AttackFeed — Cybersecurity News Aggregator

Cybersecurity news from across the internet

Provided byWagner Cybersecurity LLC20+ years in cybersecurity

LIVE

8,046articles

updated about 1 hour ago

Attack5,359 Gov468 Vulnerability1,212 Privacy412 Fraud595

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

Latest

Attack & NewshighWired Security

Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched

Amazon Web Services logged attempts to leverage the internet-melting PHP2Shell bugs four days ago. They're now being “broadly exploited” across the internet.

about 1 hour agoRead more

Latest

Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched

Recent Articles

Japan's Onamae Desktop Cloud hacked, up to 27,000 servers affected

Latest

Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched

Recent Articles

Japan's Onamae Desktop Cloud hacked, up to 27,000 servers affected

ISC Stormcast For Thursday, October 22nd, 2026 https://isc.sans.edu/podcastdetail/10146, (Thu, Oct 22nd)

Introducing Our New Surveillance Self-Defense Guide: Online Privacy for Parents and Youth

PHP blames supply chain security biz Chainguard for putting huge chunks of the web at risk

Interoperability vs. Security: Why not both?

Google Chrome adds Gemini-powered scam detection, warns users of ClickFix attacks

EFF to Brazil’s ANPD: Data Privacy and Free Expression Must Underpin Platform Regulations

Microsoft pins ConnectWise supply-chain attack to China-state aligned threat group

Lazarus hackers use post-quantum cryptography for malware delivery

Warning: Phishing Attacks Are Abusing RMM Tools to Target Bank Accounts

Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases

WhatsApp’s chatbot was given hidden instructions to not mention privacy regulators

CISA: Hackers chain Plex flaws in Plex2Shell attacks to breach servers

AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise

LiteLLM supply chain attack hoovers up passwords and secrets

LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor

EFF’s State Legislative Agenda to End ALPR Mass Surveillance

Signal bug could keep your mic - and camera - on after hangup

Google Hardens Chrome Against ClickFix Attacks, Insecure HTTP Connections

PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors

Arrakis Security Report Finds 76% of AI Agents Are Dormant but Keep Their Credentials and Connections

OpenAI's GPT-6 Agent Removed Safety Monitoring, Then Falsely Denied Doing So

OpenAI agents disabled safety monitoring, one lied about it

EFF Launches Guide to Help Parents and Youth Protect Privacy Online

Multiple Vulnerabilities in PHP Could Allow for Remote Code Execution

PHP2Shell: Why websites are going offline for emergency security updates

Report: Ransomware Attacks Hit a Record High in Q3 2026

CISO Burnout Isn’t a Personal Problem — It’s Organizational

Widespread PHP Flaw May Cause Many Site Outages Today

PHP devs publish critical bug fix as site owners warned: Pull 'em offline if you're unpatched

New PhaaS Platform Uses AI to Craft Phishing Lures and Mask Malicious Activity

‘Context Bombs’ Cut AI Attack Success by Misleading Agents With Fake Targets

PHP Releases Emergency Fixes for Critical PHP2Shell Vulnerabilities

High-Severity Flaws Exploited in Three Days as Ransomware Dominates Q3: Rapid7

‘This Is Not a Drill’: Critical PHP Vulnerabilities Are Setting the Internet on Fire

PHP ships emergency patches for critical PHP2Shell flaws

“Next Exploit Opportunities”: How a Threat Actor Used AI to Help Plan and Execute Multiple Types of Cybercrime Activities

ClickFix has never been bigger, and AI tools are its most convincing lure yet

Symantec Uncovers AI Agent Hijacking Models for Autonomous Cyber-Attacks

Attack & News

Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched

PHP blames supply chain security biz Chainguard for putting huge chunks of the web at risk

Google Chrome adds Gemini-powered scam detection, warns users of ClickFix attacks

Microsoft pins ConnectWise supply-chain attack to China-state aligned threat group

Japan's Onamae Desktop Cloud hacked, up to 27,000 servers affected

Gov Alerts / ISAC

ISC Stormcast For Thursday, October 22nd, 2026 https://isc.sans.edu/podcastdetail/10146, (Thu, Oct 22nd)

Vulnerability Alerts

AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise

Privacy & Governance

Introducing Our New Surveillance Self-Defense Guide: Online Privacy for Parents and Youth

Interoperability vs. Security: Why not both?

Fraud & Scams

Warning: Phishing Attacks Are Abusing RMM Tools to Target Bank Accounts

WhatsApp’s chatbot was given hidden instructions to not mention privacy regulators

Feed Activity

Multiple Vulnerabilities in PHP Could Allow for Remote Code Execution

Critical PHP Vulnerability (CVE-2026-109618, CVE-2026-109619) &#x5b;infocon yellow&#x5d;, (Wed, Oct 21st)

Critical Vulnerabilities in PHP Require Immediate Patching

CISA, FBI and Partners Warn Organizations of SafePay Ransomware Actors Targeting Multiple Critical Infrastructure Sectors

“Next Exploit Opportunities”: How a Threat Actor Used AI to Help Plan and Execute Multiple Types of Cybercrime Activities

Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619

PHP2Shell Exploitation: Two Critical PHP Flaws Explained

[webapps] pizzafy-1.0 - SQLi

EFF to Brazil’s ANPD: Data Privacy and Free Expression Must Underpin Platform Regulations

EFF’s State Legislative Agenda to End ALPR Mass Surveillance

EFF Launches Guide to Help Parents and Youth Protect Privacy Online

PHP2Shell: Why websites are going offline for emergency security updates

Report: Ransomware Attacks Hit a Record High in Q3 2026

Fake Amazon Music x YouTube deal lures creators into a Google login trap

Critical PHP Vulnerability (CVE-2026-109618, CVE-2026-109619) [infocon yellow], (Wed, Oct 21st)