AttackFeed — Cybersecurity News Aggregator

Cybersecurity news from across the internet

Provided byWagner Cybersecurity LLC20+ years in cybersecurity

LIVE

3,411articles

updated 5 minutes ago

Attack2,114 Gov218 Vulnerability666 Privacy179 Fraud234

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

Latest

Attack & NewsBleeping Computer

Hermes AI agent used to automate attack on Thai Finance Ministry

A threat actor used the open-source Hermes AI agent in unattended "YOLO" mode to automate post-exploitation activity during an alleged breach of Thailand's Ministry of Finance. [...]

37 minutes agoRead more

Latest

Hermes AI agent used to automate attack on Thai Finance Ministry

Recent Articles

OpenAI&#8217;s agent escaped its sandbox during a security test

Latest

Hermes AI agent used to automate attack on Thai Finance Ministry

Recent Articles

OpenAI&#8217;s agent escaped its sandbox during a security test

Hackers hijack hotel Wi-Fi DNS to steal Microsoft 365 accounts

CISA, FBI Issue Warning of Ongoing Cyber Exploitation from Iran

Microsoft blames massive Microsoft 365 outage on maintenance bug

Microsoft, tech companies throw weight behind spread of open-source AI

AI Without Guardrails Is Driving a New Era of Cybercrime

BlueNoroff Zoom Phishing Kit Profiles Crypto Wallets Before Malware Delivery

Don&#8217;t get fooled by TikTok resin art scams

Call of Duty Mobile scam uses fake free points to steal player accounts

In Other News: Dolphin X AI-Powered Malware, Car Anti-Theft Device Hack, 400 Linux Kernel Flaws

Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller

Chick-fil-A data breach affects more than 13,000 customers

Slopsquatting, Phantom Domains, and HalluSquatting Are the Same AI Attack

Google wants to store a selfie video of your face

Europol flags 4,340 URLs for removal in 'The Com' crackdown

Uncle Sam tells overseas cybercrooks their visas are canceled

AegisAI Raises $36 Million for AI-Powered Email Security

Introducing The Hybrid Nudge Experience: Outbound Email Security Built for Your Risk Appetite

Hotel Wi-Fi Routers Compromised to Steal Corporate Login Credentials From Visitors

Beyond the Play Store: How Android threats really spread

ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link

Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers

Seeing AI Agents Is Not Enough. Security Teams Must Enforce What They Can Do

Industry Reactions to OpenAI Models Hacking Hugging Face: Feedback Friday

Man gets six years for hacking 750 women's Snapchat accounts

Tego AI Discloses Second Claude Flaw in a Week: Hidden Link Silently Sends Files to Attackers

ChatGPT Among Top 10 Most Impersonated Brands in Phishing Attacks, Says Check Point

Russian Hackers Used a Zimbra Zero-Day to Steal Emails Without Link Clicks

Why AI Needs a “Genie Coefficient”

Hacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry

New Dolphin X Malware Uses AI Profiler to Rank High-Value Victims

Golden Chickens Resurfaces With Four New Malware Families and Modular Implants

Satellite Images Reveal How Suspected Scam Compounds Appear Out of Nowhere

Ransomware Attacks Targeting Universities on the Rise

NodeBB Patches Eight AI-Found Flaws Exposing Admin Access and Private Chats

Clop ransomware targets Windchill, FlexPLM in data theft attacks

Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers Say

Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in UAC-0099 Attacks

Data Breach Confirmed After Australian Energy Giant Origin Is Hacked

Attack & News

Hermes AI agent used to automate attack on Thai Finance Ministry

Hackers hijack hotel Wi-Fi DNS to steal Microsoft 365 accounts

CISA, FBI Issue Warning of Ongoing Cyber Exploitation from Iran

Microsoft blames massive Microsoft 365 outage on maintenance bug

Microsoft, tech companies throw weight behind spread of open-source AI

Gov Alerts / ISAC

ISC Stormcast For Friday, July 24th, 2026 https://isc.sans.edu/podcastdetail/10022, (Fri, Jul 24th)

VU#492466: Logto Identity Platform has authentication and authorization failures in core protocol handling

Vulnerability Alerts

Ransomware is the Scoreboard

Email threat landscape: Q2 2026 trends and insights

Privacy & Governance

Why AI Needs a “Genie Coefficient”

Hundreds of Drone-as-First-Responder Programs Could Soon Be Launched Across the Country

Fraud & Scams

Don&#8217;t get fooled by TikTok resin art scams

Call of Duty Mobile scam uses fake free points to steal player accounts

Feed Activity

When the "Autonomous Attacker" Is Your Own AI Model, (Thu, Jul 23rd)

CISA, NSA, FBI and Partners Warn Zimbra Collaboration Suite Users of Ongoing Russian State-Supported Malicious Threat Activity

ISC Stormcast For Thursday, July 23rd, 2026 https://isc.sans.edu/podcastdetail/10020, (Thu, Jul 23rd)

Russian Global Webmail Espionage

ZDI-26-452: Dify AI Workflow oauth_redirect_url Open Redirect Vulnerability

ZDI-26-451: Docker Desktop for macOS Inference Server Permissive Allow List Sandbox Escape Vulnerability

End-to-End Encryption and “Going Dark”

The Fourth Circuit Says Border Agents Can Search Your Phone By Hand, No Suspicion Required

First-Person Identity Theft Story

OpenAI&#8217;s agent escaped its sandbox during a security test

Google wants to store a selfie video of your face

Introducing The Hybrid Nudge Experience: Outbound Email Security Built for Your Risk Appetite

OpenAI’s agent escaped its sandbox during a security test

OpenAI’s agent escaped its sandbox during a security test

Don’t get fooled by TikTok resin art scams

Don’t get fooled by TikTok resin art scams

OpenAI’s agent escaped its sandbox during a security test