CyberFeed: Security News

Advisories, disclosures and breach reporting, newest first. Aggregated, not triaged — a headline here is a starting point, not a verdict on whether it affects you.

Settra ransomware variant deployed in recent attacks

Cybersecurity Dive - Latest News•Sep 18, 2026

Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repositories for C2

The Hacker News•Sep 18, 2026

GhostCode attackers abuse device codes to take over Microsoft 365 accounts

CSO Online•Sep 18, 2026

GhostCode attackers abuse device codes to take over Microsoft 365 accounts

Computerworld•Sep 18, 2026

Softcat to acquire North American technology solutions provider GDT

Latest from ITPro •Sep 18, 2026

CISA ends weekly vulnerability roundups as part of shift to prioritization approach

Cybersecurity Dive - Latest News•Sep 18, 2026

Building a pre-emptive security architecture — what is it and how can your business adopt one?

Latest from ITPro •Sep 18, 2026

In Other News: Ransomware Developer Sentenced, Plugin4Shell AI Attack, Critical SAP Flaw

SecurityWeek•Sep 18, 2026

CISA Adds Two Known Exploited Vulnerabilities to Catalog

Cybersecurity and Infrastructure Security Agency CISA•Sep 18, 2026

Vulnerability Management Is Now A Race Against Attacker Speed

Cyber Security News Archives - Cyber Defense Magazine•Sep 18, 2026

Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation

The Hacker News•Sep 18, 2026

AI-Built Exploit and Sign-In Flaw Opened Path to Internal OpenAI Code

SecurityWeek•Sep 18, 2026

Cybersecurity 2026: The Year AI Became The Battlefield And What Comes Next

Cybercrime Magazine•Sep 18, 2026

Fake HBO Max Ads Spread ClickFix Malware on Reddit: This Week in Scams

McAfee Blog•Sep 18, 2026

US Agencies Monitor Global Maritime Cyber Attacks

Cyber Security News Archives - Cyber Defense Magazine•Sep 18, 2026

Apple launches 'privacy-first' AI upgrade to Siri – but it won't be available in the EU

Latest from ITPro •Sep 18, 2026

23 Million User Records Compromised in Gyazo Data Breach

SecurityWeek•Sep 18, 2026

Plugin4Shell Lets Repository Owners Swap Pinned Plugin Code Across Four AI Coding Agents

The Hacker News•Sep 18, 2026

Microsoft Patches 18 Vulnerabilities in AI, Cloud Products

SecurityWeek•Sep 18, 2026

NightmareStresser DDoS Service Disrupted in International Operation

SecurityWeek•Sep 18, 2026

RatHat Turns Android Accessibility Into an Attack Weapon

Security Affairs•Sep 18, 2026

Cybersecurity News: Nuclear-style AI safeguards, AI legislation shelved, CISA’s decoy guidance

Cybersecurity Headlines Archives - CISO Series•Sep 18, 2026

NCSC issues advice on cyber adversary simulation

Latest from ITPro •Sep 18, 2026

Brevo Supply Chain Attack Injects Malware Into 100,000 Websites

SecurityWeek•Sep 18, 2026

FBI seizes NightmareStresser domains linked to hundreds of thousands of DDoS attacks

Consumer Insights•Sep 18, 2026

Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm Stealer

The Hacker News•Sep 18, 2026

Critical Orkes Conductor Vulnerability Exploited in Attacks

SecurityWeek•Sep 18, 2026

Check Point Fixes Critical CVE-2026-91843 Allowing Root Code Execution

Security Affairs•Sep 18, 2026

Xbox bans players after fraudulent game codes bought from unauthorized resellers

Consumer Insights•Sep 18, 2026

RatHat Android Malware Abuses ADB to Retain Shell Access After Uninstall

The Hacker News•Sep 18, 2026

CyberFeed: Security News

Settra ransomware variant deployed in recent attacks

Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repositories for C2

GhostCode attackers abuse device codes to take over Microsoft 365 accounts

GhostCode attackers abuse device codes to take over Microsoft 365 accounts

Softcat to acquire North American technology solutions provider GDT

CISA ends weekly vulnerability roundups as part of shift to prioritization approach

Building a pre-emptive security architecture — what is it and how can your business adopt one?

In Other News: Ransomware Developer Sentenced, Plugin4Shell AI Attack, Critical SAP Flaw

CISA Adds Two Known Exploited Vulnerabilities to Catalog

Vulnerability Management Is Now A Race Against Attacker Speed

Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation

AI-Built Exploit and Sign-In Flaw Opened Path to Internal OpenAI Code

Cybersecurity 2026: The Year AI Became The Battlefield And What Comes Next

Fake HBO Max Ads Spread ClickFix Malware on Reddit: This Week in Scams

US Agencies Monitor Global Maritime Cyber Attacks

Apple launches 'privacy-first' AI upgrade to Siri – but it won't be available in the EU

23 Million User Records Compromised in Gyazo Data Breach

Plugin4Shell Lets Repository Owners Swap Pinned Plugin Code Across Four AI Coding Agents

Microsoft Patches 18 Vulnerabilities in AI, Cloud Products

NightmareStresser DDoS Service Disrupted in International Operation

RatHat Turns Android Accessibility Into an Attack Weapon

Cybersecurity News: Nuclear-style AI safeguards, AI legislation shelved, CISA’s decoy guidance

NCSC issues advice on cyber adversary simulation

Brevo Supply Chain Attack Injects Malware Into 100,000 Websites

FBI seizes NightmareStresser domains linked to hundreds of thousands of DDoS attacks

Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm Stealer

Critical Orkes Conductor Vulnerability Exploited in Attacks

Check Point Fixes Critical CVE-2026-91843 Allowing Root Code Execution

Xbox bans players after fraudulent game codes bought from unauthorized resellers

RatHat Android Malware Abuses ADB to Retain Shell Access After Uninstall

Subscribe to my newsletter

Stay Alert

Warning

Snooze Alerts