AttackFeed — Cybersecurity News Aggregator

attack_FeedLIVE

Search⌘K

Cybersecurity news from across the internet

Provided byWagner Cybersecurity LLC20+ years in cybersecurity

LIVE

5,205articles

updated about 1 hour ago

Attack3,292 Gov309 Vulnerability970 Privacy258 Fraud376

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

Latest

Attack & NewsCyberScoop

Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure

The order says any foreign-produced equipment deemed to pose national security risks can’t be purchased or installed. The post Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrast…

about 2 hours agoRead more

Recent Articles

Search archive →

PRIVEFF Deeplinksabout 5 hours ago

EFF's Policy Position on ALPR Surveillance: Eliminate It and Reduce Its Harms

Automated license plate readers (ALPRs) build a searchable map of everywhere a driver goes, fed into databases that police, ICE, a…

NEWSSecurity Magazineabout 6 hours ago

Latest

Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure

Recent Articles

EFF's Policy Position on ALPR Surveillance: Eliminate It and Reduce Its Harms

100+ Internet-Exposed Water Systems Faced Cyberattacks Last Month

Latest

Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure

Recent Articles

EFF's Policy Position on ALPR Surveillance: Eliminate It and Reduce Its Harms

100+ Internet-Exposed Water Systems Faced Cyberattacks Last Month

Critical Avada WordPress theme flaw enables zero-click RCE

Officials disrupt Chinese espionage operation that hit multiple federal agencies

OpenAI’s Hugging Face Hack Debrief Raises More Questions Than It Answers

More than 100 water systems were hit in July cyberattacks

OpenAI: Agent behavior that led to Hugging Face intrusion formed in May

New GPUThor attack defeats NVIDIA ECC protection for root access

Three 10.0 security flaws fixed across Ubiquiti’s UniFi line

FBI Disrupts Chinese Proxy Tools Used in Mass Hacking of US Agencies and Infrastructure

A Look Inside the Phishing Service Attacking Organizations

FD - Half-click unauthenticated remote code execution on Horde Groupware IMP (from a stored XSS)

[NotCVE-2026-0013] CHIRP Kenwood ITM Driver Eval Injection Allows Arbitrary Code Execution via Crafted Radio File

[NotCVE-2026-0012] EmpManageX Hardcoded Administrative Credentials in Login API Allow Full Access to Employee Records

[NotCVE-2026-0011] Nmap 7.99 and Earlier nselib/packet.lua Zero-Length TCP Option Infinite Loop Allows Remote Denial of Service

[NotCVE-2026-0010] Barrier 2.4.0 for Windows Unauthenticated IPC Command Execution Allows Local Privilege Escalation to SYSTEM

[NotCVE-2026-0009] NitroShare Desktop 0.3.4 Path Traversal Allows LAN-Adjacent Arbitrary File Write

When AI infrastructure becomes the target: Securing gateways and control points

FBI Disrupts China-Linked QTFY Infrastructure Used to Steal Data From U.S. Organizations

Meta agrees to $18 billion settlement over teen social media harms

EFF Statement on Meta Settlement

Who Has Admin Rights in your Entra ID Directory&#x3f;, (Wed, Aug 26th)

Boston Scientific discloses 'global disruption' in ongoing cyberattack

Nimbus Manticore Expands Toolset With TWOSTROKE-Like Backdoor and SSH Tunneler

Escargot v4.3.0-214-gfaee4437 Unauthenticated Remote Debugger Allows Arbitrary JavaScript Evaluation and Local File Disclosure

Escargot v4.3.0-214-gfaee4437 OS Command Injection in Crash Handler via Unsanitized Executable Path

Escargot v4.3.0-214-gfaee4437 Debugger WebSocket Off-by-One Stack Buffer Overflow

UltraJSON v5.13.0-6-g733f9e1 Length-Boundary Violation Causes Out-of-Bounds Read During Incomplete JSON Parsing

Realtek edimax 52fc10d19 In-Band Ioctl Response Length Confusion Causes Heap Buffer Overflow

WatsonWebserver v7.1.0 HTTP/1 Chunked Request Processing Bypasses MaxRequestBodySize

Chronicle Wire v2026.8 Arbitrary Class Instantiation During YAML Deserialization via Externally Controlled YAML Type Tags

Chronicle Wire v2026.8 Insecure Reflection Allows Unvalidated Method Invocation

Chronicle Wire v2026.8 FileMarshallableOut Append Operations Follow Symbolic Links and Allow File Write Redirection

Multiple Vulnerabilities in TBEA TLogger Communication Box 3rd Generation

[0day-rubbish] VitalPBX 4.5.2 (Asterisk 20.20.1) Authenticated root RCE via asterisk_cli to dialplan System() (8.8)

[0day-rubbish] Seeq Server R65.2.3 (default deployment with Data Lab installed via the official CLI) Unauthenticated RCE (open self-registration + Data Lab Jupyter missing authorization) (9.8)

[0day-rubbish] Raritan EMX firmware emx_ecx_3.6.1_46982 (EMX/ECX gateway) Authenticated config injection to root RCE (8.8)

[0day-rubbish] mySCADA PRO Runtime 9.4.0 (container deployment msxrun; earlier versions with the same upgrade branch are likely affected) Unauthenticated OS command injection to root RCE (9.4)

[0day-rubbish] Maian Gallery v2.1 Authenticated unrestricted file upload to PHP RCE (7.2)

Attack & News

Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure

Critical Avada WordPress theme flaw enables zero-click RCE

Officials disrupt Chinese espionage operation that hit multiple federal agencies

OpenAI’s Hugging Face Hack Debrief Raises More Questions Than It Answers

More than 100 water systems were hit in July cyberattacks

Gov Alerts / ISAC

Who Has Admin Rights in your Entra ID Directory&#x3f;, (Wed, Aug 26th)

Vulnerability Alerts

FD - Half-click unauthenticated remote code execution on Horde Groupware IMP (from a stored XSS)

Privacy & Governance

EFF's Policy Position on ALPR Surveillance: Eliminate It and Reduce Its Harms

EFF Statement on Meta Settlement

Fraud & Scams

Update Chrome before you browse again

Attackers Use Vishing Attacks to Distribute New Android Malware

Feed Activity

CISA Adds Six Known Exploited Vulnerabilities to Catalog

ISC Stormcast For Wednesday, August 26th, 2026 https://isc.sans.edu/podcastdetail/10068, (Wed, Aug 26th)

VU#308749: Remote Code Execution and Arbitrary File Read Vulnerabilities in Kaltura Servers

Obfuscating IP Addresses as Hostnames, (Tue, Aug 25th)

[NotCVE-2026-0013] CHIRP Kenwood ITM Driver Eval Injection Allows Arbitrary Code Execution via Crafted Radio File

[NotCVE-2026-0012] EmpManageX Hardcoded Administrative Credentials in Login API Allow Full Access to Employee Records

[NotCVE-2026-0011] Nmap 7.99 and Earlier nselib/packet.lua Zero-Length TCP Option Infinite Loop Allows Remote Denial of Service

[NotCVE-2026-0010] Barrier 2.4.0 for Windows Unauthenticated IPC Command Execution Allows Local Privilege Escalation to SYSTEM

French Top Court Gets It Right, Strikes Down Social Media Ban For Youths

Spyware for Babies

Black Hat State of Security Vendors

Popular school apps may be sharing student data with advertisers

FTC Announces 2027 Telemarketer Fees to Access the National Do Not Call Registry

Beware of fake Indeed interview apps used to install spyware

Who Has Admin Rights in your Entra ID Directory?, (Wed, Aug 26th)

Who Has Admin Rights in your Entra ID Directory?, (Wed, Aug 26th)