Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

3,157 articles

Critical HVAC and UPS Vulnerabilities Could Let Hackers Disrupt Data Centers

Claroty researchers have analyzed the security of Vertiv UPS network cards and the Trane Tracer SC+ HVAC controller. The post Crit…

NEWSSecurityWeek2 months ago

CISO Forum Webinar Today: 2026 Mid-Year Review

Learn more about protecting against unmonitored use of generative AI (Shadow AI) in business units and building and enforcing AI g…

NEWScriticalSecurityWeek2 months ago

New Windows Zero-Day Exploit ‘RoguePlanet’ Released

Exploiting a race condition in Microsoft Defender, the exploit leads to local privilege escalation to SYSTEM. The post New Windows…

NEWSBleeping Computer2 months ago

Microsoft: Some Windows PCs fail to install latest monthly updates

Microsoft warned customers on Tuesday that they may have issues installing the latest monthly updates on some Windows devices that…

NEWScriticalThe Register2 months ago

Ivanti tells Sentry customers to patch now as critical bugs hit 10.0 and 9.9

Remote, unauthenticated RCE with root privileges is about as bad as it gets

NEWSSecurityWeek2 months ago

After AI Reaches Production: 12 Ways Security Teams Can Take Control

Security teams need more than visibility into AI applications, they need a repeatable framework for monitoring, investigating, and…

NEWSInfosecurity Magazine2 months ago

New Fable 5 Is a "Mythos-Class" LLM Available to All, Anthropic Announces

Anthropic unveils Claude Mythos 5 and Fable 5, a restricted-access frontier AI model and guardrailed version for everyone to use

NEWSThe Hacker News2 months ago

Your Automated Pentest Looks Clean. See What It Missed in This Expert Webinar

Your pentest report looks clean. That might be the problem. Run automated pentesting long enough, and the new findings start to d…

NEWSInfosecurity Magazine2 months ago

Over a Quarter of Identity Crime Victims Hit by Multiple Incidents, ITRC Data Shows

Nearly 26% of identity crime victims faced multiple incidents in the past year, as ITRC warns of a growing "multi-layered crisis"

NEWSWired Security2 months ago

Soccer Fans, You’re Being Watched

From anti-drone tech to face recognition, 2026 World Cup stadiums in the US, Canada, and Mexico are subjecting fans to an array of…

NEWSWired Security2 months ago

Amnesty International Warns That World Cup Fans Face Potential Human Rights Violations

The organization claims that the FIFA tournament could have impacts on the rights of local people and visiting soccer fans in all…

NEWSWired Security2 months ago

Mapping Every Flock License Plate Reader Near US World Cup Stadiums

Most US World Cup stadiums are surrounded by surveillance cameras. Want to know if you’re being watched on your way to a match? Th…

NEWScriticalBleeping Computer2 months ago

Microsoft patches YellowKey, GreenPlasma, MiniPlasma zero-days

On Tuesday, Microsoft patched two zero-day vulnerabilities that let attackers gain SYSTEM privileges on fully patched Windows syst…

NEWShighSecurityWeek2 months ago

ServiceNow Patches Vulnerability Exploited Against Some Customers

The company updated hosted customer instances to patch a security issue it reportedly had known about since April 7. The post Serv…

NEWScriticalThe Hacker News2 months ago

Microsoft Patches Record 206 Flaws, Including Three Zero-Days and Critical RCE Bugs

Microsoft on Tuesday released fixes for a record 206 security vulnerabilities impacting its software portfolio, including three fl…

NEWScriticalHackread2 months ago

Microsoft June 2026 Patch Tuesday Fixes 206 Flaws and 3 Zero-Days

Microsoft’s June 2026 patch Tuesday resolves 206 vulnerabilities, including 3 critical zero-days and severe 9.8 CVSS kernel, netwo…

NEWScriticalSecurityWeek2 months ago

Critical Vulnerabilities Patched in Fortinet, Ivanti Products

Two OS command injection flaws can be exploited remotely, without authentication, for arbitrary code execution. The post Critical…

NEWShighInfosecurity Magazine2 months ago

Microsoft Fixes 200 CVEs in June Patch Tuesday

Microsoft has patched 200 vulnerabilities including three zero-days

NEWShighSecurityWeek2 months ago

ICS Patch Tuesday: Vulnerabilities Fixed by Siemens, Schneider, Phoenix Contact

In addition, Rockwell Automation announced some enhancements to its SecureOT cybersecurity solution for OT. The post ICS Patch Tue…

NEWSThe Hacker News2 months ago

Anthropic Releases Claude Fable 5, Its Most Powerful AI Yet, With Cyber Safeguards

On June 9, Anthropic released Claude Fable 5, the most capable model it has ever made, generally available. It also did something…

NEWShighThe Hacker News3 months ago

ServiceNow Flaw Exploited to Gain Unauthorized Access to Customer Instances

ServiceNow has warned about a security incident in which unknown threat actors exploited a flaw to obtain deeper unauthorized acce…

NEWShighSecurityWeek3 months ago

No Patch Planned for Exploited Arista EOS Vulnerability

Organizations are advised to apply vendor-supplied mitigations or discontinue the vulnerable devices. The post No Patch Planned fo…

NEWSBleeping Computer3 months ago

Ivanti: Max severity Sentry flaw allows code execution as root

Ivanti has patched two critical vulnerabilities in its Sentry secure mobile gateway solution, including a maximum-severity flaw th…

NEWScriticalThe Hacker News3 months ago

Microsoft Defender RoguePlanet Zero-Day Grants SYSTEM Access on Updated Windows

The anonymous security researcher going by the name Chaotic Eclipse (aka Nightmare-Eclipse) has released a proof-of-concept (PoC)…

NEWShighThe Hacker News3 months ago

Six Proto6 Vulnerabilities in protobuf.js Expose Node.js Apps to RCE and DoS

Cybersecurity researchers have flagged half a dozen vulnerabilities in protobuf.js, a JavaScript and TypeScript implementation of…

NEWSBleeping Computer3 months ago

Anthropic rolls out Claude Fable 5, but it's available for a limited time

Anthropic has begun rolling out a new model called "Fable," which is based on the same underlying model as Mythos, its most powerf…

NEWScriticalBleeping Computer3 months ago

Microsoft Defender 'RoguePlanet' zero-day grants SYSTEM privileges

A security researcher has released a new Microsoft Defender zero-day exploit named "RoguePlanet" just hours after Microsoft fixed…

NEWShighThe Register3 months ago

AI is making Patch Tuesday (kinda) fun again

Unless you're an admin or vulnerability manager – then you're totally screwed

NEWShighKrebs on Security3 months ago

A Record-Breaking Patch Tuesday for June 2026

Microsoft today released software updates to plug nearly 200 security holes across its Windows operating systems and supported sof…

NEWSBleeping Computer3 months ago

ServiceNow discloses security incident exposing customer data

ServiceNow is warning about a security incident after attackers exploited an unauthenticated access flaw through a vulnerable API…