Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

3,159 articles

NEWSThe Register2 months ago

Chinese agents caught rebuilding botnets and stirring the pot on AI datacenter debate

PRC eyes are watching you

NEWShighCVE-2026-50278.8 HIGHBleeping Computer2 months ago

Path traversal flaw in AI dev platform Langflow exploited in attacks

Attackers are actively exploiting CVE-2026-5027, a high-severity path traversal vulnerability in the AI development platform Langf…

NEWSWired Security2 months ago

CISA Tells US Agencies to Fix Security Bugs in as Little as 3 Days Thanks to AI Threats

“Defenders cannot afford to take weeks to patch,” one Cybersecurity and Infrastructure Security Agency official warned on Wednesda…

NEWSHackread2 months ago

FBI Seizes China-Linked Fake Consulting Sites Targeting US Clearance Holders

The Justice Department and FBI seized 13 fake consulting websites that officials say targeted US clearance holders with paid resea…

NEWSWired Security2 months ago

Trump Risks Key Surveillance Authority Over ‘Unqualified’ Spy-Chief Pick

US lawmakers are alarmed that Bill Pulte, a housing official with no intelligence experience, is poised to take charge of one of t…

NEWSBleeping Computer2 months ago

The ‘Miasma’ worm source code briefly leaked on GitHub

The Miasma credential-stealing attack framework, which has recently targeted open-source ecosystems through supply-chain attacks,…

NEWSCyberScoop2 months ago

OpenAI: ‘Likely’ Chinese influence operation tried to use ChatGPT to stir debate on data centers

The company says there’s little evidence it influenced any real policy discussion. The post OpenAI: ‘Likely’ Chinese influence op…

NEWSBleeping Computer2 months ago

GitHub announces npm security changes to tackle supply-chain attacks

GitHub has announced that npm v12, expected next month, will introduce several security-focused changes aimed at blocking supply-c…

NEWScriticalThe Register2 months ago

Angry bug hunter with Microsoft beef drops new Windows 0-day

Revenge is a dish best served code

NEWShighBleeping Computer2 months ago

Oracle PeopleSoft servers hacked in ShinyHunters data theft attacks

Oracle PeopleSoft servers are being targeted in ongoing data theft attacks by the ShinyHunters extortion gang, which claims to hav…

NEWSHackread2 months ago

How to Turn Images into Animated Videos with AI: A Wondershare Filmora Guide

This article was created in collaboration with Wondershare.

NEWSHackread2 months ago

Scammers Use TikTok and Instagram Reels to Spread Vidar Infostealer

ReversingLabs reveals how hackers exploit social media engagement metrics to deliver Vidar infostealer malware to thousands of uns…

NEWShighSecurity Magazine2 months ago

Global Interest in AI Exploited as Social Engineering Lure

AI has become a tool for many cybercriminals seeking to advance and accelerate their attacks, but AI’s capabilities aren’t the onl…

NEWSThe Hacker News2 months ago

China-Linked JDY Botnet Expands to 1,500+ Devices for Cyber Reconnaissance

Cybersecurity researchers have warned of a "resurgence and expansion" of JDY, a covert network associated with China-nexus state-s…

NEWShighCyberScoop2 months ago

CISA directive orders agencies to prioritize vulnerability patching in a new way

A vulnerability that meets all four criteria would need to be fixed within three days, for instance. The post CISA directive order…

NEWSInfosecurity Magazine2 months ago

Fake Software Tutorials on TikTok Spread Vidar Stealer

Threat actors push fake free-software tutorials on TikTok and Instagram to spread Vidar stealer

NEWShighInfosecurity Magazine2 months ago

Cybersecurity Software Fails to Detect Fifth of Brower-Based Phishing Attacks

Menlo Security research warns that as enterprise applications become increasingly browser based, traditional cybersecurity tools l…

NEWSInfosecurity Magazine2 months ago

New SilabRAT Trojan Hijacks Sessions to Steal Crypto

MaaS trojan SilabRAT uses HVNC and browser cloning to hijack sessions and steal crypto

NEWSHackread2 months ago

ServiceNow Discloses Security Incident Exposing Customer Data

ServiceNow applied a security update after an API access issue exposed customer data, with affected firms notified through direct…

NEWScriticalCVE-2026-250899.8 CRITICALThe Hacker News2 months ago

Ivanti, Fortinet, and SAP Release Patches for Multiple Critical Vulnerabilities

Fortinet, Ivanti, and SAP have released security updates to address multiple critical security vulnerabilities that could result i…

NEWShighCVE-2026-50278.8 HIGHThe Hacker News2 months ago

Unpatched Langflow Flaw CVE-2026-5027 Exploited for Unauthenticated RCE

A high-severity unpatched security flaw in Langflow, an open-source low-code platform to build artificial intelligence (AI) applic…

NEWSBleeping Computer2 months ago

China-linked JDY botnet expands targeting of U.S. military networks

The JDY botnet, a malware network previously associated with Chinese threat actors like Volt Typhoon, has significantly expanded i…

NEWShighCVE-2026-202457.8 HIGHThe Hacker News2 months ago

CISA Adds Cisco, Chrome, and Arista Flaws to KEV Catalog Amid Active Exploitation

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added three new vulnerabilities to its Known Exploited…

NEWSBleeping Computer2 months ago

The 5 Best Practices for Secure Identity Verification

Attackers are increasingly bypassing weak authentication through phishing, MFA fatigue, and service desk social engineering. Speco…

NEWSKrebs on Security2 months ago

Who Runs the Ransomware Group ‘The Gentlemen?’

A cybercrime group known as The Gentlemen has emerged as the second most active ransomware gang by victim count, rapidly attractin…

NEWSSecurityWeek2 months ago

Infostealers Turn Millions of Devices Into Credential Theft Machines

As attackers increasingly favor stolen credentials over exploits, infostealers have become a primary source of access for ransomwa…

NEWSWired Security2 months ago

Wrongful Arrest Exposes Failures in One of the Oldest Police Face-Recognition Tools in the US

The ACLU is suing two Florida police departments over the arrest of a Fort Myers man in a child-abduction case, saying officers tr…

NEWSSecurityWeek2 months ago

Cyera Raises $600 Million at $12 Billion Valuation

Cyera is positioned as one of the most valuable privately held cybersecurity firms in the world with total funding topping $2 bill…

NEWScriticalBleeping Computer2 months ago

Microsoft patches Exchange Server zero-day exploited in attacks

Microsoft has patched an actively exploited Exchange Server vulnerability that allows threat actors to execute arbitrary JavaScrip…

NEWSThe Register2 months ago

GitHub pulls pin on npm's auto-run scripts

Shai-Hulud worm exploited exactly this. Better late than never, says everyone except the malware authors