Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,718 articles

Infostealers Hit 7.4M Hosts and Steal 1.7 Billion Credentials in 6 Months

Cybercrime accelerated in early 2026 as infostealers harvested 1.7 billion credentials and ransomware operations affected 6,256 vi…

NEWSInfosecurity Magazine2 months ago

UNISOC Modem Flaw Enables Remote Code Execution via Video Calls

UNISOC modem flaw enabled kernel-level code execution through video calls

NEWSSecurity Magazine2 months ago

Multiple Suicides Reported in US Cyber Operations Forces

5 individuals associated with the U.S. Cyber Operations Forces committed suicide.

NEWSBleeping Computer2 months ago

Microsoft confirms GitHub is down worldwide

GitHub is down for some users as a widespread outage is causing errors across the website, API, Actions, Pull Requests, and severa…

NEWSCVE-2026-541218.8 HIGHBleeping Computer2 months ago

Certighost and the Privilege Hiding in Your Certificate Authority

CVE-2026-54121 lets a standard domain user turn your Enterprise CA into a Domain Controller. The patch is the easy part. The lesso…

NEWSHackread2 months ago

OpenMatter Network to Take Verification Message to Belgrade Blockchain Week 2026

Melbourne, Florida, August 17th, 2026, CyberNewswire Head of Operations and Partnerships Chris Biele to lead sessions on secure…

NEWScriticalSecurityWeek2 months ago

680,000 Impacted by French Tax Authority Data Breach

Hackers used compromised credentials to access enterprise and personal tax-related data. The post 680,000 Impacted by French Tax A…

NEWSInfosecurity Magazine2 months ago

WordPress Plugin Flaw Exposes 40,000 Sites to Admin Takeover

Critical User Profile Builder flaw let unauthenticated attackers access administrator accounts

NEWScriticalThe Hacker News2 months ago

⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More

The expensive attacks are not always the clever ones. This week had plenty of proof. Exposed services got hit, old bugs found fre…

NEWScriticalBleeping Computer2 months ago

Windows Server 2022 reaches end of mainstream support in 60 days

Microsoft has reminded IT administrators that Windows Server 2022 is rapidly approaching its mainstream end date of October 2026,…

NEWSSecurityWeek2 months ago

Irregular Details How a Naming Error Let AI Models Attack a Real Company

The AI security testing firm has shared information on a recently disclosed incident involving Anthropic AI models. The post Irreg…

NEWSThe Hacker News2 months ago

How MCP Servers Can Expose Enterprise Secrets

MCP servers can expose enterprise secrets through plaintext configuration files, over-permissioned access and prompt injection, of…

NEWScriticalHackread2 months ago

Attackers Probe Critical GeoServer SQL Injection Vulnerability

Attackers are probing internet-facing GeoServer systems for a critical SQL injection vulnerability affecting deployments that use…

NEWSThe Register2 months ago

Crook hawks millions of records allegedly plundered from corporate Azure tenants

McDonald's, Vodafone, TCS, Kyndryl, and others named as researchers point to compromised credentials

NEWSBleeping Computer2 months ago

Philips and GE investigating Clop ransomware data theft claims

Tech giants General Electric (GE) and Philips have also confirmed they're investigating claims that the Clop ransomware gang breac…

NEWSInfosecurity Magazine2 months ago

ETSI Proposes 17 Cybersecurity Standards to Support Cyber Resilience Act

The European Telecommunications Standards Institute has launched an approval process for standards vendors will have to meet under…

NEWShighSecurityWeek2 months ago

Conflicting Test Goals Pushed Claude Agents to Deploy Self-Replicating Malware

Anthropic has been conducting tests to identify issues in how AI agents interact with each other. The post Conflicting Test Goals…

NEWShighThe Hacker News2 months ago

Unisoc VoLTE Video Call Exploit Chain Can Give Attackers Full Android Kernel Access

Security researchers at SSD Secure Disclosure have published a two-stage exploit chain that achieves full Android kernel access on…

NEWScriticalBleeping Computer2 months ago

French tax authority data breach affects 678,000 individuals

The French Ministry of the Economy and Finance has disclosed a data breach after an attacker accessed the General Directorate of P…

NEWScriticalSecurityWeek2 months ago

40,000 Impacted by SafePal Data Breach

Hackers exploited a vulnerability in the order-tracking function of a plugin to access SafePal customer information. The post 40,0…

NEWShighThe Hacker News2 months ago

Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies

Cybersecurity researchers have flagged a previously undocumented Linux botnet family dubbed Evooo1Bot that derives its core functi…

NEWScriticalInfosecurity Magazine2 months ago

SafePal Data Breach Hits Tens of Thousands of Customers

Nearly 40,000 customers of hardware wallet provider SafePal have been impacted by a data breach

NEWScriticalCVE-2026-694147.8 HIGHBleeping Computer2 months ago

Microsoft working on Defender patch for ShieldBreak zero-day

Microsoft is working on a security patch for the "ShieldBreak" zero-day vulnerability disclosed last week by security researcher "…

NEWSThe Register2 months ago

Code fixers have fired up the AI warp drive. Strange new worlds await

With more patches per month than at a pirate convention, the bug must be an endangered species. Well, about that

NEWShighSecurityWeek2 months ago

Recent macOS Screen Sharing Vulnerability Exploited in Attacks

Threat actors gained root access to the vulnerable systems and deployed a Monero miner. The post Recent macOS Screen Sharing Vulne…

NEWScriticalCVE-2026-5823110.0 CRITICALSecurityWeek2 months ago

Critical SAP Commerce Cloud Vulnerability Exploited 3 Days After Disclosure

The vulnerability tracked as CVE-2026-58231 can be exploited to execute arbitrary code and compromise internal components. The pos…

NEWShighCVE-2026-593109.8 CRITICALThe Hacker News2 months ago

Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomware

Cybersecurity researchers have attributed the exploitation of a newly patched security flaw in Broadcom VMware vCenter to a suspec…

NEWSThe Register2 months ago

Black Hat and DEF CON are AI conferences now, too

On this week's episode of The Reg's Kettle podcast, we revisit 'hacker summer camp,' where the hottest topic was ... sigh... agent…

NEWSInfosecurity Magazine2 months ago

Infostealers Harvest 1.7 Billion Credentials in Six Months

Flashpoint data reveals infostealers were responsible for taking 1.7 billion credentials in the first half of 2026

NEWSSecurityWeek2 months ago

Fortune 500 Companies Hit in Azure Data Theft Campaign

A threat actor is claiming the exfiltration of millions of records from McDonald’s, TCS, Vodafone, and other large organizations.…