AttackFeed — Cybersecurity News Aggregator

Cybersecurity news from across the internet

Provided byWagner Cybersecurity LLC20+ years in cybersecurity

LIVE

5,672articles

updated about 12 hours ago

Attack3,634 Gov331 Vulnerability1,006 Privacy286 Fraud415

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

Latest

Attack & NewscriticalThe Hacker News

Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores

Attackers are exploiting a new unpatched vulnerability in Magento Open Source and Adobe Commerce that lets them run malicious code on an online store's server without logging in, Dutch e-commerce security company Sansec…

about 13 hours agoRead more

Latest

Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores

Recent Articles

Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities

Latest

Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores

Recent Articles

Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities

Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials

Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code

Over 5,400 hacked sites serve ClickFix payloads stored on the blockchain

Trezor Says ShipMonk Breach Exposed 67,000 U.S. Customers' Data It Said Was Deleted

Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites

OpenAI admits it didn't disclose rogue AI wiki hijacking incident

OpenAI Agents Hacked Another Website

Thousands of OpenAI Agents Quietly Turned an Abandoned Wiki Into Their Coordination Channel

Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution

numbat - AI agent observability, (Fri, Sep 4th)

European parliament members call for slowdown of Serbia’s EU entry over spyware use

Friday Squid Blogging: Squid on a Stick at the New York State Fair

Bypassing the Gatekeepers: How a Global Phishing Campaign Turns Google's Infrastructure into a Trust Proxy

ASCII smuggling isn't just an AI security risk

How to secure edge AI in customer-owned environments

The hidden work of modernizing Malwarebytes

IDScan sued over alleged data breach affecting 153 million drivers

Using a VM to Contain an AI Agent

In Other News: Microsoft’s Cloud Patches, Hacked Dropbox Accounts, Guardio’s $1.1B Valuation

HPE Patches Critical RCE Vulnerabilities in AOS-CX

OpenAI Pledges $1 Billion to Bring Frontier AI to Critical Infrastructure Defenders

Rogue OpenAI agents used dead German web site to communicate in May, months before Hugging Face incident

Phishing Campaign Sends Millions of Emails Using Invisible Unicode to Evade Filters

Critical Citrix NetScaler auth bypass now leveraged in attacks

PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw Enabling Replication-Role Code Execution

New Ted Backdoor Hides Inside Victims' Own HAProxy Builds to Intercept Web Traffic

Microsoft says some users can’t open the Teams desktop client

39 New Methods That Compromise Passkey Authentication

Sangoma Switchvox Vulnerabilities Exploited in the Wild

New CrowdStrike 'FalconFlank' zero-day grants SYSTEM privileges

X Money rollout linked to password-reset attacks

Exchange Online outage causes email delays, 'Server busy' errors

12-Year-Old PostgreSQL Vulnerability Enables Database, Server Takeover

California to Regulate AI Chatbot Toys Marketed at Children

CISA Adds One Known Exploited Vulnerability to Catalog

Payment Processor Nuvei Must Implement Robust Merchant Screening Practices and Pay $4.85 Million to Settle FTC Charges that the Firm Facilitated Merchant Fraud

Catch Raises $5 Million for AI Executive Assistant With Guardrails

Google warns of new Chrome zero-day flaw exploited in attacks

Attack & News

Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores

Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials

Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code

Over 5,400 hacked sites serve ClickFix payloads stored on the blockchain

Trezor Says ShipMonk Breach Exposed 67,000 U.S. Customers' Data It Said Was Deleted

Gov Alerts / ISAC

Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution

Vulnerability Alerts

How to secure edge AI in customer-owned environments

Privacy & Governance

Friday Squid Blogging: Squid on a Stick at the New York State Fair

Using a VM to Contain an AI Agent

Fraud & Scams

Bypassing the Gatekeepers: How a Global Phishing Campaign Turns Google's Infrastructure into a Trust Proxy

Feed Activity

numbat - AI agent observability, (Fri, Sep 4th)

CISA Adds One Known Exploited Vulnerability to Catalog

ISC Stormcast For Friday, September 4th, 2026 https://isc.sans.edu/podcastdetail/10082, (Fri, Sep 4th)

VU#889462: Casdoor authentication server is vulnerable to authorization bypass

HP Easy Start for macOS: CVE-2026-12554 / CVE-2026-12555 / CVE-2026-12556

Next.js 16.4.0-canary.13 Image Optimizer DNS Rebinding TOCTOU SSRF Still Exists

O-CMS 1.0.0 Authenticated OS Command Injection via ai_cli_script

Flextype v1.0.0-alpha.3 CMS registerShortcodes() Remote Code Execution via Attacker-Controlled File Inclusion

Security Vulnerability in a Voting System

AI Coding Agents Are Installing Unknown/Untrusted Code on Corporate Networks

Court Rules Against Citizen Journalists in DMCA Takedown Case—EFF Will Appeal

The hidden work of modernizing Malwarebytes

X Money rollout linked to password-reset attacks

Payment Processor Nuvei Must Implement Robust Merchant Screening Practices and Pay $4.85 Million to Settle FTC Charges that the Firm Facilitated Merchant Fraud

Free streaming boxes may be routing criminal traffic through your home