[ News | Newsletters | Blogs | Reddits | Lists | Media | Jobs ] HoneyDB
DarkReading
[Dark Reading Virtual Event] Know Your Enemy: How cybercriminals and nation-state hackers operate
Russia Targets Moldovan Election in Disinformation Play
Threat Actor Deploys 'OVERSTEP' Backdoor in Ongoing SonicWall SMA Attacks
Npm Package Hides Malware in Steganographic QR Codes
As Incidents Rise, Japanese Government's Cybersecurity Falls Short
GitHub Aims to Secure Supply Chain as NPM Hacks Ramp Up
Exposed Docker Daemons Fuel DDoS Botnet
From FBI to CISO: Unconventional Paths to Cybersecurity Success
Dark Reading Confidential: Battle Space: Cyber Pros Land on the Front Lines of Protecting US Critical Infrastructure
SEO Poisoning Campaign Tied to Chinese Actor
Ars Technica
Why does OpenAI need six giant data centers?
Supermicro server motherboards can be infected with unremovable malware
When “no” means “yes”: Why AI chatbots can’t process Persian social etiquette
Broadcom’s prohibitive VMware prices create a learning “barrier,” IT pro says
Here’s how potent Atomic credential stealer is finding its way onto Macs
Two of the Kremlin’s most active hack groups are collaborating, ESET says
Two UK teens charged in connection to Scattered Spider ransomware attacks
New attack on ChatGPT research agent pilfers secrets from Gmail inboxes
How weak passwords and other failings led to catastrophic breach of Ascension
White House officials reportedly frustrated by Anthropic’s law enforcement AI limits
CyberScoop
Teen arrested in UK was a core figure in Scattered Spider’s operations
Brickstorm malware powering ‘next-level’ Chinese cyberespionage campaign
Researchers say media outlet targeting Moldova is a Russian cutout
What to do if your company discovers a North Korean worker in its ranks
Secret Service says it dismantled extensive telecom threat in NYC area
Telecom exec: Salt Typhoon inspiring other hackers to use unconventional techniques
Las Vegas police arrest minor accused of high-profile 2023 casino attacks
Cyber threat information law hurtles toward expiration, with poor prospects for renewal
Why federal IT leaders must act now to deliver NIST’s post-quantum cryptography transition
Researchers raise alarm over maximum-severity defect in GoAnywhere file-transfer service
HITBSecNews
Found on VirusTotal: The world’s first UEFI bootkit for Linux
OpenAI is at war with its own Sora video testers following brief public leak
North Korean hackers posing as IT workers steal over $1B in cyberattack
WhatsApp: NSO Group Operates Pegasus Spyware for Customers
Korea extradites Russian, Vietnamese suspects linked to $16M ransomware scheme
CISA Director Jen Easterly, in Place Since 2021, to Step Down
Man sick of crashes sues Intel for allegedly hiding CPU defects
North Korean hackers target cryptocurrency with malware
Law enforcement operation takes down 22,000 malicious IP addresses worldwide
Youth of today say passwords are old news, passkeys are the future
ZDNet
Your coworkers are sick of your AI workslop
Slow Fire TV? 10 settings I changed to dramatically improve the performance
Employees learn close to nothing from phishing training, and this is why
Why cheap multitools are a scam - and which ones I actually trust
Why I'm recommending the iPhone 17 over the Pro models this year (and it goes beyond price)
I've reviewed every iPhone 17 model, and my advice is something different this year
4 rumored Amazon products that have me truly excited for the September 30 event
Best early Target Circle Week deals to compete with Prime Day 2025
This popular audio brand is launching $1,200 'sculptural' earbuds that could shake up the market
OpenAI accelerates Project Stargate with 5 new AI data centers across the US
The Hacker News
Chinese Hackers RedNovember Target Global Governments Using Pantegana and Cobalt Strike
UNC5221 Uses BRICKSTORM Backdoor to Infiltrate U.S. Legal and Technology Sectors
Two Critical Flaws Uncovered in Wondershare RepairIt Exposing User Data and AI Models
How One Bad Password Ended a 158-Year-Old Business
New YiBackdoor Malware Shares Major Code Overlaps with IcedID and Latrodectus
iframe Security Exposed: The Blind Spot Fueling Payment Skimmer Attacks
Hackers Exploit Pandoc CVE-2025-51591 to Target AWS IMDS and Steal EC2 IAM Credentials
State-Sponsored Hackers Exploiting Libraesva Email Security Gateway Vulnerability
Two New Supermicro BMC Bugs Allow Malicious Firmware to Evade Root of Trust Security
Eurojust Arrests 5 in €100M Cryptocurrency Investment Fraud Spanning 23 Countries
BleepingComputer
New Supermicro BMC flaws can create persistent backdoors
OpenAI is testing a new GPT-5-based AI agent "GPT-Alpha"
Kali Linux 2025.3 released with 10 new tools, wifi enhancements
Cisco warns of IOS zero-day vulnerability exploited in attacks
Unpatched flaw in OnePlus phones lets rogue apps text messages
Police seizes $439 million stolen by cybercrime rings worldwide
Obscura, an obscure new ransomware variant
Google: Brickstorm malware used to steal U.S. orgs' data for over a year
UK arrests suspect for RTX ransomware attack causing airport disruptions
PyPI urges users to reset credentials after new phishing attacks
Cybersecurity Dive
CISA urges dependency checks following Shai-Hulud compromise
UK authorities arrest man in connection with cyberattack against aviation vendor
China-linked groups are using stealthy malware to hack software suppliers
Many ‘material’ cybersecurity breaches go unreported: VikingCloud
SonicWall customers warned about brute force attacks against cloud backup service
Jaguar Land Rover to extend production pause into October following cyberattack
Social engineering campaigns highlight the ability to exploit human behavior
AI-powered vulnerability detection will make things worse, not better, former US cyber official warns
Flights across Europe delayed after cyberattack targets third-party vendor
How to build a trustworthy AI governance roadmap aligned with ISO 42001
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
New string of phishing attacks targets Python developers
Google warns China-linked spies lurking in 'numerous' enterprises since March
UK agency makes arrest in airport cyberattack investigation
Cybercriminals cash out with casino giant's employee data
Campaigners urge UK PM Starmer to dump digital ID wheeze before it's announced
Politicos: 'There is a good strong case for government intervention' on JLR cyberattack
Nearly half of businesses suffered deepfaked phone calls against staff
SonicWall releases rootkit-busting firmware update following wave of attacks
Third time's the charm? SolarWinds (again) patches critical Web Help Desk RCE
OnePlus leaves researchers on read over Android bug that exposes texts
VentureBeat
TechCrunch
Neon, the No. 2 social app on the Apple App Store, pays users to record their phone calls and sells data to AI firms
Step into the future: The full AI Stage agenda at TechCrunch Disrupt 2025
UK arrests man linked to ransomware attack that caused airport disruptions across Europe
Jaguar Land Rover to pause production until next week – at least 
European airports still dealing with disruptions days after ransomware attack 
Automaker giant Stellantis says customers’ personal data stolen during breach
EU cyber agency confirms ransomware attack causing airport disruptions 
Unit 221B raises $5M to help track and disrupt today’s top hacking groups
Hundreds of flights delayed at Heathrow and other airports after apparent cyberattack
US government charges British teenager accused of at least 120 ‘Scattered Spider’ hacks
Network World Security
Microsoft’s new cooling tech targets AI’s thermal bottleneck as hyperscalers hit power ceilings
Balancing AI’s opportunities and challenges to serve enterprises
Riverbed survey reveals AI readiness gap
Network resiliency climbs in importance for businesses
Nvidia and OpenAI ink $100 billion, 10GW data center alliance
2025 global network outage report and internet health check
Nvidia: Latest news and insights
Telco’s botched firewall upgrade left emergency callers unable to connect
Who are the winners and losers of the Intel-Nvidia deal?
9 Linux certifications to boost your career
Help Net Security
SolarWinds fixes critical Web Help Desk RCE vulnerability (CVE-2025-26399)
Teleport unveils AI-powered summaries for session recordings
Libraesva ESG zero-day vulnerability exploited by attackers (CVE-2025-59689)
€100M crypto scam busted: Five arrested in Europe-wide operation
Kali Linux 2025.3 brings improved virtual machine tooling, 10 new tools
Sentry’s AI code review automates testing and error detection across pull requests
Proofpoint introduces four innovations to safeguard the agentic workspace
Building a stronger SOC through AI augmentation
APIs and hardware are under attack, and the numbers don’t look good
Nosey Parker: Open-source tool finds sensitive information in textual data and Git history
InfoSecurity Magazine
npm Package Uses QR Code Steganography to Steal Credentials
ShadowV2 Botnet Exposes Rise of DDoS-as-a-service Platforms
Vegas Gambling Giant Hit by Cyber Incident, Employee Data Exposed
Cell Tower Hacking Gear Seized Ahead of UN General Assembly
Federal Agency Compromised Via GeoServer Exploit, CISA Reveals
European Police Bust €100m Crypto-Fraud Ring
Iranian Hacking Group Nimbus Manticore Expands European Targeting
Deepfake Attacks Hit Two-Thirds of Businesses
Critical Security Flaws Grow with AI Use, New Report Shows
Attacker Breakout Time Falls to 18 Minutes
© 2025 RiskDiscovery | Sponsored by: Deception Logic