Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,718 articles

NEWSThe Register2 months ago

Microsoft blames AI for delayed Exchange update, can’t say when it will arrive

Dealing with machine-made bug backlog makes it hard to find a moment to deliver promised subscription service

NEWSThe Register3 months ago

Chinese AI company Zhipu claims its new is a better bug-finder than Anthropic, OpenAI

PLUS: HCL, TCS, admit data breaches; Google, Apple, India bans some rideshare tips; and more!

NEWScriticalBleeping Computer3 months ago

SafePal data breach impacts 39,798 customers, stolen info for sale

Cryptocurrency hardware wallet provider SafePal is warning of a data breach affecting about 39,798 customers after a flaw was expl…

NEWSBleeping Computer3 months ago

Anthropic confirms Claude is down in major outage affecting multiple services

Claude is experiencing a major outage, with users reporting login problems and degraded performance across several Anthropic servi…

NEWSBleeping Computer3 months ago

Large-scale DDoS attacks disrupted Threema secure messaging service

Multiple distributed denial-of-service (DDoS) attacks targeted the Threema secure messaging service earlier this week, causing sev…

NEWShighBleeping Computer3 months ago

New AmnesiaStealer macOS malware hijacks browser sessions via remote control

A new information-stealing malware called AmnesiaStealer, which targets macOS users via ClickFix attacks, includes a streaming mod…

NEWSThe Register3 months ago

Stopping a cyberattack while walking your dog - defensive AI security CEO says it's not ruff to do

Corma CEO tells The Reg it's building 'One ring to rule them all, for the defenders to have this power'

NEWShighHackread3 months ago

Hacker Leaks 40GB of Alleged UK National Grid Infrastructure Data (Updated)

A hacker claims to have leaked 40GB of National Grid data, including source code, DevOps scripts, cloud configurations and interna…

NEWSBleeping Computer3 months ago

New Evooo1Bot Linux botnet turns routers into traffic relay nodes

A new Mirai-based modular Linux botnet malware called Evooo1Bot has been targeting internet-facing gateway devices, turning them i…

NEWSThe Register3 months ago

ChainDrop worm crawls into npm supply chain, evades standard defenses

Shai-Hulud variant poisons 444 packages, spreads via tarballs and dev-tool hooks

NEWShighCVE-2026-5823110.0 CRITICALThe Hacker News3 months ago

SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After Patch

A maximum-severity security vulnerability impacting SAP Commerce Cloud is witnessing active exploitation efforts. The vulnerabili…

NEWShighCVE-2026-654009.8 CRITICALThe Hacker News3 months ago

Apple macOS Screen Sharing Flaw Exploited on Internet-Exposed Macs to Install Monero Miner

A recently patched security flaw in Apple macOS has come under active exploitation in the wild to deploy a cryptocurrency miner, t…

NEWSBleeping Computer3 months ago

How Anthropic plans to watermark Claude's AI-generated text

It could soon become easier to identify AI-generated content, even if it's not the usual "It's Not X, it's Y" type of post you'd c…

NEWSWired Security3 months ago

New York City Lawmakers Push to ‘Ban the Scan’ at MSG

At a press conference outside Madison Square Garden, politicians, musicians, and privacy advocates argued for tighter restrictions…

NEWShighThe Hacker News3 months ago

Hackers Spend Nearly $7 Million on Expired Domains to Redirect Traffic to Scams and Malware

Threat actors are acquiring expired domains to inherit website traffic and reputation to redirect victims to scams and malware on…

NEWSHackread3 months ago

VINclarity Publishes Investigation Into Alleged Scam and Fraud Reputation Attack Across Search and AI

New report examines suspicious Reddit activity, coordinated YouTube content and BBB Scam Tracker entries influencing how the vehic…

NEWShighBleeping Computer3 months ago

Hackers arrested over €30M bank fraud exploiting service provider flaw

Four cybercriminals were arrested in Brazil, and three others were charged in Europe over allegations that they exploited a vulner…

NEWSThe Register3 months ago

1.6M RingCentral accounts' data dumped after ShinyHunters extortion attack

Another one bites the dust

NEWSThe Hacker News3 months ago

IAM Compliance Requirements and Best Practices

IAM compliance is the practice of demonstrating that identity and access controls are not only documented but actually enforced ac…

NEWScriticalSecurity Magazine3 months ago

Data Breaches Could Set a Record in 2026

If the current pace of data breaches continues, 2026 could set an annual record for amount of compromises.

NEWShighBleeping Computer3 months ago

Hackers exploit macOS Screen Sharing flaw to deploy Monero miner

The Netherlands' National Cyber Security Centre (NCSC) is warning that hackers are actively exploiting a macOS authentication bypa…

NEWSInfosecurity Magazine3 months ago

Researchers Confirm ExfilSquad’s Access to Sensitive Data Across 13 Organizations

Researchers have verified that ExfilSquad possesses sensitive data stolen from at least 13 victims after the extortion group publi…

NEWSThe Register3 months ago

French tax authority admits data heist after crook touts 2M records

Government disputes claims of continued access as investigators measure damage

NEWSBleeping Computer3 months ago

The Modern Attack Chain: Rethinking Google Workspace Security in the Age of AI

Google Workspace attacks do not always begin with phishing. Stolen OAuth tokens can provide another path into Gmail, Drive, and co…

NEWSBleeping Computer3 months ago

Max severity SAP Commerce Cloud flaw now targeted in attacks

A maximum-severity SAP Commerce Cloud remote code execution vulnerability patched three days ago is already being targeted in atta…

NEWShighThe Hacker News3 months ago

Mustang Panda Adds Signed Windows Rootkit to CoolClient Backdoor for Stealth

The threat actor known as HoneyMyte (aka Mustang Panda) has been observed deploying an updated version of the CoolClient backdoor…

NEWScriticalThe Register3 months ago

Autonomous AI attacks pose 'clear and present danger' to critical infrastructure

Weaponized agents could turn digital intrusions into kinetic disasters, experts warn

NEWSInfosecurity Magazine3 months ago

New Mirai-Based Linux Botnet ‘Evooo1Bot’ Turns Victims Into Proxies

Evooo1Bot is a newly observed botnet based on the Mirai framework but equipped with advanced features, turning edge devices into p…

NEWShighSecurityWeek3 months ago

In Other News: Rapid7 Layoffs, Hacking a Boeing 737, Refrigeration System Vulnerabilities

Noteworthy stories that might have slipped under the radar: government AI platform deal sparks outrage, North Korean IT worker bre…

NEWSBleeping Computer3 months ago

Shell investigates 'potential incident' after Clop data theft claims

Oil giant Shell has confirmed it is investigating a potential security incident after the Clop ransomware gang claimed it stole 89…