AttackFeed — Cybersecurity News Aggregator

attack_FeedLIVE

Search⌘K

Cybersecurity news from across the internet

Provided byWagner Cybersecurity LLC20+ years in cybersecurity

LIVE

6,572articles

updated 30 minutes ago

Attack4,260 Gov385 Vulnerability1,111 Privacy337 Fraud479

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

Latest

Attack & NewsBleeping Computer

Rogue external MFA providers can steal passwords during logins

Security researchers developed an attack that lets hackers with privileged access register a rogue external MFA provider that steals users' passwords during legitimate login attempts. [...]

about 1 hour agoRead more

Recent Articles

Search archive →

VULNhighCVE-2026-89082Full Disclosureabout 4 hours ago

HP Advance / Output Central: unauthenticated SYSTEM RCE and two additional vulnerabilities (CVE-2026-89082/89083/89084)

Posted by Joe via Fulldisclosure on Sep 22 HP Advance / HP Output Central Unauthenticated SYSTEM RCE, authorization bypass, and ar…

VULNFull Disclosure

Latest

Rogue external MFA providers can steal passwords during logins

Recent Articles

HP Advance / Output Central: unauthenticated SYSTEM RCE and two additional vulnerabilities (CVE-2026-89082/89083/89084)

Latest

Rogue external MFA providers can steal passwords during logins

Recent Articles

HP Advance / Output Central: unauthenticated SYSTEM RCE and two additional vulnerabilities (CVE-2026-89082/89083/89084)

Sweden fines Miljödata $183,000 over breach affecting 2.2 million

Windows CLOSEDQUORUM malware uses AI models to autonomously select post-compromise actions

After water attacks, Capitol Hill offers its own proposal for an AI-cyber test program

ShinyHunters Hacks FBI Jobs Portal, Claims It Stole Agents’ Data

Chinese hackers exploit WordPress, Zyxel flaws to steal govt data

ShinyHunters claims FBI hack, data theft in PeopleSoft zero-day breach

Volexity spots another China-aligned threat group exploiting Chrome and Microsoft defects

Code Security Review tool

CFP No cON Name 2k26 - Palma, Mallorca - Spain

CVE-2026-17613: Penpot cross-team file takeover via import-binfile (unpatched in 2.17.2)

CVE-2026-44756: Pre-Auth RCE in SAP EPP Processing (ICM, Web Dispatcher, disp+work)

[0day-rubbish] TigerGraph Community Edition 4.2.4 Default credentials plus GSQL TO_CSV arbitrary file write to SSH code execution (9.8)

[0day-rubbish] Teltonika RutOS 00.07.06.21 Authenticated ipsec.lua logread command injection with reflected output (8.8)

APPLE-SA-09-14-2026-10 Xcode 27

APPLE-SA-09-14-2026-9 Safari 27

APPLE-SA-09-14-2026-8 visionOS 27

APPLE-SA-09-14-2026-7 watchOS 27

APPLE-SA-09-14-2026-6 tvOS 27

APPLE-SA-09-14-2026-5 macOS Sequoia 15.8

APPLE-SA-09-14-2026-4 macOS Tahoe 26.7

APPLE-SA-09-14-2026-3 macOS Golden Gate 27

APPLE-SA-09-14-2026-2 iOS 26.7 and iPadOS 26.7

Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks

VU#738147: Vendor-signed UEFI Shell applications allow Secure Boot bypass

New ClosedQuorum Windows malware uses AI for attack decisions

WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers

Malicious npm Package Poses as Twilio Bug-Bounty Probe, Can Exfiltrate Credentials

BigCommerce Data Stolen via Ribon Apps Hack

ShinyHunters claims FBI hack: 'This is NOT financially motivated'

Reducing shadow IT visibility gaps with Wazuh

Microsoft Takes Down EvilTokens Device-Code Phishing Service Tied to 12,000 Inbox Compromises

RatHat Android Malware Uses AI to Target Banking Credentials in Real Time

Gemini AI Autonomously Hacked 3 Companies, Google Confirms

Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials

NightmareEclipse's latest zero-day leaves Microsoft Defender stuck in the past

Check Point warns of Management Server zero-day exploited in attacks

Researcher Drops BigDiskBuster Zero-Day PoC That Blocks Microsoft Defender Updates

Z.ai says sorry for slurping up your code, open sources ZCode

Attack & News

Rogue external MFA providers can steal passwords during logins

Sweden fines Miljödata $183,000 over breach affecting 2.2 million

Windows CLOSEDQUORUM malware uses AI models to autonomously select post-compromise actions

After water attacks, Capitol Hill offers its own proposal for an AI-cyber test program

ShinyHunters Hacks FBI Jobs Portal, Claims It Stole Agents’ Data

Gov Alerts / ISAC

VU#738147: Vendor-signed UEFI Shell applications allow Secure Boot bypass

The Truth about GET and HTTP Standards, (Tue, Sep 22nd)

Vulnerability Alerts

Code Security Review tool

Privacy & Governance

GPT-6 Astra Breaks an Old Enigma Message

Proofpoint Stops the Attacks Traditional Defenses Miss in the AI Era

Fraud & Scams

Some cheap smart glasses are a security disaster

Feed Activity

CISA Adds Four Known Exploited Vulnerabilities to Catalog

ISC Stormcast For Tuesday, September 22nd, 2026 https://isc.sans.edu/podcastdetail/10104, (Tue, Sep 22nd)

CISA Adds One Known Exploited Vulnerability to Catalog

HP Advance / Output Central: unauthenticated SYSTEM RCE and two additional vulnerabilities (CVE-2026-89082/89083/89084)

CFP No cON Name 2k26 - Palma, Mallorca - Spain

CVE-2026-17613: Penpot cross-team file takeover via import-binfile (unpatched in 2.17.2)

CVE-2026-44756: Pre-Auth RCE in SAP EPP Processing (ICM, Web Dispatcher, disp+work)

Proofpoint Breaks Down the Divide Between Data Security and AI Security with the Industry’s First Unified Agentic System

D.C. Circuit Must Vacate a Drone Flight Restriction That Criminalized Recording Immigration Agents

Reverse-Engineering Flock Cameras

AI-Assisted Phishing Campaign Sent Over A Million Personalized Emails

Quantum Readiness Day: How to Prepare for Post-Quantum Security

Meta’s Muse AI assistant has a zero-day that can turn it into a Mac backdoor

Researchers used Claude to hack OpenAI