Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,718 articles

Password spraying attacks surge 155x as hackers exploit MFA gaps

Huntress observed a 155x increase in password spraying attacks in H1 2026, including a campaign that generated more than 81 millio…

NEWSInfosecurity Magazine2 months ago

Grandoreiro Resurfaces in Mexico With New DLL Sideloading Campaign

Grandoreiro is active after its 2024 disruption, with Mexico now accounting for 40% of detections

NEWSSecurityWeek2 months ago

Virtual Event Today: CodeSecCon – Secure Your Code and Applications

CodeSecCon is the premier virtual event bringing together developers and cybersecurity professionals to revolutionize the way appl…

NEWSThe Register2 months ago

Comcast gives its Wi-Fi motion detector a security makeover

Rebranded feature promises household alerts without video, but mind the small print

NEWSThe Hacker News2 months ago

SilkParasite Espionage Campaign Targets Central Asian Governments with Five New RATs

A previously unreported cyber espionage operation dubbed SilkParasite has been observed targeting government bodies in Central Asi…

NEWSInfosecurity Magazine2 months ago

OpenAI Tightens AI Safeguards Following Hugging Face Incident

OpenAI is strengthening safeguards for its most advanced AI models, citing growing risks as frontier systems gain more powerful cy…

NEWSSecurityWeek2 months ago

Prevalent AI Raises $22 Million to Expand Data Fabric Platform

The previously bootstrapped company helps organizations securely and reliably operate AI agents at scale. The post Prevalent AI Ra…

NEWShighThe Hacker News2 months ago

Hackers Compromised 14,500+ Dahua Devices Using Credential Attacks, Auth Bypasses, and P2P

Cybersecurity researchers at Hunt.io have disclosed details of a campaign that they say compromised more than 14,530 Dahua devices…

NEWShighSecurityWeek2 months ago

US Charges 17 Iranian Hackers, Offers $10 Million Rewards for 5 of Them

The 17 members of the Mabna Institute targeted hundreds of universities and organizations in the US and abroad. The post US Charge…

NEWShighThe Hacker News2 months ago

Phishing 3.0: The Fight Moves to Agent Versus Agent

Most email defenses still do the job they did a decade ago. Scan the message, look for something malicious, block it. That worked…

NEWShighThe Hacker News2 months ago

StopAndProtect Uses Nearly 2,000 Hacked WordPress Sites to Spread Malware and Steal Data

Cybersecurity researchers have flagged a global cybercrime operation that abuses thousands of hacked WordPress websites as infrast…

NEWSBleeping Computer2 months ago

Microsoft fixes known issue causing Windows Defender crashes

Microsoft has resolved a bug that caused Windows Defender to crash after a recent security update, resulting in 0xc0000005 access…

NEWSSecurityWeek2 months ago

Cl0p Ransomware Group Names Over 40 Victims of PTC Windchill Campaign

The cybercrime gang has listed major companies such as Shell, Philips, Fiserv, Zebra, Mindray, and Largan Precision. The post Cl0p…

NEWScriticalCVE-2026-654009.8 CRITICALThe Hacker News2 months ago

Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four critical vulnerabilities to its Known Explo…

NEWScriticalInfosecurity Magazine2 months ago

Over 500 Critical Infrastructure Organizations Hit by Medusa Ransomware

The FBI warned that the RaaS operation has significantly enhanced its tactics, techniques and procedures, making it harder for def…

NEWShighSecurityWeek2 months ago

CISA Urges Immediate Patching of Exploited Microsoft, VMware, Apple Vulnerabilities

The flaws can be exploited for remote code execution, authentication bypass, and device takeover. The post CISA Urges Immediate Pa…

NEWScriticalBleeping Computer2 months ago

Critical RCE flaw in Windows IKE Extension now actively exploited

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that hackers are exploiting a critical-severity remote cod…

NEWSWired Security2 months ago

Reverse-Lookup Service Exposed Millions of Photos of People’s Faces

The people-search tool ClarityCheck says its reverse image search service is “private and secure”—but it left a database containin…

NEWSInfosecurity Magazine2 months ago

ICO Urges Police to Improve Data Governance in Facial Recognition Rollouts

The UK’s privacy watchdog has called on police using facial recognition to follow its recommendations

NEWSSecurityWeek2 months ago

943 Patches Rolled Out With Oracle’s August 2026 Security Update

The fixes resolve over 1,000 vulnerabilities across two dozen products, including over 460 remotely exploitable bugs. The post 943…

NEWSBleeping Computer2 months ago

Windows 11 24H2 Home and Pro reach end of support in 2 months

Microsoft has reminded customers that systems running Home and Pro editions of Windows 11 24H2 will stop receiving updates in two…

NEWSWired Security2 months ago

Flock Has a Powerful New AI Tool for Police. We Got Its Code

Flock’s surveillance cameras have already sparked outrage. WIRED reconstructed its next-generation AI system, already in use by so…

NEWSInfosecurity Magazine2 months ago

UK Fraud Cases Hit Record High in 2026

Cifas data finds account takeover and identity fraud are driving a surge in fraud cases

NEWShighSecurityWeek2 months ago

Chrome, Firefox Updates Patch Dozens of Vulnerabilities

The bugs could lead to code execution, privilege escalation, sandbox escape, and information disclosure. The post Chrome, Firefox…

NEWScriticalBleeping Computer2 months ago

CISA: Medusa ransomware hit over 500 critical infrastructure orgs

The FBI said Tuesday that the Medusa ransomware gang has breached more than 500 critical infrastructure organizations in the Unite…

NEWScriticalSecurityWeek2 months ago

CareCloud Data Breach Impact Grows to 3.7 Million Individuals

The data breach was initially believed to affect roughly 350,000 people, but the HHS breach tracker shows a far bigger impact. The…

NEWSThe Hacker News2 months ago

Microsoft Links 30+ Rotating Domains to MacSync Stealer Infrastructure

Microsoft Defender Experts have linked more than 30 web domains to MacSync Stealer, a macOS-focused information stealer, after cor…

NEWSThe Hacker News2 months ago

Clop-Linked Windchill Web Shell Decrypts Credentials and Maps Engineering Data

A JavaServer Pages (JSP) web shell deployed following the exploitation of a critical security flaw in PTC Windchill and FlexPLM se…

NEWSSecurity Magazine2 months ago

Fighting Fire with Fire: How Businesses Are Using AI to Enhance Risk Management

The emergence of AI has changed how modern organizations view security and risk management.

NEWSThe Register2 months ago

Australian hotel chain leaks guests’ PII after breach at third-party database operator

Unknown parties know where you stayed last summer, down under, across 120 Quest properties