Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,716 articles

NEWShighInfosecurity Magazine2 months ago

Def Con Attendees Targeted by Persistent Phishing Campaign

Huntress researcher explains how they were targeted by an elaborate and persistent phishing scam following Def Con

NEWSThe Hacker News2 months ago

40 Malicious Firefox Extensions Pose as Web3 Products to Steal Wallet Secrets

A set of 40 Mozilla Firefox extensions has been found to engage in cryptocurrency wallet theft by masquerading as OKX, Rabby Walle…

NEWScriticalSecurityWeek2 months ago

Exploitation Expected for Critical Authentication Bypass Patched in Citrix NetScaler

Remote, unauthenticated attackers could exploit the critical-severity flaw without user interaction. The post Exploitation Expecte…

NEWScriticalCVE-2026-194789.4 CRITICALSecurityWeek2 months ago

Critical GitLab Flaw Exploited Shortly After Disclosure

CVE-2026-19478 can be exploited without authentication to modify or delete public projects and user data. The post Critical GitLab…

NEWScriticalSecurityWeek2 months ago

Hackers Using AI to Target Siemens PLCs in Critical US Sectors

A cybersecurity advisory with technical details and recommendations has been written by the NSA, CISA and other agencies. The post…

NEWShighThe Register2 months ago

AI agent suggested installing a malware package. Engineer almost took its advice

Fortunately, the company had a policy of checking source code on GitHub first

NEWSBleeping Computer2 months ago

Microsoft says August Windows updates may cause gaming issues

Microsoft is investigating a potential issue with the August 2026 updates that may prevent some games from launching or cause them…

NEWSCVE-2026-324759.0 CRITICALThe Hacker News2 months ago

Elementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute Code

Cybersecurity researchers have disclosed details of a critical flaw in the Elementor Pro WordPress plugin that, if successfully ex…

NEWSBleeping Computer2 months ago

OpenAI confirms ChatGPT is down as logins and signups fail

ChatGPT is experiencing a major outage, and users are unable to sign in, create accounts, or load chats, including previous conver…

NEWScriticalThe Register2 months ago

'Not a theoretical risk,' feds warn as attackers use AI-made code to hack critical infrastructure controllers

'It is an active threat'

NEWSBleeping Computer2 months ago

Rogue ransomware affiliate poses as data recovery firm to steal payments

A suspected ransomware affiliate is posing as a ransomware recovery service called "Ransom Busters," contacting the victims before…

NEWSBleeping Computer2 months ago

Rogue ransomware affiliate poses as recovery firm to steal payments

A suspected ransomware affiliate is posing as a ransomware recovery service called "Ransom Busters," contacting the victims before…

NEWShighBleeping Computer2 months ago

Sakura Internet hack exposes data of up to 1.36 million accounts

Japanese cloud and data center service provider Sakura Internet disclosed that hackers accessed its sales management system, where…

NEWScriticalBleeping Computer2 months ago

Healthtech firm CareCloud data breach impacts 3.7 million patients

U.S. healthcare IT company CareCloud disclosed that the data breach incident it suffered earlier this year has impacted more than…

NEWSThe Hacker News2 months ago

Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second

Cybersecurity researchers have disclosed details of a remote Spectre attack against Cloudflare Workers that leaked a JSON Web Toke…

NEWSCyberScoop2 months ago

AI-fueled attacks pose ‘active threat’ to water, other sectors, U.S. agencies warn

The agencies said the hackers are taking aim at Siemens S7 Series programmable logic controllers in what could be a first. The pos…

NEWSThe Register2 months ago

ICE boss to agents: Leave the Meta spy glasses at home

'Personally owned body-worn cameras are prohibited,' ICE tells The Reg. Because the last thing DHS needs is more proof of miscondu…

NEWShighBleeping Computer2 months ago

Hackers compromise 14,500 Dahua web cameras in 35-day campaign

In a large-scale campaign that researchers dubbed CameraSwarm, hackers compromised more than 14,500 Dahua IP cameras mostly in Ukr…

NEWSThe Hacker News2 months ago

OpenAI Pauses Frontier RL Training as It Tightens Defenses Against Unsafe AI Behavior

OpenAI on Tuesday revealed that it paused reinforcement learning (RL) training for its latest artificial intelligence (AI) models…

NEWScriticalBleeping Computer2 months ago

US warns of AI-powered attacks on Siemens PLCs in critical infrastructure

U.S. cybersecurity agencies warn that threat actors are using AI-generated scripts to exploit Siemens S7 Series programmable logic…

NEWSSecurity Magazine2 months ago

TikTok Ban on Government Devices Reversed, Mobile Security Expert Weighs In

The Department of Justice (DOJ) decided last month that TikTok was no longer to be banned from government devices.

NEWSThe Register2 months ago

Flock surveillance backlash mounts as fiendish Halloween plans circulate

CEO apologizes for police misuse as activists call for vandal action against license plate cameras

NEWSCyberScoop2 months ago

A California county wants to hire Tina Peters to help run its elections

After her prison sentence for felony election-related crimes was commuted, Peters is poised to once again administer critical elec…

NEWShighBleeping Computer2 months ago

US charges Iranian hackers over $3.4 billion intellectual property theft

The U.S. has charged 17 Iranians, alleged members of a hacking-for-hire company called Mabna Institute, involved in years-long ope…

NEWSInfosecurity Magazine2 months ago

Exclusive: Linux Foundation's Akrites to Go Live in September

The Linux Foundation's Akrites initiative will become operational in September, when it will begin accepting AI-powered vulnerabil…

NEWSInfosecurity Magazine2 months ago

MaaS Campaign Combines ClickFix, ErrTraffic and Cruciferra

eSentire uncovered a malware campaign combining ClickFix lures with ErrTraffic and Cruciferra

NEWSSecurity Magazine2 months ago

Security Leaders Discuss Azure Exfiltration Campaign

A hacker claimed to have stolen 3.6 million Azure account records from major organizations. Security leaders discuss.

NEWShighCyberScoop2 months ago

The long tail of Clop’s PTC hack is just beginning to emerge

The data theft extortion group likely compromised a critical vulnerability affecting PTC’s product lifecycle management software i…

NEWShighBleeping Computer2 months ago

Password spraying attacks surge 155x as hackers exploit MFA gaps

Huntress observed a 155x increase in password spraying attacks in H1 2026, including a campaign that generated more than 81 millio…

NEWSInfosecurity Magazine2 months ago

Grandoreiro Resurfaces in Mexico With New DLL Sideloading Campaign

Grandoreiro is active after its 2024 disruption, with Mexico now accounting for 40% of detections