Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,710 articles

Microsoft Teams now lets admins block external bots from meetings

Microsoft is rolling out a new Teams meeting protection policy that allows administrators to automatically block all identified ex…

NEWSBleeping Computer2 months ago

South Korean startup platform breach exposes key management failures

A breach at South Korea's government-backed startup platform exposed encrypted personal data after an encryption key was included…

NEWSSecurityWeek2 months ago

Hired for One Job, Judged on Another: The CISO’s Real Problem

The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Clos…

NEWSInfosecurity Magazine2 months ago

Doubloon Dredger Abuses Notion to Harvest Authentication Tokens

Doubloon Dredger abused Notion and malicious PDFs to harvest Microsoft authentication tokens

NEWSSecurityWeek2 months ago

Uber Fined Nearly $1 Billion by Dutch Regulators Over Automated Suspensions of Driver Accounts

Dutch Data Protection Authority said it is imposing a fine of 825 million euros because Uber violated the EU’s General Data Protec…

NEWSBleeping Computer2 months ago

Microsoft: August updates break printing, PDF export in WPF apps

Microsoft has confirmed that .NET Framework updates released as part of the August 2026 Patch Tuesday are breaking printing and PD…

NEWShighThe Hacker News2 months ago

WordlistLoader Delivers Amatera via ClickFix, SynkLoader Phishes Windows Passwords

Cybersecurity researchers have flagged two new malware families called WordlistLoader and SynkLoader that's used to deliver next-…

NEWSThe Register2 months ago

AliExpress accused of fingerprinting shoppers with silent audio trick that also muted a dev's headphones

Sawtooth waves you can't hear still mess with your Bluetooth. Firefox and Brave say they've got you covered

NEWShighSecurityWeek2 months ago

91 Vulnerabilities Patched in Spring Application Framework

More than 200 vulnerabilities have been patched to date this year, compared to only 16 in 2025 and 22 in 2024. The post 91 Vulner…

NEWSThe Hacker News2 months ago

Shipping More AI Code Than You Can Secure? Watch How to Control Remediation Debt

If your developers are using AI coding tools, you are probably already seeing the upside: faster development, more code, and less…

NEWScriticalCVE-2026-189639.1 CRITICALThe Hacker News2 months ago

Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any Account

Red Hat and the Keycloak project have released patches to address a critical security flaw in the open-source identity and access…

NEWShighThe Hacker News2 months ago

Operation QUICSILVER Targets Myanmar Government and IT with QUICAgent Backdoor

Cybersecurity researchers have flagged a cyber espionage campaign targeting Myanmar that uses graduation ceremony invitation lures…

NEWSThe Hacker News2 months ago

The Outsized Shadow: Why 5% of AI Users Are Your Biggest Security Risk

Big security risks come in small packages. While enterprise security teams focus on policing the proliferation of employees using…

NEWSSecurityWeek2 months ago

Venezuelan Gets Record Federal Prison Term for ATM Jackpotting

Juan Manuel Gouveia-Aguilera has been sentenced to 8 years in prison for his role in an ATM jackpotting scheme that caused million…

NEWScriticalBleeping Computer2 months ago

CISA orders urgent patching of actively exploited Zimbra flaw

The Cybersecurity and Infrastructure Security Agency (CISA) has ordered U.S. government agencies to patch an actively exploited vu…

NEWSThe Register2 months ago

Security vets rally around $4 paper password books for sale in Australia

Once shunned by the IT crowd, pen-and-paper password vaults are getting the love they deserve in 2026

NEWScriticalSecurityWeek2 months ago

Personal Information Exposed in Apollo Global Data Breach

The private equity firm appears to have been targeted as part of a campaign focusing on major financial companies. The post Person…

NEWSSecurityWeek2 months ago

Rethinking Application Security for the AI Era

As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduc…

NEWSBleeping Computer2 months ago

Microsoft shares temporary fix for Windows 11 gaming issues

Microsoft has shared a temporary fix for ongoing gaming issues caused by Windows 11 updates released during the August 2026 Patch…

NEWShighSecurityWeek2 months ago

Iran-Linked Hackers Shut Down UK Power Plant for Four Days

The attack caused real-world operational disruption and raised concerns about the resilience of Britain’s distributed energy infra…

NEWSSecurityWeek2 months ago

TikTok Reaches $400 Million Settlement With US Justice Department Over Children’s Privacy

TikTok will pay $300 million immediately and another $100 million after an order vacates an earlier consent decree against its pre…

NEWSInfosecurity Magazine2 months ago

Wake-Up Call for CNI After Iranian Attack Shuts Down UK Power Plant

Experts argue Iranian cyber-attack on UK power plant lays bare frailty of critical national infrastructure

NEWSThe Hacker News2 months ago

UAT-10147 Uses AI to Scale Server Attacks, Deploys SPECTRE With EDR Bypass and Linux Rootkit

Cybersecurity researchers have disclosed details of a Chinese-speaking cybercrime group dubbed UAT-10147 that's targeting Windows…

NEWSInfosecurity Magazine2 months ago

Researchers Uncover Thousands of Leaked AWS Keys

Truffle Security says it found over 9000 publicly accessible and active AWS key pairs

NEWSSecurityWeek2 months ago

Anthropic Expands Mythos 5 Access to More Defenders, Unveils $35M Open Source Fund

Claude Security, currently in public beta for Claude Enterprise customers, now runs codebase scans on Mythos 5. The post Anthropic…

NEWShighBleeping Computer2 months ago

ToxicPanda Android malware uses VPN permissions to block Google Play

The ToxicPanda Android malware has evolved with new malicious functionality, expanding its targeting to 349 applications and addin…

NEWSCyberScoop2 months ago

Postal Service moves to finalize mail ballot regs before SCOTUS ruling

The rules have already been rejected by multiple state courts, but the Trump administration said it’s preparing in case of a favor…

NEWSThe Register2 months ago

If you're not using AI to attack your own systems, your adversaries will

Agents are also the new attack surface - cue defenders' existential angst

NEWSThe Hacker News2 months ago

TikTok Agrees to $400 Million Settlement in U.S. Child Privacy Lawsuit

The U.S. Department of Justice (DoJ) announced on Friday that ByteDance-owned TikTok will pay $400 million to settle a 2024 lawsui…

NEWShighBleeping Computer2 months ago

Hackers infect Android car head units with proxy botnet malware

A supply-chain attack targeting Android-based car head units is using a legitimate device-update app to spread malware that enlist…