Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

3,754 articles

Anthropic Details Response to Security Incidents, Unveils Enterprise Safeguards

Anthropic introduced Enterprise Frontier Safeguards (EFS), a system that combines zero data retention with automated monitoring fo…

NEWSSecurityWeek7 days ago

Malicious Virtualizor Update Served via BGP Hijacking

Using a technically valid TLS certificate for Softaculous’ domains, a threat actor diverted traffic to fake software updates. The…

NEWSThe Hacker News7 days ago

How to Secure Enterprise AI: From Adoption to Incident Readiness

The debate about whether AI delivers business value is over. The challenge now is implementing it at scale and securely across eve…

NEWScriticalCVE-2026-83548The Hacker News7 days ago

Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain

SonicWall has released security updates to address two security flaws impacting its Secure Mobile Access (SMA) 1000 series VPN app…

NEWShighInfosecurity Magazine7 days ago

Nutex Health Says Patient Data Stolen, Hackers Threaten Leak

The US healthcare provider confirmed that sensitive patient and employee data, alongside financial and business information, were…

NEWScriticalSecurityWeek7 days ago

OpenAI’s Astra Becomes First Model to Cross Critical Cybersecurity Threshold

The designation applies when a model can independently find and exploit zero-day vulnerabilities across many well-defended systems…

NEWSBleeping Computer7 days ago

Microsoft Defender flags legitimate Google search links as malicious

Microsoft is investigating an issue causing the Defender for Office 365 security software to mistakenly block access to legitimate…

NEWSThe Register7 days ago

UK cyber bill targets AI users, not the vendors building it

Ministers reject proposed red lines and emergency shutdown powers, pointing instead to voluntary safeguards

NEWSThe Hacker News7 days ago

GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends

Two vulnerabilities in GeoNetwork can be chained to achieve unauthenticated remote code execution (RCE) on the open-source geospat…

NEWShighSecurityWeek7 days ago

Chrome and Firefox Updates Patch Dozens of Vulnerabilities

The browser refreshes fix multiple use-after-free, sandbox escape, and privilege escalation bugs. The post Chrome and Firefox Upda…

NEWShighThe Hacker News7 days ago

Extradited Russian Hacker Faces Charges Over Excel Malware Campaign That Infected Thousands

The U.S. Department of Justice (DoJ) has charged a Russian national, extradited from Cyprus on August 28, with using roughly 255 f…

NEWShighBleeping Computer7 days ago

US charges Russian for infecting 80,000 freelancers with malware

A California federal grand jury has indicted a Russian national for his role in a phishing campaign that infected thousands of fre…

NEWScriticalInfosecurity Magazine7 days ago

Hackers Chain Two New SonicWall Zero-Day Vulnerabilities

SonicWall has urged customers to patch two new zero-day vulnerabilities being exploited in the wild

NEWSSecurityWeek7 days ago

23-Year-Old Sality P2P Botnet Disrupted

The shutdown operation involved peer list manipulation and Sality payload URL takedown. The post 23-Year-Old Sality P2P Botnet Dis…

NEWSInfosecurity Magazine7 days ago

FulcrumSec Claims Responsibility for Manchester Airport Group Breach

Threat group FulcrumSec claims MAG breach and leaks 550GB of data online

NEWSBleeping Computer7 days ago

Sality botnet infrastructure dismantled in joint global takedown

International law enforcement agencies and private partners have seized Sality malware infrastructure in a joint action aiming to…

NEWShighCVE-2021-318869.8 CRITICALThe Hacker News7 days ago

Researchers Use Claude to Port Pre-Auth RCE Exploit From One PLC Model to Another

Forescout Research - Vedere Labs said it used Anthropic's Claude to port a working pre-authentication remote code execution (RCE)…

NEWScriticalCVE-2026-95869.8 CRITICALThe Hacker News7 days ago

Attackers Exploit Critical Switchvox Flaw to Deploy Reverse Shells Without Credentials

Threat actors are exploiting a severe security vulnerability in Sangoma Switchvox, an enterprise VoIP platform, that could allow u…

NEWShighThe Hacker News7 days ago

Authorities Turn Sality's P2P Network Against Itself, Cutting Off New Malware Payloads

The U.S. Department of Justice (DoJ) on Tuesday announced the takedown of a long-standing peer-to-peer (P2P) botnet known as Salit…

NEWScriticalBleeping Computer7 days ago

SonicWall warns of actively exploited SMA1000 zero-day flaws

SonicWall warned customers that threat actors are chaining two new SMA1000 zero-day vulnerabilities in remote code execution attac…

NEWScriticalCVE-2026-835497.8 HIGHSecurityWeek7 days ago

SonicWall Warns of Two SMA1000 Zero-Days Exploited in Attacks

The vulnerabilities CVE-2026-83549 and CVE-2026-83548 can be chained for unauthenticated remote code execution. The post SonicWall…

NEWSThe Register7 days ago

Cops, CrowdStrike disrupt Sality botnet by poisoning the network and diverting into sinkholes

23-year-old botnet down

NEWSKrebs on Security8 days ago

FBI Probes Service Selling 153M+ Drivers Licenses

A new identity theft service launched on the dark web this week is selling digital scans of more than 153 million drivers licenses…

NEWShighCyberScoop8 days ago

FBI raises alarm over deceptive phishing campaign targeting prominent people

The ongoing social engineering threat, which dates back to late 2025, tricks victims into granting threat actors long-term access…

NEWSThe Register8 days ago

Another Artifactory CVE under attack by AI agents or humans

Unauthenticated intruders can mint admin tokens, and exposed servers are already being hit

NEWShighBleeping Computer8 days ago

Hackers abuse Faronics Deploy admin tool to install ScreenConnect

Phishing actors are abusing the legitimate Faronics Deploy endpoint-management platform to gain remote administrative control over…

NEWSThe Register8 days ago

Attacker stole a METR API key, used $600K worth of credits, and no one noticed for weeks

The model provider gave METR the credits for free. An actual customer would not have been so lucky

NEWSSecurityWeek8 days ago

Palo Alto Networks Acquires AI Agent Platform Console

The cybersecurity giant announced the acquisition alongside quarterly results showing a 34% increase in revenue and strong growth…

NEWSCyberScoop8 days ago

Tina Peters, through attorney, backs off formal role in Shasta County elections

Peters still left the door open to working with Shasta County on elections and doubled down on her statements that electronic voti…

NEWSThe Register8 days ago

Firefox helps iPhone users bypass ads on web sites while making money showing its own ads

Baked-in Firefox ad blocking on iOS begins rolling out slowly today, and is off by default