AttackFeed — Cybersecurity News Aggregator

Cybersecurity news from across the internet

Provided byWagner Cybersecurity LLC20+ years in cybersecurity

LIVE

7,033articles

updated 23 minutes ago

Attack4,601 Gov415 Vulnerability1,158 Privacy350 Fraud509

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

Latest

Attack & NewshighBleeping Computer

Russian state hackers use new RedFlick technique to push malware

The Russian state actor Star Blizzard has been using a new malware installation tactic dubbed "RedFlick" to deploy its signature CosmicPulse backdoor. [...]

about 1 hour agoRead more

Latest

Russian state hackers use new RedFlick technique to push malware

Recent Articles

📱 Hey Siri, How Do I Limit AI Data Access? | EFFector 38.17

Latest

Russian state hackers use new RedFlick technique to push malware

Recent Articles

📱 Hey Siri, How Do I Limit AI Data Access? | EFFector 38.17

DIVD says Zammad zero-days enabled AI-driven network breach

​​Secure what’s next: Your guide to Microsoft Security at Microsoft Ignite 2026

MALFEX npm Attack Spreads Windows RAT, Steals Discord and Browser Data

16-year-old researcher found a Microsoft bug, got admin access to databases with 17.3 trillion rows

Over 543,000 valid credentials exposed in public GitHub repositories

A Vulnerability in Cisco Catalyst SD-WAN Manager Could Allow for Authentication Bypass

A Vulnerability in Apple Products Could Allow for Arbitrary Code Execution

Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets

Attackers Abuse MSP360 to Deploy ScreenConnect in Dual-RMM Phishing Attacks

CISA warns of critical pre-auth RCE flaw in MikroTik RouterOS

Global Group Ransomware Abuses WinMerge to Deploy Encryptor

40M McDonald's Records Exposed Through Customer Data Platform

Hackers steal protective order and foster care records from Arizona courts

Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager

Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix Lures

Cisco warns of new SD-WAN zero-day exploited in attacks

Legit Security launches agentic remediation for open-source dependency vulnerabilities

Google: AI Is Changing the Pace and Profile of Vulnerability Discovery

AI's Third Wave: Coworkers Break the Security Model That Worked for Agents

Unauthenticated command injection on internet-facing mail servers: tracking CVE-2026-73570

AI-Found Vulnerabilities More Likely to Enable RCE, Google Says

Microsoft to block Entra ID script injection attacks starting October

WatchGuard Patches Critical Fireware OS Code Injection Vulnerability

Trump, Six AI Giants Sign 'Super Intelligence' Safety Accord

Government, Finance Orgs Targeted in Weeks-Long NetScaler Zero-Day Attacks

TeamViewer urges users to patch severe flaws “as soon as possible”

Chrome, Firefox Updates Patch Over 100 Vulnerabilities

CISA Adds One Known Exploited Vulnerability to Catalog

AI Boosts SOC Analyst Capacity but Limits Skill Development

Know Your Enemy: Browser-Based Attack Techniques in 2026

AI Coding Agents Exposed 13,000 Internal Images, Including Billing Records, on GitHub

Attackers Combine ChatGPT Feature Abuse With ClickFix to Deliver Trojan Malware

Your car’s app could be telling Big Tech who you are and where you go

Anthropic Flags AI Agent Liability Risks as OpenAI Faces Hacking Lawsuit

Amazon Prime Phishing Scam Uses Fake Billing Alert to Steal Logins and Card Details

Bitget hacked via zero-day in third-party security products

I Want Better Reporting on AI Genie Behavior

Russian APT Star Blizzard Uses ‘RedFlick’ Infection Chain in Recent Attacks

Attack & News

Russian state hackers use new RedFlick technique to push malware

DIVD says Zammad zero-days enabled AI-driven network breach

MALFEX npm Attack Spreads Windows RAT, Steals Discord and Browser Data

16-year-old researcher found a Microsoft bug, got admin access to databases with 17.3 trillion rows

Over 543,000 valid credentials exposed in public GitHub repositories

Gov Alerts / ISAC

A Vulnerability in Cisco Catalyst SD-WAN Manager Could Allow for Authentication Bypass

Vulnerability Alerts

​​Secure what’s next: Your guide to Microsoft Security at Microsoft Ignite 2026

Privacy & Governance

📱 Hey Siri, How Do I Limit AI Data Access? | EFFector 38.17

I Want Better Reporting on AI Genie Behavior

Fraud & Scams

Hackers steal protective order and foster care records from Arizona courts

Feed Activity

A Vulnerability in Apple Products Could Allow for Arbitrary Code Execution

CISA Adds One Known Exploited Vulnerability to Catalog

ISC Stormcast For Wednesday, September 30th, 2026 https://isc.sans.edu/podcastdetail/10116, (Wed, Sep 30th)

Scans for Wordfence Protected Websites, (Tue, Sep 29th)

Unauthenticated command injection on internet-facing mail servers: tracking CVE-2026-73570

ZDI-26-750: WatchGuard FireWare OS spamd statushdlr Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-26-749: WatchGuard FireWare OS samld SAMLSession Deserialization of Untrusted Data Remote Code Execution Vulnerability

Phishing Abuses RMM Tools for Persistent Access

While the Country Rejects ALPR Mass Surveillance, SF Settles for Weak Safeguards

Privacy’s Defenders Podcast: Cowboys, Cypherpunks and Visionaries

Using Device Linking to Eavesdrop on WhatsApp and Signal

Your car’s app could be telling Big Tech who you are and where you go

Report: Social Engineering Attacks Are Increasingly Using Audio and Video Deepfakes

Govern Claude AI with KnowBe4’s Agent Risk Manager

Meta’s Muse sent a Facebook Marketplace buyer to a seller’s home

Secure what’s next: Your guide to Microsoft Security at Microsoft Ignite 2026

Secure what’s next: Your guide to Microsoft Security at Microsoft Ignite 2026