[ News | Newsletters | Blogs | Reddits | Lists | Media | Jobs ] HoneyDB
DarkReading
[Virtual Event] Strategic Security for the Modern Enterprise
Security Threats of Open Source AI Exposed by DeepSeek
Keeping LLMs on the Rails Poses Design, Engineering Challenges
GitLab's AI Assistant Opened Devs to Code Theft
SideWinder APT Caught Spying on India's Neighbor Gov'ts
Experts Chart Path to Creating Safer Online Spaces for Women
Lumma Stealer Takedown Reveals Sprawling Operation
Ivanti EPMM Exploitation Tied to Previous Zero-Day Attacks
Marks & Spencer Projects Cyberattack Cost of $400M
Pandas Galore: Chinese Hackers Boost Attacks in Latin America
Ars Technica
“Microsoft has simply given us no other option,” Signal says as it blocks Windows Recall
Apple legend Jony Ive takes control of OpenAI’s design future
Windows 11’s most important new feature is post-quantum cryptography. Here’s why.
Chicago Sun-Times prints summer reading list full of fake books
The empire strikes back with F-bombs: AI Darth Vader goes rogue with profanity, slurs
Spies hack high-value mail servers using an exploit from yesteryear
OpenAI adds GPT-4.1 to ChatGPT amid complaints over confusing model lineup
Google introduces Advanced Protection mode for its most at-risk Android users
GOP sneaks decade-long AI regulation ban into spending bill
New attack can steal cryptocurrency by planting false memories in AI chatbots
CyberScoop
Appeals court rejects attempt by Khashoggi widow to renew suit against NSO Group
Lumma infostealer infected about 10 million systems before global disruption
Multi-national warning issued over Russia’s targeting of logistics, tech firms
Lumma Stealer toppled by globally coordinated takedown
A house full of open windows: Why telecoms may never purge their networks of Salt Typhoon
Massachusetts man will plead guilty in PowerSchool hack case
‘Whatever we did was not enough’: How Salt Typhoon slipped through the government’s blind spots
Federal cyber workforce training institute eyed in bipartisan House bill
Don’t let DOGE destroy CISA
DOGE could scrap identity protections for those impacted by OPM breach, senator warns
HITBSecNews
Found on VirusTotal: The world’s first UEFI bootkit for Linux
OpenAI is at war with its own Sora video testers following brief public leak
North Korean hackers posing as IT workers steal over $1B in cyberattack
WhatsApp: NSO Group Operates Pegasus Spyware for Customers
Korea extradites Russian, Vietnamese suspects linked to $16M ransomware scheme
CISA Director Jen Easterly, in Place Since 2021, to Step Down
Man sick of crashes sues Intel for allegedly hiding CPU defects
North Korean hackers target cryptocurrency with malware
Law enforcement operation takes down 22,000 malicious IP addresses worldwide
Youth of today say passwords are old news, passkeys are the future
SecurityWeek
ZDNet
How to safeguard your small business in the hybrid work era: 5 top cybersecurity solutions
How to disable ACR on your TV (and why it makes such a big difference for privacy)
I thought my favorite browser blocked trackers but this free privacy tool proved me wrong
The best VPNs for school in 2025: Expert tested and reviewed
The best VPN services for iPad in 2025: Expert tested and reviewed
The best VPN services for iPhone in 2025: Expert tested and reviewed
AI agent adoption is driving increases in opportunities, threats, and IT budgets
A security key for every employee? YubiKey-as-a-Service goes global
A drug developer is buying 23andMe - what does that mean for your DNA data?
Microsoft goes all in on Anthropic's MCP standard for safer AI agent deployments
The Hacker News
Critical Windows Server 2025 dMSA Vulnerability Enables Active Directory Compromise
Chinese Hackers Exploit Ivanti EPMM Bugs in Global Enterprise Network Attacks
Webinar: Learn How to Build a Reasonable and Legally Defensible Cybersecurity Program
Identity Security Has an Automation Problem—And It's Bigger Than You Think
Unpatched Versa Concerto Flaws Let Attackers Escape Docker and Compromise Host
FBI and Europol Disrupt Lumma Stealer Malware Network Linked to 10 Million Infections
Russian Hackers Exploit Email and VPN Vulnerabilities to Spy on Ukraine Aid Logistics
PureRAT Malware Spikes 4x in 2025, Deploying PureLogs to Target Russian Firms
Fake Kling AI Facebook Ads Deliver RAT Malware to Over 22 Million Potential Victims
Securing CI/CD workflows with Wazuh
BleepingComputer
Ivanti EPMM flaw exploited by Chinese hackers to breach govt agencies
Chinese hackers breach US local governments using Cityworks zero-day
FTC finalizes order requiring GoDaddy to secure hosting services
Signal now blocks Microsoft Recall screenshots on Windows 11
Unpatched critical bugs in Versa Concerto lead to auth bypass, RCE
Anthropic web config hints at Claude Sonnet 4 and Opus 4
OpenAI hints at a big upgrade for ChatGPT Operator Agent
Critical Samlify SSO flaw lets attackers log in as admin
Russian hackers breach orgs to track aid routes to Ukraine
Russia to enforce location tracking app on all foreigners in Moscow
Cybersecurity Dive
Russia stepping up attacks on firms aiding Ukraine, Western nations warn
AI drives cyber strategies, security execs say
Microsoft leads international takedown of Lumma Stealer
M&S warns April cyberattack will cut $400 million from profits
High-profile CISA departure adds to agency’s struggles
How hospitality companies can stay ahead of cyberattacks this summer
Major tech vendors call for streamlining US foreign cyber aid
Researchers warn of China-backed espionage campaign targeting laid-off US workers
Ivanti Endpoint Mobile Manager customers exploited via chained vulnerabilities
AI is stirring mixed feelings among CFOs, survey finds
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
CISA News
CISA Welcomes Madhu Gottumukkala as the New Deputy Director
CISA Statement on Cyber-Related Alerts and Notifications
CISA, DHS S&T, INL, LSU Help Energy Industry Partners Strengthen Incident Response and OT Cybersecurity
Statement from Matt Hartman on the CVE Program
CISA Statement on CVE Program
CISA and Partners Issue Fast Flux Cybersecurity Advisory
CISA Probationary Reinstatements
Statement on CISA's Red Team
CISA Calls For Action to Close the Software Understanding Gap
CISA Publishes Microsoft Expanded Cloud Log Implementation Playbook
The Register
Russia expected to pass experimental law that tracks foreigners in Moscow via smartphones
Signal shuts the blinds on Microsoft Recall with the power of DRM
Scottish council admits ransomware crooks stole school data
US teen to plead guilty to extortion attack against PowerSchool
Russia's Fancy Bear swipes a paw at logistics, transport orgs' email servers
FBI, Microsoft, international cops bust Lumma infostealer service
Coinbase confirms insiders handed over data of 70K users
Judge allows Delta's lawsuit against CrowdStrike to proceed with millions in damages on the line
Google carves out cloudy safe spaces for nations nervous about America's reach
Trump announces $175B for Golden Dome defense shield over America
VentureBeat
Microsoft just launched an AI that discovered a new chemical in 200 hours instead of years
Reddit, Webflow, and Superhuman are already customers—now GrowthX has $12M to grow
Salesforce just unveiled AI ‘digital teammates’ in Slack — and they’re coming for Microsoft Copilot
Shrink exploit windows, slash MTTP: Why ring deployment is now a must for enterprise defense
You.com’s ARI Enterprise crushes OpenAI in head-to-head tests, aims at deep research market
Meet AlphaEvolve, the Google AI that writes its own code—and just saved millions in computing costs
Patronus AI debuts Percival to help enterprises monitor failing AI agents at scale
What your tools miss at 2:13 AM: How gen AI attack chains exploit telemetry lag – Part 2
AI power rankings upended: OpenAI, Google rise as Anthropic falls, Poe report finds
OpenAI just fixed ChatGPT’s most annoying business problem: meet the PDF export that changes everything
TechCrunch
Signal’s new Windows update prevents the system from capturing screenshots of chats
Wyden: AT&T, T-Mobile, and Verizon weren’t notifying senators of surveillance requests
US student agrees to plead guilty to hack affecting tens of millions of students
Coinbase says its data breach affects at least 69,000 customers
The people in Elon Musk’s DOGE universe
Cocospy stalkerware apps go offline after data breach
Pharma giant Regeneron to buy 23andMe and its customers’ data for $256M
Crypto elite increasingly worried about their personal safety
US man who hacked SEC’s X account to spike Bitcoin price sentenced to prison
Coinbase says customers’ personal information stolen in data breach
Network World Security
Dell rolls out private cloud package, bolsters AI offerings for on-prem development
AWS clamping down on cloud capacity swapping; here’s what IT buyers need to know
DriveNets extends AI networking fabric with multi-site capabilities for distributed GPU clusters
Nutanix expands its ecosystem, unveils platform expansions
IP Fabric weaves advanced firewall discovery into network assurance platform
Intel eyes exit from NEX unit as focus shifts to core chip business
AMD launches new Ryzen Threadripper CPUs to challenge Intel’s workstation dominance
Extreme bolsters AI support for its integrated network and security platform
How vulnerable are undersea cables?
Survey: AMD continues to take server share from Intel
Help Net Security
StackHawk raises $12 million to help security teams tackle AI-powered dev cycles
Druva strengthens cyber resilience across Microsoft Azure environments
Signal blocks Microsoft Recall from screenshotting conversations
The hidden gaps in your asset inventory, and how to close them
CTM360 report: Ransomware exploits trust more than tech
Many rush into GenAI deployments, frequently without a security net
Review: CompTIA Network+ Study Guide, 6th Edition
Be careful what you share with GenAI tools at work
Lumma Stealer Malware-as-a-Service operation disrupted
Data-stealing VS Code extensions removed from official Marketplace
SC Magazine
Legitimate tools spoofed by infostealing Chrome extensions
RAT malware spread via bogus Kling AI ads
Email bombing, other techniques leveraged by 3AM ransomware gang
Scattered Spider's UK, US attacks preceded by financial services targeting
Salt Typhoon likely to remain in US telco networks forever, experts say
Global crackdown dismantles Lumma infostealer
A handy list of risk questions every healthcare CISO should ask potential suppliers  
Russian hackers targeting Western logistics, tech support of Ukraine
NIST releases new AI attack taxonomy with expanded GenAI section
Apparent ransomware attack leads to systemwide outage for Kettering Health
InfoSecurity Magazine
Kettering Health Cyber-Attack Disrupts Services
Coinbase Breach Affected Almost 70,000 Customers
Critical Zero-Days Found in Versa Networks SD-WAN/SASE Platform
Sensitive Personal Data Stolen in West Lothian Ransomware Attack
Global Law Enforcers and Microsoft Seize 2300+ Lumma Stealer Domains
Western Logistics and Tech Firms Targeted by Russia’s APT28
#Infosec2025: NCC Group Expert Warns UK Firms to Prepare for Cyber Security and Resilience Bill
Cybercriminals Mimic Kling AI to Distribute Infostealer Malware
Flaw in Google Cloud Functions Sparks Broader Security Concerns
US Teen to Plead Guilty in PowerSchool Extortion Campaign
© 2024 RiskDiscovery | Sponsored by: Deception Logic