Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

3,157 articles

Infosecurity Europe: Bayer Reinvents Security Awareness Training to Counter AI Threats

Bayer’s security awareness training now focuses on psychological approaches rather than technical methods for detecting social eng…

NEWScriticalThe Register3 months ago

Microsoft reaches for olive branch after public dustup with 0-day researcher

Following days of criticism from the security community, Redmond dials back rhetoric, insists vulnerability hunters not in its leg…

NEWSThe Register3 months ago

Claude celebrates Anthropic's stock market float with blockbuster ... outage

Chatbot has no respect for timing of its maker's financial announcement

NEWSInfosecurity Magazine3 months ago

Threat Actor Uses AI to Build EDR Evasion Tools

A threat actor used AI coding tools to build and test EDR evasion malware, Sophos finds

NEWSThe Register3 months ago

Northern Ireland cops issue PSA after official phone number spoofed by scammers

If you’re going to impersonate an officer, perhaps choose a more sophisticated way to nick cash than asking for gift cards…

NEWSInfosecurity Magazine3 months ago

Attackers Hijack Red Hat npm Scope to Steal Cloud Secrets

Attackers backdoored 32 packages in Red Hat's official npm scope to steal cloud and CI secrets

NEWSInfosecurity Magazine3 months ago

Infosecurity Europe: UK Firms Prioritize AI Threat Preparedness as Cyber Risks Evolve

UK organizations are prioritizing AI-driven cybersecurity as 43% cite AI-powered attacks as their top risk, prompting significant…

NEWSWired Security3 months ago

The Manhattan Institute Helped Kill DEI. Now It’s Coming for Protests

The right-wing think tank is actively pushing “civil terrorism”—increasing penalties for minor crimes committed while people engag…

NEWSInfosecurity Magazine3 months ago

Infosecurity Europe: Business Leaders Lack Understanding of Threat Intelligence, Study Warns

A new Silobreaker and SANS Institute paper examines the ‘Intelligence-Stakeholder Gap’ and what organizations must do to achieve b…

NEWShighThe Register3 months ago

Shai-Hulud malware worms Red Hat npm package versions downloaded 80K times a week

TeamPCP? Or copycat malware dev?

NEWShighThe Register3 months ago

Election interlopers register 5K+ domains, hope to catch some voting phish

Hacking voting machines is so 2017. Phishing, impersonation pose the real election risks

NEWShighKrebs on Security3 months ago

Hackers Used Meta’s AI Support Bot to Seize Instagram Accounts

The Instagram accounts for the Obama White House and the Chief Master Sergeant of the U.S. Space Force were briefly defaced with p…

NEWSSecurity Magazine3 months ago

The First World Cup in the Agentic Era

This year, the World Cup is facing a cyber threat that, historically, it hasn’t seen as often: malicious AI agents.

NEWSSecurity Magazine3 months ago

US Troops in Active War Zones Tracked with Commercial Location Data

Foreign adversaries are exploiting commercial location data to track U.S. servicemembers in active war zones.

NEWShighThe Register3 months ago

GTA cheat service Atlas Menu hacked as attacker alleges screenshot spying

A database containing 64,000 user records was published to GitHub after an attacker claimed to have compromised all Atlas systems

NEWScriticalInfosecurity Magazine3 months ago

Critical Flowise Flaw Gives Attackers Full Server Control

Obsidian publishes PoC for a 1-click Flowise RCE that can fully compromise self-hosted servers

NEWSInfosecurity Magazine3 months ago

Infosecurity Europe: Tabletop Exercise to Test How CISOs Respond to Major Supermarket Cyber-Attack

Semperis is set to bring ‘Enter the War Room: A Tabletop Experience’ to Infosecurity Europe to help cybersecurity leaders prepare…

NEWShighThe Register3 months ago

Palo Alto VPN bug graduates from advisory to active exploitation

Rapid7: Attackers exploit authentication bypass flaw in the wild, meaning more emergency patching for PAN-OS users

NEWSInfosecurity Magazine3 months ago

Infosecurity Europe: AI SOCs Will Still Need SOC Analysts, Security Vendors Say

Top cybersecurity vendors said AI won't replace entry-level – only routine ticket-taking and triage

NEWSThe Register3 months ago

Password manager Dashlane suspends customer accounts amid brute-force attacks

Engineers' weekends ruined as Dashlane's automatic protections kicked in

NEWSInfosecurity Magazine3 months ago

FSB Group Gamaredon Hides Worm in Windows Data Streams

FSB-linked Gamaredon concealed a fileless worm in NTFS data streams to spy on Ukraine targets

NEWSThe Register3 months ago

Putin sends submarines to survey Britain's subsea cables. UK deploys Royal Navy, mobilizes parliamentary draftsmen

Proposed legislation threatens fines and prison for reckless damage. Russian Prez must be shaking in his boots

NEWSWired Security3 months ago

The Romance Scammer Who Made a Small Fortune Posing as a WWE Superstar

In this excerpt from WIRED Book Club pick The Yahoo Boys, journalist Carlos Barragán traces one scammer’s journey from flop to for…

NEWShighInfosecurity Magazine3 months ago

Attackers Abuse Shared Content for ChatGPT Phishing Campaign

Push Security says threat actors are delivering malware hosted on chatgpt.com/s/ domain

NEWSWired Security3 months ago

Websites Can Now Spy on You Through Your Hard Drive

Thanks to the newly detailed FROST technique, telltale SSD activity can be measured in the browser using simple JavaScript.

NEWScriticalInfosecurity Magazine3 months ago

Palo Alto Warns High-Severity Bug Is Being Actively Exploited

A vulnerability in Palo Alto Networks’ PAN-OS software is being exploited in attacks

NEWSInfosecurity Magazine3 months ago

Infosecurity Europe: OWASP Forms New Agentic Research Council

OWASP’s new Agentic Research Council will aim to connect academic work to operational realities on agentic AI security

NEWShighWired Security3 months ago

Cybercrime Crew Claims It Hacked Mike Lindell’s MyPillow

Plus: A ransomware group is now stealing data in person, BusPatrol wants to hand its license plate surveillance data to the cops,…

NEWSThe Register3 months ago

Lone attacker published 14 malicious npm packages mimicking popular OpenSearch, Elasticsearch libraries

And then Microsoft busted them all

NEWSWired Security3 months ago

The White House’s Aliens.gov Site Brags That ICE Arrested More Than 700 US Citizens

The website, which compares human beings to extraterrestrials, touts arrest numbers from the Trump administration’s sweeping immig…