AttackFeed — Cybersecurity News Aggregator

attack_FeedLIVE

Search⌘K

Cybersecurity news from across the internet

Provided byWagner Cybersecurity LLC20+ years in cybersecurity

LIVE

7,288articles

updated 29 minutes ago

Attack4,791 Gov428 Vulnerability1,171 Privacy365 Fraud533

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

Latest

NEWS

Attack & News · Live

Attack & NewsHackread

Karina Portugal Makes the Case for Know Your Agent

Karina Portugal has spent more than ten years working in digital identity, fraud prevention, anti-money laundering and Know…

34 minutes agoRead more

Recent Articles

Search archive →

NEWSCyberScoopabout 4 hours ago

Former NSA chief Nakasone says agency overhaul is ‘probably needed’

Paul Nakasone said the reported reorganization is likely necessary to meet faster-moving cyberthreats and competition in AI, but w…

VULNcriticalFull Disclosureabout 4 hours ago

Latest

Karina Portugal Makes the Case for Know Your Agent

Recent Articles

Former NSA chief Nakasone says agency overhaul is ‘probably needed’

[0day-rubbish] StreamSets Transformer 3.17.0 auth-mode none fallback and un-sandboxed ScalaDTransform execution to container root (8.1 primary)

Latest

Karina Portugal Makes the Case for Know Your Agent

Recent Articles

Former NSA chief Nakasone says agency overhaul is ‘probably needed’

[0day-rubbish] StreamSets Transformer 3.17.0 auth-mode none fallback and un-sandboxed ScalaDTransform execution to container root (8.1 primary)

Alert: FortiBleed remains active campaign, can lock out users or lead to ransomware attacks

Ninja Forms plugin flaw exploited to hack WordPress sites

New Phishing Campaign Uses Claude-Themed Lures

Wiretapping change sparks big privacy fight in the Golden State

Hackers exploit 32 zero-days on first day of Pwn2Own Ireland

Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes

Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan

[0day-rubbish] RCDevs WebADM 2.4.14 authenticated log viewer sid command injection to webadm uid 999 code execution (7.2)

[0day-rubbish] Maian Cart 3.8 addBanners unrestricted banner upload to PHP webshell and administrator command execution (7.2 primary, PR:H)

[0day-rubbish] IPConfigure Orchid VMS 26.3.0 authenticated DNF repository GPG-key property command injection to root (7.2)

[0day-rubbish] Circutor LineEds 24.11.14-r0 unauthenticated pwrstudio events.xml shellExecute command injection (9.8)

[0day-rubbish] Asustor ADM 3.5.9.RWM1 (AS602T) music.cgi act=live stored-filename command injection reaching system() (8.8 primary, PR:L)

[0day-rubbish] Advantech WebAccess Node 9.2.3 unauthenticated CrystalRpt.aspx file upload and path traversal to code execution in w3wp.exe (9.8)

SEC Consult Research 20261001 :: Arbitrary Email sender spoofing in Apple iCloud mail

SEC Consult SA-20260924-0 :: Multiple Vulnerabilities in Paessler PRTG Network Monitor #CVE-2026-4637 #CVE-2026-4638

Researchers Determine That 2,514 Cybersecurity Events Occur Each Second

Atlassian warns of critical file-access flaw in Jira, Confluence

Trump Mobile customers' data dumped - and some never even received their gold device

You Won’t Hear About These, Even In Myths (Atlassian Jira, Confluence (and more) Pre-Auth Arbitrary File Read CVE-2026-21589)

FBI Removes Accenture Contractor Over ShinyHunters Job Site Data Breach

ASOS confirms data breach after “HACKED” in-app notifications

Mississippi City Discloses Ransomware Incident

CISO perspectives on managing vulnerability risks in the age of AI

Warning: Tech Support Scams Are Abusing Google Ads

Fake ChatGPT, Gemini Sites steal advertising accounts, MFA codes

Microsoft extends the Outlook naughty step with two more file types

ClickFix Attack Hides VBScript Payload in Browser Cache

US-Bound Oil Supertanker Breached by Hackers

5 Astrix and Aembit Alternatives for AI Agent Identity Security

Frontline Education Data Breach Highlights Third-Party Risks

FBI Blames Contractor’s Missed Patch for ShinyHunters Breach

ASOS “hackers” send push notifications to customers

How to secure RMM software: 8 controls MSPs should test

Nikkei Discloses Two Employee Cloud Account Compromises

The Price of a Deal: How Scammers are Hijacking Amazon Prime Day

Aembit Extends Access Controls to Personal AI Agents

Red Hat’s Lightwell Project Remediates 400 Open-Source Vulnerabilities

Attack & News

Karina Portugal Makes the Case for Know Your Agent

Alert: FortiBleed remains active campaign, can lock out users or lead to ransomware attacks

Ninja Forms plugin flaw exploited to hack WordPress sites

Wiretapping change sparks big privacy fight in the Golden State

Hackers exploit 32 zero-days on first day of Pwn2Own Ireland

Gov Alerts / ISAC

ISC Stormcast For Tuesday, October 6th, 2026 https://isc.sans.edu/podcastdetail/10124, (Tue, Oct 6th)

More RMM Tools In the Wild, (Tue, Oct 6th)

Vulnerability Alerts

[0day-rubbish] StreamSets Transformer 3.17.0 auth-mode none fallback and un-sandboxed ScalaDTransform execution to container root (8.1 primary)

Privacy & Governance

Possible Vulnerability in Apple’s Automatic Reboot

Fraud & Scams

New Phishing Campaign Uses Claude-Themed Lures

Feed Activity

Introducing the New Small Business Cybersecurity Support Program Finder

ISC Stormcast For Monday, October 5th, 2026 https://isc.sans.edu/podcastdetail/10122, (Mon, Oct 5th)

TTY Logs and the Data it Captures, (Sun, Oct 4th)

[0day-rubbish] RCDevs WebADM 2.4.14 authenticated log viewer sid command injection to webadm uid 999 code execution (7.2)

[0day-rubbish] Maian Cart 3.8 addBanners unrestricted banner upload to PHP webshell and administrator command execution (7.2 primary, PR:H)

[0day-rubbish] IPConfigure Orchid VMS 26.3.0 authenticated DNF repository GPG-key property command injection to root (7.2)

[0day-rubbish] Circutor LineEds 24.11.14-r0 unauthenticated pwrstudio events.xml shellExecute command injection (9.8)

Another Historic Cipher Falls to AI

Friday Squid Blogging: EU is Trying to Fight Unregulated Squid Fishing

Site-Blocking Will Not Defend IP, No Matter the Bill’s Name

Congress Has Another Site-Blocking Bill, And This One Targets VPNs

Warning: Tech Support Scams Are Abusing Google Ads

ASOS “hackers” send push notifications to customers

The Price of a Deal: How Scammers are Hijacking Amazon Prime Day

Facebook Marketplace scam uses your name and number