AttackFeed — Cybersecurity News Aggregator

Cybersecurity news from across the internet

Provided byWagner Cybersecurity LLC20+ years in cybersecurity

LIVE

4,214articles

updated about 13 hours ago

Attack2,665 Gov259 Vulnerability779 Privacy224 Fraud287

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

Latest

Attack & NewshighBleeping Computer

Hackers breach TrueConf to trojanize client installers with backdoors

The Head Mare hacktivist group has been exploiting vulnerabilities in unpatched TrueConf video conferencing servers to replace client installers with malicious versions that deliver backdoors. [...]

about 14 hours agoRead more

Latest

Hackers breach TrueConf to trojanize client installers with backdoors

Recent Articles

Progress Kemp LoadMaster Flaw Hits CISA KEV After 792 Reported Exploit Attempts

Latest

Hackers breach TrueConf to trojanize client installers with backdoors

Recent Articles

Progress Kemp LoadMaster Flaw Hits CISA KEV After 792 Reported Exploit Attempts

Devs to Anthropic, OpenAI, Cursor, and friends: Make security and privacy the default

Critical One-Click Vulnerability in Atlassian’s Rovo AI Exposed Enterprise Data

Flock’s Plans for Rideshare Dashcams and Coaching Police, Revealed

Sensitive Info Goes Into ‘No Reply’ Emails Constantly. This Guy Sees It All

Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Attackers

New CSS Attacks Can Break Webmail Defenses to Steal Passwords and Tokens

Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication

N-able Issues N-central Hotfix 2 as Attackers Reach Managed Systems and Persist

OpenAI pledges to add Astra security as Anthropic loosens Fable's leash

Inside the Modern SOC: The Identity Front Door

AI chat bots are sliding into League of Legends friend requests

Friday Squid Blogging: Arctic Bobtail Squid Video

Meta ordered to pay $942 million over harm to children

Metabase SQLi zero-day exploited in customer data-theft attacks

Water system controllers don't belong on the internet, says ex-NSA chief after suspected Iran attacks

Unlimited Technology Systems breach impacts 3.8 million people

Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealer

ClickFix Attacks Deliver macOS Stealer That Can Drain Crypto Wallets

UNC6671 Vishing Attacks Target Personal Phones to Steal SaaS Data

More than half of AI-generated patches are broken

Ransomware attacks spike as world distracted by AI

Levi Strauss & Co. says hackers stole corporate data in cyberattack

N-able God mode flaw: Vendor confirms attackers reached customer networks as second hotfix lands

In Other News: AI Slop Limits Apple Bounties, North Carolina Port Attacks, Hackers Target Wall Street

Coast Guard says it is monitoring cyberattack that disrupted North Carolina’s ports

VU#987105: The nothings stb TrueType library, up to version 1.26, contains a heap buffer overflow vulnerability

MIT boffins' TONTOU attack slips through Spectre defenses on Intel and AMD CPUs

Real emails, hijacked payments: Two H1 2026 attack chains

Scot NHS trust probes access to medical records of 9-year-old girl after man arrested on suspicion of murder

North Carolina Ports confirms cyberattack disrupting operations

Your KnowBe4 Fresh Content Updates from July 2026

New WordPress Pre-Auth XSS Could Lead to PHP Code Execution - Patch ASAP

FTC Ditches ‘Disparate Impact’

CISA Adds One Known Exploited Vulnerability to Catalog

Growing Up The Hard Way

Attacker phished way into US defense supplier's Microsoft 365 account

18-Year-Old Linux SCTP Flaw Could Let Local Users Gain Root and Escape Containers

Vishing Extortion Group UNC6671 Rebrands After Making Millions

Attack & News

Hackers breach TrueConf to trojanize client installers with backdoors

Devs to Anthropic, OpenAI, Cursor, and friends: Make security and privacy the default

Critical One-Click Vulnerability in Atlassian’s Rovo AI Exposed Enterprise Data

Flock’s Plans for Rideshare Dashcams and Coaching Police, Revealed

Sensitive Info Goes Into ‘No Reply’ Emails Constantly. This Guy Sees It All

Gov Alerts / ISAC

VU#987105: The nothings stb TrueType library, up to version 1.26, contains a heap buffer overflow vulnerability

Vulnerability Alerts

Inside the Modern SOC: The Identity Front Door

July 2026 CVE Landscape

Privacy & Governance

Friday Squid Blogging: Arctic Bobtail Squid Video

ICE Is Buying Access to Credit Card Records

Fraud & Scams

AI chat bots are sliding into League of Legends friend requests

Meta ordered to pay $942 million over harm to children

Feed Activity

CISA Adds One Known Exploited Vulnerability to Catalog

Linux Shell Forensic: Let&#x3f;s Dive Into Atuin&#x21;, (Fri, Aug 7th)

Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution

ISC Stormcast For Friday, August 7th, 2026 https://isc.sans.edu/podcastdetail/10042, (Fri, Aug 7th)

ChainDrop: Inside a Self-Propagating npm Worm

When Agentic Glue Melts: Exploiting Cloudflare Code Mode and Workers

Dangling DNS record for bastion.certb.cdp.bethesda.net

Adversarial Clothing Designed to Fool Facial Recognition Systems

Vulnerabilities in Car Anti-Theft Device

Tomorrow’s U.S. Senate Vote: Four Internet Bills, One Wrong Direction

Your KnowBe4 Fresh Content Updates from July 2026

FTC Ditches ‘Disparate Impact’

AI Did Not Invent Social Engineering But It Did Industrialize It.

Linux Shell Forensic: Let?s Dive Into Atuin!, (Fri, Aug 7th)