AttackFeed — Cybersecurity News Aggregator

Cybersecurity news from across the internet

Provided byWagner Cybersecurity LLC20+ years in cybersecurity

LIVE

8,153articles

updated about 9 hours ago

Attack5,442 Gov471 Vulnerability1,213 Privacy419 Fraud608

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

Latest

Privacy & GovernancehighEFF Deeplinks

The Vulnerability Apocalypse and Why We Should Fund Open Source

If you use the internet at all, you may have noticed that a large percentage of sites suddenly went down earlier this week—and all your nerdiest friends were talking about "The Vulnerability Apocalypse” and this thing ca…

about 9 hours agoRead more

Latest

The Vulnerability Apocalypse and Why We Should Fund Open Source

Recent Articles

Microsoft Teams to get AI-powered, context-aware phishing detection

Latest

The Vulnerability Apocalypse and Why We Should Fund Open Source

Recent Articles

Microsoft Teams to get AI-powered, context-aware phishing detection

Computer Security Is About to Get a Lot Worse, Here’s What You Can Do

Friday Squid Blogging: Increasing Squid Populations

Abandoned Popcorn Time app exposed millions of device to RCE attacks

(Reliable)&#x3f; php2shell exploitability, (Fri, Oct 23rd)

There's a third PHP2Shell bug, but it won't get an emergency fix

Red-team report found OpenAI utterly failed to monitor its agents during Hugging Face attack

GoDaddy Revokes 404,607 SSL Certificates After Policy Errors

BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations

Two States Can Now Restrict Social Media Access—Here’s What To Do Next

Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks

Suspicious Letters Containing White Powder Mailed to State and Local Election Officials, Media Organizations, and Public and Private Polling Companies

Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws

Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions

Overlord RAT Uses Fake Legal Notices to Infect Windows PCs in New Campaign

Critical Vulnerability Alert: PHP Core

Microsoft: Windows Server 2016 reaches end of support in January

Quest Diagnostics confirms data breach exposed patient records

Senators say targeted ads are a security risk. Ad groups say the critics are off base.

Warning: Attackers Are Using Calendar Invite Files to Evade Security Filters

U.S. Banks Detect Unauthorized AI Agents Accessing Accounts

PHP shares mitigation for new RCE vulnerability with no patch

In Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents, Self-Rebuilding macOS Ransomware

When It Makes Sense to Replace a Legacy Virtualization Stack

You gave your AI agent access, but who is giving it orders?

Cyber Breach Hits Quest Diagnostics, Patient Records May Be Affected

Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials

Resident Evil maker Capcom warns of phishing after 11.7 million records exposed

PHP Vulnerability Wrap-Up, (Fri, Oct 23rd)

Infostealer riding the AI Train

FBI Warns of Phishing Attacks Ahead of the US Midterm Elections

HPE patches eight max severity RCE and auth bypass AOS flaws

Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge

426 Android and iOS Apps Linked to PHP2Shell Backend Risks

CISA Adds One Known Exploited Vulnerability to Catalog

CISA Adds One Known Exploited Vulnerability to Catalog

Gaming Giant Capcom Confirms Data Breach Exposed Users’ Personal Information

Torvalds: AI is fine for competent devs, but spare us the 'drive-by' patches

URGENT - PHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell Patches

Attack & News

Abandoned Popcorn Time app exposed millions of device to RCE attacks

There's a third PHP2Shell bug, but it won't get an emergency fix

Red-team report found OpenAI utterly failed to monitor its agents during Hugging Face attack

GoDaddy Revokes 404,607 SSL Certificates After Policy Errors

Microsoft Teams to get AI-powered, context-aware phishing detection

Gov Alerts / ISAC

(Reliable)&#x3f; php2shell exploitability, (Fri, Oct 23rd)

Vulnerability Alerts

Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks

Infostealer riding the AI Train

Privacy & Governance

The Vulnerability Apocalypse and Why We Should Fund Open Source

Fraud & Scams

Suspicious Letters Containing White Powder Mailed to State and Local Election Officials, Media Organizations, and Public and Private Polling Companies

Critical Vulnerability Alert: PHP Core

Feed Activity

PHP Vulnerability Wrap-Up, (Fri, Oct 23rd)

CISA Adds One Known Exploited Vulnerability to Catalog

CISA Adds One Known Exploited Vulnerability to Catalog

ISC Stormcast For Friday, October 23rd, 2026 https://isc.sans.edu/podcastdetail/10148, (Fri, Oct 23rd)

EMudhra Intermediate CA Certificates Compromised

The Current Landscape of OAuth Attacks

ZDI-26-790: OpenSSL CMS AuthEnvelopedData Improper Validation of Integrity Check Value Vulnerability

Computer Security Is About to Get a Lot Worse, Here’s What You Can Do

Friday Squid Blogging: Increasing Squid Populations

Two States Can Now Restrict Social Media Access—Here’s What To Do Next

Compromised TLS Certificates

Warning: Attackers Are Using Calendar Invite Files to Evade Security Filters

Resident Evil maker Capcom warns of phishing after 11.7 million records exposed

FBI Warns of Phishing Attacks Ahead of the US Midterm Elections

(Reliable)? php2shell exploitability, (Fri, Oct 23rd)

(Reliable)? php2shell exploitability, (Fri, Oct 23rd)