[ News | Newsletters | Blogs | Reddits | Lists | Media | Jobs ] HoneyDB
DarkReading
GITEX GLOBAL 2025
RCE Flaw in AI-Assisted Coding Tool Poses Software Supply Chain Risk
Cisco User Data Stolen in Vishing Attack
Why the Old Ways Are Still the Best for Most Cybercriminals
Google Chrome Enterprise: More Than an Access Point to the Web
Minimal, Hardened, and Updated Daily: The New Standard for Secure Containers
NVIDIA Patches Critical RCE Vulnerability Chain
CISA & FEMA Announce $100M+ in Community Cybersecurity Grants
MacOS Under Attack: How Organizations Can Counter Rising Threats
Threat Actors Increasingly Leaning on GenAI Tools
Ars Technica
AI site Perplexity uses “stealth tactics” to flout no-crawl edicts, Cloudflare says
At $250 million, top AI salaries dwarf those of the Manhattan Project and the Space Race
Microsoft catches Russian hackers targeting foreign embassies
In search of riches, hackers plant 4G-enabled Raspberry Pi in bank network
So far, only one-third of Americans have ever used AI for work
Flaw in Gemini CLI coding tool could allow hackers to run nasty commands
AI in Wyoming may soon use more electricity than state’s human residents
OpenAI’s ChatGPT Agent casually clicks through “I am not a robot” verification test
Pro-Ukrainian hackers take credit for attack that snarls Russian flight travel
After BlackSuit is taken down, new ransomware group Chaos emerges
CyberScoop
Iranian hackers were more coordinated, aligned during Israel conflict than it seemed
Google addresses six vulnerabilities in August’s Android security update
AI company Perplexity is sneaking to get around blocks on crawlers, Cloudflare alleges
‘Highly evasive’ Vietnamese-speaking hackers stealing data from thousands of victims in 62+ nations
Details emerge on BlackSuit ransomware takedown
CrowdStrike investigated 320 North Korean IT worker cases in the past year
Senate confirms national cyber director pick Sean Cairncross
Cursor’s AI coding agent morphed ‘into local shell’ with one-line prompt attack
Social engineering attacks surged this past year, Palo Alto Networks report finds
China accuses US of exploiting Microsoft zero-day in cyberattack
HITBSecNews
Found on VirusTotal: The world’s first UEFI bootkit for Linux
OpenAI is at war with its own Sora video testers following brief public leak
North Korean hackers posing as IT workers steal over $1B in cyberattack
WhatsApp: NSO Group Operates Pegasus Spyware for Customers
Korea extradites Russian, Vietnamese suspects linked to $16M ransomware scheme
CISA Director Jen Easterly, in Place Since 2021, to Step Down
Man sick of crashes sues Intel for allegedly hiding CPU defects
North Korean hackers target cryptocurrency with malware
Law enforcement operation takes down 22,000 malicious IP addresses worldwide
Youth of today say passwords are old news, passkeys are the future
ZDNet
This is my new favorite thermal imaging camera for Android and iOS - and it's not even close
Amazon lets you buy used cars now in just a few clicks - here's how
This favorite ad blocker finally comes to Safari - be sure you download the right one
I tested Dell's XPS successor, and it made my $3,000 Windows laptop look bad
Watch AI models compete right now in Google's new Game Arena
Perplexity is sneaking onto websites to scrape blocked content, says Cloudflare
I pack light, but this universal travel charger earned a place in my bag - here's why
GNOME's new AI assistant can even run Linux commands for you - here's how
I brought this portable Marshall speaker on vacation - and now my Bose is staying home
How to clear your iPhone cache (and why it makes such a big difference)
The Hacker News
ClickFix Malware Campaign Exploits CAPTCHAs to Spread Cross-Platform Infections
Google’s August Patch Fixes Two Qualcomm Vulnerabilities Exploited in the Wild
Cursor AI Code Editor Vulnerability Enables RCE via Malicious MCP File Swaps Post Approval
Misconfigurations Are Not Vulnerabilities: The Costly Confusion Behind Security Risks
How Top CISOs Save Their SOCs from Alert Chaos to Never Miss Real Incidents
15,000 Fake TikTok Shop Domains Deliver Malware, Steal Crypto via AI-Driven Scam Campaign
SonicWall Investigating Potential SSL VPN Zero-Day After 20+ Targeted Attacks Reported
NVIDIA Triton Bugs Let Unauthenticated Attackers Execute Code and Hijack AI Servers
Vietnamese Hackers Use PXA Stealer, Hit 4,000 IPs and Steal 200,000 Passwords Globally
⚡ Weekly Recap: VPN 0-Day, Encryption Backdoor, AI Malware, macOS Flaw, ATM Hack & More
BleepingComputer
The Heat Wasn't Just Outside: Cyber Attacks Spiked in Summer 2025
Cisco discloses data breach impacting Cisco.com user accounts
SonicWall urges admins to disable SSLVPN amid rising attacks
Android gets patches for Qualcomm flaws exploited in attacks
Microsoft increases Zero Day Quest prize pool to $5 million
Fashion giant Chanel hit in wave of Salesforce data theft attacks
Proton fixes Authenticator bug leaking TOTP secrets in logs
Microsoft: Outdated Office apps lose access to voice features in January
CTM360 spots Malicious ‘FraudOnTok’ Campaign Targeting TikTok Shop users
New Plague Linux malware stealthily maintains SSH access
Cybersecurity Dive
Cybersecurity budgets tighten as economic anxiety rises
AI is helping hackers automate and customize cyberattacks
Senate confirms Trump’s national cyber director nominee
Ransomware spike linked to potential zero-day flaw in SonicWall devices
Palo Alto Networks investigating ransomware threat related to SharePoint exploitation
DOJ reaches $9.8 million settlement with Illumina over cyber whistleblower claims
Ransomware gangs capitalize on law enforcement takedowns of competitors
Industry groups urge vigilance as Scattered Spider evolves tactics
Palo Alto Networks to buy CyberArk for $25 billion
What we know about the cybercrime group Scattered Spider
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
Study finds humans not completely useless at malware detection
Chained bugs in Nvidia's Triton Inference Server lead to full system compromise
Hacker summer camp: What to expect from BSides, Black Hat, and DEF CON
Antivirus vendors fail to spot persistent, nasty, stealthy Linux backdoor
SonicWall investigates 'cyber incidents,' including ransomware targeting suspected 0-day
Python-powered malware snags hundreds of credit cards, 200K passwords, and 4M cookies
Mozilla flags phishing wave aimed at hijacking trusted Firefox add-ons
German phone repair biz collapses following 2023 ransomware attack
When hyperscalers can’t safeguard one nation’s data from another, dark clouds are ahead
Millions of age checks performed as UK Online Safey Act gets rolling
VentureBeat
ChatGPT rockets to 700M weekly users ahead of GPT-5 launch with reasoning superpowers
Shadow AI adds $670K to breach costs while 97% of enterprises skip basic access controls, IBM reports
Nightfall launches ‘Nyx,’ an AI that automates data loss prevention at enterprise scale
How can enterprises keep systems safe as AI agents join human employees? Cyata launches with a new, dedicated solution
AI vs. AI: Prophet Security raises $30M to replace human analysts with autonomous defenders
ChatGPT just got smarter: OpenAI’s Study Mode helps students learn step-by-step
Sparrow raises $35M Series B to automate the employee leave management nightmare
How E2B became essential to 88% of Fortune 100 companies and raised $21 million
CoSyn: The open-source tool that’s making GPT-4V-level vision AI accessible to everyone
SecurityPal combines AI and experts in Nepal to speed enterprise security questionnaires by 87X or more
TechCrunch
Hacker used a voice phishing attack to steal Cisco customers’ personal information
SonicWall urges customers to disable SSLVPN amid reports of ransomware attacks
Google says its AI-based bug hunter found 20 security vulnerabilities
Perplexity accused of scraping websites that explicitly blocked AI scraping
North Korean spies posing as remote workers have infiltrated hundreds of companies, says CrowdStrike
A backlog at the Commerce Department is reportedly stalling Nvidia’s H20 chip licenses
Sex toy maker Lovense threatens legal action after fixing security flaws that exposed users’ data
Authorities seize BlackSuit ransomware gang’s servers
Google is experimenting with machine learning-powered age-estimation tech in the US
Palo Alto Networks agrees to buy CyberArk for $25 billion
Network World Security
2025 global network outage report and internet health check
Riverbed banks on AI-driven network observability
Data neutrality: Safeguarding your AI’s competitive edge
Broadcom expands AI networking portfolio with Jericho4 Ethernet fabric router
Infoblox reinforces DNS defense package
SNIA launches Storage.AI to address AI data infrastructure bottlenecks
Nvidia: Latest news and insights
China demands ‘security evidence’ from Nvidia over H20 chip backdoor fears
Colo space crunch could cripple IT expansion projects
DOE announces site selection for AI data centers
Help Net Security
Millions of Dell laptops could be persistently backdoored in ReVault attacks
Project Ire: Microsoft’s autonomous malware detection AI agent
ExtraHop helps SOCs connect the dots with identity-driven detection
Cymulate’s new platform turns threat validation into smarter defense
Manifest AI Risk turns weeks of model vetting into two clicks
Riverbed rolls out AI-powered tools to find and fix network issues faster
New Reveal platform shines a light on post-login identity behavior
Security tooling pitfalls for small teams: Cost, complexity, and low ROI
BloodHound 8.0 debuts with major upgrades in attack path management
Your employees uploaded over a gig of files to GenAI tools last quarter
InfoSecurity Magazine
Chinese Smishing Campaigns Compromise up to 115 Million US Payment Cards
#BHUSA: Experts Urge Greater AI Supply Chain Transparency as GenAI Adoption Surges
Critical Vulnerabilities Found in NVIDIA's Triton Inference Server
Cybersecurity Teams Hit by Lowest Budget Growth in Five Years
Pro-Iran Hackers Aligned Cyber with Kinetic War Aims
AI Fuels Record Number of Fraud Cases
Ghost in the Zip Reveals Expanding Ecosystem Behind PXA Stealer
#BHUSA: Microsoft and Google Among Most Affected as Zero Day Exploits Jump 46%
Web-Based AI Usage Surge Shifts Global Internet Traffic Patterns
Uptick in Akira Ransomware Actors Targeting SonicWall VPNs
© 2025 RiskDiscovery | Sponsored by: Deception Logic