AttackFeed — Cybersecurity News Aggregator

attack_FeedLIVE

Search⌘K

Cybersecurity news from across the internet

Provided byWagner Cybersecurity LLC20+ years in cybersecurity

LIVE

6,744articles

updated 11 minutes ago

Attack4,376 Gov397 Vulnerability1,140 Privacy340 Fraud491

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

Latest

Attack & NewshighBleeping Computer

MacSync malware uses public iCloud calendars to deliver new payloads

A new variant of the MacSync malware targeting macOS systems now uses public iCloud calendar events to deliver new native payloads. [...]

37 minutes agoRead more

Recent Articles

Search archive →

NEWSThe Hacker Newsabout 3 hours ago

Unpatched OnePlus Flaws Let Installed Android Apps Gain Root Without Permissions

A OnePlus 15 running the latest OxygenOS can be rooted by a malicious app the owner installs, one that asks for no special permiss…

NEWShighCyberScoop

Latest

MacSync malware uses public iCloud calendars to deliver new payloads

Recent Articles

Unpatched OnePlus Flaws Let Installed Android Apps Gain Root Without Permissions

Latest

MacSync malware uses public iCloud calendars to deliver new payloads

Recent Articles

Unpatched OnePlus Flaws Let Installed Android Apps Gain Root Without Permissions

Autonomous AI Hacks Raise Thorny Questions of Legal Accountability

DraftKings Is Using AI to Supercharge the Harms of Online Behavioral Advertising

New Carbonato malware uses AI agents to hijack exposed Docker hosts

AI-Generated Phishing Pages Are Impersonating Antivirus Services

OpenAI Agent Breached Australian Medicare Statistics Portal

VU#234131: ViewSonic vCast media streaming service allows unauthenticated screen exfiltration and device compromise

Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution

Salesforce Agentforce vulns allowed 0-click CRM data theft, anonymous phishing

New bill would create federal investigative body for AI-driven hacks

ThreatsDay: AI Search Poisoning, AI Coding Tool Leaking Repos, One-Click Code Execution and 13 More Stories

Exposed GitLab project email addresses let attackers push code

Phone-hacking company that won U.S. security agency contracts hid Russian ownership, DOJ alleges

Microsoft Password Reset Portal Can Leak Account Verification Details

Decades-old file security flaws found in Android, Linux, macOS, and Windows

Multiple Vulnerabilities in IBM Concert Software Could Allow for Remote Code Execution

CVE flood pushes Ubuntu onto weekly kernel release cycle

Sophisticated Phishing Operation Continues to Thrive Following FBI Takedown

OpenAI Agent Breaches Australian Government Health Service

Beyond the ransomware: Tracking Storm-2570’s consistent tradecraft across deployments

​​​​​​​​What’s new in Microsoft Security: September 2026​​

Kontext Security Emerges With $4 Million for AI Agent Runtime Controls

VU#676317: Norwegian Cruise Line door access controller contains an improper authentication vulnerability

The Hidden Security Risks of Devices You Forgot Were Connected

Placeholder third-party[.]com Referenced Across 1,700+ Repositories Now Serves Malicious Content

Someone went shopping in ASUS's eShop – for customer data

Emerging Ransomware Gang Uses Backup Destruction Threats to Pressure Victims

AI Leaders Warn UN the Technology Could Be a Risk to Humanity

OpenAI Agents Probed Websites for Vulnerabilities While Fetching Public Data

Hacked Ukrainian Sites Serve Fake Cloudflare ClickFix Lures for Psychedelic Stealer

SCOUTz Prospect Intelligence Platform Launches for MSPs with 30-Day Beta

FedRAMP VDR & VER: Daily Scans Are Only the Beginning

Bipartisan Senate leaders introduce bill to bolster telecom cybersecurity in response to Salt Typhoon hacks

Hackers now exploit critical Roundcube flaw in code injection attacks

OpenAI agent breached Australian government site, took months to report it

Google to critical infra orgs: Our AI scanners won't be evil, promise

CISA Charts New "Quality Era" for Global CVE Program

AI-Powered Campaign Targets Hundreds of Online Retailers

New Browser Guard features add protection before and after you click

Attack & News

MacSync malware uses public iCloud calendars to deliver new payloads

Autonomous AI Hacks Raise Thorny Questions of Legal Accountability

New Carbonato malware uses AI agents to hijack exposed Docker hosts

OpenAI Agent Breached Australian Medicare Statistics Portal

Salesforce Agentforce vulns allowed 0-click CRM data theft, anonymous phishing

Gov Alerts / ISAC

VU#234131: ViewSonic vCast media streaming service allows unauthenticated screen exfiltration and device compromise

Vulnerability Alerts

Beyond the ransomware: Tracking Storm-2570’s consistent tradecraft across deployments

​​​​​​​​What’s new in Microsoft Security: September 2026​​

Privacy & Governance

DraftKings Is Using AI to Supercharge the Harms of Online Behavioral Advertising

Malicious npm Packages That Evade Defenses

Fraud & Scams

AI-Generated Phishing Pages Are Impersonating Antivirus Services

Feed Activity

Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution

Multiple Vulnerabilities in IBM Concert Software Could Allow for Remote Code Execution

VU#676317: Norwegian Cruise Line door access controller contains an improper authentication vulnerability

CISA Adds Two Known Exploited Vulnerabilities to Catalog

Russia Escalating Hybrid Attacks Across Europe

Is This A Joke? In The Auth Header? (F5 BIG-IP UnAuth Heap-Overflow to RCE CVE-2026-94127)

Reimagining the SOC for the agentic era in Microsoft Defender

Research on Models Engaging in Genie-Like Behavior

GPT-6 Astra Breaks an Old Enigma Message

Proofpoint Stops the Attacks Traditional Defenses Miss in the AI Era

Sophisticated Phishing Operation Continues to Thrive Following FBI Takedown

OpenAI agent breached Australian government site, took months to report it

New Browser Guard features add protection before and after you click

FTC Seeks Public Comment on Whether to Update Rule on Impersonation of Government and Businesses to Address Platforms’ Role in Promoting Impersonation Scams

What’s new in Microsoft Security: September 2026

What’s new in Microsoft Security: September 2026