AttackFeed — Cybersecurity News Aggregator

Cybersecurity news from across the internet

Provided byWagner Cybersecurity LLC20+ years in cybersecurity

LIVE

6,078articles

updated 21 minutes ago

Attack3,897 Gov355 Vulnerability1,077 Privacy309 Fraud440

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

Latest

GOV

Gov Alerts / ISAC · Live

Gov Alerts / ISACSANS Internet Storm Center

ISC Stormcast For Monday, September 14th, 2026 https://isc.sans.edu/podcastdetail/10092, (Mon, Sep 14th)

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

about 1 hour agoRead more

Latest

ISC Stormcast For Monday, September 14th, 2026 https://isc.sans.edu/podcastdetail/10092, (Mon, Sep 14th)

Recent Articles

When the Whole Company Adopts AI: What It Does to Your SOC

Latest

ISC Stormcast For Monday, September 14th, 2026 https://isc.sans.edu/podcastdetail/10092, (Mon, Sep 14th)

Recent Articles

When the Whole Company Adopts AI: What It Does to Your SOC

Hackers exploit Tencent app flaw to deploy GrayRabbit malware

Anthropic CEO Dario Amodei Says AI Industry Needs to Give Safety Measures Time to Catch Up

Security through obscurity is dead, and AI delivered the fatal blow

Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data

CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV

Dutch NCSC: Critical Check Point VPN flaws exploitation is imminent

BlueMoon Exploit Kit Chains Recent Chrome, Windows Zero-Days

From Hacks to Bioweapons, Claude Misuse Is Now Everywhere

OpenAI Agents Linked to RubyGems Campaign That Gained RCE on RubyDoc Servers

Users in Houthi-Held Yemen Tried to Develop Advanced Weapons With AI, Anthropic Says

Researchers say OpenAI agents were behind May hacking campaign targeting RubyGems

Cyberattack causes a flight delay? Airlines won’t owe you a hotel or meal

Friday Squid Blogging: Rotting Squid on a Beached California Boat

Governor Newsom Signs Student-Backed Digital Literacy Bills Alongside Misguided Bans

Hackers abused Claude to extract secrets from 1.8M Android apps

VU#369611: ExLlamaV3 contains Denial of Service vulnerability via insufficient bounds checking on kernel dispatch index

FBI Alert: OAuth Consent Phishing is Targeting Users of Messaging Apps

Florida confirms DMV database breached via stolen police account

Meta Sued Over Training Data for Its AI and Face-Recognition Systems

GitLab’s critical flaw is already drawing internet-wide probes

My Talk at DEF CON

Critical Infrastructure Cyberattack Encrypts Central IT Structures

More JFrog Artifactory bugs under attack, and all 3 have patches

Passkey-themed phishing attacks lead to Microsoft 365 data theft

Phishing Research Challenges Conventional Security Awareness Testing

Cold TAKE: Amazon's New Encryption Method Still Doesn't Deliver Real Privacy

GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure

Artifactory flaws chained in attacks deploying backdoor malware

Anthropic Says Seven China-Based AI Labs Ran Industrial-Scale Claude Distillation Attacks

GitLab Vulnerability Exploited One Day After Disclosure

Survey: Companies Cite Phishing as their Top AI-Enabled Fraud Concern

Crypto customers targeted by scammers after email marketing provider breach

A Fourth Claude Model Escaped Guardrails

The Self-Expanding Stolen Inference Supply Chain: An AI Agent Harvesting and Re-Serving LLM Access, (Fri, Sep 11th)

Claude Used to Automate Exploitation and Data Theft Across Multiple Victims

In Other News: InjectEave Attack, SIM Swapper Sentenced, Glasswing Findings Review

Russian State-Sponsored Hackers Use Claude to Rebuild Malware After Detection

How Threat Actors Are Turning Trusted AI Platforms Into an Attack Surface

Attack & News

Hackers exploit Tencent app flaw to deploy GrayRabbit malware

Anthropic CEO Dario Amodei Says AI Industry Needs to Give Safety Measures Time to Catch Up

Security through obscurity is dead, and AI delivered the fatal blow

Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data

CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV

Gov Alerts / ISAC

ISC Stormcast For Monday, September 14th, 2026 https://isc.sans.edu/podcastdetail/10092, (Mon, Sep 14th)

Vulnerability Alerts

[remote] CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth - ILIAS < 9.22, 10.0 < 10.10, 11.0 < 11.3 - RCE

Privacy & Governance

Friday Squid Blogging: Rotting Squid on a Beached California Boat

Governor Newsom Signs Student-Backed Digital Literacy Bills Alongside Misguided Bans

Fraud & Scams

FBI Alert: OAuth Consent Phishing is Targeting Users of Messaging Apps

Feed Activity

VU#369611: ExLlamaV3 contains Denial of Service vulnerability via insufficient bounds checking on kernel dispatch index

The Self-Expanding Stolen Inference Supply Chain: An AI Agent Harvesting and Re-Serving LLM Access, (Fri, Sep 11th)

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA Adds One Known Exploited Vulnerability to Catalog

Protecting organizations from AI-assisted executive impersonation and invoice fraud

Detect and disrupt AI-themed attacks with Microsoft Defender

PuzzleMask: Abusing Plain Prose as a Covert AI Attack Vector

The Machine With Many Faces: Post-Exploitation Identity Misuse in SPIFFE/SPIRE

My Talk at DEF CON

Cold TAKE: Amazon's New Encryption Method Still Doesn't Deliver Real Privacy

Cliff Stoll’s DEF CON Talk

Survey: Companies Cite Phishing as their Top AI-Enabled Fraud Concern

Crypto customers targeted by scammers after email marketing provider breach

Phishing Campaign Targets Employees with Malicious SVG Files

Android malware creates a hidden copy of your banking app