AttackFeed — Cybersecurity News Aggregator

Cybersecurity news from across the internet

Provided byWagner Cybersecurity LLC20+ years in cybersecurity

LIVE

9,386articles

updated 5 minutes ago

Attack6,243 Gov519 Vulnerability1,480 Privacy468 Fraud676

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

Latest

PRIV

Privacy & Governance · Live

Privacy & GovernancePrivacy Affairs

Lovable Apps Exposed Passports and Private Chats. The Fixes So Far Don’t Close Existing Leaks

Thousands of apps built with Lovable left personal data readable without a login. The platform fixes so far protect new tables and new publishes, not data already exposed.

about 2 hours agoRead more

Latest

Lovable Apps Exposed Passports and Private Chats. The Fixes So Far Don’t Close Existing Leaks

Recent Articles

Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection

Latest

Lovable Apps Exposed Passports and Private Chats. The Fixes So Far Don’t Close Existing Leaks

Recent Articles

Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection

Cursor confirms security breach led to malicious Claude Code extension

Upcoming Speaking Engagements

US disrupts North Korean campaign behind $400 million crypto theft

Is AI Making Us Worse at Cybersecurity?

Bitrise Takes Its Mobile Build Service Offline After a Breach, Tells Customers to Rotate Every Secret

The Security Jobs Growing Around Enterprise AI Agents

Beware the New AI-Fueled Ransomware Boom

Apple Reveals How Secure Exclaves Shield Camera and Microphone Data

No Signs of Hacking in FAA Ground Stop as FBI Reportedly Probes Software Update

Airtasker Data Breach: Support Tickets Downloaded, Some With IDs and Card Numbers

Big Tech takes a beating as online safety experts accuse companies of doing bare minimum

Friday Squid Blogging: Pacific Flying Squid Populations Dropping in Korean Waters

FAA Ground Stop Issued Due to ‘Extraordinary Circumstances’

SCKit abuses ScreenConnect to deploy remote access and target technician sessions

Tech Companies Are Trying to Shift the Entire Concept of Privacy (Again)

Android’s Clipboard Warning Can Be Hidden, and Google Has Closed the Report

Researchers continue to find serious vulnerabilities in internet connected refrigerators

GNSS Spoofing and Jamming: What They Do to RTK Positioning and How Field Teams Can Spot Them

Industry guidelines for offensive cyber tools unveiled through international Pall Mall Process

This year’s bug count just passed 100K

Trezor confirms crypto-stealing implants in three wallets, releases fix

Microsoft 365 Crawls Back to Life After a 24-Hour Outage

German military drone operations disrupted by cyberattack

Apify Breach: A Hacker Got Into Customer Accounts on the Web-Scraping Platform

The Microsoft Outage Is a Warning for the World

The Binance Aftershocks: Tracking the Nearly 130% Spike in Crypto Impersonation Scams

PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE

New York City votes to ban surveillance pricing

Microsoft Outage Could Lead to $7B in Losses

Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiper

KnowBe4 and AWS: Behind Every AI Advancement Is Strong Collaboration

New Mior and Skyfall Attacks Let Rogue Cloud Hosts Steal Secrets From AMD SEV-SNP VMs

In Other News: New CISA Director Nominee, Connected Car Hacking, Baker Tilly Data Breach

How one AI agent exposed five critical enterprise security gaps

FBI Says North Korean Hackers Stole Over $400 Million in Crypto Using Deepfake Video Calls

FBI Disrupts North Korean FaceStealer Scheme Behind $400M Crypto Theft

Trezor Confirms Hidden Implants in CryptoBilis-Sold Wallets That Can Steal Recovery Phrases

Microsoft Struggles to Restore Email and Other Services in a Global Outage

Attack & News

Cursor confirms security breach led to malicious Claude Code extension

US disrupts North Korean campaign behind $400 million crypto theft

Is AI Making Us Worse at Cybersecurity?

The Security Jobs Growing Around Enterprise AI Agents

Beware the New AI-Fueled Ransomware Boom

Gov Alerts / ISAC

CISA Adds Two Known Exploited Vulnerabilities to Catalog

Vulnerability Alerts

SCKit abuses ScreenConnect to deploy remote access and target technician sessions

Policy and Disclosure: 2026 Edition

Privacy & Governance

Lovable Apps Exposed Passports and Private Chats. The Fixes So Far Don’t Close Existing Leaks

Upcoming Speaking Engagements

Fraud & Scams

The Binance Aftershocks: Tracking the Nearly 130% Spike in Crypto Impersonation Scams

New York City votes to ban surveillance pricing

Feed Activity

Macfinger ClickFix campaign sends DownTheDRAIN infostealer for macOS, (Fri, Nov 13th)

ISC Stormcast For Friday, November 13th, 2026 https://isc.sans.edu/podcastdetail/10178, (Fri, Nov 13th)

VU#644655: TightVNC and UltraVNC Viewer contains a heap-based buffer overflow

VU#580079: Arbitrary file read/write vulnerability in ImageMagick-based applications with default configuration

ZDI-26-997: SmarterTools SmarterMail Insufficient Entropy Authentication Bypass Vulnerability

ZDI-26-996: SmarterTools SmarterMail Missing Authorization Information Disclosure Vulnerability

ZDI-26-995: SmarterTools SmarterMail Missing Authorization Privilege Escalation Vulnerability

Bitrise Takes Its Mobile Build Service Offline After a Breach, Tells Customers to Rotate Every Secret

Airtasker Data Breach: Support Tickets Downloaded, Some With IDs and Card Numbers

Friday Squid Blogging: Pacific Flying Squid Populations Dropping in Korean Waters

KnowBe4 and AWS: Behind Every AI Advancement Is Strong Collaboration

Google pushes second Chrome update this week

Worldwide Microsoft 365 outage disrupts Outlook, SharePoint, Teams, and more