AttackFeed — Cybersecurity News Aggregator

attack_FeedLIVE

Search⌘K

Cybersecurity news from across the internet

Provided byWagner Cybersecurity LLC20+ years in cybersecurity

LIVE

6,852articles

updated about 1 hour ago

Attack4,444 Gov406 Vulnerability1,162 Privacy343 Fraud497

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

Latest

NEWS

Attack & News · Live

Attack & NewsHackread

Best Security Awareness Platforms for Personalized Employee Training

Comparing five leading security awareness platforms, based on the level of personalization they offer.

about 2 hours agoRead more

Recent Articles

Search archive →

VULNhighCVE-2026-13742Full Disclosureabout 17 hours ago

SEC Consult SA-20260923-0 :: Local Privilege Escalation in Honeywell IQ MultiAccess Update Service #CVE-2026-13742

Posted by SEC Consult Vulnerability Lab via Fulldisclosure on Sep 26 SEC Consult Vulnerability Lab Security Advisory ============…

VULNFull Disclosure

Latest

Best Security Awareness Platforms for Personalized Employee Training

Recent Articles

SEC Consult SA-20260923-0 :: Local Privilege Escalation in Honeywell IQ MultiAccess Update Service #CVE-2026-13742

Latest

Best Security Awareness Platforms for Personalized Employee Training

Recent Articles

SEC Consult SA-20260923-0 :: Local Privilege Escalation in Honeywell IQ MultiAccess Update Service #CVE-2026-13742

Citrix admins warned to shut down NetScalers over 2 exploited zero-days

Wireshark 4.6.9 Released, (Sun, Sep 27th)

Cloudflare fixes Containers cross-tenant flaw exposing customer data

Anthropic turns Claude into an AI marketplace with 2,000+ plugins and connectors

CISA Adds Two Known Exploited Vulnerabilities to Catalog

Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway

Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks

Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation

[SYSS-2026-071]: GDCM (Grassroots DICOM) - Format String (CWE-134)

[SYSS-2026-070]: GDCM (Grassroots DICOM) - Integer Overflow (CWE-190)

[SYSS-2026-069]: GDCM (Grassroots DICOM) - Integer Overflow (CWE-190)

[SYSS-2026-068]: GDCM (Grassroots DICOM) - Stack-based Buffer Overflow (CWE-121)

[SYSS-2026-067]: GDCM (Grassroots DICOM) - Stack-based Buffer Overflow (CWE-121)

harness Gitspace hardcoded password for every user account

harness(gitness) registry webhook sort_order blind SQL injection

dive tar-slip in image file extraction

usvg SVGZ decompression bomb in `Tree::from_data`

openEQUELLA authenticated RCE chain(s)

[0day-rubbish] Server Technology PRO3X PDU 030600 port_mux listener program override to root command execution (7.2)

[0day-rubbish] Netsis NetOpenX REST 2.0.6.9 Unauthenticated SQL injection to xp_cmdshell SYSTEM command execution (9.8)

[0day-rubbish] MultiTech Conduit AEP 6.3.6 Authenticated import_config filename command injection to root RCE (7.2)

[0day-rubbish] Lightstreamer Server 7.4.8 Unauthenticated JMX jvmtiAgentLoad native code execution (8.1)

[0day-rubbish] Cambium cnMatrix EX3024F 6.2.1-r4 SSL CSR COMMON_NAME command injection to root RCE (7.2)

SCHUTZWERK-SA-2024-006: Stored Cross-Site Scripting via text fields in H5P module (h5p-nodejs-library) of Lumi Education

[NotCVE-2026-0015] Input Leap through 3.0.3 input-leapd Unauthenticated IPC Command Execution Allows Local Privilege Escalation to SYSTEM

[NotCVE-2026-0014] Input Leap 3.0.3 Drag-and-Drop File Transfer Path Traversal Allows Arbitrary File Write Outside the Drop Directory

ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks

Placeholder Domains Used by 349 AI Agent Skills Found Redirecting to Scams

Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials

China and US Agree to Establish AI Safety Channel and Continue Trade and Military Talks

Claude Opus 5.5 uses 95% fewer em dashes, but its answers are getting longer

Microsoft pauses KB5002907 update after Office license deactivations

GitHub Actions re-enabled with Mini Shai-Hulud payload still active

ShinyHunters Bypass WAF Rules to Resume Oracle PeopleSoft Attacks

OpenAI's AI agents accidentally uploaded user-provided images to third-party sites

New x47.c Windows Botnet Weaponizes xAI Grok, AI API Draining

Old-School Credit Card Scams Are Far From Dead

Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells

Attack & News

Best Security Awareness Platforms for Personalized Employee Training

Citrix admins warned to shut down NetScalers over 2 exploited zero-days

Cloudflare fixes Containers cross-tenant flaw exposing customer data

Anthropic turns Claude into an AI marketplace with 2,000+ plugins and connectors

Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks

Gov Alerts / ISAC

Wireshark 4.6.9 Released, (Sun, Sep 27th)

Vulnerability Alerts

SEC Consult SA-20260923-0 :: Local Privilege Escalation in Honeywell IQ MultiAccess Update Service #CVE-2026-13742

Privacy & Governance

Friday Squid Blogging: Participatory Squid Dissection in October in Tennessee

EFF to Court: Trump's Use of Truth Social's Pay-To-See-Posts-First Scheme Violates Americans' 1st Amendment Equal Access Rights

Fraud & Scams

What Microsoft’s Latest Email Benchmark Proves About Defense-in-Depth

Feed Activity

CISA Adds Two Known Exploited Vulnerabilities to Catalog

Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway

Multiple Vulnerabilities in ServiceNow's AI Platform Could Allow for Unauthorized Access

VU#699627: Readwise Reader for Android, version 8.7.2, contains multiple XSS vulnerabilities

[SYSS-2026-071]: GDCM (Grassroots DICOM) - Format String (CWE-134)

[SYSS-2026-070]: GDCM (Grassroots DICOM) - Integer Overflow (CWE-190)

[SYSS-2026-069]: GDCM (Grassroots DICOM) - Integer Overflow (CWE-190)

[SYSS-2026-068]: GDCM (Grassroots DICOM) - Stack-based Buffer Overflow (CWE-121)

On Anthropic’s AI Misuse Report

DraftKings Is Using AI to Supercharge the Harms of Online Behavioral Advertising

Malicious npm Packages That Evade Defenses

Warning: New Phishing Kit Targets Sales Teams

LinkedIn adds new checks for fake profiles and work histories

Kothamine malware uses Tailscale’s tailcat to evade network detection

Criminals turn placeholder domain into ClickFix trap