AttackFeed — Cybersecurity News Aggregator

attack_FeedLIVE

Search⌘K

Cybersecurity news from across the internet

Provided byWagner Cybersecurity LLC20+ years in cybersecurity

LIVE

6,568articles

updated 17 minutes ago

Attack4,256 Gov385 Vulnerability1,111 Privacy337 Fraud479

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

Latest

NEWS

Attack & News · Live

Attack & NewshighHackread

ShinyHunters Hacks FBI Jobs Portal, Claims It Stole Agents’ Data

ShinyHunters hacks the FBI Jobs portal and claims sensitive data on nearly all FBI agents and job applicants before the site is taken offline for security work.

37 minutes agoRead more

Recent Articles

Search archive →

VULNcriticalFull Disclosureabout 3 hours ago

[0day-rubbish] TigerGraph Community Edition 4.2.4 Default credentials plus GSQL TO_CSV arbitrary file write to SSH code execution (9.8)

Posted by disclosure via Fulldisclosure on Sep 22 0day Rubbish Research Team is publicly disclosing a vulnerability in TigerGraph…

FD

VULNcritical

Latest

ShinyHunters Hacks FBI Jobs Portal, Claims It Stole Agents’ Data

Recent Articles

[0day-rubbish] TigerGraph Community Edition 4.2.4 Default credentials plus GSQL TO_CSV arbitrary file write to SSH code execution (9.8)

Latest

ShinyHunters Hacks FBI Jobs Portal, Claims It Stole Agents’ Data

Recent Articles

[0day-rubbish] TigerGraph Community Edition 4.2.4 Default credentials plus GSQL TO_CSV arbitrary file write to SSH code execution (9.8)

Chinese hackers exploit WordPress, Zyxel flaws to steal govt data

ShinyHunters claims FBI hack, data theft in PeopleSoft zero-day breach

Volexity spots another China-aligned threat group exploiting Chrome and Microsoft defects

Code Security Review tool

HP Advance / Output Central: unauthenticated SYSTEM RCE and two additional vulnerabilities (CVE-2026-89082/89083/89084)

CFP No cON Name 2k26 - Palma, Mallorca - Spain

CVE-2026-17613: Penpot cross-team file takeover via import-binfile (unpatched in 2.17.2)

CVE-2026-44756: Pre-Auth RCE in SAP EPP Processing (ICM, Web Dispatcher, disp+work)

[0day-rubbish] Teltonika RutOS 00.07.06.21 Authenticated ipsec.lua logread command injection with reflected output (8.8)

APPLE-SA-09-14-2026-10 Xcode 27

APPLE-SA-09-14-2026-9 Safari 27

APPLE-SA-09-14-2026-8 visionOS 27

APPLE-SA-09-14-2026-7 watchOS 27

APPLE-SA-09-14-2026-6 tvOS 27

APPLE-SA-09-14-2026-5 macOS Sequoia 15.8

APPLE-SA-09-14-2026-4 macOS Tahoe 26.7

APPLE-SA-09-14-2026-3 macOS Golden Gate 27

APPLE-SA-09-14-2026-2 iOS 26.7 and iPadOS 26.7

Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks

VU#738147: Vendor-signed UEFI Shell applications allow Secure Boot bypass

New ClosedQuorum Windows malware uses AI for attack decisions

WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers

Malicious npm Package Poses as Twilio Bug-Bounty Probe, Can Exfiltrate Credentials

BigCommerce Data Stolen via Ribon Apps Hack

ShinyHunters claims FBI hack: 'This is NOT financially motivated'

Reducing shadow IT visibility gaps with Wazuh

Microsoft Takes Down EvilTokens Device-Code Phishing Service Tied to 12,000 Inbox Compromises

RatHat Android Malware Uses AI to Target Banking Credentials in Real Time

Gemini AI Autonomously Hacked 3 Companies, Google Confirms

Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials

NightmareEclipse's latest zero-day leaves Microsoft Defender stuck in the past

Check Point warns of Management Server zero-day exploited in attacks

Researcher Drops BigDiskBuster Zero-Day PoC That Blocks Microsoft Defender Updates

Z.ai says sorry for slurping up your code, open sources ZCode

MovieReaper Malware Uses The Odyssey Torrents to Infect Users Worldwide

Citing China, President Trump doubles down on hands-off approach to AI regulation

Some cheap smart glasses are a security disaster

Unmasking EvilTokens: Getting to the root of device code phishing

Attack & News

ShinyHunters Hacks FBI Jobs Portal, Claims It Stole Agents’ Data

Chinese hackers exploit WordPress, Zyxel flaws to steal govt data

ShinyHunters claims FBI hack, data theft in PeopleSoft zero-day breach

Volexity spots another China-aligned threat group exploiting Chrome and Microsoft defects

Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks

Gov Alerts / ISAC

VU#738147: Vendor-signed UEFI Shell applications allow Secure Boot bypass

The Truth about GET and HTTP Standards, (Tue, Sep 22nd)

Vulnerability Alerts

Code Security Review tool

Privacy & Governance

GPT-6 Astra Breaks an Old Enigma Message

Proofpoint Stops the Attacks Traditional Defenses Miss in the AI Era

Fraud & Scams

Some cheap smart glasses are a security disaster

Feed Activity

CISA Adds Four Known Exploited Vulnerabilities to Catalog

ISC Stormcast For Tuesday, September 22nd, 2026 https://isc.sans.edu/podcastdetail/10104, (Tue, Sep 22nd)

CISA Adds One Known Exploited Vulnerability to Catalog

HP Advance / Output Central: unauthenticated SYSTEM RCE and two additional vulnerabilities (CVE-2026-89082/89083/89084)

CFP No cON Name 2k26 - Palma, Mallorca - Spain

CVE-2026-17613: Penpot cross-team file takeover via import-binfile (unpatched in 2.17.2)

CVE-2026-44756: Pre-Auth RCE in SAP EPP Processing (ICM, Web Dispatcher, disp+work)

Proofpoint Breaks Down the Divide Between Data Security and AI Security with the Industry’s First Unified Agentic System

D.C. Circuit Must Vacate a Drone Flight Restriction That Criminalized Recording Immigration Agents

Reverse-Engineering Flock Cameras

AI-Assisted Phishing Campaign Sent Over A Million Personalized Emails

Quantum Readiness Day: How to Prepare for Post-Quantum Security

Meta’s Muse AI assistant has a zero-day that can turn it into a Mac backdoor

Researchers used Claude to hack OpenAI