AttackFeed — Cybersecurity News Aggregator

attack_FeedLIVE

Search⌘K

Cybersecurity news from across the internet

Provided byWagner Cybersecurity LLC20+ years in cybersecurity

LIVE

7,953articles

updated 19 minutes ago

Attack5,292 Gov463 Vulnerability1,205 Privacy405 Fraud588

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

Latest

Attack & NewscriticalBleeping Computer

PHP warns admins of two critical flaws, emergency patches coming tomorrow

The PHP security team is warning administrators to prepare for emergency security updates tomorrow to address two critical vulnerabilities, as information about the flaws has reportedly leaked ahead of their scheduled di…

43 minutes agoRead more

Recent Articles

Search archive →

VULNcriticalFull Disclosureabout 3 hours ago

[0day-rubbish] Parasoft Continuous Testing Platform 10.7.5-SNAPSHOT anonymous deserialization in the database restore path to JSP command execution as uid=1000 (9.8)

Posted by disclosure via Fulldisclosure on Oct 20 0day Rubbish Research Team is publicly disclosing a vulnerability in Parasoft Co…

VULNcritical

Latest

PHP warns admins of two critical flaws, emergency patches coming tomorrow

Recent Articles

[0day-rubbish] Parasoft Continuous Testing Platform 10.7.5-SNAPSHOT anonymous deserialization in the database restore path to JSP command execution as uid=1000 (9.8)

Latest

PHP warns admins of two critical flaws, emergency patches coming tomorrow

Recent Articles

[0day-rubbish] Parasoft Continuous Testing Platform 10.7.5-SNAPSHOT anonymous deserialization in the database restore path to JSP command execution as uid=1000 (9.8)

Live Video Moderation Challenges Traditional Content Safety Systems

KnowBe4’s Human & AI Risk In-Person Experience in Lagos

Nigerian sentenced to 8 years for long-running tax business hacking and fraud scheme

Zeabur shutting down after second security breach in two months

[0day-rubbish] TRENDnet TV-IP302PI firmware 1.02.38 authenticated NTP server-address OS command injection to root command execution via a shell-form system() call (7.2 High, PR:H)

[0day-rubbish] Royal Render 9.1.26b: default-unauthenticated job submission on rrServer TCP 7773 reaches worker-side shell execution as the worker identity, measured root (8.1 High)

[0day-rubbish] ProSoft Technology RLX-IFH24E v2.2.44 unsigned firmware upgrade package to root command execution and full account-database overwrite (7.2)

[0day-rubbish] Exasol Database 7.1.30 docker-db form: shipped default SYS credential to PYTHON3 UDF os.popen command execution as uid=500(exadefusr), output returned in-band (8.8)

[0day-rubbish] Edimax BR-6478AC firmware v2.20 authenticated command injection in the setWAN WAN-configuration handler, root command execution (7.2)

[0day-rubbish] Edimax BR-6478AC firmware v2.20 authenticated command injection in the formWlanMP manufacturing-test handler, root command execution (7.2)

[ROOTEDCON] Call for Papers 2027 · RootedCON2027 (Madrid)

OpenAI says GPT-6.1 Sol is dramatically better at migrating legacy code

VU#645818: Xerj Console API Authentication Bypass Leads to Unauthorized Credential Minting

Russian GRU hackers hit NATO shipbuilder, aircraft engine maker, law enforcement agency in espionage campaign

Palo Alto's firewall OS has been under attack from multiple ransomware groups since June

BAE Systems Cyber Incident Disrupts US Bankruptcy Notices

Eight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and Software

Swamped curl maintainers take low-level flaws public to survive vulnerability 'avalanche'

ConnectWise customers hit by supply-chain attack linked to compromised API secret

Free Helpline for Victims of Online Crime Pilots in South Africa

Only 7% of CISOs at Large Companies Own AI Governance

US Agencies Detail Incident Response Practices for Rogue AI Agents

Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution

Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA

DOJ escalates fight for election supremacy with California raids

Head of AI Security Roles Surge in Large Organizations

A Vulnerability in BeyondTrust Remote Support Could Allow for Arbitrary Upload of Files

DHS bans DeepSeek products across US federal civilian agencies

The Risk of AI-Powered Antidetect Browsers in Online Fraud and Influence Operations

Hackers Use Autonomous AI Agents to Breach Company Websites, Target Over 1,200 Sites

Security Leaders Share Concerns About California Student Data Breach

Researchers Warn OpenCode Quietly Patched Critical RCE Flaw, Leaving Users At Risk

AOMEI Backupper Compromised in Short-Burst Supply Chain Campaign

CJIS v6.1 Compliance: 5 Practical Priorities for Agencies

'Password1' and a forgotten test account land Welsh outfits in hot water

The Key to AI Software Security Isn’t Speed, It’s Maturity

CyberheistNews Vol 16 #42 Warning: Phishing Attacks Are Using AI-Themed Ad Lures

Hacker gets 8 years for stealing $3.3 million from taxpayers

Attack & News

PHP warns admins of two critical flaws, emergency patches coming tomorrow

Live Video Moderation Challenges Traditional Content Safety Systems

Nigerian sentenced to 8 years for long-running tax business hacking and fraud scheme

Zeabur shutting down after second security breach in two months

OpenAI says GPT-6.1 Sol is dramatically better at migrating legacy code

Gov Alerts / ISAC

VU#645818: Xerj Console API Authentication Bypass Leads to Unauthorized Credential Minting

Vulnerability Alerts

[0day-rubbish] TRENDnet TV-IP302PI firmware 1.02.38 authenticated NTP server-address OS command injection to root command execution via a shell-form system() call (7.2 High, PR:H)

Privacy & Governance

Possible new Cellebrite iPhone Radio Zero-Day

Fraud & Scams

KnowBe4’s Human & AI Risk In-Person Experience in Lagos

Free Helpline for Victims of Online Crime Pilots in South Africa

Feed Activity

A Vulnerability in BeyondTrust Remote Support Could Allow for Arbitrary Upload of Files

CISA Adds Six Known Exploited Vulnerabilities to Catalog

ISC Stormcast For Tuesday, October 20th, 2026 https://isc.sans.edu/podcastdetail/10142, (Tue, Oct 20th)

#StopRansomware: SafePay Ransomware

[0day-rubbish] Royal Render 9.1.26b: default-unauthenticated job submission on rrServer TCP 7773 reaches worker-side shell execution as the worker identity, measured root (8.1 High)

[0day-rubbish] ProSoft Technology RLX-IFH24E v2.2.44 unsigned firmware upgrade package to root command execution and full account-database overwrite (7.2)

[0day-rubbish] Parasoft Continuous Testing Platform 10.7.5-SNAPSHOT anonymous deserialization in the database restore path to JSP command execution as uid=1000 (9.8)

[0day-rubbish] Exasol Database 7.1.30 docker-db form: shipped default SYS credential to PYTHON3 UDF os.popen command execution as uid=500(exadefusr), output returned in-band (8.8)

Require Police to Get a Warrant to Search ALPR Data

Announcing Privacy Badger for Safari on macOS

EFF Launches Privacy Badger for Safari on macOS

Training AIs to Solve CAPTCHAs

CyberheistNews Vol 16 #42 Warning: Phishing Attacks Are Using AI-Themed Ad Lures

Google may add your number to all your accounts: How to stop it

Meta glasses caught recording conversations without wake phrase