AttackFeed — Cybersecurity News Aggregator

attack_FeedLIVE

Search⌘K

Cybersecurity news from across the internet

Provided byWagner Cybersecurity LLC20+ years in cybersecurity

LIVE

5,642articles

updated about 2 hours ago

Attack3,593 Gov331 Vulnerability1,026 Privacy282 Fraud410

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

Latest

Attack & NewsThe Register

Cisco searched for IOS XR bugs and found so many it rolled them into an update release

Three critical vulns demand your attention, one a make-me-root mess in Nexus 9000 Series Switches that you can mitigate, not fix

about 2 hours agoRead more

GOV

Recent Articles

Search archive →

FD

VULNFull Disclosureabout 4 hours ago

Flextype v1.0.0-alpha.3 NULL access_token Authentication Bypass

Posted by Ron E on Sep 03 Description Flextype CMS v1.0.0-alpha.3 contains an authentication validation vulnerability in the API…

FD

VULNFull Disclosureabout 4 hours ago

Flextype v1.0.0-alpha.3 Path Traversal in Entry Copy Allows Arbitrary Directory Copy and File Disclosure

Posted by Ron E on Sep 03 Description Flextype CMS v1.0.0-alpha.3 contains a path traversal vulnerability in the Entries copy fun…

Latest

Cisco searched for IOS XR bugs and found so many it rolled them into an update release

Recent Articles

Flextype v1.0.0-alpha.3 NULL access_token Authentication Bypass

Flextype v1.0.0-alpha.3 Path Traversal in Entry Copy Allows Arbitrary Directory Copy and File Disclosure

Latest

Cisco searched for IOS XR bugs and found so many it rolled them into an update release

Recent Articles

Flextype v1.0.0-alpha.3 NULL access_token Authentication Bypass

Flextype v1.0.0-alpha.3 Path Traversal in Entry Copy Allows Arbitrary Directory Copy and File Disclosure

ISC Stormcast For Friday, September 4th, 2026 https://isc.sans.edu/podcastdetail/10082, (Fri, Sep 4th)

HP Easy Start for macOS: CVE-2026-12554 / CVE-2026-12555 / CVE-2026-12556

Next.js 16.4.0-canary.13 Image Optimizer DNS Rebinding TOCTOU SSRF Still Exists

O-CMS 1.0.0 Authenticated OS Command Injection via ai_cli_script

Flextype v1.0.0-alpha.3 CMS registerShortcodes() Remote Code Execution via Attacker-Controlled File Inclusion

Flextype v1.0.0-alpha.3 Stored Fetch Shortcode Allows Server-Side Request Forgery

Flextype v1.0.0-alpha.3 Stored Filesystem Shortcode Allows Arbitrary File Read

Flextype v1.0.0-alpha.3 Stored Expression Injection Enables PHP Remote Code Execution

Flextype v1.0.0-alpha.3 Server-Side Request Forgery via fetch() in Query API

Flextype v1.0.0-alpha.3 Stored Arbitrary Expression Injection in ExpressionsDirective Allows Arbitrary File Read

Payara 7.2026.1.RC1 Remote Code Execution via Server-Side Includes #exec Directive in Payara Server

Payara 7.2026.1.RC1 Arbitrary EJB Method Invocation via Insecure Reflection in Payara Server

WireGuard-Linux Stack-Based Buffer Overflow in lsiio (Linux IIO Userspace Tool) Due to Unbounded fscanf

thttpd v2.26 Stack-Based Buffer Overflow in thttpd redirect CGI Program

thttpd v2.26 Stack-Based Buffer Overflow in thttpd htpasswd Utility Allows Local Memory Corruption

lighttpd2 Signedness Error in li_chunkqueue_append_mem() Leads to Out-of-Bounds Memory Access

Paho v1.3.15 Heap Use-After-Free in Eclipse Paho MQTT C Client via Message Retry Logi

Paho v1.3.15 Arbitrary Code Execution via Untrusted Dynamic Library Execution

Paho v1.3.15 Arbitrary Code Execution via Shared Library Search Path Hijacking

[0day-rubbish] ZesleCP 3.1.21 Authenticated arbitrary file write to root RCE via cron (8.8)

[0day-rubbish] StreamSets DataCollector 6.4.1 (official Docker image) Default credentials plus unsandboxed Shell Executor to root RCE (9.8)

[0day-rubbish] Puppet Enterprise 2025.10.0 Authenticated command injection to root RCE (patch-bypass variant of CVE-2025-5459) (8.8)

[0day-rubbish] NoMachine Terminal Server 10.0.57 two vulnerabilities

[0day-rubbish] Minuteman UPS Network Management Card 1.60.3 Unauthenticated OS command injection to root RCE (9.8)

[0day-rubbish] Lantronix EDS3000PR 3.2.0.0R2 two vulnerabilities

[0day-rubbish] GeoVision GV-TBL4700 V1.06 Authenticated command injection to root RCE via SNMPv3 user configuration (8.8)

OpenAI commits $1B in AI credits to frontline cyber defenders

Attackers exploit zero-days in consistently besieged SonicWall product

French hospital fined €500,000 after breach exposes data of 727,000

Nobody Is Saying Why OpenAI and Anthropic Had Outages Today

Prediction Market Betting Is Getting People Banned and Arrested

Coder's registry infrastructure compromised to push malicious modules

The G7 tells industry to hurry up and prep for post-quantum encryption

Court Rules Against Citizen Journalists in DMCA Takedown Case—EFF Will Appeal

OpenAI Releases GPT-6 Astra Amidst Frontier AI Cybersecurity Concerns

HPE patches critical ArubaOS-CX remote code execution flaw

Prolific Microsoft 0-day hunter drops CrowdStrike Falcon exploit PoC

Attack & News

Cisco searched for IOS XR bugs and found so many it rolled them into an update release

OpenAI commits $1B in AI credits to frontline cyber defenders

Attackers exploit zero-days in consistently besieged SonicWall product

French hospital fined €500,000 after breach exposes data of 727,000

Nobody Is Saying Why OpenAI and Anthropic Had Outages Today

Gov Alerts / ISAC

ISC Stormcast For Friday, September 4th, 2026 https://isc.sans.edu/podcastdetail/10082, (Fri, Sep 4th)

VU#889462: Casdoor authentication server is vulnerable to authorization bypass

Vulnerability Alerts

HP Easy Start for macOS: CVE-2026-12554 / CVE-2026-12555 / CVE-2026-12556

Privacy & Governance

Court Rules Against Citizen Journalists in DMCA Takedown Case—EFF Will Appeal

Proofpoint Brings OpenAI GPT Cyber Models into Security Operations to Help Defenders Investigate Threats Faster

Fraud & Scams

StreamRat Android malware spreads through Meta and TikTok ads

Feed Activity

Honeypot-Omaha and batch.py &#x5b;Guest Diary&#x5d;, (Wed, Sep 2nd)

ISC Stormcast For Thursday, September 3rd, 2026 https://isc.sans.edu/podcastdetail/10080, (Thu, Sep 3rd)

Multiple Vulnerabilities in SonicWall SMA1000 Series Appliances Could Allow for Remote Code Execution

Next.js 16.4.0-canary.13 Image Optimizer DNS Rebinding TOCTOU SSRF Still Exists

O-CMS 1.0.0 Authenticated OS Command Injection via ai_cli_script

Flextype v1.0.0-alpha.3 CMS registerShortcodes() Remote Code Execution via Attacker-Controlled File Inclusion

Flextype v1.0.0-alpha.3 Stored Fetch Shortcode Allows Server-Side Request Forgery

Researching Employment Scams

AI Agents Are Now Emailing Me with Their Security Concerns

Texas and Florida Step Back from ALPRs

FTC Extends Public Comment on Proposed Policy Statement Regarding Personalized Pricing

Your phone or computer may soon ask how old you are

Recruitment-Themed Phishing Campaign Targets Enterprise Users

New Phishing Kit Uses AI to Fully Automate Vishing Attacks

Honeypot-Omaha and batch.py [Guest Diary], (Wed, Sep 2nd)