Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,714 articles

NEWSThe Register2 months ago

Ransomware crook poses as recovery firm to steal payments from fellow extortionists

Because apparently even ransomware gangs can't trust the people they do business with

NEWShighBleeping Computer2 months ago

How MSPs can catch phishing attacks email filters miss

AI is making phishing attacks more personalized, convincing, and difficult for traditional email filters to detect. Kaseya explain…

NEWSThe Hacker News2 months ago

Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE

Cybersecurity researchers have disclosed a critical security flaw in isolated-vm, a popular open-source sandbox with more than 2,9…

NEWScriticalThe Hacker News2 months ago

Critical NetScaler Flaw Can Bypass Authentication on Certain Gateway and AAA Servers

Citrix has released updates to address two security flaws impacting NetScaler ADC and NetScaler Gateway deployments, including a c…

NEWScriticalCyberScoop2 months ago

The push to designate AI as the next critical infrastructure sector

The designation would unlock a range of federal services, tools and resources for an industry that policymakers view as increasing…

NEWShighCVE-2026-735708.9 HIGHThe Hacker News2 months ago

Attackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code Execution

A now-patched security flaw impacting Zimbra Collaboration (ZCS) has come under active exploitation in the wild, according to the…

NEWShighSecurityWeek2 months ago

Threat Actor Hacks 14,000 IP Cameras in Ukraine and Russia

Operation CameraSwarm targeted Dahua cameras across multiple countries, focusing on Russian and CIS telecom netblocks. The post Th…

NEWSThe Register2 months ago

Grok chat duped into swallowing injected instructions

A spoonful of encryption helps the malware go down

NEWSInfosecurity Magazine2 months ago

NCSC Urges Stronger Controls for Agentic AI Systems

NCSC urged sandboxing, oversight and tight access controls for autonomous AI agents

NEWSInfosecurity Magazine2 months ago

US Defense Contractors Admit Their Rising CMMC Scores May Not Be Accurate

Defense contractors in the US are doubting their own self-assessment scores under CMMC Phase I, even as those scores hit an all-ti…

NEWSThe Register2 months ago

French tax authority says break-in exposed data of 600K, including some private messages

Stolen details range from contact information to household finances and withholding rates

NEWScriticalSecurityWeek2 months ago

Atlassian, Splunk Patch Dozens of Critical, High-Severity Vulnerabilities

The flaws could be exploited to execute arbitrary code, access sensitive information, and elevate privileges. The post Atlassian,…

NEWSBleeping Computer2 months ago

Citrix urges admins to patch new NetScaler flaws as soon as possible

Citrix has warned customers to immediately secure their systems against two vulnerabilities affecting NetScaler Gateway secure rem…

NEWShighSecurityWeek2 months ago

MLflow Vulnerability Exploited for Cloud Credential Theft

The critical-severity flaw allows attackers to send HTTP requests to internal endpoints and extract sensitive information. The pos…

NEWSThe Hacker News2 months ago

Zombie Card Attack Can Revive Expired Visa Cards for Contactless Payments

Researchers at the University of Massachusetts Amherst have demonstrated an attack that revives expired Visa contactless credit ca…

NEWScriticalSecurityWeek2 months ago

Cisco Patches Critical Crosswork, Secure Workload Vulnerabilities

The flaws could lead to remote code execution, authentication bypasses, and path traversal attacks. The post Cisco Patches Critica…

NEWSThe Hacker News2 months ago

Why "Shady AI" is Security's Next Big Governance Problem

In March 2026, an internal AI agent at Meta triggered a “Sev 1” incident after sensitive company and user data was exposed to empl…

NEWSThe Hacker News2 months ago

CDN Tsunami Attack Abuses HTTP/3 Translation for Up to 350x DoS Amplification

Cybersecurity researchers have disclosed two denial-of-service (DoS) attacks that exploit how major content delivery networks (CDN…

NEWShighThe Hacker News2 months ago

Manic Android Malware Exfiltrates Data From Offline Phones via Nearby Infected Devices

A new Android threat codenamed Manic has been observed actively targeting Ukrainian banks, government and identity services, and m…

NEWShighSecurityWeek2 months ago

AI-Assisted Tool Helped Secure Satellite Communication System After 2022 Russian Hacking

Atalanta's Argo product is now being used to prove the resilience of Viasat’s satellite communications network. The post AI-Assist…

NEWScriticalBleeping Computer2 months ago

CISA warns of hackers exploiting critical MLflow vulnerability

The Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies that threat actors are now exploiting a critic…

NEWSThe Hacker News2 months ago

NASA AIT-GUI Flaws Could Let Unauthenticated Attackers Issue Spacecraft Commands

Security researchers at Cycode have disclosed a chain of flaws in AIT-GUI, the browser-based operator console for NASA/JPL's open-…

NEWSInfosecurity Magazine2 months ago

ICS Operators Warned of AI-Driven Attacks on Siemens PLCs

A US government advisory warned that attackers are deploying AI-generated exploitation scripts against exposed Siemens S7 Series P…

NEWSThe Hacker News2 months ago

ToxicPanda 2.0 and GoldDigger Expand Android Banking Attacks with On-Device Fraud

Cybersecurity researchers have shed light on an updated version of ToxicPanda (aka TgToxic) that comes with "significant enhanceme…

NEWSSecurityWeek2 months ago

OpenAI Overhauls Model Security With Sandboxing, 30-Minute Alerts, and Training Pauses

The action taken by OpenAI comes in light of the Hugging Face incident and the discovery of the Astra model’s advanced capabilitie…

NEWShighBleeping Computer2 months ago

New Manic Android malware can exfiltrate data through nearby devices

A new Android malware named Manic targeting users in multiple European countries has a fallback data exfiltration mechanism that u…

NEWSInfosecurity Magazine2 months ago

Updated ToxicPanda Variant Targets 140+ Banking and Crypto Apps

Zimperium lifts the lid on the ToxicPanda 2.0 Android banking Trojan

NEWScriticalBleeping Computer2 months ago

Critical Zimbra RCE flaw now actively exploited in attacks

CERT Polska, the Polish Computer Emergency Response Team (CERT), warned that attackers have begun exploiting a critical vulnerabil…

NEWShighInfosecurity Magazine2 months ago

Def Con Attendees Targeted by Persistent Phishing Campaign

Huntress researcher explains how they were targeted by an elaborate and persistent phishing scam following Def Con

NEWSThe Hacker News2 months ago

40 Malicious Firefox Extensions Pose as Web3 Products to Steal Wallet Secrets

A set of 40 Mozilla Firefox extensions has been found to engage in cryptocurrency wallet theft by masquerading as OKX, Rabby Walle…