, personally identi…

NEWSThe Hacker News2 months ago

⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More

A package gets installed. A login prompt opens. A box sits exposed to the internet. Nothing looks unusual yet. That’s roughly the…

NEWSBleeping Computer2 months ago

Microsoft Teams now lets admins block external bots from meetings

Microsoft is rolling out a new Teams meeting protection policy that allows administrators to automatically block all identified ex…

NEWSBleeping Computer2 months ago

South Korean startup platform breach exposes key management failures

A breach at South Korea's government-backed startup platform exposed encrypted personal data after an encryption key was included…

NEWSSecurityWeek2 months ago

Hired for One Job, Judged on Another: The CISO’s Real Problem

The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Clos…

NEWSInfosecurity Magazine2 months ago

Doubloon Dredger Abuses Notion to Harvest Authentication Tokens

Doubloon Dredger abused Notion and malicious PDFs to harvest Microsoft authentication tokens

NEWSSecurityWeek2 months ago

Uber Fined Nearly $1 Billion by Dutch Regulators Over Automated Suspensions of Driver Accounts

Dutch Data Protection Authority said it is imposing a fine of 825 million euros because Uber violated the EU’s General Data Protec…