[ News | Newsletters | Blogs | Reddits | Lists | Media | Jobs ] HoneyDB
DarkReading
Translating Cyber-Risk for the Boardroom
Fixed Ivanti Bugs Still Haunt Japan Orgs 6 Months Later
Banking Trojan Coyote Abuses Windows UI Automation
Dark Web Hackers Moonlight as Travel Agents
Department of Education Site Mimicked in Phishing Scheme
What Makes Great Threat Intelligence?
Crash Override Turns to ERM to Combat Visibility Challenges
Stop AI Bot Traffic: Protecting Your Organization's Website
US Nuclear Agency Hacked in Microsoft SharePoint Frenzy
Lumma Stealer Is Back & Stealthier Than Ever
Ars Technica
White House unveils sweeping plan to “win” global AI race through deregulation
OpenAI and partners are building a massive AI data center in Texas
What to know about ToolShell, the SharePoint threat under mass exploitation
A power utility is reporting suspected pot growers to cops. EFF says that’s illegal.
SharePoint vulnerability with 9.8 severity rating under exploit across globe
OpenAI jumps gun on International Math Olympiad gold medal announcement
Exhausted man defeats AI model in world coding championship
Phishers have found a way to downgrade—not bypass—FIDO MFA
GitHub abused to distribute payloads on behalf of malware-as-a-service
ChatGPT’s new AI agent can browse the web and create PowerPoint slideshows
CyberScoop
Trump AI plan pushes critical infrastructure to use AI for cyber defense
Authorities in Ukraine nab alleged admin of Russian-language cybercrime forum
Cisco network access security platform vulnerabilities under active exploitation
Contract lapse leaves critical infrastructure cybersecurity sensor data unanalyzed at national lab 
House Republicans endorse stricter state and federal-led voter roll purges despite dearth of evidence on fraud
Microsoft SharePoint zero-day attacks pinned on China-linked ‘Typhoon’ threat groups
UK moves to ban public sector organizations from making ransom payments
After website hack, Arizona election officials unload on Trump’s CISA
Mass attack spree hits Microsoft SharePoint zero-day defect
Why it’s time for the US to go on offense in cyberspace
HITBSecNews
Found on VirusTotal: The world’s first UEFI bootkit for Linux
OpenAI is at war with its own Sora video testers following brief public leak
North Korean hackers posing as IT workers steal over $1B in cyberattack
WhatsApp: NSO Group Operates Pegasus Spyware for Customers
Korea extradites Russian, Vietnamese suspects linked to $16M ransomware scheme
CISA Director Jen Easterly, in Place Since 2021, to Step Down
Man sick of crashes sues Intel for allegedly hiding CPU defects
North Korean hackers target cryptocurrency with malware
Law enforcement operation takes down 22,000 malicious IP addresses worldwide
Youth of today say passwords are old news, passkeys are the future
ZDNet
Buy the Motorola Razr Ultra at $200 off and get a free smartwatch too
How to install the iPadOS 26 public beta (and which iPad models support it)
GitHub's AI-powered Spark lets you build apps using natural language - here's how to access it
The iOS 26 public beta is out now - How to install (and which iPhones support it)
The MacOS 26 public beta is here - How to install (and which models support it)
Faster Qi2 wireless charging coming to iPhones and some Android phones
How to clear your iPhone cache (and why you should do it before installing iOS 26 public beta)
You can get an iPhone 16 Pro from T-Mobile for free - with no trade-in required
I finally found a wall charger than can replace my AirTag when I travel - and it works in 150 countries
The MacOS 26 public beta is finally here - 5 features I'm trying first
The Hacker News
Critical Mitel Flaw Lets Hackers Bypass Login, Gain Full Access to MiVoice MX-ONE Systems
Fire Ant Exploits VMware Flaws to Compromise ESXi Hosts and vCenter Environments
CastleLoader Malware Infects 469 Devices Using Fake GitHub Repos and ClickFix Phishing
Sophos and SonicWall Patch Critical RCE Flaws Affecting Firewalls and SMA 100 Devices
Watch This Webinar to Uncover Hidden Flaws in Login, AI, and Digital Trust — and Fix Them
Pentests once a year? Nope. It’s time to build an offensive SOC
China-Based APTs Deploy Fake Dalai Lama Apps to Spy on Tibetan Community
Storm-2603 Exploits SharePoint Flaws to Deploy Warlock Ransomware on Unpatched Systems
Europol Arrests XSS Forum Admin in Kyiv After 12-Year Run Operating Cybercrime Marketplace
Hackers Deploy Stealth Backdoor in WordPress Mu-Plugins to Maintain Admin Access
BleepingComputer
Hacker sneaks infostealer malware into early access Steam game
Mitel warns of critical MiVoice MX-ONE authentication bypass flaw
Hackers breach Toptal GitHub account, publish malicious npm packages
SonicWall urges admins to patch critical RCE flaw in SMA 100 devices
Microsoft: SharePoint flaws exploited in Warlock ransomware attacks
Brave blocks Windows Recall from screenshotting your browsing activity
Proton launches privacy-respecting encrypted AI assistant Lumo
Hackers fooled Cognizant help desk, says Clorox in $380M cyberattack lawsuit
ChatGPT is rolling out 'personality' toggles to become your assistant
NPM package ‘is’ with 2.8M weekly downloads infected devs with malware
Cybersecurity Dive
Senators push CISA director nominee on election security, agency focus
What we know about the Microsoft SharePoint attacks
Trump AI plan calls for cybersecurity assessments, threat info-sharing
Lapsed CISA contract impedes national lab’s threat-hunting operations
Clorox files $380 million suit blaming Cognizant for 2023 cyberattack
SharePoint hacking campaign affects hundreds of systems worldwide
Microsoft sees China-backed nation-state hackers among adversaries targeting SharePoint
Ransomware attacks in education jump 23% year over year
Dwindling federal cyber support for critical infrastructure raises alarms
How IT leaders infuse cyber hygiene into daily work
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
No login? No problem: Cisco ISE flaw gave root access before fix arrived, say researchers
So much for watermarks: UnMarker tool nukes AI provenance tags
Microsoft: SharePoint attacks now officially include ransomware infections
Coyote malware abuses Microsoft's UI Automation to hunt banking creds
The EFF is 35, but the battle to defend internet freedom is far from over
Compromised Amazon Q extension told AI to delete everything – and it shipped
Eau no! Dior tells customers their data was swiped in cyber snafu
Not pretty, not Windows-only: npm phishing attack laces popular packages with malware
IRL Com recruits teens for real-life stabbings, shootings, FBI warns
Nothing to see here: Brave browser blocks privacy-busting Microsoft Recall
VentureBeat
SecurityPal combines AI and experts in Nepal to speed enterprise security questionnaires by 87X or more
Early Anthropic hire raises $15M to insure AI agents and help startups deploy safely
Anthropic researchers discover the weird AI problem: Why thinking longer makes models dumber
Crowdstrike’s massive cyber outage 1-year later: lessons enterprises can learn to improve security
Google DeepMind makes AI history with gold medal win at world’s toughest math competition
How OpenAI’s red team made ChatGPT agent into an AI fortress
Salesforce used AI to cut support load by 5% — but the real win was teaching bots to say ‘I’m sorry’
Blaxel raises $7.3M seed round to build ‘AWS for AI agents’ after processing billions of agent requests
Claude Code revenue jumps 5.5x as Anthropic launches analytics dashboard
OpenAI, Google DeepMind and Anthropic sound alarm: ‘We may be losing the ability to understand AI’
TechCrunch
Cybercrime forum Leak Zone publicly exposed its users’ IP addresses
AI slop and fake reports are exhausting some security bug bounties
European authorities arrest alleged admin of notorious Russian crime forum XSS
Hundreds of organizations breached by SharePoint mass-hacks
Apple alerted Iranians to iPhone spyware attacks, say researchers
UK government wants ransomware victims to report breaches so it can carry out ‘targeted disruptions’ against hackers
National security meets next-gen tech at TechCrunch Disrupt 2025’s AI Defense panel
Google, Microsoft say Chinese hackers are exploiting SharePoint zero-day
Serial spyware founder Scott Zuckerman wants the FTC to unban him from the surveillance industry
Hackers exploiting SharePoint zero-day seen targeting government agencies
Network World Security
Network jobs watch: Hiring, skills and certification trends
CompTIA updates Linux+ certification
Storage vendors bring record capacity devices to handle massive data generation
Humana slashes engineering hours with network automation overhaul
Broadcom blocks VMware patch access for perpetual license holders with expired support contracts
Ambient sensing: Privacy-aware embedded intelligence
IT leaders rethink talent strategies to cope with AI skills crunch
CIOs recalibrate IT agendas to make room for rising AI spend
Rethinking and realigning IT for the AI era
Blackstone to acquire majority stake in NetBrain Technologies
Help Net Security
Storm-2603 spotted deploying ransomware on exploited SharePoint servers
CISO New York 2025 brings together top cybersecurity leaders
Intel 471 Guided Threat Hunts enables teams to measure hunt success metrics
Sonicwall fixes critical flaw in SMA appliances, urges customers to check for compromise (CVE-2025-40599)
Autoswagger: Open-source tool to expose hidden API authorization flaws
Why outsourcing cybersecurity is rising in the Adriatic region
Your app is under attack every 3 minutes
Most data breaches have unknown causes as transparency continues to fall
Microsoft rolls out Windows 11 “quick recovery” feature
Mastermind behind Russian-speaking cybercrime hub arrested in Ukraine
InfoSecurity Magazine
Malware Campaign Masquerades as Dating Apps to Steal Data
FBI Exposes The Com’s Criminal Activities and Involvement of Minors
Ransomware Deployed in Compromised SharePoint Servers
UK and Romania Crack Down on ATM Fraudster Network
Active Campaign Exploits Cloud Flaws for Cryptomining
New York Proposes Cybersecurity Regulations for Water Systems
Suspected XSS Forum Admin Arrested in Ukraine
France: New Data Breach Could Affect 340,000 Jobseekers
Clorox Sues IT Service Provider Cognizant for Causing 2023 Cyber-Attack
US Government Warns of Wide-Ranging Interlock Attacks
© 2025 RiskDiscovery | Sponsored by: Deception Logic