AttackFeed — Cybersecurity News Aggregator

Cybersecurity news from across the internet

Provided byWagner Cybersecurity LLC20+ years in cybersecurity

LIVE

3,854articles

updated about 2 hours ago

Attack2,402 Gov241 Vulnerability744 Privacy204 Fraud263

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

Latest

Attack & NewsThe Hacker News

Coldcard Hardware Wallet Flaw Linked to $70 Million Bitcoin Theft in 41 Minutes

An attacker drained 1,196 Bitcoin addresses in 41 minutes on July 30, taking 1,082.65 BTC worth about $70.2 million at the time. Galaxy Research mapped the sweep and tied it to a firmware flaw in Coldcard, the Bitcoin-on…

about 3 hours agoRead more

Latest

Coldcard Hardware Wallet Flaw Linked to $70 Million Bitcoin Theft in 41 Minutes

Recent Articles

Hijacked Hotel Wi-Fi Pushes Fake Updates to Deliver Surveillance Malware

Latest

Coldcard Hardware Wallet Flaw Linked to $70 Million Bitcoin Theft in 41 Minutes

Recent Articles

Hijacked Hotel Wi-Fi Pushes Fake Updates to Deliver Surveillance Malware

Rails patches critical Active Storage flaw with RCE potential

Balance Theory Raises $19 Million to Help Enterprises Manage Cybersecurity Investments

Ruby on Rails Patches Critical Vulnerability

7 States’ Water Systems Hit by Cyberattacks Likely Tied to Iran

Nobody Knows if OpenAI’s and Anthropic’s AI Hacking Sprees Are Illegal

Hackers Poison Adform Script to Swap Crypto Wallet Addresses Across Customer Sites

Phishing Campaigns Targeting AI Solutions Providers, (Sat, Aug 1st)

Adobe Campaign Classic CVSS 10.0 Flaw Could Run Code Without User Interaction

Amgen says cloud data breach exposed patient health, proprietary info

Arch Linux disables AUR package adoption to stop malware flood

Online ad firm Adform’s script compromised to steal cryptocurrency

Friday Squid Blogging: Squid Helps Discover New Marine Species

CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft

Trump blames Minnesota for cyberattacks on water sector, drawing pushback from cyber world

Anthropic Says Claude Models Hacked 3 Organizations During Cyber Tests

Apple Warns Users to be Wary of Unsolicited FaceTime Calls

Amending AB 1709 Doesn’t Fix It: California’s Social Media Ban Still Threatens Free Speech and Privacy

The SCREEN Act Threatens Privacy Far Beyond Adult Websites

The CHATBOT Act Forces One Parenting Model On Every Family

OpenAI says its new GPT 5.6 models are becoming more cost-efficient

Suspected Chinese-Speaking Hackers Target Central Asian Governments With OctLurk and SilkLurk

Hacker uses DeepSeek AI to autonomously attack vulnerable servers

Anthropic’s Opus 5 Is Better at Resisting Prompt Injection

How Status Labs Helps Brands Get Cited in ChatGPT: The Data Behind AI Search Visibility

CISA warns of cyberattacks disrupting U.S. water utilities

HollowFrame Loader Deploys Matryoshka Backdoor in Spear-Phishing Attack on Law Firm

The most famous brand in physical security got pwned by ShinyHunters

Fake Fortnite rewards are stealing players&#8217; accounts

Everyone's a Builder Now. That Changes Security Training.

In Other News: OpenAI Open Source Tool, AWS Links Hacks to North Korea, Mythos Crypto Research

Cyberattacks on Minnesota Water Systems Investigated as Officials Warn About Iranian Hackers

VU#243636: VPS.org one-click deployment templates contain multiple vulnerabilities

Anthropic and OpenAI are competing to see whose agents can go rogue harder

Chinese Hacker Uses DeepSeek AI to Orchestrate Vulnerability Exploits

Cheap Android TV Boxes Pose as Phones and Turn Owners’ Broadband Into Proxies

EFF Guide to Recording Law Enforcement

ESET tracks rise in malicious AI skills and adaptable malware

Charities remain locked out of CAF Bank online accounts

Attack & News

Coldcard Hardware Wallet Flaw Linked to $70 Million Bitcoin Theft in 41 Minutes

Rails patches critical Active Storage flaw with RCE potential

Balance Theory Raises $19 Million to Help Enterprises Manage Cybersecurity Investments

Ruby on Rails Patches Critical Vulnerability

7 States’ Water Systems Hit by Cyberattacks Likely Tied to Iran

Gov Alerts / ISAC

Phishing Campaigns Targeting AI Solutions Providers, (Sat, Aug 1st)

Vulnerability Alerts

CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft

Privacy & Governance

Friday Squid Blogging: Squid Helps Discover New Marine Species

Amending AB 1709 Doesn’t Fix It: California’s Social Media Ban Still Threatens Free Speech and Privacy

Fraud & Scams

Apple Warns Users to be Wary of Unsolicited FaceTime Calls

Fake Fortnite rewards are stealing players&#8217; accounts

Feed Activity

VU#243636: VPS.org one-click deployment templates contain multiple vulnerabilities

zipdump.py: Metadata Encoding, (Fri, Jul 31st)

ISC Stormcast For Friday, July 31st, 2026 https://isc.sans.edu/podcastdetail/10032, (Fri, Jul 31st)

Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution

The Xcode Assassin Returns: A Deep Dive Into the Latest XCSSET Version

​​​​What’s new in Microsoft Security: July 2026

Chinese-Speaking Threat Actor Harnesses AI Models for Autonomous Cyberattacks

ZDI-26-517: (Pwn2Own) Phoenix Contact CHARX SEC-3150 BackendURL WebSocket Command Injection Remote Code Execution Vulnerability

The SCREEN Act Threatens Privacy Far Beyond Adult Websites

The CHATBOT Act Forces One Parenting Model On Every Family

Anthropic’s Opus 5 Is Better at Resisting Prompt Injection

Everyone's a Builder Now. That Changes Security Training.

New Phishing Kits Use Open-Source Tools to Bypass MFA

Fake Flash Player installs AtlasRAT

Fake Fortnite rewards are stealing players’ accounts

Fake Fortnite rewards are stealing players’ accounts

What’s new in Microsoft Security: July 2026