AttackFeed — Cybersecurity News Aggregator

Cybersecurity news from across the internet

Provided byWagner Cybersecurity LLC20+ years in cybersecurity

LIVE

2,455articles

updated about 1 hour ago

Attack1,432 Gov161 Vulnerability564 Privacy135 Fraud163

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

Latest

Attack & NewsBleeping Computer

The GitHub Actions Attack Pattern Your CI Security Scanners Miss

ActiveState explains how GitHub Actions attack chains can evade traditional CI security scanners, why passing a scan doesn't guarantee a secure pipeline, and how organizations can better govern their CI/CD workflows. [..…

about 3 hours agoRead more

Latest

The GitHub Actions Attack Pattern Your CI Security Scanners Miss

Recent Articles

Critical Adobe ColdFusion Vulnerability Exploited in Attacks

Latest

The GitHub Actions Attack Pattern Your CI Security Scanners Miss

Recent Articles

Critical Adobe ColdFusion Vulnerability Exploited in Attacks

Scattered Spider’s Structure More Like a Cybercrime Collective Than a Unified Gang

Fake Netflix, Coca-Cola, and FIFA job scams target marketers

Court Filing Reveals Windows Device ID Helped FBI Trace Alleged Scattered Spider Hacker

Writer AI Flaw Could Let Agent Previews Leak Session Tokens Across Tenants

CISA Reportedly Using Anthropic’s Mythos to Scan Government Software for Flaws

GitLost: GitHub’s AI Agent Tricked Into Leaking Private Repository Data

2026 Phishing by Industry Benchmarking Report: Findings on Human Risk

Enterprise AI still smarting from leaping before looking

Iran-Linked Hackers Using Modular C&C Framework in Cyberattacks

Webinar tomorrow: Why modern email attacks require a new approach to defense

New Januscape Linux flaw allows VM escape on Intel, AMD devices

CISO Conversations: Tarah Wheeler, Cybersecurity Leader, Thought Leader and Original Thinker

FTC Sends More Than $2.7 Million to Consumers Harmed by Handy Technologies

What Changes When Your Software Supply Chain Includes AI Writing Your Code?

Fake IT bods on Microsoft Teams coax workers into installing malware

Claude Code’s hidden tracker was an “experiment,” says Anthropic

Static DLP Is Leaving You in the Dark: Why It’s Time for Intelligent, Self-Serve Outbound DLP and Misdirected Content Analysis

Google Is Suing Chinese Scammers Who Are Using Gemini

4 Best Email Security Solutions to Keep Employee Inboxes Safe

Spain collars alleged pro-Russia hacktivist after FBI tip-off

Government's cyber pledge lands 60 signatories, including M&S and, somehow, Capita

UK Government Launches Cyber Resilience Pledge, Claiming 60+ Signatories

Linux Kernel Vulnerability Allows VM Escape on Intel and AMD Systems

Microsoft to enable Windows settings backup by default for orgs

Scammers are using AI to sell impossible flowers

Keyfactor Scores $1 Billion+ Investment for AI, Post-Quantum Security

Suspected China-Aligned Hackers Exploit Roundcube Flaws Against Universities

Suspected Chinese espionage group used a Roundcube exploit chain to burrow into universities

Hackers Exploit Maximum Severity Adobe ColdFusion Flaw

BeyondTrust warns of critical flaws in remote access software

Microsoft testing new Cloud Rebuild Windows 11 recovery feature

CERT/CC Warns of Hidden Admin Backdoor in Tenda Router Firmware

OPNsense XPATH Injection (CVE-2026-53582)

SCHUTZWERK-SA-2025-001: Authentication Bypass for SafeLine SL6 and SL6+

BeyondTrust Patches Critical Auth Bypass Flaws in Remote Support and PRA

ISC Stormcast For Tuesday, July 7th, 2026 https://isc.sans.edu/podcastdetail/9996, (Tue, Jul 7th)

[webapps] Discuz! X5.0 - Authentication Bypass

[webapps] Tenable Nessus 10.12.1 - SQL Injection

Attack & News

The GitHub Actions Attack Pattern Your CI Security Scanners Miss

Scattered Spider’s Structure More Like a Cybercrime Collective Than a Unified Gang

Court Filing Reveals Windows Device ID Helped FBI Trace Alleged Scattered Spider Hacker

Writer AI Flaw Could Let Agent Previews Leak Session Tokens Across Tenants

CISA Reportedly Using Anthropic’s Mythos to Scan Government Software for Flaws

Gov Alerts / ISAC

ISC Stormcast For Tuesday, July 7th, 2026 https://isc.sans.edu/podcastdetail/9996, (Tue, Jul 7th)

Vulnerability Alerts

OPNsense XPATH Injection (CVE-2026-53582)

Privacy & Governance

Google Is Suing Chinese Scammers Who Are Using Gemini

France to Stop Certifying Non-Quantum-Safe Encryption

Fraud & Scams

Fake Netflix, Coca-Cola, and FIFA job scams target marketers

2026 Phishing by Industry Benchmarking Report: Findings on Human Risk

Feed Activity

VU#213560: Tenda firmware (multiple versions) contains hidden authentication backdoor

VU#828543: HP Deskjet 2800 Printer Series Webservers contain Missing Authorization Vulnerability

RCS and DNS: The NAPTR Record, (Mon, Jul 6th)

ISC Stormcast For Monday, July 6th, 2026 https://isc.sans.edu/podcastdetail/9994, (Mon, Jul 6th)

SCHUTZWERK-SA-2025-001: Authentication Bypass for SafeLine SL6 and SL6+

[webapps] Discuz! X5.0 - Authentication Bypass

[webapps] Tenable Nessus 10.12.1 - SQL Injection

[webapps] WordPress Bricks Builder Theme - RCE

Flock Cameras Can Surveil Cars Without License Plates

LGBT Q&A: How Can I Wipe Online Data That Points To My Queer Identity?

EFF and Allies: X’s FTC Petition to Waive Privacy Violation Order Should be Rejected

FTC Sends More Than $2.7 Million to Consumers Harmed by Handy Technologies

Claude Code’s hidden tracker was an “experiment,” says Anthropic

Static DLP Is Leaving You in the Dark: Why It’s Time for Intelligent, Self-Serve Outbound DLP and Misdirected Content Analysis