AttackFeed — Cybersecurity News Aggregator

attack_FeedLIVE

Search⌘K

Cybersecurity news from across the internet

Provided byWagner Cybersecurity LLC20+ years in cybersecurity

LIVE

8,587articles

updated about 1 hour ago

Attack5,739 Gov489 Vulnerability1,295 Privacy430 Fraud634

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

Latest

Fraud & ScamsMalwarebytes Labs

A week in security (October 26 – November 1)

A list of topics we covered in the week of October 26 to November 1 of 2026

about 1 hour agoRead more

Recent Articles

Search archive →

VULNFull Disclosureabout 3 hours ago

Apache Struts2 REST Plugin Untrimmed `Accept` Header Tokens Break Content Negation Fallback

Posted by Daniel Owens via Fulldisclosure on Nov 01 Description The Apache Struts2 REST Plugin's `DefaultContentTypeHandlerManager…

VULNFull Disclosureabout 3 hours ago

Apache Struts2 JSON Plugin Insecure Deserialisation -- Object Deserialisation Element-Count Limit Bypass

Posted by Daniel Owens via Fulldisclosure on Nov 01 As of the current versions of the Apache Struts2 JSON Plugin (e.g., version 7.…

Latest

A week in security (October 26 – November 1)

Recent Articles

Apache Struts2 REST Plugin Untrimmed `Accept` Header Tokens Break Content Negation Fallback

Apache Struts2 JSON Plugin Insecure Deserialisation -- Object Deserialisation Element-Count Limit Bypass

Latest

A week in security (October 26 – November 1)

Recent Articles

Apache Struts2 REST Plugin Untrimmed `Accept` Header Tokens Break Content Negation Fallback

Apache Struts2 JSON Plugin Insecure Deserialisation -- Object Deserialisation Element-Count Limit Bypass

Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain

Apache Struts2 Core Arbitrary Code Execution via OGNL Sandbox Escape

Apache Struts2 Core TokenHelper Token Cryptographic Timing Side-Channel

Apache Struts2 Spring Plugin Uses a Previously Closed Resource

Apache Struts2 Core Integer Overflow

Apache Struts2 Core Cross-Origin Protection Exemption Miskeyed to a Deployment-Wide Path

Apache Struts2 REST Plugin Fails to Properly Parse Chunked Requests

New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial Value

ISC Stormcast For Monday, November 2nd, 2026 https://isc.sans.edu/podcastdetail/10160, (Mon, Nov 2nd)

Frontier Airlines Warns of Phishing Emails That Use Passengers’ Real Booking Details

Emergency Alert Apps in Ukraine and Russia Hacked Hours Apart, Sending False Warnings

Federal court tosses Trump lawsuit challenging Alaska Senate certification

FBI links $6.3 billion Binance crypto heist to North Korean hackers

Alpine Linux rebuilds GitLab after attempted RCE attack

OpenAI says it's doubling Pro usage limits and bringing Work features to Chat

Northstar Security Exits Stealth With $7M to Expose Toxic Risk Combinations

FBI Links 628 Crypto Wallet Addresses to North Korea’s Binance Hack

OneNote File Extraction, (Sun, Nov 1st)

CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key

Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear Script

NetamLoader Malware Targets Government Windows 10 Systems in Asia via .NET Injection

FBI Links North Korea's TraderTraitor to Record $6.43 Billion Binance Crypto Heist

Northflank security breach leads to abuse of customers' AI API keys

New Android SMS of Death exploit can remotely crash unpatched phones

Polymarket Users Lose $2.7 Million After Hackers Compromise Third-Party Script

Reddit to lock content behind logins to fight scrapers

From Beginner to Bug Hunter: Learning Cybersecurity in the AI Era.

Chainalysis discloses data breach from "offensive agentic techniques"

Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data

Spooky New Infostealer Malware Uses AI to ‘Autodox’ Victims

Syrian Hacker Gets Prison Time in US After Over a Decade on the Run

Wireshark 5.0.0rc1 Release, (Sat, Oct 31st)

YARA-X 1.22.1 Release, (Sat, Oct 31st)

Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access

A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats

Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%

How to Remove Your Personal Information from Data Brokers

Attack & News

Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain

New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial Value

Federal court tosses Trump lawsuit challenging Alaska Senate certification

FBI links $6.3 billion Binance crypto heist to North Korean hackers

Alpine Linux rebuilds GitLab after attempted RCE attack

Gov Alerts / ISAC

ISC Stormcast For Monday, November 2nd, 2026 https://isc.sans.edu/podcastdetail/10160, (Mon, Nov 2nd)

OneNote File Extraction, (Sun, Nov 1st)

Vulnerability Alerts

Apache Struts2 Core Arbitrary Code Execution via OGNL Sandbox Escape

Apache Struts2 Core TokenHelper Token Cryptographic Timing Side-Channel

Privacy & Governance

Frontier Airlines Warns of Phishing Emails That Use Passengers’ Real Booking Details

Fraud & Scams

A week in security (October 26 – November 1)

Warning: Romance Scammers Are Targeting US Citizens For Money Laundering

Feed Activity

Wireshark 5.0.0rc1 Release, (Sat, Oct 31st)

YARA-X 1.22.1 Release, (Sat, Oct 31st)

CISA Adds Two Known Exploited Vulnerabilities to Catalog

Apache Struts2 Spring Plugin Uses a Previously Closed Resource

Apache Struts2 Core Integer Overflow

Apache Struts2 Core Cross-Origin Protection Exemption Miskeyed to a Deployment-Wide Path

Emergency Alert Apps in Ukraine and Russia Hacked Hours Apart, Sending False Warnings

How to Remove Your Personal Information from Data Brokers

Chainalysis Discloses Security Incident as Reports Say Attackers Used AI Agents

Applebee’s App Exposed Customer Data Through a Database Password Left in Its Code

The Dishwasher Doesn’t Need a Soul, The Film Does.

Fake PDF and search tools hijacked searches for 13.4 million Chrome users

Photo ID, bank checks, face scan? The UK’s age-check options