Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,451 articles

Nikkei discloses third data breach in a month, 1.8M records exposed

Nikkei Inc. disclosed a new data breach, the third in about a month, that exposed 1.83 million personal information records. [...]

NEWShighBleeping Computer6 days ago

WordPress SEO plugin Rank Math compromised to backdoor websites

Some downloads of the Rank Math PRO WordPress plugin from the vendor's official website carried malware that planted hidden backdo…

NEWSThe Register6 days ago

Grocery giant Ahold Delhaize confirms cyberattack forced US and European systems offline

Second security snafu in two years

NEWSWired Security6 days ago

OpenAI Engineer Accused of Spying on Executives Ordered to Remain in Custody

A judge ordered Abdulrahman Alfozan to remain in custody, likening the Saudi government’s offer to secure the former OpenAI engine…

NEWShighBleeping Computer6 days ago

Hackers hijack AOMEI update servers to secretly spread malware

Hackers reportedly compromised AOMEI's servers to distribute malware through a built-in promotional feature in its backup software…

NEWSBleeping Computer6 days ago

Bullhorn takes staffing platform offline to contain cyberattack

Staffing software company Bullhorn has disabled access to its platform to contain a cyberattack that caused a system-wide outage.…

NEWSCyberScoop6 days ago

Wyden seeks adoption of encryption tech at hundreds of federal agencies to protect visitors’ sensitive traffic

At risk, the Oregon Democrat warned, are online crime tipsters, whistleblowers and others. The post Wyden seeks adoption of encryp…

NEWSThe Register6 days ago

Security patches need patches now that attackers have AI

Terra finds sharp rise in GitHub security fixes reported broken within 90 days

NEWShighSecurityWeek6 days ago

Siemens Software Center Vulnerability Exploited in ClickFix Malware Attacks

Attackers paired a genuine, signed copy of Siemens Software Center with malicious DLLs to infect Windows PCs via ClickFix lures. T…

NEWSSecurity Magazine6 days ago

DHS Banning DeepSeek from US Federal Civilian Agencies

DeepSeek has been banned from civilian federal agencies.

NEWShighThe Hacker News6 days ago

Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor

Threat actors have begun to exploit a chain of vulnerabilities in Plex Media Server to deploy cryptocurrency miners and reverse pr…

NEWShighBleeping Computer6 days ago

OpenCode hack exposes API keys amid AI distillation attacks

The open-source AI coding project OpenCode has notified a small number of users that API keys they used with external providers we…

NEWSSecurity Magazine6 days ago

Anthropic Gives METR Team “Employee-Like Access”

Anthropic stated that it has begun to roll out “employee-like access” to a METR team.

NEWSHackread6 days ago

US Ransomware Negotiator Suspected of Helping ShinyHunters Extort Victims

Federal investigators suspect a US ransomware negotiator helped ShinyHunters operate an extortion site used to pressure nearly 100…

NEWShighThe Hacker News6 days ago

Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring Backdoor

Copies of Rank Math PRO, the paid version of the Rank Math SEO plugin for WordPress, that were downloaded from rankmath.com or del…

NEWSWired Security6 days ago

WhatsApp Help Pages Leaked Hidden Instructions for a Meta Chatbot

Around 80 pages on WhatsApp’s website exposed instructions that were designed for its chatbot, including “WHAT NOT TO SAY.” Meta s…

NEWScriticalSecurityWeek6 days ago

Drupal Warns of Fast Exploitation Risk for Critical Core RCE Flaw

Critical flaws impact the Entity List and Field UI modules, and exploit paths exist with contributed modules. The post Drupal Warn…

NEWSCyberScoop6 days ago

DHS to ban DeepSeek from federal civilian agencies

The order cites national security concerns, including sending data to servers in China, the potential malware and the overall risk…

NEWShighInfosecurity Magazine6 days ago

Exploited Vulnerabilities Typically Take Three Months to Patch, Moody’s Finds

Known exploited vulnerabilities take a median time of 87 days to be patched, according to a new Moody’s report

NEWSSecurityWeek6 days ago

Rank Math PRO WordPress Plugin Compromised in Supply Chain Attack

Hackers injected malware into Rank Math PRO version 3.0.123 packages distributed between October 15 and October 16. The post Rank…

NEWSSecurity Magazine6 days ago

Healthcare Workers Claim Authentication Errors Delay Patient Care

According to a report from Imprivata, problems with authentication are delaying patient care within healthcare organizations.

NEWSBleeping Computer6 days ago

Microsoft fixes game, app crashes caused by recent Windows update

Microsoft has resolved a bug that caused games and apps using AC-3 (Dolby Digital) audio decoding to crash after installing the Se…

NEWScriticalInfosecurity Magazine6 days ago

Conduent Agrees to Pay $80m to Settle Data Breach Class Action

The 2024 cyber incident affected the healthcare data of 62 million people, who launched a class action lawsuit against the busines…

NEWScriticalThe Hacker News6 days ago

⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More

The worst problems don't always come with a warning. Sometimes they arrive through a service everyone trusts, a device someone bou…

NEWSBleeping Computer6 days ago

Inside the Underground Market for Know Your Client Services

Cybercriminals are selling forged identity documents, deepfake videos, and live verification services to help buyers bypass Know Y…

NEWSSecurity Magazine6 days ago

Security Leaders Discuss BAE Cyberattack

BAE Systems was hit with a cyberattack that halted production/distribution of bankruptcy notices.

NEWScriticalBleeping Computer6 days ago

F5 releases out-of-band patches for critical NGINX vulnerabilities

F5 has released out-of-band security patches to address multiple NGINX web server flaws, including three critical-severity vulnera…

NEWSKrebs on Security6 days ago

Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site

U.S. federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have ide…

NEWSHackread6 days ago

Bright Security Introduces STAR Fuzzer, Agentic Fuzzing That Writes Its Own Harnesses and Proves Every Finding

San Rafael, United States, 19th October 2026, CyberNewswire

NEWSInfosecurity Magazine6 days ago

OpenCode Breach Could Affect OpenAI, Anthropic and Google

A breach affecting the OpenCode Console may lead to the exposure of API keys for Anthropic, OpenAI and Google Gemini users