Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,718 articles

NEWSThe Register2 months ago

OpenAI's overhead will rise 20 percent for some workloads as it hardens security

Expanded multistage chain of thought monitoring makes frontier model work more expensive

NEWSThe Register2 months ago

Expired credit cards revived by researchers to make unauthorized payments

Gaps in expiry checks could let dead plastic make purchases again

NEWSBleeping Computer2 months ago

Comcast turns your Xfinity WiFi into a home motion detector

Comcast is promoting WiFi-based motion detection as a part of its new Xfinity Shield home protection platform, allowing routers an…

NEWShighCyberScoop2 months ago

Eight years later, federal authorities re-up charges against alleged Iranian hackers at Mabna Institute

The superseding indictment adds defendants and allegations against the Iranian firm accused of a massive cybertheft campaign again…

NEWShighHackread2 months ago

New TWINLOOT Malware Steals Windows Passwords Via Fake Lock Screen

New TWINLOOT malware hides command traffic inside SharePoint, Teams and Edge while stealing Windows passwords through a convincing…

NEWShighSecurity Magazine2 months ago

Copilot Exposed Its Own Vulnerabilities When Prompted

A one-click vulnerability in Microsoft Copilot Personal, named CoSnitch, was recently discovered. Security magazine talks with the…

NEWSWired Security2 months ago

OpenAI Overhauls Safety Protocols After Its AI Agents Went Rogue

The ChatGPT maker says its upcoming Astra model may have reached “critical” cyber capabilities, prompting it to halt a significant…

NEWSThe Hacker News2 months ago

Microsoft Copilot Personal Flaws Could Let One Click Exfiltrate Data From Connected Apps

Varonis Threat Labs has disclosed three vulnerabilities in Microsoft Copilot Personal that it said could allow a single click on a…

NEWShighThe Hacker News2 months ago

Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and Secrets

Two critical vulnerabilities impacting MLflow, an open-source artificial intelligence (AI) platform, and FUXA, an open-source, web…

NEWSBleeping Computer2 months ago

Clop created custom web shell for Windchill data theft attacks

A custom Java web shell likely linked to the Clop ransomware gang was designed specifically for PTC Windchill and FlexPLM servers,…

NEWSCyberScoop2 months ago

Medusa ransomware tallies hundreds of new victims, says updated advisory on group’s tactics

The updated warning from the FBI, CISA and HHS draws on a year’s worth of investigations to detail how the group gains initial acc…

NEWSSecurity Magazine2 months ago

Google Publishes Post-Quantum Cryptography Roadmap

Google Cloud published a roadmap for post-quantum cryptography, and this security leader is sharing his insights.

NEWShighThe Hacker News2 months ago

Ransom Busters Claims It Hacked Ransomware Servers, Asks Victims for Up to $60,000

A ransomware affiliate calling itself Ransom Busters has been spotted proactively sending emails to victim organizations and claim…

NEWSSecurity Magazine2 months ago

Third-Party Breach Exposes Pokémon Center Customer Data

The Pokémon Center experienced a third-party data breach that exposed customer order details, including names and email addresses.

NEWScriticalInfosecurity Magazine2 months ago

Wiz AI Agent Finds Critical Snowflake GitHub Repo Flaw Advanced Security Missed

The security flaw in Snowflake’s GitHub Actions workflow had been missed by a GitHub Advanced Security scan, said a Wiz researcher

NEWScriticalThe Register2 months ago

CISA gives feds 3 days to fix actively exploited Ray RCE bug

Phishing, malvertising attacks could target devs to gain access to private corporate networks

NEWSSecurityWeek2 months ago

Webinar Today: Rethinking Cyber Defense for AI-Speed Attacks

Join the live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink preve…

NEWScriticalInfosecurity Magazine2 months ago

Enterprise Applications Carry 4.31x More Critical and High Vulnerabilities

Enterprise software creation has accelerated as vulnerability levels rise, Sonatype finds

NEWSThe Register2 months ago

Apple plugs image-processing hole ripe for spyware abuse

Patch batch spans current kit, older iGadgets, Macs, and Vision Pro

NEWSWired Security2 months ago

Meta Ran Ads for an App That Promised to Nudify Female Politicians

One advertisement featured a pornographic video with a deepfake closely resembling a prominent US politician. Apple removed the ap…

NEWSInfosecurity Magazine2 months ago

NASA Ground Control Software Flaw Enables Unauthenticated Commands

Critical AIT-GUI flaws expose spacecraft commands and scripts to unauthenticated attackers

NEWShighSecurityWeek2 months ago

CISO Conversations: Nico Waisman – From Self-Taught Hacker to AI-Driven Offensive Security at XBOW

With no formal training and no career plan, Waisman built a path from Argentina's early hacking scene to leading security at an AI…

NEWSBleeping Computer2 months ago

Your Controls Block Known Attacks. What About the Behavior?

Security controls can block a familiar attack method while missing quieter ways to achieve the same objective. Picus Security's Bl…

NEWShighHackread2 months ago

Why the $292 Million KelpDAO Bridge Hack Did Not Affect Bitcoin’s Network

The $292 million KelpDAO bridge hack hit DeFi lenders after a forged LayerZero message, while Bitcoin transactions and mining cont…

NEWShighThe Register2 months ago

Copilot tricked into telling reseachers how to hack itself

How to social engineer an AI's reasoning engine

NEWShighSecurityWeek2 months ago

AI-Driven Vulnerability Surge Breaks the Traditional Patching Model

Rapid7 warns that traditional patch cycles cannot keep pace with soaring vulnerability disclosures and faster exploitation, forcin…

NEWSThe Hacker News2 months ago

AI "Mind Viruses" Can Spread Between Agents Through Persistent Prompt Files

Security researchers at Anthropic and Switzerland's EPFL have demonstrated that self-propagating payloads can spread from one arti…

NEWSThe Hacker News2 months ago

TWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across Networks

Cybersecurity researchers have disclosed details of a previously undocumented Python implant framework dubbed TWINLOOT. "TWINLOOT…

NEWSSecurityWeek2 months ago

Xpander Raises $7.5 Million for AI Management and Governance

Xpander’s platform uses a universal agent harness that executes AI agents as portable workloads and securely renders interfaces on…

NEWShighHackread2 months ago

Apple Pays Sentry Founder $150,000 for Private Cloud Compute Vulnerability

Sentry founder and CTO Drinor Selmanaj identified the Apple Private Cloud Compute flaw enabling root file writes and AI telemetry…