Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,711 articles

Hackers infect Android car head units with proxy botnet malware

A supply-chain attack targeting Android-based car head units is using a legitimate device-update app to spread malware that enlist…

NEWSBleeping Computer2 months ago

Named Pipes Under Attack: Securing Windows Interprocess Communication

Windows named pipes provide fast interprocess communication, but weak access controls can expose privileged services to untrusted…

NEWSWired Security2 months ago

Your Expired Visa Card Could Be ‘Zombified’ to Make Contactless Payments

Plus: Apple sends out an “unprecedented” number of spyware warnings, Ukraine hits a Russian ecommerce giant with cyber and drone a…

NEWSSecurityWeek2 months ago

Banking Trojans Manic, Grandoreiro, ToxicPanda 2.0 in the Spotlight

The spyware-equipped Manic, a persistent Grandoreiro campaign in Latin America and Europe, and an expanded ToxicPanda 2.0 malware.…

NEWSThe Register2 months ago

AWS Security makes an inscrutable choice

Quarantining leaked credentials is not good enough

NEWScriticalCyberScoop2 months ago

Apollo discloses data breach from ongoing wave of attacks hitting financial sector

The private equity firm said attackers broke into some of its cloud platforms during a five-day period in early July, compromising…

NEWShighThe Hacker News2 months ago

14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2

Cybersecurity researchers have discovered a set of trojanized npm packages that masquerade as working calendar and streak utilitie…

NEWShighBleeping Computer2 months ago

New SynkLoader malware pushed in Microsoft Teams phishing campaign

A previously unknown malware family dubbed SynkLoader is being distributed in Microsoft Teams phishing campaigns to steal credenti…

NEWSThe Register2 months ago

Homeland security cybercops say patch TrueConf (Russia's Zoom) if you're using it

Ukrainian hacktivists exploiting the bugs, but TrueConf's reach stretches well beyond home turf

NEWSSecurityWeek2 months ago

Former NSA Director Paul Nakasone Launches National Security Advisory Firm

The newly-formed Nakasone Group will counsel government leaders, corporations, prominent families, and other private clients confr…

NEWSBleeping Computer2 months ago

Hundreds of leaked AWS keys give full control over corporate accounts

More than 9,300 Amazon Web Services (AWS) access keys publicly exposed between August 2022 and August 2026 are still active and va…

NEWSThe Hacker News2 months ago

Microsoft Defender's Own Driver Can Be Weaponized to Delete Security Software at Boot

Check Point Research has disclosed a technique that uses Microsoft Defender's own legitimately signed boot-time remediation driver…

NEWShighThe Hacker News2 months ago

Android Car Malware Spreads Through Built-In Updaters for Ad Fraud, Proxy Botnet

Cybersecurity researchers have flagged a new malware family that's specifically designed to infect Android-based vehicle head unit…

NEWShighSecurityWeek2 months ago

In Other News: Zombie Card Attack, T-Mobile Cut Cable to Stop Hackers, GitHub Denies AI Caused Bug

Other noteworthy stories that might have slipped under the radar: Threema DDoS attack, Evooo1Bot Linux botnet, Crypto4A secures to…

NEWShighCyberScoop2 months ago

Lawmakers seek watchdog review of federal hacking of Americans

Sen. Ron Wyden and Rep. Greg Casar want a GAO probe on the government’s use of spyware and other sophisticated hacking tools and a…

NEWShighThe Register2 months ago

Hackers poison popular Rust crates to steal developers' credentials

Malicious updates turned routine builds into a delivery system for infostealer malware

NEWSBleeping Computer2 months ago

Microsoft blames Windows gaming issues on RGB lighting devices

Microsoft says ongoing issues causing games to crash or fail to launch after installing the August 2026 Windows updates may be cau…

NEWSSecurityWeek2 months ago

Encrypted Prompts Bypass AI Safety Guardrails in Grok and Gemini

Researchers say the new ‘Cryptographic Context Injection’ technique conceals malicious instructions until they are decrypted insid…

NEWShighSecurityWeek2 months ago

New Phishing Toolkit Uses Passkeys to Maintain Access After Password Resets

Researchers say iAuthFlow V2 can register an attacker-controlled passkey, enabling persistent access even after passwords are chan…

NEWSBleeping Computer2 months ago

Is Online Privacy Possible? How Digital Identities Can Help

Using the same email, phone number, payment method, and other identifiers makes it easier for data brokers and attackers to profil…

NEWSBleeping Computer2 months ago

Microsoft rolls out Classic Outlook theme for New Outlook users

Microsoft has started rolling out a Classic Outlook theme for users of Outlook on the web and the New Outlook for Windows. [...]

NEWShighInfosecurity Magazine2 months ago

North Korean Hackers Tied to Rust Supply Chain Attack

Cybersecurity researchers have linked a malicious backdoor in compromised Rust packages to previous North Korean supply chain atta…

NEWScriticalSecurityWeek2 months ago

Critical Isolated-vm Vulnerability Leads to RCE on Host

The type confusion bug can lead to V8 sandbox escape and control-flow hijacking of the host process. The post Critical Isolated-vm…

NEWScriticalBleeping Computer2 months ago

CISA orders feds to patch actively exploited TrueConf Server flaws

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) ordered U.S. federal agencies to prioritize patching two actively…

NEWShighInfosecurity Magazine2 months ago

New Agent Tesla Malware Variant Boosts Evasion Capabilities

An Agent Tesla v4 malware campaign used novel emoji-based code obfuscation to evade detection, KnowBe4 has revealed

NEWSThe Hacker News2 months ago

Wazuh and AI For Enhanced SOC Workflows

Artificial Intelligence (AI) has become one of this decade's defining technologies. From healthcare and finance to manufacturing a…

NEWShighBleeping Computer2 months ago

Microsoft warns of max severity Entra ID flaw exploited in attacks

Microsoft has patched a maximum-severity vulnerability in the Entra ID identity and access management (IAM) platform that has been…

NEWShighBleeping Computer2 months ago

Hackers abuse FTP server banners to deliver new Windows malware

Threat actors are abusing FTP banners to hide commands that deliver two previously undocumented remote access trojans named E4del…

NEWScriticalBleeping Computer2 months ago

SickKids data breach exposes employee and job applicant info

Toronto's Hospital for Sick Children (SickKids) says a cybersecurity incident exposed the personal information of some current and…

NEWSThe Hacker News2 months ago

Cisco Patches Nine Crosswork and Secure Workload Flaws, Five Scoring CVSS 10.0

Cisco has published another round of security updates for Crosswork platforms and Secure Workload Software as part of a continued…