[ News | Newsletters | Blogs | Reddits | Lists | Media | Jobs ] HoneyDB
DarkReading
Fixed Ivanti Bugs Still Haunt Japan Orgs 6 Months Later
Banking Trojan Coyote Abuses Windows UI Automation
Dark Web Hackers Moonlight as Travel Agents
Department of Education Site Mimicked in Phishing Scheme
Stop AI Bot Traffic: Protecting Your Organization's Website
US Nuclear Agency Hacked in Microsoft SharePoint Frenzy
Lumma Stealer Is Back & Stealthier Than Ever
Why ISO 42001 Matters for AI Governance at Scale
China Introduces National Cyber ID Amid Privacy Concerns
Microsoft Integrates Data Lake With Sentinel SIEM
Ars Technica
OpenAI and partners are building a massive AI data center in Texas
What to know about ToolShell, the SharePoint threat under mass exploitation
A power utility is reporting suspected pot growers to cops. EFF says that’s illegal.
SharePoint vulnerability with 9.8 severity rating under exploit across globe
OpenAI jumps gun on International Math Olympiad gold medal announcement
Exhausted man defeats AI model in world coding championship
Phishers have found a way to downgrade—not bypass—FIDO MFA
GitHub abused to distribute payloads on behalf of malware-as-a-service
ChatGPT’s new AI agent can browse the web and create PowerPoint slideshows
Google hides secret message in name list of 3,295 AI researchers
CyberScoop
Trump AI plan pushes critical infrastructure to use AI for cyber defense
Authorities in Ukraine nab alleged admin of Russian-language cybercrime forum
Cisco network access security platform vulnerabilities under active exploitation
Contract lapse leaves critical infrastructure cybersecurity sensor data unanalyzed at national lab 
House Republicans endorse stricter state and federal-led voter roll purges despite dearth of evidence on fraud
Microsoft SharePoint zero-day attacks pinned on China-linked ‘Typhoon’ threat groups
UK moves to ban public sector organizations from making ransom payments
After website hack, Arizona election officials unload on Trump’s CISA
Mass attack spree hits Microsoft SharePoint zero-day defect
Why it’s time for the US to go on offense in cyberspace
HITBSecNews
Found on VirusTotal: The world’s first UEFI bootkit for Linux
OpenAI is at war with its own Sora video testers following brief public leak
North Korean hackers posing as IT workers steal over $1B in cyberattack
WhatsApp: NSO Group Operates Pegasus Spyware for Customers
Korea extradites Russian, Vietnamese suspects linked to $16M ransomware scheme
CISA Director Jen Easterly, in Place Since 2021, to Step Down
Man sick of crashes sues Intel for allegedly hiding CPU defects
North Korean hackers target cryptocurrency with malware
Law enforcement operation takes down 22,000 malicious IP addresses worldwide
Youth of today say passwords are old news, passkeys are the future
ZDNet
The best Apple Watch Ultra bands of 2025: Expert tested
The best mechanical keyboards of 2025: I handpicked the top models available
These are the 5 weirdest wellness gadgets I never skip using - and how they work
The best music headphones of 2025: Expert tested and reviewed
Your TV's USB port is seriously underutilized: 5 features you're not taking advantage of
I'm never toting ice after testing this portable smart cooler - here's why
I've tested dozens of tablets and this is the first Android model to truly replace my iPad Pro
Every iPhone owner should use MagSafe - I can't live without these 7 favorite accessories
These secret Netflix codes saved me from canceling my subscription - here's why
I recommend this Asus laptop to creative pros and office workers alike (and it's $300 off)
The Hacker News
Europol Arrests XSS Forum Admin in Kyiv After 12-Year Run Operating Cybercrime Marketplace
Hackers Deploy Stealth Backdoor in WordPress Mu-Plugins to Maintain Admin Access
Threat Actor Mimo Targets Magento and Docker to Deploy Crypto Miners and Proxyware
New Coyote Malware Variant Exploits Windows UI Automation to Steal Banking Credentials
Kerberoasting Detections: A New Approach to a Decade-Old Challenge
Google Launches OSS Rebuild to Expose Malicious Code in Widely Used Open-Source Packages
CISA Orders Urgent Patching After Chinese Hackers Exploit SharePoint Flaws in Live Attacks
CISA Warns: SysAid Flaws Under Active Attack Enable Remote File Access and SSRF
Microsoft Links Ongoing SharePoint Exploits to Three Chinese Hacker Groups
Cisco Confirms Active Exploits Targeting ISE Flaws Enabling Unauthenticated Root Access
BleepingComputer
Microsoft: SharePoint servers also targeted in ransomware attacks
Brave blocks Windows Recall from screenshotting your browsing activity
Proton launches privacy-respecting encrypted AI assistant Lumo
Hackers fooled Cognizant help desk, says Clorox in $380M cyberattack lawsuit
ChatGPT is rolling out 'personality' toggles to become your assistant
NPM package ‘is’ with 2.8M weekly downloads infected devs with malware
US nuclear weapons agency hacked in Microsoft SharePoint attacks
OpenAI confirms ChatGPT's new study feature, helps with exams
How to harden your Active Directory against Kerberoasting
OpenAI prepares Sora 2 to take on Google's Veo 3
Cybersecurity Dive
Trump AI plan calls for cybersecurity assessments, threat info-sharing
Lapsed CISA contract impedes national lab’s threat-hunting operations
Clorox files $380 million suit blaming Cognizant for 2023 cyberattack
SharePoint hacking campaign affects hundreds of systems worldwide
Microsoft sees China-backed nation-state hackers among adversaries targeting SharePoint
Ransomware attacks in education jump 23% year over year
Dwindling federal cyber support for critical infrastructure raises alarms
How IT leaders infuse cyber hygiene into daily work
Microsoft, CISA warn of cyberattacks targeting on-premises SharePoint servers
Top US senator calls out supply-chain risk with DoD contractors
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
Not pretty, not Windows-only: npm phishing attack laces popular packages with malware
IRL Com recruits teens for real-life stabbings, shootings, FBI warns
Nothing to see here: Brave browser blocks privacy-busting Microsoft Recall
Microsoft SharePoint victim count hits 400+ orgs in ongoing attacks
VMware prevents some perpetual license holders from downloading patches
Three questions you should always be able to answer about your security environment
$380M lawsuit claims intruder got Clorox's passwords from Cognizant simply by asking
Copilot Vision on Windows 11 sends data to Microsoft servers
China warns citizens to beware backdoored devices, on land and under the sea
Funding for program to stop next Stuxnet from hitting US expired Sunday
VentureBeat
SecurityPal combines AI and experts in Nepal to speed enterprise security questionnaires by 87X or more
Early Anthropic hire raises $15M to insure AI agents and help startups deploy safely
Anthropic researchers discover the weird AI problem: Why thinking longer makes models dumber
Crowdstrike’s massive cyber outage 1-year later: lessons enterprises can learn to improve security
Google DeepMind makes AI history with gold medal win at world’s toughest math competition
How OpenAI’s red team made ChatGPT agent into an AI fortress
Salesforce used AI to cut support load by 5% — but the real win was teaching bots to say ‘I’m sorry’
Blaxel raises $7.3M seed round to build ‘AWS for AI agents’ after processing billions of agent requests
Claude Code revenue jumps 5.5x as Anthropic launches analytics dashboard
OpenAI, Google DeepMind and Anthropic sound alarm: ‘We may be losing the ability to understand AI’
TechCrunch
European authorities arrest alleged admin of notorious Russian crime forum XSS
Hundreds of organizations breached by SharePoint mass-hacks
Apple alerted Iranians to iPhone spyware attacks, say researchers
UK government wants ransomware victims to report breaches so it can carry out ‘targeted disruptions’ against hackers
National security meets next-gen tech at TechCrunch Disrupt 2025’s AI Defense panel
Google, Microsoft say Chinese hackers are exploiting SharePoint zero-day
Serial spyware founder Scott Zuckerman wants the FTC to unban him from the surveillance industry
Hackers exploiting SharePoint zero-day seen targeting government agencies
Don’t miss your chance to exhibit at TechCrunch Disrupt 2025
Indian crypto exchange CoinDCX confirms $44M stolen during hack
Network World Security
IT leaders rethink talent strategies to cope with AI skills crunch
CIOs recalibrate IT agendas to make room for rising AI spend
Rethinking and realigning IT for the AI era
Blackstone to acquire majority stake in NetBrain Technologies
Technology is coming so fast data centers are obsolete by the time they launch
2025 global network outage report and internet health check
Nile CEO Pankaj Patel on why it’s time to rethink networking with NaaS
IBM turns on AI, simplifies programming in new mainframe OS release
Microsoft will stop using Chinese workers on US DoD systems
US lawmakers question big tech over undersea cable safeguards
Help Net Security
Sonicwall fixes critical flaw in SMA appliances, urges customers to check for compromise (CVE-2025-40599)
Autoswagger: Open-source tool to expose hidden API authorization flaws
Why outsourcing cybersecurity is rising in the Adriatic region
Your app is under attack every 3 minutes
Most data breaches have unknown causes as transparency continues to fall
Microsoft rolls out Windows 11 “quick recovery” feature
Mastermind behind Russian-speaking cybercrime hub arrested in Ukraine
Bitdefender boosts protection across major content platforms
PlexTrac Workflow Automation Engine enhancements accelerate time to remediation
Maximum severity Cisco ISE vulnerabilities exploited by attackers
InfoSecurity Magazine
Active Campaign Exploits Cloud Flaws for Cryptomining
New York Proposes Cybersecurity Regulations for Water Systems
Suspected XSS Forum Admin Arrested in Ukraine
France: New Data Breach Could Affect 340,000 Jobseekers
Clorox Sues IT Service Provider Cognizant for Causing 2023 Cyber-Attack
US Government Warns of Wide-Ranging Interlock Attacks
Global Ransomware Attacks Plummet 43% in Q2 2025
Russian Threat Actors Target NGOs with New OAuth Phishing Tactics
Widespread Net RFQ Scam Targets High-Value Goods
SharePoint 'ToolShell' Vulnerabilities Exploited by Chinese Nation-State Hackers
© 2025 RiskDiscovery | Sponsored by: Deception Logic