AttackFeed — Cybersecurity News Aggregator

attack_FeedLIVE

Search⌘K

Cybersecurity news from across the internet

Provided byWagner Cybersecurity LLC20+ years in cybersecurity

LIVE

6,198articles

updated 26 minutes ago

Attack3,991 Gov364 Vulnerability1,075 Privacy316 Fraud452

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

Latest

Attack & NewscriticalBleeping Computer

Google fixes actively exploited Android zero-day on Pixel devices

Google has released the September 2026 security patches to address 110 vulnerabilities affecting its Pixel devices, including one zero-day flaw actively exploited in targeted attacks. [...]

about 1 hour agoRead more

Recent Articles

Search archive →

FRAUDhighKnowBe4about 12 hours ago

Attackers Use Passkey-Themed Phishing to Breach Cloud Environments

Researchers at Microsoft are tracking a social engineering campaign that uses passkey-themed lures to trick users into granting pe…

NEWSCyberScoopabout 12 hours ago

Latest

Google fixes actively exploited Android zero-day on Pixel devices

Recent Articles

Attackers Use Passkey-Themed Phishing to Breach Cloud Environments

What’s next for CISA’s CDM program that gives cybersecurity tools to federal agencies

Latest

Google fixes actively exploited Android zero-day on Pixel devices

Recent Articles

Attackers Use Passkey-Themed Phishing to Breach Cloud Environments

What’s next for CISA’s CDM program that gives cybersecurity tools to federal agencies

Mythos has made 2026 patching hell. It might make 2027 a breeze

Attackers Exploit WooCommerce Wholesale Lead Capture Flaw to Plant PHP Web Shells

Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens

ISC Stormcast For Wednesday, September 16th, 2026 https://isc.sans.edu/podcastdetail/10096, (Wed, Sep 16th)

The vulnpocalypse rains iBugs down on Apple with record-setting number of patches

Acronis warns of actively exploited flaw in its cPanel backup plugin

Malcious Admin Menu Editor Pro plugin backdoors 1,500 WordPress sites

Microsoft Commits to Sweeping AI Privacy Rules for Students. Will Other Tech Giants Follow?

Low-quality casino sites conceal highly dangerous threat actors

“We Think the Security Control Is Working” Is No Longer Good Enough

Majority of Organizations Have Over 50 AI Agents

KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens

Iranian spies hit Windows machines with Chosen Brick data-stealing malware

CenterPoint Energy confirms customer data stolen in cyberattack

Iranian Hackers Use Telegram-Controlled Malware to Spy on Dissidents and Journalists

Cisco email security boxes can be rooted by... an email

Phishing Emails Use New Technique to Bypass Microsoft 365 Security Filters

$1 Million Sandbox Challenge Uncovers Linux Kernel Flaws

Exein Secures $270M at $1.7B Valuation for Physical AI Security

Cisco warns customers of actively exploited zero-day in email gateways

How to opt out of AI chatbot training

Texas Utility CenterPoint Energy Confirms Breach After Hacker Leaks Data

MacOS 27 - First Boot, (Tue, Sep 15th)

BambooToken Malware Uses MQTT to Control Windows and Linux Systems

Most Fraudulent Hires Receive Credentials Before Detection

BambooToken malware controls Windows and Linux systems via MQTT

Who's governing your AI? A trust framework for enterprise agents and models

Hackers target WordPress sites via third-party WooCommerce plugin

Most Firms Unable to Recover Quickly from Ransomware

What Zero-Day Response Should Be in the Post-Mythos Era

Black Axe Members Extradited to US Over Internet Fraud Claims

Thai Broadband Provider Hacked via Fortinet Vulnerability

Swiss court sentences 52-year-old Ukrainian ransomware dev to nearly 13 years in the cooler

Multiple Vulnerabilities in Cisco Secure Email Products Could Allow for Remote Code Execution

AI the Top Priority for New Spend as Cyber Budgets Flatline

OpenAI Investigates Report Linking AI Agents to RubyGems Attack

CISA: Critical VMware RCE flaw now exploited by ransomware gangs

Attack & News

Google fixes actively exploited Android zero-day on Pixel devices

Mythos has made 2026 patching hell. It might make 2027 a breeze

Attackers Exploit WooCommerce Wholesale Lead Capture Flaw to Plant PHP Web Shells

Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens

The vulnpocalypse rains iBugs down on Apple with record-setting number of patches

Gov Alerts / ISAC

ISC Stormcast For Wednesday, September 16th, 2026 https://isc.sans.edu/podcastdetail/10096, (Wed, Sep 16th)

MacOS 27 - First Boot, (Tue, Sep 15th)

Vulnerability Alerts

Tajin Group: Guarantee Marketplace Vendor Involved in Phishing and Chinese Money Laundering Group

Privacy & Governance

25 Years of Mass Surveillance Is Enough

On the NSA’s Supercomputer from the 1960s

Fraud & Scams

Attackers Use Passkey-Themed Phishing to Breach Cloud Environments

Feed Activity

Multiple Vulnerabilities in Cisco Secure Email Products Could Allow for Remote Code Execution

CISA and NIST Release Guidelines to Protect Federal Cloud Identity Systems from Token Theft, Forgery, and Misuse

ISC Stormcast For Tuesday, September 15th, 2026 https://isc.sans.edu/podcastdetail/10094, (Tue, Sep 15th)

14th September – Threat Intelligence Report

Unmasking Cloud Identities: From Behavioral Clustering to Automated Detection

ZDI-26-702: Linux Kernel usbnet Driver Race Condition Privilege Escalation Vulnerability

ZDI-26-701: Linux Kernel TLS Protocol Out-Of-Bounds Read Information Disclosure Vulnerability

Upcoming Speaking Engagements

Using AI for Weapons Development

The High Crime of “LMAO”: How Cops Are Treating Mass Surveillance As a Joke

Phishing Emails Use New Technique to Bypass Microsoft 365 Security Filters

How to opt out of AI chatbot training

FTC Publishes Price Transparency FAQs for Auto Dealers

HBO Max’s verified Reddit account hijacked to spread malware