AttackFeed — Cybersecurity News Aggregator

Cybersecurity news from across the internet

Provided byWagner Cybersecurity LLC20+ years in cybersecurity

LIVE

6,411articles

updated about 16 hours ago

Attack4,145 Gov379 Vulnerability1,089 Privacy330 Fraud468

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

Latest

Attack & NewsBleeping Computer

BragJack attacks hijack AI browser agents through malicious extensions

BragJack, a proof-of-concept attack from Forever Security's Gal Weizman, hijacks the AI assistants in Chrome, Edge, Opera Neon, Perplexity Comet, and Claude in Chrome using one malicious extension. The Prompt Forcing tec…

about 17 hours agoRead more

Latest

BragJack attacks hijack AI browser agents through malicious extensions

Recent Articles

Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws

Latest

BragJack attacks hijack AI browser agents through malicious extensions

Recent Articles

Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws

TigerByte Cyber Emerges From Stealth With $3 Million in Funding

Agentic security is the billion-dollar challenge for some clever startup to solve

North Korean WaterPlum hackers infected 30,000 devices worldwide

ShinyHunters hacks Clop leak site, threatens to extort ransomware gang

Identity Visibility in 2026: The Foundation of Identity Security

Calling viral AI actress Tilly Norwood? Agree to a face scan first

Viral AI actress' hotline face-scans every caller, watches their mood

Forget the AI Slowdown—the Vulnerability Explosion Is Already Happening

SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE

6 Best VPN Services (2026), Tested and Reviewed

Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild

Google Gemini Broke Into Real Company Systems After Security Test Domain Mix-Up

CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories

CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild

Flock Offers Employees Buyouts as Customers Flee

EFF Statement on California Governor's Executive Order on AI

How to Limit What Apple’s New Siri AI Can Access in iOS 27

Secure Messaging and AI Remain In Conflict Despite the Promise of TEEs

Friday Squid Blogging: On Squid Egg Sacs

Early Scattered Spider member pleads guilty to cybercrime spree

Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root

Researchers use AI to find widespread software decoder flaw

Researchers used Claude to hack OpenAI employees' ChatGPT accounts

Don’t Call Us, We’ll Call Your APIs | TraderTraitor Backdoors Resurface on Victim With No Crypto Ties

New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution

North Korea's fake job interviews infected 30,000 devices

FBI: Fake cop and government impersonation scams cost victims $1.6B

Gyazo server flaw exploited to steal 23.6 million user records

An Undercover Google Analyst Infiltrated a Notorious Supply Chain Hacking Gang

International security agencies warn about North Korean hackers exploiting job seekers to steal crypto, data

New Android malware uses AI to steal bank logins and PINs

Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repositories for C2

Fake LastPass Authenticator GitHub repos push new Rapuncel infostealer

In Other News: Ransomware Developer Sentenced, Plugin4Shell AI Attack, Critical SAP Flaw

Did an AI really try to break free from human control?

Secure enterprise sharing with access reviews for Microsoft 365

Microsoft Teams will let admins block custom file extensions

New Settra Ransomware Variant Deployed in Attacks on Retail and Manufacturing

Attack & News

BragJack attacks hijack AI browser agents through malicious extensions

TigerByte Cyber Emerges From Stealth With $3 Million in Funding

Agentic security is the billion-dollar challenge for some clever startup to solve

North Korean WaterPlum hackers infected 30,000 devices worldwide

ShinyHunters hacks Clop leak site, threatens to extort ransomware gang

Gov Alerts / ISAC

CISA Adds Two Known Exploited Vulnerabilities to Catalog

Vulnerability Alerts

Don’t Call Us, We’ll Call Your APIs | TraderTraitor Backdoors Resurface on Victim With No Crypto Ties

Privacy & Governance

EFF Statement on California Governor's Executive Order on AI

How to Limit What Apple’s New Siri AI Can Access in iOS 27

Fraud & Scams

New Android malware uses AI to steal bank logins and PINs

Feed Activity

CISA Adds One Known Exploited Vulnerability to Catalog

CISA Hosts Cyber Storm X, Nationwide Cybersecurity Exercise to Strengthen Resilience

HTTP QUERY Method: The Grey Zone Between GET And POST., (Fri, Sep 18th)

ISC Stormcast For Friday, September 18th, 2026 https://isc.sans.edu/podcastdetail/10100, (Fri, Sep 18th)

A Vault with a Heap-View: The Uncomfortable Space Between AgentCore Harness and Identity

ZDI-26-718: Cisco Identity Services Engine MnTRESTLivelogService XML External Entity Processing Information Disclosure Vulnerability

ZDI-26-717: Cisco Identity Services Engine AlarmMessageDiskQueue Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-26-716: Cisco Identity Services Engine createDBLink Command Injection Remote Code Execution Vulnerability

Secure Messaging and AI Remain In Conflict Despite the Promise of TEEs

Friday Squid Blogging: On Squid Egg Sacs

Are AIs Still Struggling with CAPTCHAs?

Did an AI really try to break free from human control?

Fake parcel delivery messages steal your card and bank details

Flock cameras are tracking people as well as cars

Revolut phishing texts appear days after data breach