CK Cyber logo CK CyberFeeds

Automatic cybersecurity RSS aggregation

Cybersecurity Feeds

CK Cyber collects the latest RSS items from selected advisory, threat intelligence, vulnerability research, and security news sources, then renders them here without third-party browser scripts.

Advisories Threat Intel Vulnerabilities AppSec
Last refreshed Nov 1, 2026 2:45 PM ET
Next refresh Nov 2, 2026 7:00 AM ET
Sources online 13 / 14
Headlines loaded 52

Latest cybersecurity headlines.

Newest items from the monitored security sources, sorted by published date.

  1. BleepingComputer Alpine Linux rebuilds GitLab after attempted RCE attack

    Hackers attempted to exploit a critical GitLab vulnerability in Alpine Linux's development infrastructure on October 20-21, prompting the open-source...

    Enterprise IT Linux
  2. BleepingComputer OpenAI says it's doubling Pro usage limits and bringing Work features to Chat

    OpenAI has just confirmed that it's rolling out ChatGPT Work capabilities directly into regular Chat, while also combining usage allowances across Ch...

    Enterprise IT OpenAI
  3. SANS Internet Storm Center OneNote File Extraction, (Sun, Nov 1st)

    Recently, I had to extract embedded files from a set of OneNote files (extension .one).

    Mobile/Consumer
  4. The Hacker News CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key

    A critical flaw in Canonical's LXD and MicroCloud let an attacker log in as a trusted client without holding that client's private key. To do it, the...

    Enterprise IT
  5. The Hacker News Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear Script

    Malicious code on the website of prediction market Polymarket sold some signed-in traders' positions and moved their funds to the hackers on October...

    Enterprise IT
  6. The Hacker News FBI Links North Korea's TraderTraitor to Record $6.43 Billion Binance Crypto Heist

    The U.S. Federal Bureau of Investigation (FBI) has officially attributed the theft of more than $6 billion in virtual assets to TraderTraitor, a Nort...

    Government Financial Services
  7. The Hacker News NetamLoader Malware Targets Government Windows 10 Systems in Asia via .NET Injection

    Cybersecurity researchers have disclosed details of what has been described as a "highly sophisticated infection chain" targeting government organiza...

    Government Enterprise IT Microsoft Windows
  8. BleepingComputer Northflank security breach leads to abuse of customers' AI API keys

    Cloud application hosting platform Northflank is warning customers to rotate all credentials and secrets stored on its platform after a security brea...

    Cloud/SaaS AI/ML
  9. BleepingComputer New Android SMS of Death exploit can remotely crash unpatched phones

    A security researcher has released a proof-of-concept exploit for a recently patched Android vulnerability, dubbed "SMS of Death" and tracked as CVE-...

    Mobile/Consumer Android
  10. Cisco Talos Appraisal by AI: Model-driven victim prioritization in the VOLTA infostealer

    The self-deleting VOLTA infostealer steals credentials, sessions, and cryptocurrency wallets. Then, it uses LLMs to profile victims and rank their mo...

    AI/ML Enterprise IT Cisco
  11. SANS Internet Storm Center Wireshark 5.0.0rc1 Release, (Sat, Oct 31st)

    Wireshark Release Candidate 5.0.0 was published: soon we can expect a new major version of Wireshark.

    Enterprise IT
  12. SANS Internet Storm Center YARA-X 1.22.1 Release, (Sat, Oct 31st)

    YARA-X's 1.22.1 is a bugfix version, it brings 2 bugfixes.

    Enterprise IT
  13. SANS Internet Storm Center YARA-X 1.22.0 Release, (Sun, Oct 25th)

    YARA-X's 1.22.0 release brings 11 improvements and 9 bugfixes.

    Enterprise IT
  14. Cisco Security Advisories Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities

    Between October 17 and October 20, 2026, a critical security compromise involving Certificate Authorities that are managed by eMudhra was uncovered....

    Enterprise IT Cisco
  15. Dark Reading Devs Hit by Trojanized Claude Code Extension for Cursor

    Two serious security issues hit Cursor on the same day, highlighting the risks for AI-powered integrated development environments (IDEs).

    AI/ML Mobile/Consumer Anthropic Claude
  16. Cisco Security Advisories Vulnerabilities in Node.js Affecting Cisco Products: October 2026

    On October 21, 2026, Node.js announced the availability of fixes for multiple vulnerabilities across the following supported release lines: 22.x, 24....

    Enterprise IT Cisco Node.js/npm
  17. Dark Reading Behind the Scenes of How Operation Blackout Went Down

    A recent law enforcement operation to dismantle harmful scam centers was a big success. A threat intelligence expert walks us through what happened a...

    Government
  18. Cisco Security Advisories Vulnerabilities in PHP Affecting Cisco Products: October 2026

    On October 21, the PHP Foundation announced the availability of a Critical PHP Security release addressing two critical vulnerabilities:  CVE-2026-10...

    Enterprise IT Cisco
  19. Cloudflare Security 4 real? Tracking exploitation and patching of eMudhra’s weak keys

    Four, just four: that’s the key to break into any unpatched connection on the Internet that is using eMudhra certificates. Here’s how we quickly patc...

    Enterprise IT
  20. Dark Reading L’Italia è afflitta da vulnerabilità informatiche, senza una causa chiara

    I ricercatori non riescono a spiegare del tutto perché le minacce informatiche in Italia siano così diverse rispetto a quelle di qualsiasi altro Paes...

    Enterprise IT

Source directory.

Use this as the source map. Each source can be opened when you want to inspect its latest pulled items.

Advisories Government

CISA Cybersecurity Advisories

High-priority cybersecurity advisories, alerts, and defensive guidance from CISA.

RSS Website
Show latest from this source

  2. Hitachi Energy CoreTec Product

    Hitachi Energy is aware of OS command injection and Dirty Frag vulnerabilities that affect CoreTec product versions listed in this document. Successf...

    Government Critical Infrastructure

  3. Hitachi Energy TRO600 series products

    Hitachi Energy is aware of multiple vulnerabilities that affect the TRO600 series product versions listed in this document. These vulnerabilities can...

    Government Critical Infrastructure

  4. Siemens Mendix SAML Module

    Mendix SAML module contains an authentication bypass vulnerability that could allow an unauthenticated remote attacker to gain unauthorized access by...

    Government Enterprise IT
Threat News Cybersecurity

The Hacker News

Cybersecurity news, threat activity, vulnerability reporting, and security research updates.

RSS Website
Show latest from this source
Threat News Incidents

BleepingComputer

Security news, malware campaigns, breach reporting, and vulnerability coverage.

RSS Website
Show latest from this source
Investigations Cybercrime

KrebsOnSecurity

Cybercrime investigations, breach analysis, fraud reporting, and security industry coverage.

RSS Website
Show latest from this source

  4. Microsoft Patches More Than 1,400 Security Flaws

    Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software. Today's epic patc...

    Enterprise IT Microsoft Windows
Threat Intel Handler Diary

SANS Internet Storm Center

Daily security observations, attack activity, and practitioner-focused incident notes from SANS ISC.

RSS Website
Show latest from this source
Security Research Google

Google Online Security Blog

Security engineering, vulnerability research, abuse prevention, and online safety updates from Google.

RSS Website
Show latest from this source

  2. Bringing Rust to the Pixel Baseband

    Posted by Jiacheng Lu, Software Engineer, Google Pixel Team Google is continuously advancing the security of Pixel devices. We have been focusing on...

    Enterprise IT
Advisories Cisco

Cisco Security Advisories

Official Cisco product security advisories and vulnerability notices.

RSS Website
Show latest from this source
Threat Intel Research

Cisco Talos

Threat intelligence, malware analysis, vulnerability research, and defensive reporting from Cisco Talos.

RSS Website
Show latest from this source

  2. A quiet week in infosec

    In this edition of the Threat Source newsletter, William explores how PHP has taken over the conversation, Node.js has joined in, but underneath it a...

    Enterprise IT Cisco Node.js/npm
Threat Intel Research

Palo Alto Unit 42

Threat research, malware analysis, incident response insights, and adversary tracking from Unit 42.

RSS Website
Show latest from this source

  2. Unwrapping Retail Peak Season Cyber Threats

    Unit 42 explores key peak shopping season retail cyber threats, from ransomware to AI attacks, and shares how to defend operations and customer trust...

    Enterprise IT AI/ML Palo Alto Networks

  3. EMudhra Intermediate CA Certificates Compromised

    Eight compromised eMudhra intermediate CA private keys risk unauthorized TLS signing and MitM interception. Read our analysis and containment guide....

    Enterprise IT Palo Alto Networks

  4. The Current Landscape of OAuth Attacks

    Unit 42 explores modern OAuth threats and actionable steps organizations can take to protect their environments. The post The Current Landscape of OA...

    Enterprise IT Palo Alto Networks
Security Engineering Cloudflare

Cloudflare Security

Security engineering, network defense, cryptography, abuse prevention, and Internet security research.

RSS Website
Show latest from this source
Vulnerabilities Research

Tenable Research

Vulnerability research, exposure analysis, and security advisory coverage from Tenable.

RSS Website
Show latest from this source

  4. Hermes Agent - Pre-Authentication Disk Consumption

    Hermes Agent - Pre-Authentication Disk Consumption In Hermes Agent  the public POST /auth/password-login route copies the client-supplied provider va...

    Enterprise IT AI/ML Education/Research
Security News Enterprise

Dark Reading

Enterprise cybersecurity reporting, operations, risk, application security, and threat coverage.

RSS Website
Show latest from this source
Application Security Community

OWASP

Application security project updates, community news, and secure software guidance from OWASP.

RSS Website
Feed temporarily unavailable Open the RSS link directly or check back after the cache refreshes.
Security Government

FBI RSS

Public safety, cyber, and federal security updates from the official FBI feeds directory.

RSS Website
Show latest from this source

  2. FBI Teen Academy Travels Overseas

    For the first time ever, the FBI took its Teen Academy program out of the country and onto a U.S. military base.

    Government

  3. FBI Laboratory Eliminates DNA-Processing Backlog

    A team of laboratory, data-management, and biometric examination experts within the FBI Laboratory recently used a combination of administrative and...

    Government Healthcare

Import the whole list.

Use the OPML file to add the full CK Cyber reading list to a compatible RSS reader at once.

OPML