Attack List - 2026 2025 2024 2023 2021 2020 2019 2018
H AI APT Attack BigBrothers BotNet Congress Cryptocurrency Cyber CyberCrime Exploit Hack ICS Incindent IoT Mobil OS Phishing Ransom Safety Security Social Spam Virus Vulnerebility | 2026 2025 2024 2023
DATE |
NAME |
Info | CATEG. |
WEB |
|
4.10.26 |
New Spectre v2 attack variant leaks Linux root password hash in minutes | A new Branch Target Reuse (BTR) attack has been devised that can recover root password hashes on Intel computers running Linux in 3-5 minutes on average. | Attack | BleepingComputer |
|
30.9.26 |
New Spectre-v2 BTR Attack Leaks Linux Memory Despite Existing Defenses | A group of academics from VUSec and Scuola Superiore Sant'Anna have disclosed details of a new Spectre CPU vulnerability variant that affects | Attack | The Hacker News |
|
21.9.26 |
BragJack attacks hijack AI browser agents through malicious extensions | BragJack, a proof-of-concept attack from Forever Security's Gal Weizman, hijacks the AI assistants in Chrome, Edge, Opera Neon, Perplexity Comet, and Claude in Chrome using one malicious extension. The Prompt Forcing technique earned over $20,000 in bounties and two CVEs. | Attack | BleepingComputer |
|
17.9.26 |
U.S. Seizes NightmareStresser Domains Linked to Hundreds of Thousands of DDoS Attacks | The U.S. Department of Justice (DoJ) on Tuesday announced the court-authorized seizure of internet domains associated with a distributed | Attack | The Hacker News |
|
15.9.26 |
Attack Chains, Not Just Attack Surfaces: Why Testing Individual Techniques Misses the Point | Introduction Security teams have gotten pretty good at testing against what can hurt them. Can this EDR agent catch this payload? Will my | Attack | The Hacker News |
|
15.9.26 |
New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential Computing | Researchers have disclosed a new hardware attack, called DDRop , that breaks the memory protection in Intel and AMD confidential computing by silently dropping writes to a server's memory, so the processor keeps | Attack | The Hacker News |
|
13.9.26 |
MFA's Weakest Link: Account Recovery Is the New Attack Path | MFA makes account takeover harder, but attackers are increasingly targeting the recovery processes used to reset passwords and authentication methods. Specops explains why stronger identity verification at the service desk is critical to preventing social engineering attacks from turning account recovery into account takeover. | Attack | BleepingComputer |
|
30.8.26 |
New GPUThor attack defeats NVIDIA ECC protection for root access | A newly disclosed Rowhammer attack called GPUThor can bypass error-correcting code (ECC) protections on NVIDIA GPUs, enabling denial-of-service (DoS) and root-level privilege escalation. | Attack | BleepingComputer |
|
29.8.26 |
Massive DDoS attack disrupts Norway’s government digital services | A large distributed denial-of-service (DDoS) attack has disrupted Norway's shared government digital infrastructure since Monday, affecting services used by the public sector. | Attack | BleepingComputer |
| 27.8.26 | New GPUThor Rowhammer Defeats ECC on NVIDIA RTX A6000 to Gain Host Root Access | Academic researchers have disclosed a Rowhammer attack impacting NVIDIA workstation GPUs with GDDR6 memory that defeats error correction codes (ECC), the mitigation NVIDIA recommends against GPU Rowhammer, and enables denial-of-service (DoS) and privilege escalation to a root shell. | Attack | The Hacker News |
|
20.8.26 |
CDN Tsunami Attack Abuses HTTP/3 Translation for Up to 350x DoS Amplification | Cybersecurity researchers have disclosed two denial-of-service (DoS) attacks that exploit how major content delivery networks (CDNs) convert | Attack | The Hacker News |
|
20.8.26 |
Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second | Cybersecurity researchers have disclosed details of a remote Spectre attack against Cloudflare Workers that leaked a JSON Web Token (JWT) | Attack | The Hacker News |
|
17.8.26 |
Large-scale DDoS attacks disrupted Threema secure messaging service | Multiple distributed denial-of-service (DDoS) attacks targeted the Threema secure messaging service earlier this week, causing severe disruptions to communications. | Attack | BleepingComputer |
|
16.8.26 |
Plug and Pwn attack uses fake USB devices for Windows SYSTEM access | Security researchers have disclosed new "Plug and Pwn" attacks that abuse the Windows Plug and Play feature to trigger Windows into installing vulnerable or insecure vendor software and gain SYSTEM privileges. | Attack | BleepingComputer |
|
15.8.26 |
DDoS attacks over 1 Tbps surged fivefold in the second quarter | Cloudflare says it mitigated more than 800 network-layer distributed denial-of-service (DDoS) attacks exceeding 1 Tbps in the second quarter of the year. | Attack | BleepingComputer |
|
9.8.26 |
New TONTOU CPU attack bypasses Spectre v2 fixes, leaks Linux password hashes | Researchers found a way to bypass recent mitigations for Spectre v2 speculative execution side-channel attacks and developed an exploit to leak secrets from Linux machines. | Attack | BleepingComputer |
|
7.8.26 |
New NatJack Attacks Hijack TCP Sessions and Spoof DNS by Manipulating NAT Tables | Security researcher Malcolm Stagg has disclosed a new attack class called NatJack that manipulates network address translation (NAT) | Attack | The Hacker News |
|
6.8.26 |
Attackers Compile khunt Inside Oracle to Turn SQL Injection Into Windows SYSTEM Access | Attackers broke into an organization's Oracle database through a SQL injection flaw in a public-facing web application, then installed a post- | Attack | The Hacker News |
|
21.7.26 |
New Bit2Watt Attack Could Let Cloud Tenants Disrupt Power Grids Without an Exploit | A cloud tenant using nothing but ordinary GPU access can push a data center's power draw up and down fast enough to threaten the grid it runs | Attack | The Hacker News |
| 30.6.26 | AirDrop and Quick Share Flaws Let Nearby Attackers Trigger Crashes and Bypass Checks | Two researchers have found six security flaws in AirDrop and Quick Share , the wireless features that beam files between nearby devices with | Attack | The Hacker News |
| 20.6.26 | GhostTree Attack Abused Recursive Windows Junctions to Hide Malware | GhostTree uses recursive NTFS junctions to generate vast numbers of valid Windows file paths. Varonis explains how the technique could cause Microsoft Defender folder scans to never complete, leaving malware undetected. | Attack | BleepingComputer |
| 20.6.26 | AutoJack Attack Lets One Web Page Hijack AI Agent for Host Code Execution | Microsoft researchers have detailed an exploit chain, named AutoJack , that turns an AI browsing agent into a delivery vehicle for remote code | Attack | The Hacker News |
| 9.6.26 | New FROST Attack Lets Websites Track What Sites and Apps You Open via SSD Timing | A malicious website can work out which sites you visit and which apps you open, using nothing but JavaScript and the timing of your SSD. The | Attack | The Hacker News |
| 7.6.26 | New 'HTTP/2 Bomb' DoS attack crashes web servers in under a minute | A new denial-of-service (DoS) attack dubbed HTTP/2 Bomb can be launched from a single machine to take down web servers within seconds. | Attack | BleepingComputer |
| 3.6.26 | New HTTP/2 Bomb Vulnerability Allows Remote DoS on NGINX, Apache, IIS, Envoy & Cloudflare | Cybersecurity researchers have discovered a remote denial-of-service exploit that affects major web servers, including NGINX, Apache HTTPD, | Attack | The Hacker News |
| 3.5.26 | ConsentFix v3 attacks target Azure with automated OAuth abuse | A new attack type, dubbed ConsentFix v3, has been circulating on hacker forums, building on the previous technique by adding automation and scaling potential. | Attack | BleepingComputer |
| 2.5.26 | Deepfake Voice Attacks are Outpacing Defenses: What Security Leaders Should Know | Three seconds of audio is all it takes to clone a voice for fraud. Adaptive Security shows how deepfake calls trick employees into sending real money—and why most defenses don't catch them. | Attack | BleepingComputer |
| 12.4.26 | CPUID hacked to deliver malware via CPU-Z, HWMonitor downloads | Hackers gained access to an API for the CPUID project and changed the download links on the official website to serve malicious executables for the popular CPU-Z and HWMonitor tools. | Attack | |
| 11.4.26 | New GPUBreach attack enables system takeover via GPU rowhammer | A new attack, dubbed GPUBreach, can induce Rowhammer bit-flips on GPU GDDR6 memories to escalate privileges and lead to a full system compromise. | Attack | |
| 8.4.26 | New GPUBreach Attack Enables Full CPU Privilege Escalation via GDDR6 Bit-Flips | New academic research has identified multiple RowHammer attacks against high-performance graphics processing units (GPUs) that could be exploited to | Attack | The Hacker News |
| 7.3.26 | Mail2Shell zero-click attack lets hackers hijack FreeScout mail servers | A maximum severity vulnerability in the FreeScout helpdesk platform allows hackers to achieve remote code execution without any user interaction or authentication. | Attack | BleepingComputer |
| 7.3.26 | How a Brute Force Attack Unmasked a Ransomware Infrastructure Network | A routine RDP brute-force alert led to unusual credential hunting and a geo-distributed VPN-linked infrastructure. Huntress Labs explains how one compromised login unraveled a suspected ransomware-as-a-service ecosystem tied to initial access brokers. | Attack | BleepingComputer |
| 5.3.26 | ClawJacked attack let malicious websites hijack OpenClaw to steal data | Security researchers have disclosed a high-severity vulnerability dubbed "ClawJacked" in the popular AI agent OpenClaw that allowed a malicious website to silently bruteforce access to a locally running instance and take control over it. | Attack | |
| 31.1.26 | Mandiant Finds ShinyHunters-Style Vishing Attacks Stealing MFA to Breach SaaS Platforms | Google-owned Mandiant on Friday said it identified an "expansion in threat activity" that uses tradecraft consistent with extortion-themed attacks | Attack | The Hacker News |
| 28.1.26 | When Zoom Phishes You: Unmasking a Novel TOAD Attack Hidden in Legitimate Infrastructure | Prophet AI uncovers a Telephone-Oriented Attack Delivery (TOAD) campaign weaponizing Zoom's own authentication infrastructure. | Attack | The Hacker News |