[ News | Newsletters | Blogs | Reddits | Lists | Media | Jobs ] HoneyDB
DarkReading
Patch Now: Max-Severity Fortra GoAnywhere Bug Allows Command Injection
Capture the Flag Competition Leads to Cybersecurity Career
'ShadowLeak' ChatGPT Attack Allows Hackers to Invisibly Steal Emails
Plastic People, Plastic Cards: Synthetic Identities Plague Finance & Lending Sector
Transforming Cyber Frameworks to Take Control of Cyber-Risk
Iranian State APT Blitzes Telcos & Satellite Companies
Critical Azure Entra ID Flaw Highlights Microsoft IAM Issues
7 Lessons for Securing AI Transformation From Digital Guru Jennifer Ewbank
TikTok Deal Won't End Enterprise Risks
SonicWall Breached, Firewall Backup Data Exposed
Ars Technica
Two of the Kremlin’s most active hack groups are collaborating, ESET says
Two UK teens charged in connection to Scattered Spider ransomware attacks
New attack on ChatGPT research agent pilfers secrets from Gmail inboxes
How weak passwords and other failings led to catastrophic breach of Ascension
White House officials reportedly frustrated by Anthropic’s law enforcement AI limits
ChatGPT may soon require ID verification from adults, CEO says
Millions turn to AI chatbots for spiritual guidance and confession
Modder injects AI dialogue into 2002’s Animal Crossing using memory hack
OpenAI and Microsoft sign preliminary deal to revise partnership terms
35 percent of VMware workloads expected to migrate elsewhere by 2028
CyberScoop
Cyber threat information law hurtles toward expiration, with poor prospects for renewal
Why federal IT leaders must act now to deliver NIST’s post-quantum cryptography transition
Researchers raise alarm over maximum-severity defect in GoAnywhere file-transfer service
Trump administration planning expansion of U.S. quantum strategy
DOD official: We need to drop the cybersecurity talent hiring window to 25 days
Agencies increasingly dive into AI for cyber defense, acting federal CISO says
UK arrests two teens accused of heavy involvement in yearslong Scattered Spider attack spree
Attack on SonicWall’s cloud portal exposes customers’ firewall configurations
Microsoft seizes hundreds of phishing sites tied to massive credential theft operation
BreachForums founder resentenced to three years in prison
HITBSecNews
Found on VirusTotal: The world’s first UEFI bootkit for Linux
OpenAI is at war with its own Sora video testers following brief public leak
North Korean hackers posing as IT workers steal over $1B in cyberattack
WhatsApp: NSO Group Operates Pegasus Spyware for Customers
Korea extradites Russian, Vietnamese suspects linked to $16M ransomware scheme
CISA Director Jen Easterly, in Place Since 2021, to Step Down
Man sick of crashes sues Intel for allegedly hiding CPU defects
North Korean hackers target cryptocurrency with malware
Law enforcement operation takes down 22,000 malicious IP addresses worldwide
Youth of today say passwords are old news, passkeys are the future
ZDNet
How researchers tricked ChatGPT into sharing sensitive email data
Why I'm recommending this iPhone 17 model to most people (and it's not the Pro Max)
Roku's first TV projector gives you a 150-inch screen to watch on - for under $200
This midrange Sony soundbar beat out my expensive Sonos setup - here's how
These GPT-5 earbuds have a useful recording feature that makes work calls much more productive
How to use Live Translation on your AirPods - not just the newest ones
DeepSeek reports shockingly low training costs for R1 in new paper
This AirTag alternative fits my wallet and works well with Android phones - it's priced well, too
I tried this 25-inch Android tablet for a week - here's how my buying advice changed
iPhone 17 Pro Max vs. Google Pixel 10 Pro XL: I compared the flagship handsets, and there's a winner
The Hacker News
⚡ Weekly Recap: Chrome 0-Day, AI Hacking Tools, DDR5 Bit-Flips, npm Worm & More
How to Gain Control of AI Agents and Non-Human Identities
Microsoft Patches Critical Entra ID Flaw Enabling Global Admin Impersonation Across Tenants
DPRK Hackers Use ClickFix to Deliver BeaverTail Malware in Crypto Job Scams
LastPass Warns of Fake Repositories Infecting macOS with Atomic Infostealer
Researchers Uncover GPT-4-Powered MalTerminal Malware Creating Ransomware, Reverse Shell
ShadowLeak Zero-Click Flaw Leaks Gmail Data via OpenAI ChatGPT Deep Research Agent
UNC1549 Hacks 34 Devices in 11 Telecom Firms via LinkedIn Job Lures and MINIBIKE Malware
SystemBC Powers REM Proxy With 1,500 Daily VPS Victims Across 80 C2 Servers
Fortra Releases Critical Patch for CVSS 10.0 GoAnywhere MFT Vulnerability
BleepingComputer
Verified Steam game steals streamer's cancer treatment donations
Microsoft Entra ID flaw allowed hijacking any company's tenant
Canada dismantles TradeOgre exchange, seizes $40 million in crypto
Microsoft starts rolling out Gaming Copilot on Windows 11 PCs
FBI warns of cybercriminals using fake FBI crime reporting portals
CISA exposes malware kits deployed in Ivanti EPMM attacks
Fortra warns of max severity flaw in GoAnywhere MFT’s License Servlet
Known. Emerging. Unstoppable? Ransomware Attacks Still Evade Defenses
Steam will stop running on Windows 32-bit in January 2026
OpenAI's $4 GPT Go plan may expand to more regions
Cybersecurity Dive
How to build a trustworthy AI governance roadmap aligned with ISO 42001
Preemptive security predicted to constitute about half of IT security spending by 2030
NIST explains how post-quantum cryptography push overlaps with existing security guidance
Evolving AI attacks, rapid model adoption worry cyber defenders
UK arrests 2 more alleged Scattered Spider hackers over London transit system breach
Healthcare firms’ hack-related losses outpace those of other sectors
Microsoft disrupts global phishing campaign that led to widespread credential theft
Bridgestone Americas restores facilities’ network connections following cyberattack
House spending bill would reauthorize key cybersecurity programs
Jaguar Land Rover extends production delay following cyberattack
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
Car giant Stellantis says customer data nicked after partner vendor pwned
FOMO? Brit banking biz rolls out AI tools, talks up security
Trump says Michael Dell is part of the team buying TikTok, with Larry Ellison and maybe some Murdochs
Tech troubles create aviation chaos on both sides of the Atlantic
Ransomware attack linked to museum break-in and theft of golden exhibits
ChatGPT joins human league, now solves CAPTCHAs for the right prompt
Ivanti EPMM holes let miscreants plant shady listeners, CISA says
Ding ding: Fortra rings the perfect-10 bell over latest GoAnywhere MFT bug
Alleged Scattered Spider teen cuffed after extortion Bitcoin used to buy games, meals
One token to pwn them all: Entra ID bug could have granted access to every tenant
VentureBeat
TechCrunch
Hundreds of flights delayed at Heathrow and other airports after apparent cyberattack
US government charges British teenager accused of at least 120 ‘Scattered Spider’ hacks
Here’s the tech powering ICE’s deportation crackdown 
ICE unit signs new $3M contract for phone-hacking tech
Irregular raises $80 million to secure frontier AI models
Jaguar Land Rover to pause production for third week due to cyberattack 
VC firm Insight Partners says thousands of staff and limited partners had personal data stolen in a ransomware attack
Samsung patches zero-day security flaw used to hack into its customers’ phones
Kering, owner of Gucci, Balenciaga, and other luxury brands, confirms hack
Israel announces seizure of $1.5M from crypto wallets tied to Iran
Network World Security
Nvidia reportedly acquires Enfabrica CEO and chip technology license
Upscale emerges from stealth with $100 million seed and plans to democratize AI networking
Observability platforms gain AI capabilities
Intel: Latest news and insights
Intel will design CPUs with Nvidia NVLink in return for $5 billion investment
Ethernet, InfiniBand, and Omni-Path battle for the AI-optimized data center
Nvidia: Latest news and insights
Cisco strengthens integrated IT/OT network and security controls
AI spending to reach $1.5 trillion this year, Gartner says
IT professionals share biggest frustrations, wishes on IT Pro Day
Help Net Security
Unpatched Fortra GoAnywhere instances at risk of full takeover (CVE-2025-10035)
How Juventus protects fans, revenue, and reputation during matchdays
Cybersecurity AI (CAI): Open-source framework for AI security
Kubernetes matures as AI and GitOps reshape operations
AI needs ethics to avoid real-world harm
OpenID Foundation sets new standards for real-time security event sharing
Week in review: Chrome 0-day fixed, npm supply chain attack, LinkedIn data used for AI
ImmuniWeb offers free tool to test quantum resilience of TLS stacks
New Tigera solution protects AI workloads from data ingestion to deployment
Astra API Security Platform secures undocumented and vulnerable APIs
InfoSecurity Magazine
Major Cyber Threat Detection Vendors Pull Out of MITRE Evaluations Test
FBI Says Threat Actors Are Spoofing its IC3 Site
Airport Chaos Enters Third Day After Supply Chain Attack
Russian State Hackers Collaborate in Attacks Against Ukraine
Zero-Click Vulnerability in ChatGPT's Agent Enables Silent Gmail Data Theft
Attackers Abuse AI Tools to Generate Fake CAPTCHAs in Phishing Attacks
Pair of Suspected Scattered Spider Hackers Charged by UK, US Authorities
New York Blood Center Alerts 194,000 People to Data Breach
1 in 3 Android Apps Leak Sensitive Data
SonicWall Discloses Compromise of Cloud Backup Service
© 2025 RiskDiscovery | Sponsored by: Deception Logic