[ News | Newsletters | Blogs | Reddits | Lists | Media | Jobs ] HoneyDB
DarkReading
Cyberattack Leads to Beer Shortage as Asahi Recovers
Attackers Season Spam With a Touch of 'Salt'
Security Concerns Shadow Vibe Coding Adoption
Medusa Ransomware Actors Exploit Critical Fortra GoAnywhere Flaw
Patch Now: 'RediShell' Threatens Cloud Via Redis RCE
Cyberattackers Exploit Zimbra Zero-Day Via ICS
Clop Ransomware Hits Oracle Customers Via Zero-Day Flaw
Chinese Gov't Fronts Trick the West to Obtain Cyber Tech
Self-Propagating Malware Hits WhatsApp Users in Brazil
Scattered Lapsus$ Hunters Returns With Salesforce Leak Site
Ars Technica
Ars Live: Is the AI bubble about to pop? Ed Zitron is on with Ars at 3:30pm EDT today
AMD wins massive AI chip deal from OpenAI with stock sweetener
ICE wants to build a 24/7 social media surveillance team
Why iRobot’s founder won’t go within 10 feet of today’s walking robots
That annoying SMS phish you just got may have come from a box like this
OpenAI’s Sora 2 lets users insert themselves into AI videos with sound
Intel and AMD trusted enclaves, a foundation for network security, fall to physical attacks
DeepSeek tests “sparse attention” to slash AI processing costs
California’s newly signed AI law just gave Big Tech exactly what it wanted
Anthropic says its new AI model “maintained focus” for 30 hours on multistep tasks
CyberScoop
Microsoft pins GoAnywhere zero-day attacks to ransomware affiliate Storm-1175
OpenAI: Threat actors use us to be efficient, not make new tools
Oracle zero-day defect amplifies panic over Clop’s data theft attack spree
House Dems seek info about ICE spyware contract, wary of potential abuses
Potential EU law sparks global concerns over end-to-end encryption for messaging apps 
Security leaders at Okta and Zscaler share lessons from Salesloft Drift attacks
Federal judiciary touts cybersecurity work in wake of latest major breach
Researchers say Israeli government likely behind AI-generated disinfo campaign in Iran
Red Hat confirms breach of GitLab instance, which stored company’s consulting data
Here is the email Clop attackers sent to Oracle customers
HITBSecNews
Found on VirusTotal: The world’s first UEFI bootkit for Linux
OpenAI is at war with its own Sora video testers following brief public leak
North Korean hackers posing as IT workers steal over $1B in cyberattack
WhatsApp: NSO Group Operates Pegasus Spyware for Customers
Korea extradites Russian, Vietnamese suspects linked to $16M ransomware scheme
CISA Director Jen Easterly, in Place Since 2021, to Step Down
Man sick of crashes sues Intel for allegedly hiding CPU defects
North Korean hackers target cryptocurrency with malware
Law enforcement operation takes down 22,000 malicious IP addresses worldwide
Youth of today say passwords are old news, passkeys are the future
ZDNet
Best Amazon Prime Day phone deals in October 2025: Save up to 50% off on Samsung, Google, more
How to clear your Windows 11 PC cache (and what happens if you don't)
Best Amazon Prime Day deals in October 2025: Our experts found discounts up to 56% off
4 ways KDE Plasma 6.5 beta is shaping up to be a beautiful, customizable Linux desktop
Own a Google Pixel? 10 settings I always change first for the most optimal performance
Best Amazon Prime Day TV deals in October 2025: Save up to $1,600 on LG, Samsung, and more
Best Amazon Prime Day deals in October 2025: I found discounts up to 56% off
Your Windows 11 taskbar just got a major, long-requested feature - what's new
This US state just banned blaring ads on Netflix and other streaming services
Best Amazon Prime Day Apple deals in October 2025: Save big on MacBook, AirPods, and more
The Hacker News
Step Into the Password Graveyard… If You Dare (and Join the Live Session)
LockBit, Qilin, and DragonForce Join Forces to Dominate the Ransomware Ecosystem
Severe Figma MCP Vulnerability Lets Hackers Execute Code Remotely — Patch Now
No Time to Waste: Embedding AI to Cut Noise and Reduce Risk
OpenAI Disrupts Russian, North Korean, and Chinese Hackers Misusing ChatGPT for Cyberattacks
BatShadow Group Uses New Go-Based 'Vampire Bot' Malware to Hunt Job Seekers
Google's New AI Doesn't Just Find Vulnerabilities — It Rewrites Code to Patch Them
New Research: AI Is Already the #1 Data Exfiltration Channel in the Enterprise
XWorm 6.0 Returns with 35+ Plugins and Enhanced Data Theft Capabilities
13-Year-Old Redis Flaw Exposed: CVSS 10.0 Vulnerability Lets Attackers Run Code Remotely
BleepingComputer
Salesforce refuses to pay ransom over widespread data theft attacks
Docker makes Hardened Images Catalog affordable for small businesses
Google won’t fix new ASCII smuggling attack in Gemini
DraftKings warns of account breaches in credential stuffing attacks
Clop exploited Oracle zero-day for data theft since early August
North Korean hackers stole over $2 billion in crypto this year
Electronics giant Avnet confirms breach, says stolen data unreadable
Microsoft kills more Microsoft Account bypasses in Windows 11
Redefining Security Validation with AI-Powered Breach and Attack Simulation
Google's new AI bug bounty program pays up to $30,000 for flaws
Cybersecurity Dive
AI fuels social engineering but isn’t yet revolutionizing hacking
Public disclosures of AI risk surge among S&P 500 companies
Businesses fear AI exposes them to more attacks
Extortion campaign targeting Oracle E-Business Suite customers linked to zero-day
Hackers steal sensitive Red Hat customer data after breaching GitLab repository
Renault Group confirms UK customer data stolen in third-party breach
Oracle investigating extortion emails targeting E-Business Suite customers
UNFI reports solid results as it recovers from cyberattack
Hackers claiming ties to Clop launch wide extortion campaign targeting corporate executives
Landmark US cyber-information-sharing program expires, bringing uncertainty
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
Germany slams brakes on EU's Chat Control device-scanning snoopfest
Employees regularly paste company secrets into ChatGPT
Nearly a year after attack, US medical scanning biz gets clear image of stolen patient data
Police and military radio maker BK Technologies cops to cyber break-in
OpenAI bans suspected Chinese accounts using ChatGPT to plan surveillance
Britain eyes satellite laser warning system and carrier-launched jet drones
UK Home Office opens wallet for £60M automated number plate project
Credential stuffing: £2.31 million fine shows passwords are still the weakest link
Scattered Lapsus$ Hunters offering $10 in Bitcoin to 'endlessly harass' execs
Radiant Group won't touch kids' data now, but apparently hospitals are fair game
VentureBeat
Stopping breaches at machine speed demands agents, not alerts
SOC teams face 51-second breach reality—Manual response times are officially dead
Why identity-first security is the first defense against sophisticated AI-powered social engineering
AI sharpens threat detection — but could it dull human analyst skills?
Legacy UI is dead: Shadow AI is how real work gets done now
CrowdStrike bets on agentic workforces to outpace AI-driven adversaries
Shadow AI doubles every 18 months, creating blind spots SOCs never see
Stop sending anonymous texts. Start building trust.
They don't break in, they log in: 79% of intrusions are malware-free
Hush Security emerges from stealth to eliminate risks, burdens of static machine authentication keys
TechCrunch
ICE bought vehicles equipped with fake cell towers to spy on phones 
North Korean hackers stole over $2 billion in crypto so far in 2025, researchers say
Security bug in India’s income tax portal exposed taxpayers’ sensitive data
Clop hackers caught exploiting Oracle zero-day bug to steal executives’ personal data
Inside Microsoft’s AI bet with CTO Kevin Scott at TechCrunch Disrupt 2025
A breach every month raises doubts about South Korea’s digital defenses
Anker offered Eufy camera owners $2 per video for AI training
Event startup Partiful wasn’t stripping GPS locations from user-uploaded photos
Hacking group claims theft of 1 billion records from Salesforce customer databases
Hackers are sending extortion emails to executives after claiming Oracle apps’ data breach
Network World Security
IBM touts agentic AI orchestration, cryptographic risk controls
Network digital twin technology faces headwinds
Netskope expands ZTNA with device intelligence for IoT/OT environments
2025 global network outage report and internet health check
AMD: Latest news and insights
AMD/OpenAI pact means new enterprise IT options
Nvidia and Fujitsu team for vertical industry AI projects
Tool sprawl hampers enterprise observability efforts
Nvidia: Latest news and insights
7 SASE certifications to validate converged network and security skills
Help Net Security
Researchers uncover ClickFix-themed phishing kit
North Korean hackers stole over $2 billion in cryptocurrency this year
Netskope UZTNA adds policy control by device posture, risk, and role
CyberArk unveils new capabilities to reduce risk across human and machine identities
Radiflow360 unifies OT risk, compliance, and response
Rethinking AI security architectures beyond Earth
DefectDojo: Open-source DevSecOps platform
Developing economies are falling behind in the fight against cybercrime
New system aims to keep people connected when networks fail
Redis patches critical “RediShell” RCE vulnerability, update ASAP! (CVE-2025-49844)
InfoSecurity Magazine
Nezha Tool Used in New Cyber Campaign Targeting Web Applications
Digital Fraud Costs Companies Worldwide 7.7% of Annual Revenue
Cyber-Attack Contributes to Huge Sales Drop at JLR
Bybit Theft Drives Record-Breaking $2bn Haul for North Korea
Met Police Arrest Two Teens in Connection with Kido Attack
Qilin Ransomware Gang Claims Asahi Cyber-Attack
Critical Flaw Exposes 60,000 Redis Servers to Remote Exploitation
Qilin Claims Ransomware Attack on Mecklenburg Schools
Discord Reveals Data Breach Following Third-Party Compromise
NCSC: Patch Critical Oracle EBS Bug Now
© 2025 RiskDiscovery | Sponsored by: Deception Logic