feeds

BleepingComputer

https://www.bleepingcomputer.com/feed/

• McKesson discloses breach after ShinyHunters claims patient data theft (Fri, 28 Aug 2026 18:40:17 -0400)
• PaperCut releases second emergency patch for exploited flaws (Fri, 28 Aug 2026 15:08:26 -0400)
• GiveWP WordPress donation plugin flaw lets hackers execute server commands (Fri, 28 Aug 2026 14:18:55 -0400)
• 68-year-old imprisoned after making $1.3 million by pirating IPTV services (Fri, 28 Aug 2026 12:36:47 -0400)
• AI Is Accelerating Vulnerability Discovery. Can Defenders Keep Up? (Fri, 28 Aug 2026 10:00:10 -0400)
• Over 8,300 Gitea servers vulnerable to code execution attacks (Fri, 28 Aug 2026 08:58:43 -0400)

The Record

https://therecord.media/feed

• PaperCut warns of hackers using printer management software flaw in attacks (Fri, 28 Aug 2026 16:30:00 GMT)
• White House bans foreign-made equipment for power generation over cyber backdoor concerns (Thu, 27 Aug 2026 19:45:00 GMT)
• Finland appeals court revives case against Eagle S Officers over cable breaks (Thu, 27 Aug 2026 15:30:00 GMT)
• Chinese and Russian spies stepping up cyberattacks, German companies report (Thu, 27 Aug 2026 14:45:00 GMT)
• Cyberattack on Manchester Airports Group exposes data of 8.7 million customers (Thu, 27 Aug 2026 13:15:00 GMT)

Schneier on Security

https://www.schneier.com/feed/atom/

• Friday Squid Blogging: Truckload of Squid Spills in Rhode Island (2026-08-28T21:02:44Z)
• AI Doesn’t Mean the End of Mathematics—at Least Not Yet (2026-08-28T11:02:22Z)
• LLM-Based Social Engineering Scams (2026-08-27T09:56:56Z)
• Spyware for Babies (2026-08-26T12:05:52Z)
• Black Hat State of Security Vendors (2026-08-25T10:54:50Z)
• Criminal Deception in Silicon Valley (2026-08-24T10:38:29Z)

SANS Internet Storm Center

https://isc.sans.edu/rssfeed.xml

• Some Malicious PE Stats, (Thu, Aug 27th) (Fri, 28 Aug 2026 07:04:13 GMT)
• ISC Stormcast For Friday, August 28th, 2026 https://isc.sans.edu/podcastdetail/10072, (Fri, Aug 28th) (Fri, 28 Aug 2026 02:00:02 GMT)
• A polymorphic phishing page (that occasionally breaks itself), (Thu, Aug 27th) (Thu, 27 Aug 2026 09:57:28 GMT)
• ISC Stormcast For Thursday, August 27th, 2026 https://isc.sans.edu/podcastdetail/10070, (Thu, Aug 27th) (Thu, 27 Aug 2026 02:00:03 GMT)
• Who Has Admin Rights in your Entra ID Directory?, (Wed, Aug 26th) (Wed, 26 Aug 2026 15:58:15 GMT)
• ISC Stormcast For Wednesday, August 26th, 2026 https://isc.sans.edu/podcastdetail/10068, (Wed, Aug 26th) (Wed, 26 Aug 2026 02:40:13 GMT)

SecurityWeek

https://www.securityweek.com/feed/

• Hasbro Data Breach Exposed Employee Personal Information (Sat, 29 Aug 2026 11:55:00 +0000)
• In Other News: Log4j RCE Scare, Minimus Shutdown, Iranian Hacker Sanctions (Fri, 28 Aug 2026 15:35:34 +0000)
• ATF Confirms Cyber Incident After Ransomware Group Claims Attack (Fri, 28 Aug 2026 13:59:14 +0000)
• OpenAI Agents Exploited Linux Kernel Flaw on Company’s Own Systems (Fri, 28 Aug 2026 12:36:53 +0000)
• Tech, Cybersecurity Giants Unite Behind OpenAI-Led Cyber Defense Pledge (Fri, 28 Aug 2026 11:01:22 +0000)
• Think You’ve Eliminated Chinese AI? Check the Model’s Lineage, Cisco Says (Fri, 28 Aug 2026 10:30:00 +0000)

The Hacker News

https://feeds.feedburner.com/TheHackersNews

• Berlin Refuses to Pay Hackers Who Stole Data From the City's State Network (Sat, 29 Aug 2026 03:00:52 +0530)
• Cosmos EVM Flaw Exploited After Cosmos Labs Knew Every Blockchain Running It Was Vulnerable (Sat, 29 Aug 2026 02:08:47 +0530)
• Attackers Chain Two PaperCut Flaws to Execute Code Without Authentication (Fri, 28 Aug 2026 22:42:15 +0530)
• Android 17 Adds OS-Wide ECH to Hide Website Visits From Network Providers (Fri, 28 Aug 2026 21:50:46 +0530)
• ownCloud Flaw Exploited to Steal Nuclear Records From Philippine Research Body (Fri, 28 Aug 2026 21:26:55 +0530)
• 19 Chrome and Edge Extensions Found With Wallet-Stealing and Crypto-Draining Code (Fri, 28 Aug 2026 20:57:26 +0530)

Dark Reading

https://www.darkreading.com/rss.xml

• Hundreds of OpenAI Agents Invaded Hugging Face Servers (Fri, 28 Aug 2026 20:19:22 GMT)
• Offensive Security Investments Surge as AI Threats Increase (Fri, 28 Aug 2026 18:25:43 GMT)
• [Virtual Event] What Every Enterprise Should Know About Securing Cloud Assets in the Age of AI (2026-11-12T16:00:00.000Z)
• [Virtual Event] Building a Secure AI Strategy for the Enterprise (2026-10-08T15:00:00.000Z)
• You Need Cyber Deception for OT (Fri, 28 Aug 2026 14:00:00 GMT)
• Defining an AI Kill Switch Is Hard, but Necessary (Fri, 28 Aug 2026 13:30:00 GMT)

Malwarebytes Labs

https://www.malwarebytes.com/blog/feed/index.xml

• Protect your WhatsApp account with new passkey and 2FA upgrades (Fri, 28 Aug 2026 13:36:18 GMT)
• The AI agent swarm that attacked Hugging Face is a warning for the future (Fri, 28 Aug 2026 11:29:23 GMT)
• Flock wants privacy to meet surveillance halfway (Thu, 27 Aug 2026 15:15:32 GMT)
• Fake listings can turn trusted platforms into scam springboards (Thu, 27 Aug 2026 14:36:03 GMT)
• Fake Apple Pay charge brings the classic tech support scam to your phone (Thu, 27 Aug 2026 12:17:21 GMT)
• New Instagram and Facebook rules set a default two-hour limit for teens (Thu, 27 Aug 2026 10:23:13 GMT)

Krebs on Security

https://krebsonsecurity.com/feed/

• Two Alleged ‘TeamPCP’ Hackers Arrested in Australia (Thu, 27 Aug 2026 11:04:15 +0000)
• Who’s Tracking You? Use This New Service to Find Out (Fri, 14 Aug 2026 11:24:35 +0000)
• Microsoft Plugs Nearly 400 Security Holes (Tue, 11 Aug 2026 21:28:35 +0000)
• Canadian Man Pleads Guilty in Snowflake Extortions (Thu, 06 Aug 2026 17:00:56 +0000)
• Read This Before You Buy That TV Streaming Stick (Thu, 30 Jul 2026 16:49:00 +0000)
• LG to Ban Residential Proxies from Smart TV Apps (Wed, 22 Jul 2026 01:10:38 +0000)

CISA Advisories

https://www.cisa.gov/cybersecurity-advisories/all.xml

• Rockwell Automation OTTO Fleet Manager (Thu, 27 Aug 26 12:00:00 +0000)
• Xiiaozet LK100W (Thu, 27 Aug 26 12:00:00 +0000)
• Mitsubishi Electric CNC Series (Update A) (Thu, 27 Aug 26 12:00:00 +0000)
• Mitsubishi Electric Multiple FA Products (Update D) (Thu, 27 Aug 26 12:00:00 +0000)
• CISA Adds Three Known Exploited Vulnerabilities to Catalog (Thu, 27 Aug 26 12:00:00 +0000)
• Ebyte NA111-M (Thu, 27 Aug 26 12:00:00 +0000)

Talos Intelligence

https://blog.talosintelligence.com/rss/

• “Sorry, I can’t help with that”: How your guardrails might become the attacker’s best friend (Thu, 27 Aug 2026 18:00:24 GMT)
• JavaScript obfuscation: From party trick to phishing kit (Thu, 27 Aug 2026 10:00:27 GMT)
• Choose your fighter: Balancing competing requirements to select models for your AI SOC (Wed, 26 Aug 2026 10:00:05 GMT)
• The safety penalty: Reclaiming operational sovereignty in the age of AI (Tue, 25 Aug 2026 10:00:22 GMT)
• Is Cyber missing the Marque? (Thu, 20 Aug 2026 18:00:18 GMT)
• UAT-10147 deploys SPECTRE: A cross-platform implant with Linux rootkit and BYOVD capabilities (Thu, 20 Aug 2026 10:00:50 GMT)

Rapid7 Blog

https://blog.rapid7.com/rss/

• Metasploit Wrap Up: Payloads and Exploits, and Scanners, Oh my! (Fri, 28 Aug 2026 14:57:18 GMT)
• PaperCut NG/MF Critical Zero-Day Exploited in the Wild (Fri, 28 Aug 2026 10:09:12 GMT)
• Identity-as-a-Service: Uncovering Dark Web Marketplaces Trading Executive SSNs (Thu, 27 Aug 2026 13:51:55 GMT)
• Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520) (Mon, 24 Aug 2026 16:18:05 GMT)
• CVE-2026-19490: Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway (Wed, 19 Aug 2026 16:46:06 GMT)
• Rapid7 and Licencias OnLine Partner to Accelerate Cybersecurity Maturity across Latin America (Wed, 19 Aug 2026 12:00:00 GMT)

Exploit-DB

https://www.exploit-db.com/rss.xml

• [remote] CVE-2026-42167 - ProFTPD mod_sql post-authentication SQLi - RCE (Tue, 25 Aug 2026 00:00:00 +0000)
• [remote] PCMan 2.0.7 - Buffer Overflow (Tue, 18 Aug 2026 00:00:00 +0000)
• [dos] NanaZip 6.5 - DoS (Tue, 18 Aug 2026 00:00:00 +0000)
• [webapps] flyto-core 2.26.7 - Arbitrary File Write (Tue, 18 Aug 2026 00:00:00 +0000)
• [webapps] Nodemailer 9.0.0 - File Read/ SSRF (Tue, 18 Aug 2026 00:00:00 +0000)
• [webapps] Linuxfabrik monitoring_plugins_6.0.0 - SSRF (Tue, 18 Aug 2026 00:00:00 +0000)

Full Disclosure (seclists)

https://seclists.org/rss/fulldisclosure.rss

• FD - Half-click unauthenticated remote code execution on Horde Groupware IMP (from a stored XSS) (Wed, 26 Aug 2026 16:46:52 GMT)
• [NotCVE-2026-0013] CHIRP Kenwood ITM Driver Eval Injection Allows Arbitrary Code Execution via Crafted Radio File (Wed, 26 Aug 2026 16:46:38 GMT)
• [NotCVE-2026-0012] EmpManageX Hardcoded Administrative Credentials in Login API Allow Full Access to Employee Records (Wed, 26 Aug 2026 16:46:36 GMT)
• [NotCVE-2026-0011] Nmap 7.99 and Earlier nselib/packet.lua Zero-Length TCP Option Infinite Loop Allows Remote Denial of Service (Wed, 26 Aug 2026 16:46:35 GMT)
• [NotCVE-2026-0010] Barrier 2.4.0 for Windows Unauthenticated IPC Command Execution Allows Local Privilege Escalation to SYSTEM (Wed, 26 Aug 2026 16:46:34 GMT)
• [NotCVE-2026-0009] NitroShare Desktop 0.3.4 Path Traversal Allows LAN-Adjacent Arbitrary File Write (Wed, 26 Aug 2026 16:46:33 GMT)

PortSwigger Research

https://portswigger.net/research/rss

• What's in a tag name? JavaScript, apparently (Tue, 25 Aug 2026 14:24:32 GMT)
• CSS:the bomb inside your inbox (Thu, 06 Aug 2026 22:00:00 GMT)
• CRLF-Powered Desync Attacks: Beheading HTTP Streams (Wed, 05 Aug 2026 23:30:00 GMT)
• Can AI do novel security research? Meet the HTTP Terminator (Wed, 05 Aug 2026 19:30:00 GMT)
• Top 10 web hacking techniques of 2025 (Thu, 05 Feb 2026 15:28:08 GMT)
• Top 10 web hacking techniques of 2025: call for nominations (Tue, 06 Jan 2026 15:31:28 GMT)

Packet Storm

https://packetstormsecurity.com/rss.xml

no items

Zero Day Initiative

https://www.zerodayinitiative.com/rss/published/

• ZDI-26-610: Apple Safari JavaScriptCore B3 ReduceStrength Phase Use-After-Free Remote Code Execution Vulnerability (Mon, 24 Aug 2026 00:00:00 -0500)
• ZDI-26-609: Linux Kernel Net Scheduler Packet Classifier Use-After-Free Local Privilege Escalation Vulnerability (Mon, 24 Aug 2026 00:00:00 -0500)
• ZDI-26-608: Linux Kernel KVM IOAPIC Use-After-Free Local Privilege Escalation Vulnerability (Mon, 24 Aug 2026 00:00:00 -0500)
• ZDI-26-607: Microsoft Office HTML Injection Information Disclosure Vulnerability (Mon, 24 Aug 2026 00:00:00 -0500)
• ZDI-26-606: Microsoft Windows Compatibility Appraiser Link Following Local Privilege Escalation Vulnerability (Mon, 24 Aug 2026 00:00:00 -0500)
• ZDI-26-605: Microsoft Windows Localized Filenames Improper Input Validation NTLM Response Information Disclosure Vulnerability (Mon, 24 Aug 2026 00:00:00 -0500)

Google Project Zero

https://googleprojectzero.blogspot.com/feeds/posts/default

• A 0-click exploit chain for the Pixel 10: When a Door Closes, a Window Opens (2026-05-13T00:00:00-07:00)
• On the Effectiveness of Mutational Grammar Fuzzing (2026-03-05T00:00:00-08:00)
• A Deep Dive into the GetProcessHandleFromHwnd API (2026-02-26T00:00:00-08:00)
• Bypassing Administrator Protection by Abusing UI Access (2026-02-12T00:00:00-08:00)
• Breaking the Sound Barrier, Part II: Exploiting CVE-2024-54529 (2026-01-30T00:00:00-08:00)
• Bypassing Windows Administrator Protection (2026-01-26T00:00:00-08:00)

OSINT Curious

https://osintcurio.us/feed/

no items

IntelTechniques Blog

https://inteltechniques.com/blog/feed/

• Free PDF Self-Publishing Guide (Thu, 20 Aug 2026 00:00:00 GMT)
• OS Telemetry Update (Wed, 19 Aug 2026 00:00:00 GMT)
• New OS Telemetry Guide (Tue, 18 Aug 2026 00:00:00 GMT)
• New Firewall Guide (Mon, 17 Aug 2026 00:00:00 GMT)
• The New Blog (Sat, 15 Aug 2026 00:00:00 GMT)
• OSINT Tools Update (Fri, 14 Aug 2026 00:00:00 GMT)

Bellingcat

https://www.bellingcat.com/feed/

• Tracking a Sanctioned Russian Vessel’s West African Odyssey (Tue, 25 Aug 2026 08:52:50 +0000)
• Satellite Imagery Documents New Border Patrol Road Construction in Big Bend National Park (Thu, 20 Aug 2026 20:50:42 +0000)
• Welcome to Dubai: Kinahan Cartel’s Visas Revealed (Sat, 01 Aug 2026 11:03:00 +0000)
• Will Ronaldo Cry​? World Cup Fans Bet Billions Through Prediction Markets (Thu, 30 Jul 2026 11:17:38 +0000)
• Shahed-Type Drones Filmed During Mali Village Attacks (Fri, 24 Jul 2026 15:39:05 +0000)
• Identifying the Crypto Entrepreneur Linked to Popular Forum Trading in ‘Leaked’ Nudes of Women (Thu, 16 Jul 2026 16:00:01 +0000)