AttackFeed — Cybersecurity News Aggregator

attack_FeedLIVE

Search⌘K

Cybersecurity news from across the internet

Provided byWagner Cybersecurity LLC20+ years in cybersecurity

LIVE

8,179articles

updated 31 minutes ago

Attack5,466 Gov473 Vulnerability1,213 Privacy418 Fraud609

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

Latest

Privacy & GovernanceProofpoint

Proofpoint Joins Microsoft Integrated Cloud Email Security (ICES) Ecosystem

in about 4 hoursRead more

Attack & News

Recent Articles

Search archive →

GOVSANS Internet Storm Centerabout 2 hours ago

Looking for a Language [Guest Diary], (Wed, Oct 21st)

[This is a Guest Diary by Jeffray Spence, an ISC intern as part of the SANS.edu BACS program]

NEWShighCVE-2026-109618Bleeping Computer

Latest

Proofpoint Joins Microsoft Integrated Cloud Email Security (ICES) Ecosystem

Recent Articles

Looking for a Language &#x5b;Guest Diary&#x5d;, (Wed, Oct 21st)

Latest

Proofpoint Joins Microsoft Integrated Cloud Email Security (ICES) Ecosystem

Recent Articles

Looking for a Language &#x5b;Guest Diary&#x5d;, (Wed, Oct 21st)

StealC Malware Returns as Stadia RAT After Operation Endgame Takedown

Bias in Qwen3-Coder Model

Britain bets big on AI to defend against the threats AI is helping create

Kali Linux 2026.3 released with 6 new tools, desktop updates

Node2Shell Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages

Blue Initiative Offers Maritime Sector Dedicated Vulnerability Database

uCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat Accounts

PHP2Shell security flaws now sucessfully exploited in the wild

PHP Publishes Mitigation Advice for New RCE Flaw

Mythos 5 Ignored Real-World Harm in July Attack

Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations

Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions Logs

A week in security (October 19 – October 25)

Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware

Work to protect DNS from quantum decryption attacks is speeding up

ISC Stormcast For Monday, October 26th, 2026 https://isc.sans.edu/podcastdetail/10150, (Mon, Oct 26th)

YARA-X 1.22.0 Release, (Sun, Oct 25th)

Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers

PHP2Shell Exploitation Hits Government Entity Amid Global Scanning and Signs of AI-Assisted Hacking

AI coding agents hijacked using AGENTS.md file in Downloads folder

Former Unit 8200 Officers Raise $34 Million for Agentic SecOps Startup Mave

OpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbox Communication

SPECTER Attack Uses USB Power Signals to Leak Data From Air-Gapped PCs

BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot

Autonomous attack agent in 'Skynet mode' hijacks other models to carry out its evil deeds

The PHP Meltdown Shows How AI Makes Bugs More Exploitable

Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline

Google Says Gmail and Photos Data Shared With AI Search Could Be Used for Targeted Ads

Researchers Push Over 2 Million Updates to Remotely Disable Popcorn Time Updater That Could Fuel a Botnet

Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software

CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud

The Vulnerability Apocalypse and Why We Should Fund Open Source

Computer Security Is About to Get a Lot Worse, Here’s What You Can Do

Friday Squid Blogging: Increasing Squid Populations

Abandoned Popcorn Time app exposed millions of device to RCE attacks

(Reliable)&#x3f; php2shell exploitability, (Fri, Oct 23rd)

There's a third PHP2Shell bug, but it won't get an emergency fix

Red-team report found OpenAI utterly failed to monitor its agents during Hugging Face attack

Attack & News

StealC Malware Returns as Stadia RAT After Operation Endgame Takedown

Britain bets big on AI to defend against the threats AI is helping create

Kali Linux 2026.3 released with 6 new tools, desktop updates

Node2Shell Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages

Blue Initiative Offers Maritime Sector Dedicated Vulnerability Database

Gov Alerts / ISAC

Looking for a Language &#x5b;Guest Diary&#x5d;, (Wed, Oct 21st)

ISC Stormcast For Monday, October 26th, 2026 https://isc.sans.edu/podcastdetail/10150, (Mon, Oct 26th)

Vulnerability Alerts

Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks

Infostealer riding the AI Train

Privacy & Governance

Proofpoint Joins Microsoft Integrated Cloud Email Security (ICES) Ecosystem

Bias in Qwen3-Coder Model

Fraud & Scams

A week in security (October 19 – October 25)

Suspicious Letters Containing White Powder Mailed to State and Local Election Officials, Media Organizations, and Public and Private Polling Companies

Feed Activity

YARA-X 1.22.0 Release, (Sun, Oct 25th)

(Reliable)&#x3f; php2shell exploitability, (Fri, Oct 23rd)

PHP Vulnerability Wrap-Up, (Fri, Oct 23rd)

EMudhra Intermediate CA Certificates Compromised

The Current Landscape of OAuth Attacks

ZDI-26-790: OpenSSL CMS AuthEnvelopedData Improper Validation of Integrity Check Value Vulnerability

The Vulnerability Apocalypse and Why We Should Fund Open Source

Computer Security Is About to Get a Lot Worse, Here’s What You Can Do

Friday Squid Blogging: Increasing Squid Populations

Critical Vulnerability Alert: PHP Core

Warning: Attackers Are Using Calendar Invite Files to Evade Security Filters

Resident Evil maker Capcom warns of phishing after 11.7 million records exposed

Looking for a Language [Guest Diary], (Wed, Oct 21st)

Looking for a Language [Guest Diary], (Wed, Oct 21st)

(Reliable)? php2shell exploitability, (Fri, Oct 23rd)

Looking for a Language [Guest Diary], (Wed, Oct 21st)

(Reliable)? php2shell exploitability, (Fri, Oct 23rd)