AttackFeed — Cybersecurity News Aggregator

attack_FeedLIVE

Search⌘K

Cybersecurity news from across the internet

Provided byWagner Cybersecurity LLC20+ years in cybersecurity

LIVE

8,422articles

updated 18 minutes ago

Attack5,623 Gov483 Vulnerability1,270 Privacy425 Fraud621

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

Latest

Vulnerability AlertscriticalFull Disclosure

[0day-rubbish] Moxa MAR-2000 firmware FWR_MAR2000_V1.0_Build_15010909 IPsec tunnel address command injection through the route-management shell commands (7.2)

Posted by disclosure via Fulldisclosure on Oct 28 0day Rubbish Research Team is publicly disclosing a vulnerability in the Moxa MAR-2000 series industrial 4G/LTE cellular router, firmware image FWR_MAR2000_V1.0_Build_150…

25 minutes agoRead more

Recent Articles

Search archive →

NEWSHackreadabout 5 hours ago

Transferring Unused IPv4 Addresses in Asia Pacific: The Complete APNIC Playbook

Understand APNIC IPv4 transfer rules, buyer requirements, fees and approval steps, with helpful checks to assess address blocks be…

NEWSHackreadabout 6 hours ago

Next-gen privacy protocols: WireGuard vs OpenVPN vs Shadowsocks

Compare WireGuard, OpenVPN and Shadowsocks for speed, privacy, enterprise access and censorship resistance, including VPN tunnels…

Latest

[0day-rubbish] Moxa MAR-2000 firmware FWR_MAR2000_V1.0_Build_15010909 IPsec tunnel address command injection through the route-management shell commands (7.2)

Recent Articles

Transferring Unused IPv4 Addresses in Asia Pacific: The Complete APNIC Playbook

Next-gen privacy protocols: WireGuard vs OpenVPN vs Shadowsocks

Latest

[0day-rubbish] Moxa MAR-2000 firmware FWR_MAR2000_V1.0_Build_15010909 IPsec tunnel address command injection through the route-management shell commands (7.2)

Recent Articles

Transferring Unused IPv4 Addresses in Asia Pacific: The Complete APNIC Playbook

Next-gen privacy protocols: WireGuard vs OpenVPN vs Shadowsocks

[0day-rubbish] Moxa MAR-2000 firmware FWR_MAR2000_V1.0_Build_15010909 command injection in the Executer program activation path (7.2)

Re: CVE-2026-109618: PHP-CGI Pointer Underflow → Remote Code Execution (CVSS 9.2)

Maximised JSON Array Attacks -- "Let the Commas Hit the Floor" Proof of Concept

Continued Apache Struts2 JSON Plugin Insecure Deserialisation

Bluesky Is Blocking Links to a Major Leak of DHS Employee Records

ISC Stormcast For Thursday, October 29th, 2026 https://isc.sans.edu/podcastdetail/10156, (Thu, Oct 29th)

Officials seize domain of top bulletproof hosting provider Virtualine

Leak site publishes data on more than 41,000 DHS employees obtained by hacktivists

Police seize Virtualine bulletproof service tied to ransowmare, cybercrime

Most Servers on the Planet Are Vulnerable to This Firmware Code-Execution Flaw

Victory! You Can Now Exclude Apps from Siri AI

Massive Leak Exposes 41,000 Homeland Security Workers—Including Undercover ICE Agents

Oracle celebrates end of Cybersecurity Awareness Month with quadruple trouble

Court Should Curb Abuse of Grand Jury Subpoenas Targeting Social Media Users

From Rules to AI and Back

Lawsuit against Ex-Overstock CEO tied to 2020 election film falls apart over question of ‘actual malice’

Discord to let search engines index public server messages

Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns

Unwrapping Retail Peak Season Cyber Threats

Summit Public Schools Breach Exposes 115 GB of Student and Staff Data

OffSec Launches Free PHP2Shell Lab Following Critical Vulnerability Discovery

Google to Allow One-Tap Android App Installs From Approved Third-Party Stores Outside U.S.

Sony ISP subsidiary data breach exposes 2.5 million customer records

Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own Win

Yet Another ClickFix Campaign, (Wed, Oct 28th)

PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network

Scanner Poses as 32 AI Bots to Find Credentials and Private Keys

Volt Typhoon hides zero-day attacks using 'Silent Train' framework

Researchers uncover Volt Typhoon’s covert, ephemeral network

The CISO’s evolving role: Protecting and defending in the agentic era

Serial ransomware crook gets 70 months behind bars for Nefilim, Hive roles

Japan’s GMO Internet Urges Customers to Disconnect PCs

Prosecutors charge Madagascar scammers in NFT-stealing scheme based on fake online dating profiles

💾 Fighting DOGE's Data Grab | EFFector 38.19

Attackers Hide Malware Behind Signed ChatGPT and Claude Binaries

Ukrainian Hive and Nefilim Ransomware Affiliate Gets 70 Months in US Prison

Hackers Target US Federal Election Commission

Attack & News

Bluesky Is Blocking Links to a Major Leak of DHS Employee Records

Officials seize domain of top bulletproof hosting provider Virtualine

Transferring Unused IPv4 Addresses in Asia Pacific: The Complete APNIC Playbook

Next-gen privacy protocols: WireGuard vs OpenVPN vs Shadowsocks

Leak site publishes data on more than 41,000 DHS employees obtained by hacktivists

Gov Alerts / ISAC

ISC Stormcast For Thursday, October 29th, 2026 https://isc.sans.edu/podcastdetail/10156, (Thu, Oct 29th)

Yet Another ClickFix Campaign, (Wed, Oct 28th)

Vulnerability Alerts

[0day-rubbish] Moxa MAR-2000 firmware FWR_MAR2000_V1.0_Build_15010909 IPsec tunnel address command injection through the route-management shell commands (7.2)

Privacy & Governance

Victory! You Can Now Exclude Apps from Siri AI

Court Should Curb Abuse of Grand Jury Subpoenas Targeting Social Media Users

Fraud & Scams

Banks are blocking AI agents from customer accounts

FTC Launches Personalized Pricing and Compensation Inquiry

Feed Activity

CISA Adds Two Known Exploited Vulnerabilities to Catalog

Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution

ISC Stormcast For Wednesday, October 28th, 2026 https://isc.sans.edu/podcastdetail/10154, (Wed, Oct 28th)

[0day-rubbish] Moxa MAR-2000 firmware FWR_MAR2000_V1.0_Build_15010909 command injection in the Executer program activation path (7.2)

Re: CVE-2026-109618: PHP-CGI Pointer Underflow → Remote Code Execution (CVSS 9.2)

Maximised JSON Array Attacks -- "Let the Commas Hit the Floor" Proof of Concept

Continued Apache Struts2 JSON Plugin Insecure Deserialisation

💾 Fighting DOGE's Data Grab | EFFector 38.19

Studying Fraudulent North Korean IT Workers

Proofpoint Introduces Flex to Help Customers Invest with Confidence as Security Needs Evolve

Chrome and Firefox updates fix serious security flaws. Install them now

Attackers Abuse Legitimate Infrastructure to Distribute Phishing Emails

Five election scams to watch out for