Cyber CrimeNewGhostAction Returns, Hits 340+ Maintainer Repos
A credential-theft campaign has compromised two open-source maintainer accounts to push malicious GitHub Actions workflows into more than 340 repositories.
> Search
30 results for “attack”
Cyber CrimeNew
SecurityAWS AgentCore Flaw Let One Prompt Hijack All Agents
Researchers say a single chat prompt could extract cloud credentials and let an attacker take over every AgentCore agent in an AWS account and region.
Cyber CrimeUnpatched AhsayCBS Bugs Exploited as Zero-Days
Attackers are chaining two unpatched AhsayCBS vulnerabilities to gain remote code execution and deploy webshells, with at least five organizations targeted.
Cyber CrimeFBI Seizes Domains Tied to Chinese Hacking Tools
The FBI has seized seven domains linked to Chinese state-sponsored hackers, disrupting two key platforms used in attacks on critical infrastructure.
Cyber CrimeRansomware Hits Japanese Cloud Serving 495 Orgs
IDC Frontier says a ransomware attack on its IDCF Cloud disrupted East Japan Region 1 and locked 495 companies and local governments out of management consoles.
SecurityFake Certs Minted via Hijacked TLDs
Attackers reportedly seized control of top-level domains to issue valid-looking TLS certificates for Google and other organizations.
SecurityNew SonicWall Flaw Hits VPN Gateways
SonicWall issued hotfixes for a maximum-severity SSRF bug in SMA1000 appliances, urging customers to upgrade before attackers take note.
Cyber CrimeAdvantest Confirms Stolen Data in Attack
Chip testing firm Advantest says attackers took names, SSNs, and financial data in a February ransomware intrusion.
Cyber CrimeArizona Courts Breach Hits 1.3 Million
A phishing email led to the theft of personal data for 1.3 million people from Arizona's court system, officials say.
Cyber CrimeDNS Hijack Undercuts TLS Trust
Attackers seized three country-code domains to mint counterfeit TLS certificates for Google and other brands, Google says.
Cyber CrimeNikkei Email Breaches Expose 1,646 People
Nikkei says attackers hit a Google Workspace account in July and a Microsoft 365 account in September, later sending 9,000 phishing emails.
SecurityDell's 18 Flaws Open Storage to Attackers
Dell has patched 18 CVEs in its storage and update tools, including two maximum-severity flaws with no workarounds.
Cyber CrimeRCE flaw in Rejetto HFS now exploited
Attackers are exploiting CVE-2026-61500 in Rejetto HFS to bypass authentication and gain remote code execution, according to VulnCheck.
SecurityNetScaler Zero-Day Poses Patching Puzzle
Citrix rushed out emergency updates for a SAML authentication flaw already exploited in attacks, but administrators may need to patch twice.
Cyber CrimeFrontline Education breach hits school staff
Edtech vendor Frontline Education says attackers exploited a third-party software flaw to access employee data including Social Security numbers.
Cyber CrimeTeen ran KillSec ransomware, cops say
A 16-year-old led a ransomware crew that claimed about 1,000 attacks, according to European police.
Cyber CrimeDIVD breach linked to agentic AI attack
Dutch bug-hunting nonprofit says AI agents exploited Zammad zero-days, stealing researcher emails in seconds.
SecurityMicrosoft: Attackers Lead AI Arms Race
Microsoft's 2026 Digital Defense Report finds attackers are gaining AI advantages faster than defenders, risking a spike in unpatched vulnerabilities.
SecurityCisco WAN Manager Flaw Opens Admin Door
A critical authentication bypass in Cisco Catalyst SD-WAN Manager let attackers reach an admin API, and the fix requires an upgrade.
SecurityEngland's schools recover faster from cyberattacks
Ofqual survey finds secondary schools reporting fewer incidents and quicker recovery, but training and responsibility gaps persist.
SecurityZimbra Flaw Exploited Before Disclosure
Microsoft says attackers probed and exploited a Zimbra command injection flaw in the window between patch release and public disclosure.
AI & MLAI Threats Expose Preparedness Gap
PwC's survey of 3934 leaders across 71 countries finds adversarial AI attacks top the list of cybersecurity gaps.
Cyber CrimeNetScaler Flaw Weaponized for Deep Access
LevelBlue says attackers exploited a critical NetScaler bug to plant web shells, create superuser accounts, and exfiltrate configuration data.
Cyber CrimeZimbra Bug Exploited for Mailbox Theft
Microsoft says attackers chained a patched Zimbra command-injection flaw into web shells, credential theft and cloud exfiltration.
Cyber CrimeDual RMM Phishing Attack Evades Defenses
Microsoft says phishing emails hid a legitimate MSP360 installer behind meeting and PDF lures, then used it to install ScreenConnect as a redundant remote-access channel.
Cyber CrimeFake ChatGPT GPT Spreads RAT Malware
Huntress found attackers using custom GPTs and Google Sites to deliver a ClickFix RAT called @input, impacting dozens of users.
SecurityF5 zero-day hits BIG-IP APM deployments
F5 patched a critical BIG-IP APM zero-day exploited in remote code execution attacks, as CISA ordered federal agencies to secure networks by Friday.
SecurityAI raises stakes for UK SME security
ESET's 2026 SMB Cyber Risk Report finds 49% of UK small businesses hit by incidents, with AI-powered attacks adding pressure despite core tactics staying the same.
SecurityCheck Point Zero-Day Hit Management Servers
Attackers exploited a management server flaw in July while a separate VPN bug now draws ongoing attempts against small-business firewalls.
Cyber CrimeThird-Party App Key Opens Door to BigCommerce Data Theft
Attackers used a compromised credential from the Ribon app to pull customer data from hundreds of online stores, exposing a soft spot in e-commerce supply chains.