[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
Artex: The AI Pen-Test Tool Hackers Turned Into a Weapon
F-Secure Identifies 26 Ways AI Can Harm Consumers, and Where to Stop Them
Checkmarx Appoints Kobi Sivilya as Chief Information Security Officer
How to Assess OT Incident Response Preparedness
AI Coding Agents Leak Thousands of Secrets to GitHub
AI Makes Reverse Engineering Mainstream Software & Malware Far Easier
People Are Getting Weird About AI
CISA Announces Enhanced Reporting Form for Cyber Incidents
Microsoft Fixes RCE Bug in Windows Paint After Weeks of Confusion
Black Hat India 2026 Makes a Landmark Debut in Bengaluru, Bringing the Global Cybersecurity Community to India
Ars Technica
Grok Build coding agent leaks oodles of confidential info, some belonging to SpaceXSI
Vulnerability that lets hackers SSH into Linux devices is under active exploitation
Chainalysis says hackers stole credentials and tokens for all of its customers
Meet *sshole, the vulnerability that lets hackers SSH into Linux devices
Hackers exploited iOS and Android flaws to infect phones
VMware releases vSphere Express for virtualization on up to 128 cores
Binance says hackers who stole billions in crypto spent months planning heist
UEFI bootkit infected fully patched Windows machines. Is Microsoft to blame?
Anthropic VS code extension on Cursor backdoored for nearly 12 hours
Code-execution flaw in UEFI firmware affects most servers on planet Earth
CyberScoop
The US wants its quantum lead to turn into factories and supply chains
Microsoft fixes over 1,000 vulnerabilities in November Patch Tuesday
Vanderbilt University reels following ransomware attack claimed by BYOD group
Spyware attacks trend toward hitting just about anyone
Russian Turla group used new toolset to silently pilfer emails from Kazakhstan, Romanian governments
Trump picks Palantir’s LoSapio to head CISA
AI doesn’t have to go rogue to break the world
Authorities accuse trio of using AI deepfakes to defraud $129M from businesses
Air Force cyber official: need to invest in digital forensics
OpenAI debuts GPT-6 Cyber, touting better performance — and safety guardrails
InfoSecurity Magazine
CISA Expands Incident Reporting Form While CIRCIA Mandate Waits
Russia-Linked Turla Hijacks Exchange Servers to Spy on NATO and EU Emails
Cloud Vulnerabilities Surge Fourfold in Less Than a Year
Default Admin Password Let Researchers Unlock and Start Cars
Vanderbilt University Takes Systems Offline After Cyber Incident
France Blames Iran for Supermarket Fridge Hack, Requests International Arrest Warrants
Binance Investigates ShinyHunters Breach Claims
Jailbroken AI Agent Ran Two-Week Attack on European Telecom
New Supply Chain Attack Compromises Tens of Thousands of GitHub Repositories
Email Addresses of 2.2 Million Sega Customers Leaked in Vendor Breach
SecurityWeek
Exploited Outlook Zero-Day Among 1,094 Flaws Patched by Microsoft
Adobe Patches 110 Vulnerabilities Across 9 Products
Software Transparency Is Changing: Allan Friedman on SBOM, AI BOMs and What Comes Next
Google Widens Gemini 4 Carbon Access After AI Agents Verify Signal Code
Today: CISO Forum Virtual Summit 2026 – Join Global Cybersecurity Leaders
WhiteMatter Raises $20 Million in Series A Funding
SAP Patches Critical ICM2SHELL, ProxyGate Vulnerabilities
Over a Dozen Organizations Hit in Qubole Supply Chain Attack
Anthropic Rolls Out Mythos 5.2 With Improved Bug Hunting, Fewer Sandbox Escapes
N-able Takes N-central Offline as Researcher Drops Over 30 Zero-Days
ZDNet
New Windows 11 update fixes File Explorer menu mess – and patches an exploited flaw
Need more AI in Creator Studio? Apple may charge you for it
I found a hidden Android tool that solves all my tiny text troubles
All your Apple devices need to be patched ASAP – here’s why
Google’s new AI tool just proved Signal encryption really works – here’s how
Your FitBit Versa and Sense smartwatches will lose some features this month – what to know
Done with Debian Linux distros? Try Fedora next – 7 reasons why
Reddit launches AI-powered Reviews feature – with 10,000 products to start
5 apps I need Siri AI to work with now that it’s open to third-party developers
Ring’s new drone patrols your home to keep an eye on things – even upstairs
The Hacker News
Git Patches Flaw That Lets Malicious Repositories Execute Code During Recursive Clones
SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users
Hackers Exploit Critical Xen Orchestra Auth Bypass Flaw to Gain Admin Access
Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem
Attackers Exploit AhsayCBS Flaws to Deploy Sandbox-Evading Python Backdoor
Blind Eagle Uses Fake Court Notices to Deliver Remote Access Trojan Across Latin America
Fireworks AI Confirms Wider Breach Affecting Customer Datasets, Model Weights and Notion AI Chats
Binance Warns of iOS Sandbox Escape That Could Expose Crypto Wallet Keys, No Fix Confirmed
Beyond the Alert: The Case for Rich Network Data
Apple Patches iMessage Group Chat Privacy Flaws and Bluetooth Pairing Vulnerabilities
BleepingComputer
Japanese furniture giant Nitori says hackers stole 37.6M customer records
Microsoft releases Windows 10 KB5131096 extended security update
Hackers exploit trusted AWS access to breach multiple cloud environments
Microsoft November 2026 Patch Tuesday fixes 1,235 flaws, Outlook zero-day
Windows 11 KB5132061 & KB5131087 cumulative updates released
Critical Xen Orchestra auth bypass flaw exploited to hijack VM servers
Binance warns of iOS flaw that could leak crypto wallet secrets
Ransomware recovery is now a client retention metric
SAP patches ICM2SHELL and PROXYGATE maximum severity flaws
Hackers now exploit critical Barracuda ESG flaws to gain root access
gbhackers
Weekly Cybersecurity Newsletter – Top 50 Biggest Cybersecurity Stories of the Week 
One Identity Unveils Safeguard 9.0 for Simpler PAM
One Identity Unveils Active Roles 8.6 with Enhanced Security and Administration
One Identity Unveils Identity Manager 10.0 LTS with AI and Modern UX
OffSec Celebrates 20 Years of Practitioner-Built Training From the Creators of Kali Linux and OSCP
Finite State Raises $27 Million to Help Device Makers Fight ‘Vulnpocalypse’ with AI-Powered Product Security
Hackers Abuse Qubole’s Trusted AWS Access to Breach Multiple Cloud Accounts and Steal Sensitive Data
SAP November 2026 Patch Day Fixes Four Maximum-Severity Security Vulnerabilities
Critical Apache Airflow Flaw CVE-2026-68982 Enables Unauthenticated Remote Code Execution
Russian-Linked Turla Hackers Abuse Microsoft Exchange Infrastructure to Target Sensitive Communications
Cybersecurity Dive
Trump picks Palantir cybersecurity executive to lead CISA
Truth or consequences: What your AI strategy is standing on
Financially motivated threat cluster uses AI-enabled tools against banking sector
Cybersecurity education in the AI era: What’s new, what’s different
5 critical steps organizations should take to secure AI
Improving incident response with AI agents
Hackers enlist Artex to scan GitHub repositories for exposed secrets
Companies struggle to know what normal looks like for AI agents
What to expect from Democrats’ cybersecurity agenda in Congress
French authorities probe cyberattack targeting nation’s blood supply
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
Ring robots ready to patrol paranoids’ pads
Barracuda’s email security gateways bitten by make-me-root vulns
Trump taps Palantir security chief to run battered US cyber defense agency
Fireworks AI gets burned twice as customer data exposure widens
Chrome zero-day whack-a-mole continues as 2026 tally hits 8
Ransomware threat blares from Vanderbilt University computers during cyberattack
Google DeepMind melds humans and AI agents to vet Signal's secure messaging techniques
Anthropic's super bug-finding Mythos model is going into Cisco and IBM products
France blames Iran for supermarket hack meltdowns
Attackers backdoor trusted AWS integrations to steal secrets
VentureBeat
Did Claude Code’s ‘don’t ask again’ option accidentally expose your enterprise's passwords and keys?
AI agents don't have to break security controls to go rogue. Here's how to keep them in check
Agents are rewriting the book on security. Can your data layer keep up?
AI agent access is moving faster than identity controls can govern
AI agents are about to put least privilege to the test
DeepSeek-V4.1-Flash-1017 arrives with improved benchmarks just as the U.S. government bans it from agencies — what enterprises should do
AI cloud security needs to prove control before agents reach production
TechCrunch
N-able takes its remote access service offline after researcher publishes dozens of zero-day bugs
Cyberattacks threaten to make open source AI a little less open, Hugging Face exec warns 
Hotel giant Wyndham exposed customer data after app security lapse
France blames Iran for mass-hacks targeting freezers in grocery stores and blood banks
Hundreds of Artex AI hacking tools found publicly exposed to the web
Palo Alto Networks in talks to buy AI agent security startup Clutch for $500M
US government warns of ‘ongoing cyber threat’ amid mass hacks of industrial retail and military freezers
Hackers stole DreamHost customer files and inboxes during months-long attack
Building on open source AI? Hugging Face’s policy chief on the costs, risks, and trade-offs
Ted Schlein’s Ballistic Ventures seeks $490M for new funds amid AI-driven cybersecurity boom
Network World Security
Oracle cancels $7 billion Tencent AI chip deal
Data center champions lose badly as ballot initiatives target AI infrastructure
Google targets AI’s next infrastructure bottlenecks with two new TPUs
A mole in the White House? Residential proxies are everywhere
Don’t mention the data center: OpenAI calls them ‘compute campuses’ instead
Broadcom has quietly changed VMware availability, support for parts of Europe
Agentic AI boom expected to reshape CPU market
IBM, Quantinuum and Intel signal a new phase in the quantum computing race
Zyxel patches a zero-day hiding behind an old fix
Attackers turned OpsShield’s trusted update channel into a supply-chain attack
Help Net Security
Firefox free VPN drops its 50GB launch cap until January 31
X.Org patches eight server vulnerabilities a month after fixing 12 others
AI reverse engineering let researchers add a new feature to Slack
Dreeze raises $33 million to automate recovery of entire cloud applications
CISA tweaks cyber incident form to spot attacks that might be linked
IRISSCON 2026 puts preparedness for cyberattacks and hybrid threats in focus
Claude Mythos 5.2 arrives with stronger bug hunting and less sandbox-breaking behavior
Windows settings backup is on by default starting with Windows 11 26H2
Turla’s Cereal malware turns victims’ Exchange servers into spy hubs
What a security leader should tell the CEO about leaked credentials
SC Magazine
France blames Iran for attacks on more than 700 grocery stores
AI labs have an insider problem. So does everyone deploying their agents
The refrigeration attacks in Europe are a prelude to attacks on US critical infrastructure
Cybersecurity and Infrastructure Security Agency updates incident reporting portal
Fireworks discloses second security breach following third-party cloud attack
Wyndham addresses security flaw in Android app
Remus stealer adds persistent Gmail access feature
Black Hat India 2026 concludes inaugural edition in Bengaluru
Vanderbilt University responds to cyberattack by BYOD ransomware group
Human Expertise Will Always Be The Core Of AI Cybersecurity - Andrew Wesie - ASW #408
© 2026 RiskDiscovery | Sponsored by: Deception Logic