Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,718 articles

Fortinet Acquires AI Security Company Virtue AI

Fortinet will use Virtue AI technology to enhance its AI security portfolio, including for AI models, applications, and agentic sy…

NEWSThe Hacker News2 months ago

16 Typosquatted RubyGems Packages Steal Browser Credentials and Crypto Wallets

Cybersecurity researchers have flagged a new typosquatting campaign targeting RubyGems users with a Windows-based information stea…

NEWSThe Hacker News2 months ago

One Attacker Has Scraped Both Salesforce and ServiceNow Portals Since 2025

A single piece of infrastructure has been pulling records out of Salesforce and ServiceNow customer portals across multiple indust…

NEWSInfosecurity Magazine2 months ago

Cyber Incident Disrupts Student Services at UT San Antonio

UT San Antonio has taken IT systems offline following a cyber incident, disrupting student registration and tuition payments days…

NEWSBleeping Computer2 months ago

Microsoft tests faster Windows File Explorer, new context menu

Microsoft has started testing a faster File Explorer and a less cluttered and more customizable context menu in Windows 11 preview…

NEWShighCVE-2026-15748SecurityWeek2 months ago

300,000 WordPress Sites Potentially Exposed to Hacking Due to Form Plugin Flaw

Tracked as CVE-2026-15748, the arbitrary file upload bug allows unauthenticated attackers to upload executable files. The post 300…

NEWShighBleeping Computer2 months ago

CISA: Windows Task Host flaw now exploited by ransomware gangs

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that ransomware gangs are also exploiting a high-se…

NEWSWired Security2 months ago

Can AI Coexist With Privacy? Proton’s Andy Yen Says It Will Have To

Proton’s CEO is a champion of encryption for everyone. So why is he going all in on un-encryptable AI?

NEWSHackread2 months ago

MessiahGPT Criminal AI Service Advertised on BreachForums

Trellix details MessiahGPT, an unrestricted criminal AI platform offering malware, phishing and fraud assistance through 50 free q…

NEWScriticalInfosecurity Magazine2 months ago

Three-quarters of Ransomware Attacks Target Mid-Market Firms

Black Kite finds mid-market is the sweet spot for ransomware as manufacturers are most likely to be hit

NEWSWired Security2 months ago

The Cop Who Took On Flock

After Noel Pichardo called out his city's embrace of Flock surveillance cameras, he was subjected to five internal affairs investi…

NEWSBleeping Computer2 months ago

Microsoft confirms outage affecting search in Microsoft 365 apps

Microsoft says some users are experiencing issues searching in Microsoft 365 apps, including Outlook on the web, Outlook desktop,…

NEWScriticalSecurityWeek2 months ago

Heights Finance Data Breach Impacts at Least 1.2 Million Individuals

Hackers stole names, addresses, phone numbers, Social Security numbers, and financial information from a third-party platform. The…

NEWSThe Hacker News2 months ago

SafePal Hardware Wallet Maker Says Flaw Exposed Data of Nearly 40,000 Customers

SafePal has disclosed that an authorization flaw in an order-tracking plug-in exposed the names, email addresses, shipping address…

NEWScriticalSecurityWeek2 months ago

GitLab Patches Critical Code Injection Vulnerability

The security defect allows unauthenticated attackers to modify or delete user data and public projects. The post GitLab Patches Cr…

NEWSInfosecurity Magazine2 months ago

UK Legal Regulator Raises AI Misuse Concerns

Solicitors Regulation Authority sounds the alarm over AI hallucinations and data leaks

NEWSBleeping Computer2 months ago

Microsoft starts removing WMIC tool used by cybercriminals

Microsoft announced that it removed the Windows Management Instrumentation Command-line (WMIC) tool from Windows 11 24H2 and 25H2,…

NEWShighSecurityWeek2 months ago

Dozens of WebKit Vulnerabilities Patched With Fresh macOS, iOS Security Updates

The bugs could be exploited to crash Safari, corrupt memory, leak sensitive data, escape the sandbox, and exfiltrate data. The pos…

NEWScriticalThe Hacker News2 months ago

CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a critical flaw impacting Ray to its Known Exploi…

NEWSHackread2 months ago

The Security Risks of Second-Life Corporate Devices

Older company laptops, servers, and phones may retain sensitive data. Learn how tracking, verified sanitization, and secure dispos…

NEWScriticalCVE-2026-194789.4 CRITICALThe Hacker News2 months ago

Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects

GitLab has released security updates to address a critical vulnerability impacting its Community Edition (CE) and Enterprise Editi…

NEWSCyberScoop2 months ago

Details emerge on BlackFile’s recent attacks on financial companies

BlackFile’s four affiliate groups are still targeting victims, including medical technology organizations. Several potential victi…

NEWSCyberScoop2 months ago

Irregular says ‘human oversight’ responsible for AI sandbox escape incidents

In a post-mortem, the frontier AI testing company said internet access for models is necessary to fully test out their cybersecuri…

NEWShighBleeping Computer2 months ago

Hacker claims 3.6 million Azure account records stolen from major companies

A threat actor is selling employee databases allegedly stolen from the Microsoft Azure infrastructure of multiple Fortune 500 comp…

NEWScriticalBleeping Computer2 months ago

Pokémon Center data breach exposes customer info, cancels some orders

Pokémon Center is notifying customers in the United Kingdom and Germany that it suffered a third-party data breach after hackers s…

NEWSThe Hacker News2 months ago

Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection

Cybersecurity researchers at Wiz have disclosed a new GitHub Actions workflow injection vulnerability in Snowflake's public snowfl…

NEWSCVE-2026-15748The Hacker News2 months ago

Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads

A critical security flaw has been disclosed in Forminator Forms, a WordPress plugin with more than 600,000 active installations, t…

NEWSSecurity Magazine2 months ago

US Government Hired a North Korean IT Worker, FBI Investigating

A North Korean remote IT worker was hired by an unidentified U.S. federal agency.

NEWSThe Hacker News2 months ago

Cavern C2 Uses DNS and Google Apps Script to Blend Into Legitimate Traffic

Cybersecurity researchers have traced the continued evolution of the Cavern (aka Cav3rn) command-and-control (C2) framework used b…

NEWShighThe Register2 months ago

An AI broke Snowflake's code. Then another AI agent exploited it

Don't worry, this one was via a bug bounty program