AttackFeed — Cybersecurity News Aggregator

attack_FeedLIVE

Search⌘K

Cybersecurity news from across the internet

Provided byWagner Cybersecurity LLC20+ years in cybersecurity

LIVE

5,208articles

updated about 1 hour ago

Attack3,294 Gov310 Vulnerability970 Privacy258 Fraud376

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

Latest

GOV

Gov Alerts / ISAC · Live

Gov Alerts / ISACSANS Internet Storm Center

ISC Stormcast For Thursday, August 27th, 2026 https://isc.sans.edu/podcastdetail/10070, (Thu, Aug 27th)

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

about 2 hours agoRead more

Recent Articles

Search archive →

NEWSBleeping Computerabout 9 hours ago

New GPUThor attack defeats NVIDIA ECC protection for root access

A newly disclosed Rowhammer attack called GPUThor can bypass error-correcting code (ECC) protections on NVIDIA GPUs, enabling deni…

NEWSCyberScoopabout 9 hours ago

Three 10.0 security flaws fixed across Ubiquiti’s UniFi line

The communications product company disclosed 22 total Wednesday, all but one of which was rated “critical” at 9.0 or higher. The p…

Latest

ISC Stormcast For Thursday, August 27th, 2026 https://isc.sans.edu/podcastdetail/10070, (Thu, Aug 27th)

Recent Articles

New GPUThor attack defeats NVIDIA ECC protection for root access

Three 10.0 security flaws fixed across Ubiquiti’s UniFi line

Latest

ISC Stormcast For Thursday, August 27th, 2026 https://isc.sans.edu/podcastdetail/10070, (Thu, Aug 27th)

Recent Articles

New GPUThor attack defeats NVIDIA ECC protection for root access

Three 10.0 security flaws fixed across Ubiquiti’s UniFi line

FBI seizes hacking tools it says China used to attack NASA, DOE, US Senate and other critical networks

OpenAI explains how its naughty AI agents attacked Hugging Face

Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure

Critical Avada WordPress theme flaw enables zero-click RCE

Officials disrupt Chinese espionage operation that hit multiple federal agencies

OpenAI’s Hugging Face Hack Debrief Raises More Questions Than It Answers

More than 100 water systems were hit in July cyberattacks

OpenAI: Agent behavior that led to Hugging Face intrusion formed in May

FBI Disrupts Chinese Proxy Tools Used in Mass Hacking of US Agencies and Infrastructure

EFF's Policy Position on ALPR Surveillance: Eliminate It and Reduce Its Harms

100+ Internet-Exposed Water Systems Faced Cyberattacks Last Month

A Look Inside the Phishing Service Attacking Organizations

FD - Half-click unauthenticated remote code execution on Horde Groupware IMP (from a stored XSS)

[NotCVE-2026-0013] CHIRP Kenwood ITM Driver Eval Injection Allows Arbitrary Code Execution via Crafted Radio File

[NotCVE-2026-0012] EmpManageX Hardcoded Administrative Credentials in Login API Allow Full Access to Employee Records

[NotCVE-2026-0011] Nmap 7.99 and Earlier nselib/packet.lua Zero-Length TCP Option Infinite Loop Allows Remote Denial of Service

[NotCVE-2026-0010] Barrier 2.4.0 for Windows Unauthenticated IPC Command Execution Allows Local Privilege Escalation to SYSTEM

[NotCVE-2026-0009] NitroShare Desktop 0.3.4 Path Traversal Allows LAN-Adjacent Arbitrary File Write

When AI infrastructure becomes the target: Securing gateways and control points

FBI Disrupts China-Linked QTFY Infrastructure Used to Steal Data From U.S. Organizations

Meta agrees to $18 billion settlement over teen social media harms

EFF Statement on Meta Settlement

Who Has Admin Rights in your Entra ID Directory&#x3f;, (Wed, Aug 26th)

Boston Scientific discloses 'global disruption' in ongoing cyberattack

Nimbus Manticore Expands Toolset With TWOSTROKE-Like Backdoor and SSH Tunneler

Escargot v4.3.0-214-gfaee4437 Unauthenticated Remote Debugger Allows Arbitrary JavaScript Evaluation and Local File Disclosure

Escargot v4.3.0-214-gfaee4437 OS Command Injection in Crash Handler via Unsanitized Executable Path

Escargot v4.3.0-214-gfaee4437 Debugger WebSocket Off-by-One Stack Buffer Overflow

UltraJSON v5.13.0-6-g733f9e1 Length-Boundary Violation Causes Out-of-Bounds Read During Incomplete JSON Parsing

Realtek edimax 52fc10d19 In-Band Ioctl Response Length Confusion Causes Heap Buffer Overflow

WatsonWebserver v7.1.0 HTTP/1 Chunked Request Processing Bypasses MaxRequestBodySize

Chronicle Wire v2026.8 Arbitrary Class Instantiation During YAML Deserialization via Externally Controlled YAML Type Tags

Chronicle Wire v2026.8 Insecure Reflection Allows Unvalidated Method Invocation

Chronicle Wire v2026.8 FileMarshallableOut Append Operations Follow Symbolic Links and Allow File Write Redirection

Multiple Vulnerabilities in TBEA TLogger Communication Box 3rd Generation

[0day-rubbish] VitalPBX 4.5.2 (Asterisk 20.20.1) Authenticated root RCE via asterisk_cli to dialplan System() (8.8)

[0day-rubbish] Seeq Server R65.2.3 (default deployment with Data Lab installed via the official CLI) Unauthenticated RCE (open self-registration + Data Lab Jupyter missing authorization) (9.8)

Attack & News

FBI seizes hacking tools it says China used to attack NASA, DOE, US Senate and other critical networks

OpenAI explains how its naughty AI agents attacked Hugging Face

Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure

Critical Avada WordPress theme flaw enables zero-click RCE

Officials disrupt Chinese espionage operation that hit multiple federal agencies

Gov Alerts / ISAC

ISC Stormcast For Thursday, August 27th, 2026 https://isc.sans.edu/podcastdetail/10070, (Thu, Aug 27th)

Who Has Admin Rights in your Entra ID Directory&#x3f;, (Wed, Aug 26th)

Vulnerability Alerts

FD - Half-click unauthenticated remote code execution on Horde Groupware IMP (from a stored XSS)

Privacy & Governance

EFF's Policy Position on ALPR Surveillance: Eliminate It and Reduce Its Harms

EFF Statement on Meta Settlement

Fraud & Scams

Update Chrome before you browse again

Attackers Use Vishing Attacks to Distribute New Android Malware

Feed Activity

CISA Adds Six Known Exploited Vulnerabilities to Catalog

ISC Stormcast For Wednesday, August 26th, 2026 https://isc.sans.edu/podcastdetail/10068, (Wed, Aug 26th)

VU#308749: Remote Code Execution and Arbitrary File Read Vulnerabilities in Kaltura Servers

[NotCVE-2026-0013] CHIRP Kenwood ITM Driver Eval Injection Allows Arbitrary Code Execution via Crafted Radio File

[NotCVE-2026-0012] EmpManageX Hardcoded Administrative Credentials in Login API Allow Full Access to Employee Records

[NotCVE-2026-0011] Nmap 7.99 and Earlier nselib/packet.lua Zero-Length TCP Option Infinite Loop Allows Remote Denial of Service

[NotCVE-2026-0010] Barrier 2.4.0 for Windows Unauthenticated IPC Command Execution Allows Local Privilege Escalation to SYSTEM

French Top Court Gets It Right, Strikes Down Social Media Ban For Youths

Spyware for Babies

Black Hat State of Security Vendors

Popular school apps may be sharing student data with advertisers

FTC Announces 2027 Telemarketer Fees to Access the National Do Not Call Registry

Beware of fake Indeed interview apps used to install spyware

Who Has Admin Rights in your Entra ID Directory?, (Wed, Aug 26th)

Who Has Admin Rights in your Entra ID Directory?, (Wed, Aug 26th)