[ News | Newsletters | Blogs | Reddits | Lists | Media | Jobs ] HoneyDB
DarkReading
[Dark Reading Virtual Event] Know Your Enemy: How cybercriminals and nation-state hackers operate
Phishing Is Moving From Email to Mobile. Is Your Security?
'Confucius' Cyberspy Evolves From Stealers to Backdoors in Pakistan
Android Spyware in the UAE Masquerades as ... Spyware
Google Sheds Light on ShinyHunters' Salesforce Tactics
Shutdown Threatens US Intel Sharing, Cyber Defense
A $50 'Battering RAM' Can Bust Confidential Computing
Undead Operating Systems Haunt Enterprise Security Networks
China Imposes One-Hour Reporting Rule for Major Cyber Incidents
New China APT Strikes With Precision and Persistence
Ars Technica
That annoying SMS phish you just got may have come from a box like this
OpenAI’s Sora 2 lets users insert themselves into AI videos with sound
Intel and AMD trusted enclaves, a foundation for network security, fall to physical attacks
DeepSeek tests “sparse attention” to slash AI processing costs
California’s newly signed AI law just gave Big Tech exactly what it wanted
Anthropic says its new AI model “maintained focus” for 30 hours on multistep tasks
Can AI detect hedgehogs from space? Maybe if you find brambles first.
ChatGPT Pulse delivers morning updates based on your chat history
Experts urge caution about using ChatGPT to pick stocks
As many as 2 million Cisco devices affected by actively exploited 0-day
CyberScoop
Oracle customers being bombarded with emails claiming widespread data theft
GOP senator confirms pending White House quantum push, touts legislative alternatives
Palo Alto Networks spots new China espionage group showcasing advanced skills
DOJ, Georgia Tech affiliate company settle over alleged failure to meet DOD contract cyber requirements
Watchdog: Cyber threat information-sharing program’s future uncertain with expected expiration of 2015 law
Anthropic touts safety, security improvements in Claude Sonnet 4.5
Two-thirds of CISA personnel could be sent home under shutdown
Interpol operation disrupts romance scam and sextortion networks in Africa
Expired protections, exposed networks: The stakes of CISA’s sunset
UN seeks to build consensus on ‘safe, secure and trustworthy’ AI
HITBSecNews
Found on VirusTotal: The world’s first UEFI bootkit for Linux
OpenAI is at war with its own Sora video testers following brief public leak
North Korean hackers posing as IT workers steal over $1B in cyberattack
WhatsApp: NSO Group Operates Pegasus Spyware for Customers
Korea extradites Russian, Vietnamese suspects linked to $16M ransomware scheme
CISA Director Jen Easterly, in Place Since 2021, to Step Down
Man sick of crashes sues Intel for allegedly hiding CPU defects
North Korean hackers target cryptocurrency with malware
Law enforcement operation takes down 22,000 malicious IP addresses worldwide
Youth of today say passwords are old news, passkeys are the future
ZDNet
Which Roku streaming stick should you buy in 2025? I tested every model, and here's my pick
Google's upcoming smart home speaker might actually make soundbars feel unnecessary
Google is giving older Nest devices a useful security upgrade - no additional costs required
This Bluetooth speaker delivers smooth and glorious sound for almost any genre of music
Xbox Game Pass Ultimate price jumps 50% to $30 a month - and users are furious
Snowflake adds MCP support, new AI suite for financial services
Amazon's new budget grocery brand offers most items for less than $5
The best Kindles in 2025: Expert recommended
The work AI should really be doing, according to these pros
New to GIMP? 10 tips for getting the most from this free image editor
The Hacker News
Alert: Malicious PyPI Package soopsocks Infects 2,653 Systems Before Takedown
Automating Pentest Delivery: 7 Key Workflows for Maximum Impact
ThreatsDay Bulletin: CarPlay Exploit, BYOVD Tactics, SQL C2 Attacks, iCloud Backdoor Demand & More
Google Mandiant Probes New Oracle Extortion Wave Possibly Linked to Cl0p Ransomware
How to Close Threat Detection Gaps: Your SOC's Action Plan
Warning: Beware of Android Spyware Disguised as Signal Encryption Plugin and ToTok Pro
New WireTap Attack Extracts Intel SGX ECDSA Key via DDR4 Memory-Bus Interposer
OneLogin Bug Let Attackers Use API Keys to Steal OIDC Secrets and Impersonate Apps
Learn How Leading Security Teams Blend AI + Human Workflows (Free Webinar)
Red Hat OpenShift AI Flaw Exposes Hybrid Cloud Infrastructure to Full Takeover
BleepingComputer
Android spyware campaigns impersonate Signal and ToTok messengers
Red Hat confirms security incident after hackers claim GitHub breach
Clop extortion emails claim theft of Oracle E-Business Suite data
Data breach at dealership software provider impacts 766k clients
Adobe Analytics bug leaked customer tracking data to other tenants
New bug in classic Outlook can only be fixed via Microsoft support
Android malware uses VNC to give attackers hands-on access
F-Droid project threatened by Google's new dev registration rules
Microsoft to force install Microsoft 365 companion apps in October
WestJet data breach exposes travel details of 1.2 million customers
Cybersecurity Dive
Federal cuts force many state and local governments out of cyber collaboration group
Landmark US cyber-information-sharing program expires, bringing uncertainty
CMMC is coming, but most contractors still have a long road to full compliance
Canadian airline WestJet says some customer data stolen in June cyberattack
Cisco firewall flaws endanger nearly 50,000 devices worldwide
CISA to furlough 65% of staff if government shuts down this week
Jaguar Land Rover to resume some manufacturing within days
RTX confirms hack of passenger boarding software involved ransomware
Jaguar Land Rover begins phased restoration of services following cyberattack
CISA orders feds to patch Cisco flaws used in multiple agency hacks
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
Clop-linked crims shake down Oracle execs with data theft claims
EU funds are flowing into spyware companies, and politicians are demanding answers
Cybercrims claim raid on 28,000 Red Hat repos, say they have sensitive customer files
US gov shutdown leaves IT projects hanging, security defenders a skeleton crew
'Delightful' root-access bug in Red Hat OpenShift AI allows full cluster takeover
Air Force admits SharePoint privacy issue as reports trickle out of possible breach
3.7M breach notification letters set to flood North America's mailboxes
AI agent hypefest crashing up against cautious leaders, Gartner finds
Imgur yanks Brit access to memes as parent company faces fine
Explain digital ID or watch it fizzle out, UK PM Starmer told
VentureBeat
TechCrunch
Last chance alert: Founder and Investor Bundle savings for TechCrunch Disrupt 2025 ends tomorrow
Oneleet raises $33M to shake up the world of security compliance
Anker offered to pay Eufy camera owners to share videos for training its AI
UK government tries again to access encrypted Apple customer data: Report
Data breach at Canadian airline WestJet affects 1.2M passengers
Final 3 days to score extra discounts on community passes to TechCrunch Disrupt 2025
A breach every month raises doubts about South Korea’s digital defenses
Ted Cruz blocks bill that would extend privacy protections to all Americans
Japan’s beer-making giant Asahi stops production after cyberattack 
UK government bails out Jaguar Land Rover with £1.5B loan after hack disrupts vehicle production for weeks
Network World Security
OpenStack Flamingo pays down technical debt as adoption continues to climb
Netgear deepens SASE integration
Spotlight report: Securing the cloud
2025 global network outage report and internet health check
Cato extends SASE platform to unmanaged devices
Zayo launches DynamicLink NaaS platform with core-based service delivery
Alkira advances NaaS for the agentic AI era
South Korea’s data center fire triggers global scrutiny of lithium-ion batteries and DR architecture
PGP Glass tackles OT, IoT convergence
HighPoint offers direct GPU-storage connection to speed AI training, inference workloads
Help Net Security
Oracle customers targeted with emails claiming E-Business Suite breach, data theft
ProSpy and ToSpy: New spyware families impersonating secure messaging apps
Building a mature automotive cybersecurity program beyond checklists
Chekov: Open-source static code analysis tool
GPT needs to be rewired for security
The energy sector is ground zero for global cyber activity
Biotech platforms keep missing the mark on security fundamentals
Underwriting is shifting to AI-driven, real-time decisions by 2030
North Korea’s IT workers are targeting firms beyond tech, crypto, and the U.S.
Google Drive for desktop will spot, stop and remedy ransomware damage
InfoSecurity Magazine
Extortion Emails Sent to Executives by Self-Proclaimed Clop Gang Member
Confucius Shifts from Document Stealers to Python Backdoors
Free VPN Apps Found Riddled With Security Flaws
Expired US Cyber Law Puts Data Sharing and Threat Response at Risk
Forrester: Agentic AI-Powered Breach Will Happen in 2026
Phishing Dominates EU-Wide Intrusions, says ENISA
Broadcom Issues Patches for VMware NSX and vCenter Security Flaws
Shortcut-based Credential Lures Deliver DLL Implants
AI Tops Cybersecurity Investment Priorities, PwC Finds
New China-Aligned Hackers Hit State and Telecom Sectors
© 2025 RiskDiscovery | Sponsored by: Deception Logic