Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,713 articles

NEWScriticalBleeping Computer2 months ago

SickKids data breach exposes employee and job applicant info

Toronto's Hospital for Sick Children (SickKids) says a cybersecurity incident exposed the personal information of some current and…

NEWSThe Hacker News2 months ago

Cisco Patches Nine Crosswork and Secure Workload Flaws, Five Scoring CVSS 10.0

Cisco has published another round of security updates for Crosswork platforms and Secure Workload Software as part of a continued…

NEWShighSecurityWeek2 months ago

Rust Supply Chain Attack Linked to North Korean Hackers

Hackers pushed a poisoned arrayref version that added a dependency to fetch a malicious payload from a remote server. The post Rus…

NEWSSecurityWeek2 months ago

Contractors’ CMMC Confidence Rises as Ability to Prove It Falls Behind

Two industry surveys released this week by Kiteworks and CyberSheath paint a consistent picture of the defense industrial base. Th…

NEWSSecurityWeek2 months ago

Microsoft Rolls Out 22 Fresh Security Patches

Most of the fixes resolve code execution, privilege escalation, and information disclosure vulnerabilities. The post Microsoft Rol…

NEWSInfosecurity Magazine2 months ago

Cybersecurity Job Ads Requiring AI Skills Double

An analysis by the AI Workforce Consortium found that technical cybersecurity jobs are becoming more strategic due to the influenc…

NEWShighSecurityWeek2 months ago

CISA Urges Immediate Patching of Exploited TrueConf Vulnerabilities

The Head Mare hacktivist group has been exploiting the bugs to deploy the PhantomCore malware. The post CISA Urges Immediate Patch…

NEWShighCVE-2026-194789.4 CRITICALThe Hacker News2 months ago

GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure

A newly disclosed security flaw in GitLab has come under active exploitation within days of public disclosure, according to watchT…

NEWShighCVE-2026-6983610.0 CRITICALThe Hacker News2 months ago

Microsoft Entra ID Flaw (CVSS 10.0) Exploited in Wild, Allows Remote Code Execution

Microsoft on Thursday warned of a maximum-severity security flaw in Entra ID that it said has been exploited in the wild, but note…

NEWSThe Register2 months ago

Cisco bug severity warning reads like Olympic gymnastics scores: 10, 10, 9.9, 9.6, and 7.5.

Secure Workload Software has five nasty flaws and even SaaS users have updates to install

NEWShighThe Register2 months ago

Russian snoops add OAuth abuse to targeted phishing campaigns

Don't click on that State Department meeting invite

NEWShighThe Hacker News2 months ago

Rust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million Downloads

The Rust Project has deleted malicious versions of three widely used Rust crates from crates.io after a compromised maintainer acc…

NEWSWired Security2 months ago

China Is Strapping ‘Digital Bombs’ to Civilian Infrastructure—Is the US Ready?

This week on “Uncanny Valley,” Andy Greenberg discusses sitting in on a war game simulating a cyberattack from the Chinese hacking…

NEWScriticalSecurity Magazine2 months ago

6 Data Breaches to Know About (July 2026)

Security magazine takes a look at six data breaches from July 2026.

NEWShighThe Hacker News2 months ago

Suspected Russian Hackers Abuse Google OAuth and WhatsApp Linking to Hijack Accounts

Three distinct suspected Russian cyber espionage threat clusters have been observed leveraging legitimate authentication flows to…

NEWSCyberScoop2 months ago

Early 764 member sentenced to 77 years, longest prison term to date for a nihilistic violent extremist

Kyle Spitze led an offshoot of the violent extremist collective and victimized dozens of girls, coercing them to degrade themselve…

NEWShighBleeping Computer2 months ago

Hackers poison arrayref Rust crate to push infostealer malware

Hackers compromised the maintainer account behind the widely used Rust crate arrayref to introduce malware that executed on develo…

NEWSThe Register2 months ago

US Bank investigates LockBit's claims as ransomware crims set pay-or-leak deadline

Follow the money

NEWShighThe Hacker News2 months ago

ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit and More

A lot of this week’s trouble starts with something trusted doing exactly what it was allowed to do. Signed drivers get turned aga…

NEWScriticalThe Hacker News2 months ago

AI-Generated Exploit Scripts Target Siemens S7 PLCs in U.S. Critical Infrastructure

The U.S. government on Wednesday warned of an "active threat" targeting critical infrastructure organizations in the country using…

NEWSThe Register2 months ago

Researcher tricks Apple’s Find My into sharing location data with Linux

Clever protocol wrangling gets iBiz-only people tracking working on a non-iGadget

NEWSSecurity Magazine2 months ago

OpenAI confirms ChatGPT Outage

On August 19, OpenAI confirmed a ChatGPT outage affecting users worldwide.

NEWSCyberScoop2 months ago

Retail theft bill spurs ‘very large and very dangerous’ surveillance fears

The Combating Organized Retail Crime Act has won a big House vote and could be on the fast track in the Senate — and supporters sa…

NEWSSecurity Magazine2 months ago

9M Images Exposed by Facial Recognition Platform

450.2 gigabytes of data were exposed in a public database with no password protection or encryption.

NEWShighCVE-2026-735708.9 HIGHSecurityWeek2 months ago

Hackers Target Zimbra Servers in Active Exploitation Campaign

Exploitation of the Zimbra Collaboration vulnerability CVE-2026-73570 has been observed by Poland’s CERT Polska. The post Hackers…

NEWScriticalBleeping Computer2 months ago

Critical Elementor Pro bug exposes WordPress sites to RCE attacks

A critical vulnerability in the Elementor Pro WordPress plugin could allow attackers to upload executable files for remote code ex…

NEWSThe Hacker News2 months ago

New Cryptographic Context Injection Attack Could Let Web Pages Steal Grok Chat Data

Adversa AI has disclosed an attack technique that it says can cause xAI's Grok chatbot to send a user's name, approximate location…

NEWSInfosecurity Magazine2 months ago

JFrog Artifactory Flaws Enable Software Supply Chain Attacks

Two Artifactory flaws allowed attackers to poison package metadata across software repositories

NEWSSecurityWeek2 months ago

Surveillance – Everything You Wanted to Know, But Were Afraid to Ask

We all know they’re watching us. But we don’t know who they are, nor why nor how they are doing it. The post Surveillance – Everyt…

NEWSThe Register2 months ago

Ransomware crook poses as recovery firm to steal payments from fellow extortionists

Because apparently even ransomware gangs can't trust the people they do business with