[ News | Newsletters | Blogs | Reddits | Lists | Media | Jobs ] HoneyDB
DarkReading
Secure Your Spot at RSAC 2026 Conference
Predator Spyware Sample Indicates 'Vendor-Controlled' C2
Winter Olympics Could Share Podium With Cyberattackers
Vulnerabilities Surge, But Messy Reporting Blurs Picture
Trio of Critical Bugs Spotted in Delta Industrial PLCs
Retail, Services Industries Under Fire in Oceania
Microsoft Disrupts Cybercrime Service RedVDS
'VoidLink' Malware Poses Advanced Threat to Linux Systems
Taiwan Endures Greater Cyber Pressure From China
CrowdStrike to Buy Seraphic Security in Bid to Boost Browser Security
Ars Technica
Wikipedia signs AI training deals with Microsoft, Meta, and Amazon
A single click mounted a covert, multistage attack against Copilot
Bandcamp bans purely AI-generated music from its platform
The RAM shortage’s silver lining: Less talk about “AI PCs”
Never-before-seen Linux malware is “far more advanced than typical”
Hegseth wants to integrate Musk’s Grok AI into military networks this month
Microsoft vows to cover full power costs for energy-hungry AI data centers
Google removes some AI health summaries after investigation finds “dangerous” flaws
ChatGPT Health lets you connect medical records to an AI that makes things up
ChatGPT falls to new data-pilfering attack as a vicious cycle in AI continues
CyberScoop
Trump’s cyber chief pick tells lawmakers he’ll assess efficacy of Cybercom-NSA dual-hat role, if confirmed
CISA’s secure-software buying tool had a simple XSS vulnerability of its own
The quiet way AI normalizes foreign influence
Sources: DHS finalizing replacement for disbanded critical infrastructure security council 
Kimwolf botnet’s swift rise to 2M infected devices agitates security researchers
California AG launches investigation into X’s sexualized deepfakes
Predator spyware demonstrates troubleshooting, researcher-dodging capabilities
Microsoft seizes RedVDS infrastructure, disrupts fast-growing cybercrime marketplace
Sean Plankey re-nominated to lead CISA
Microsoft Patch Tuesday addresses 112 defects, including one actively exploited zero-day
HITBSecNews
ZDNet
iPhone 17 vs. iPhone 17 Pro: I didn't expect one camera spec to make such a big difference
The latest EndeavorOS release just solved one of my biggest frustrations with Arch Linux
Your Bluetooth headphones may be at risk of being hacked - here's how to stay protected
This snap-on iPhone accessory makes charging cables and cords a thing of the past
Verizon customer? How to get your free $20 refund after Wednesday's massive network outage
How to clear your iPhone cache (and put an end to slow performance)
How to get free high-speed Wi-Fi on your American Airlines flights - no subscription needed
This popular streaming service is getting a Dolby Vision upgrade for free - and it's a big deal
T-Mobile's latest phone plan saves you $1,000 over Verizon and AT&T - here's the fine print
Your Raspberry Pi 5 just got a big AI upgrade - thanks to this new add-on
The Hacker News
AWS CodeBuild Misconfiguration Exposed GitHub Repos to Potential Supply Chain Attacks
Critical WordPress Modular DS Plugin Flaw Actively Exploited to Gain Admin Access
Researchers Reveal Reprompt Attack Allowing Single-Click Data Exfiltration From Microsoft Copilot
ThreatsDay Bulletin: AI Voice Cloning Exploit, Wi-Fi Kill Switch, PLC Vulns, and 14 More Stories
Model Security Is the Wrong Frame – The Real Risk Is Workflow Security
4 Outdated Habits Destroying Your SOC's MTTR in 2026
Microsoft Legal Action Disrupts RedVDS Cybercrime Infrastructure Used for Online Fraud
Palo Alto Fixes GlobalProtect DoS Flaw That Can Crash Firewalls Without Login
Researchers Null-Route Over 550 Kimwolf and Aisuru Botnet Command Servers
AI Agents Are Becoming Authorization Bypass Paths
BleepingComputer
Google now lets you change your @gmail.com address, rolling out
ChatGPT is now more reliable at finding and remembering your past chat
Gootloader now uses 1,000-part ZIP archives for stealthy delivery
Grubhub confirms hackers stole data in recent security breach
Hackers exploit Modular DS WordPress plugin flaw for admin access
Verizon blames nationwide outage on a "software issue"
Microsoft Copilot Studio extension for VS Code now publicly available
Critical flaw lets hackers track, eavesdrop via Bluetooth audio devices
How to automate just-in-time access to applications with Tines
FTC bans GM from selling drivers' location data for five years
Cybersecurity Dive
DHS prepares replacement for critical infrastructure collaboration framework
Critical flaw in AWS Console risked compromise of build environment
AI surges among top business risk concerns, while cybersecurity holds firm
Trump resubmits Sean Plankey for CISA director
Majority of hedge funds boosted cybersecurity spending in 2025
Healthcare breaches double as shadow AI, vendor risks proliferate
Critical vulnerability found in n8n workflow automation platform
Executives worry most about cyber-enabled fraud, geopolitics and AI
How to stop insider-driven data loss in browser sessions
Telecom sector sees steady rise in ransomware attacks
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
Cisco finally fixes max-severity bug under active attack for weeks
Chinese spies used Maduro's capture as a lure to phish US govt agencies
Flipping one bit leaves AMD CPUs open to VM vuln
Contagious Claude Code bug Anthropic ignored promptly spreads to Cowork
A simple CodeBuild flaw put every AWS environment at risk – and pwned 'the central nervous system of the cloud'
US regulator tells GM to hit the brakes on customer tracking
Woman bailed as cops probe doctor's surgery data breach
Microsoft taps UK courts to dismantle cybercrime host RedVDS
Ofcom keeps X under the microscope despite Grok 'nudify' fix
AWS flips switch on Euro cloud as customers fret about digital sovereignty
VentureBeat
Nvidia Rubin's rack-scale encryption signals a turning point for enterprise AI security
The 11 runtime attacks breaking AI security — and how CISOs are stopping them
Seven steps to AI supply chain visibility — before a breach forces the issue
Legacy IAM was built for humans — and AI agents now outnumber them 82 to 1
The enterprise voice AI split: Why architecture — not model quality — defines your compliance posture
OpenAI admits prompt injection is here to stay as enterprises lag on defenses
Red teaming LLMs exposes a harsh truth about the AI security arms race
TechCrunch
Iran’s internet shutdown is now one of its longest ever, as protests continue
The multibillion-dollar AI security problem enterprises can’t ignore 
AI security firm, depthfirst, announces $40 million Series A
US cargo tech company publicly exposed its shipping systems and customer data to the web
How WitnessAI raised $58M to solve enterprise AI’s biggest risk
Man to plead guilty to hacking US Supreme Court filing system
Fintech firm Betterment confirms data breach after hackers send fake crypto scam notification to users
Instagram says there’s been ‘no breach’ despite password reset requests
Critics pan spyware maker NSO’s transparency claims amid its push to enter US market
Internet collapses in Iran amid protests over economic crisis
Network World Security
Palo Alto Networks patches firewalls after discovery of a new denial-of-service flaw
Power shortages, carbon capture, and AI automation: What’s ahead for data centers in 2026
Dell bolsters PowerStore array with capacity, security features
Google warns grid connection delays are now the biggest threat to data center expansion
OpenAI turns to Cerebras in a mega deal to scale AI inference infrastructure
IBM pushes sovereign computing with a software stack that works across cloud platforms
Nvidia H200 chips in China: US says yes, China says no
Startup IO River aims to virtualize the edge and break CDN vendor lock-in
Cisco’s 2026 agenda prioritizes AI-ready infrastructure, connectivity
Chinese AI firm trains state-of-the-art model entirely on Huawei chips
Help Net Security
Sensitive data of Eurail, Interrail travelers compromised in data breach
Delinea expands identity security platform through StrongDM acquisition
Tines rolls out a governance layer for agents, copilots, and MCPs
PoC exploit for critical FortiSIEM vulnerability released (CVE-2025-64155)
AWS European Sovereign Cloud puts data, operations, and oversight inside the EU
Bitwarden advances passkeys and credential risk controls
F5 targets AI runtime risk with new guardrails and adversarial testing tools
JumpCloud introduces AI features to govern shadow AI and autonomous agents
Asimily extends Cisco ISE integration to turn device risk into segmentation policy
Microsoft shuts down RedVDS cybercrime subscription service tied to millions in fraud losses
InfoSecurity Magazine
Global Agencies Release New Guidance to Secure Industrial Networks
Hackers Increasingly Shun Encryption in Favour of Pure Data Theft and Extortion
Cyber Threat Actors Ramp Up Attacks on Industrial Environments
CodeBuild Flaw Put AWS Console Supply Chain At Risk
CISO Role Reaches “Inflexion Point” With Executive-Level Titles
Data Privacy Teams Face Staffing Shortages and Budget Constraints, ISACA Warns
ICE Agent Doxxing Site DDoS-ed Via Russian Servers
Criminal Subscription Service Behind AI-Powered Cyber-Attacks Taken Out By Microsoft
Hackers Use Fake PayPal Notices to Steal Credentials, Deploy RMMs
DeadLock Ransomware Uses Polygon Smart Contracts For Proxy Rotation
© 2026 RiskDiscovery | Sponsored by: Deception Logic