Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

2,131 articles

NEWScriticalCVE-2026-1540910.0 CRITICALSecurityWeek6 days ago

SonicWall Zero-Days Exploited to Deliver Custom Malware for Weeks Before Patch

The zero-days CVE-2026-15409 and CVE-2026-15410 were exploited by a threat actor tracked by Volexity as UTA0533. The post SonicWal…

NEWSInfosecurity Magazine6 days ago

JadePuffer Returns With Ransomware Designed to Wipe AI Models

JadePuffer follow-up campaign deployed ENCFORGE locker built to destroy AI model artifacts

NEWSBleeping Computer6 days ago

An AI SOC Evaluation Guide for Security Leaders

Choosing an AI SOC platform requires understanding how it will perform in your own environment, not just during an evaluation. Pro…

NEWShighInfosecurity Magazine6 days ago

Researchers Build WordPress Exploit Using OpenAI's GPT

A researcher who discovered a critical vulnerability in WordPress has used OpenAI’s latest model to develop an exploit chain

NEWScriticalThe Hacker News6 days ago

⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0-Day and More

A single request should not be able to do this much. But this week, small inputs led to code execution, memory loss, stolen keys,…

NEWShighSecurityWeek6 days ago

OpenSSL Silently Fixes ‘HollowByte’ DoS Vulnerability

Attackers could send waves of malicious payloads to trigger buffer pre-allocations that are not freed, exhausting server memory. T…

NEWShighInfosecurity Magazine6 days ago

New HollowGraph Malware Hijacks Microsoft 365 Calendars for Covert C2 Communications

Researchers have linked HollowGraph malware to the Cavern framework after discovering its use of Microsoft 365 calendars and Micro…

NEWShighThe Hacker News6 days ago

Russian Intelligence Hacks IP Cameras to Spy on Military Logistics Across NATO States and Ukraine

At least one Russian intelligence service is systematically hijacking internet-connected security cameras across Europe and Ukrain…

NEWSHackread6 days ago

The Hidden Risk in Enterprise AI Agents: Ungoverned Context

Enterprises are handing AI agents real access to customer records, financial systems, internal documents, and the tools that…

NEWSBleeping Computer6 days ago

Hugging Face discloses breach linked to autonomous AI agent

The Hugging Face artificial intelligence repository disclosed that attackers gained access to internal datasets and credentials af…

NEWSSecurityWeek6 days ago

New Index Tracks Material Breaches — And Refuses to Add Up the Losses

Longtime cybersecurity executive Richard Bird built the resource for security experts, journalists, policymakers, and everyday cit…

NEWSThe Hacker News6 days ago

Mythos Didn't Break Your Security Program. Your Exposure Window Could.

The industry spent the initial months after Anthropic's April 7 Mythos reveal focused on volume. How many new CVEs would Mythos ad…

NEWScriticalSecurityWeek6 days ago

Ernst & Young Data Breach Affects Personal, Financial Information

Hackers stole names, addresses, Social Security numbers, credit/debit card numbers, and other information from a third-party manag…

NEWSHackread6 days ago

FBI Arrests Florida Man in $220,000 Steam Crypto Theft Case

FBI agents arrested a Florida man accused of spreading Steam game malware that stole $220,000 in crypto, including $32,000 from a…

NEWSBleeping Computer6 days ago

Microsoft confirms Windows Server Update Services sync delays

Microsoft is working to fix a known issue affecting Windows Server Update Services (WSUS) servers, which has caused synchronizatio…

NEWSSecurityWeek6 days ago

Capital One Open Sources AI-Powered ‘VulnHunter’ Security Tool

The agentic security tool identifies potentially exploitable code flaws, traces attack paths, and recommends targeted remediations…

NEWSBleeping Computer6 days ago

Windows KB5121767 OOB update fixes shutdowns on some Dell PCs

Microsoft has released emergency updates to fix a known issue causing some Dell PCs to shut down after installing the July 2026 Wi…

NEWSWired Security6 days ago

The ACLU Is Arming Lawyers to Expose State Surveillance Secrets

A new toolkit for attorneys in Massachusetts targets the technologies police use—and conceal—to build criminal cases, from facial…

NEWShighInfosecurity Magazine6 days ago

Police Chiefs Cite TfL Hack in Push for Cybercrime Risk Orders

Two chiefs of UK policing agencies said the Transport for London prosecution demonstrates the need for Cybercrime Risk Orders

NEWShighSecurityWeek6 days ago

Hugging Face Hacked in Autonomous AI Attack

Targeting production infrastructure, the attack compromised internal datasets and service credentials. The post Hugging Face Hacke…

NEWSWired Security6 days ago

Apps Marketed to US Troops Are Shipping Chinese and Russian Code

A first-of-its-kind analysis found more than one in eight apps built for US service members carried foreign code—some from firms i…

NEWScriticalCVE-2026-6875Bleeping Computer6 days ago

Critical ServiceNow code execution flaw now exploited in attacks

Attackers have begun exploiting a critical vulnerability (CVE-2026-6875) in the ServiceNow AI Platform, according to threat intell…

NEWShighCVE-2026-14266The Hacker News6 days ago

New 7-Zip Vulnerability Could Let Crafted XZ Archives Run Code During Extraction

Opening a crafted XZ archive in 7-Zip could let an attacker run code on the machine. The flaw, CVE-2026-14266, is a heap-based buf…

NEWShighThe Hacker News6 days ago

Russian-Speaking Hacker Uses Google Gemini CLI to Control Botnet of Eight Dental Clinic PCs

A solo Russian-speaking threat actor known as "bandcampro" outsourced a chunk of their operations to Google's open-source Gemini C…

NEWSSecurityWeek6 days ago

Chrome 150 Update Patches Severe Memory Safety Bugs

The fresh security update resolves six critical and high-severity use-after-free vulnerabilities. The post Chrome 150 Update Patch…

NEWSThe Hacker News6 days ago

World's Largest AI Model Repository Hugging Face Breached by Autonomous AI Agent

In an ironic twist, open-source artificial intelligence (AI) platform Hugging Face revealed that it was the victim of a hack perpe…

NEWShighCVE-2026-601375.9 MEDIUMSecurityWeek6 days ago

WP2Shell WordPress Vulnerabilities Exploited in the Wild

Exploitation of the new WordPress vulnerabilities tracked as CVE-2026-60137 and CVE-2026-63030 started soon after disclosure. The…

NEWSThe Hacker News6 days ago

SleeperGem Uses Three Malicious RubyGems Packages to Target Developer Machines

Cybersecurity researchers have flagged a new software supply chain attack codenamed SleeperGem targeting the Ruby ecosystem after…

NEWScriticalCVE-2026-425338.1 HIGHThe Hacker News6 days ago

Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution

F5 has shipped fixes for a critical nginx flaw that lets a remote, unauthenticated attacker trigger a heap buffer overflow in the…

NEWSThe Register7 days ago

Connecting AI agents to outside services explodes the risk radius

Connect all the things and watch what happens