[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
ArcticRAT Cybercrime Gang Profiles Victim Finances With AI
Attackers in Binance Breach Targeted Known Weakness, Missing Controls
Getting Past the Post-Quantum Cryptography Discovery Phase
Cyber Experts Weigh In: How to Fight Artex & AntiFox
Extortion Group Luna Moth Flits Into Law Firms a Second Time
Inside an AI Attack Against a US Retailer
Chinese AI Project Scouts Spies in Taiwan Chip Industry
Japan Pushes Emergency Funding for Cybersecurity as AI-Assisted Breaches Rise
AIを活用したサイバー攻撃の増加を受け、日本がサイバーセキュリティへの緊急資金拠出を推進
Attackers Say 'Hello' to a Different Scale of Cloud Attack
Ars Technica
Windows 0-day dropped by disgruntled researcher hands hackers System rights
Grok Build coding agent leaks oodles of confidential info, some belonging to SpaceXSI
Vulnerability that lets hackers SSH into Linux devices is under active exploitation
Chainalysis says hackers stole credentials and tokens for all of its customers
Meet *sshole, the vulnerability that lets hackers SSH into Linux devices
Hackers exploited iOS and Android flaws to infect phones
VMware releases vSphere Express for virtualization on up to 128 cores
Binance says hackers who stole billions in crypto spent months planning heist
UEFI bootkit infected fully patched Windows machines. Is Microsoft to blame?
Anthropic VS code extension on Cursor backdoored for nearly 12 hours
CyberScoop
Researchers continue to find serious vulnerabilities in internet connected refrigerators
Industry guidelines for offensive cyber tools unveiled through international Pall Mall Process
US seizes North Korean hacking infrastructure, $1.2 billion in cryptocurrency stolen from Binance
Rogue remote-access campaign spread through ScreenConnect add-on, researchers say
Don’t put Section 702 spying law renewal in defense bill, groups urge Hill leaders
International operation dismantles malware networks, exposes 6.4 million stolen credentials
CISA director pick already drawing concern from Hill Dems over Palantir connection
The US wants its quantum lead to turn into factories and supply chains
Microsoft fixes over 1,000 vulnerabilities in November Patch Tuesday
Vanderbilt University reels following ransomware attack claimed by BYOD group
InfoSecurity Magazine
Hackers' Overreliance on AI Can Result in Weaker Cyber-Attacks, Proofpoint Researcher Says
Microsoft 365 Outage Set to Ramp up Security Risks to Organizations
Phishing Rises Three Times Faster in Europe Than Globally, Proofpoint Finds
AI Set to Revolutionize Ransomware Following “Stagnant” Few Years
Weak Passwords Expose SQL Servers to Cryptominer and Gh0st RAT
Hacked Asian Telcos Used to Intercept Taiwanese Calls and Texts
Lego Takes BrickLink Marketplace Offline After Detecting Unusual Activity
Security Teams Must Shift from Patching to Mitigation in the AI Era
NCSC Launches Cyber Adversary Testing to Boost Resilience
Maersk Reveals Data Breach as Extortion Group Demands $5m
SecurityWeek
Is AI Making Us Worse at Cybersecurity?
Apple Reveals How Secure Exclaves Shield Camera and Microphone Data
No Signs of Hacking in FAA Ground Stop as FBI Reportedly Probes Software Update
FAA Ground Stop Issued Due to ‘Extraordinary Circumstances’
In Other News: New CISA Director Nominee, Connected Car Hacking, Baker Tilly Data Breach
Microsoft Struggles to Restore Email and Other Services in a Global Outage
Apify Confirms Customer Data Accessed in Cyberattack
SilentAir Hackers Intercept Calls, SMS From Inside Mobile Networks
Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure
Citrix Patches 10 Critical NetScaler Vulnerabilities
ZDNet
‘We need more reviewers’: Finding Linux bugs is easy now – fixing them is another story
Microsoft doesn’t ‘have an ETA for full recovery’ on outage yet
Roku drops smart home products to focus on streaming – what that means for your devices
I checked Gemini’s new Memory summary to see what it knew about me – how to see and edit yours
Google Wallet just turned your Android phone into a digital house key – how it works
Google’s Pixel Tag tracker won’t work as well on older Android phones – check our list
Fitbit users can’t see Google Health metrics after update – how to fix it
If the November Windows update fails to install on your PC, here’s what to do
This tiny box gives your older tech smart home superpowers – and it’s only $69
Google Fi now switches between the best mobile networks automatically – how it works
The Hacker News
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE
New Mior and Skyfall Attacks Let Rogue Cloud Hosts Steal Secrets From AMD SEV-SNP VMs
FBI Says North Korean Hackers Stole Over $400 Million in Crypto Using Deepfake Video Calls
Trezor Confirms Hidden Implants in CryptoBilis-Sold Wallets That Can Steal Recovery Phrases
When an AI Agent Goes Wrong, Can You Stop It?
SilentAir Hijacks Asian Telecom Networks to Intercept SMS 2FA Codes and Spy on Taiwanese Users
Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins
Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files
Hackers Exploit N-central Flaws to Infect 21 Servers, Including 19 Running Hotfix 2
BleepingComputer
Cursor confirms security breach led to malicious Claude Code extension
US disrupts North Korean campaign behind $400 million crypto theft
Trezor confirms crypto-stealing implants in three wallets, releases fix
German military drone operations disrupted by cyberattack
Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiper
How one AI agent exposed five critical enterprise security gaps
Microsoft says November security updates cause printing issues
Check Point warns of zero-day flaw exploited for root access
Microsoft confirms Windows activation failures after November updates
Police arrest 354 suspects in dark web cybercrime crackdown
gbhackers
BlackNevas Ransomware Attacks VMware ESXi Servers, Destroying Virtual Machines and Backup Infrastructure
CISA Warns of Actively Exploited Check Point Zero-Day Vulnerability Allowing Attackers to Gain Root Access
Hackers Use Stolen LLM API Keys to Power ARTEX AI Agents and Continue Credential Theft
FBI Warns Hackers Are Weaponizing ARTEX AI Framework to Launch Autonomous Cyberattacks Worldwide
Hackers Use Falcon C2 Framework to Hijack Browsers and Steal Credentials From Government Agencies
Japan Hit by Record Cyberattack Surge as Hackers Use AI to Exploit Security Vulnerabilities
Uber Hacked – Hackers Steal Drivers’ License Personal Data
Hackers Manipulate NVIDIA GPU Monitoring to Conceal Cryptocurrency Mining on Compromised Linux Servers
FBI Disrupts North Korean FaceStealer Attacks Linked to $400 Million in Crypto Theft
Hackers Exploit ChatGPT and Claude Website Typos to Deliver Malware and Hijack Browsers
Cybersecurity Dive
White House task force says companies deserve liability relief for AI-fueled cyberattacks
US cracks down on North Korean cryptocurrency-theft scheme, recovers more Binance funds
China-nexus actor uses AI tool in campaign targeting US defense, semiconductor industries
AI found widespread IoT vulnerabilities more quickly and cheaply than humans could
ConnectWise disables third-party extensions as it probes cyberattack targeting ScreenConnect users
N-able issues hotfix after researcher dumps PoCs in disclosure spat
CISA sets operational priorities for partnerships, risk assessments and systemic action
Trump picks Palantir cybersecurity executive to lead CISA
France attributes grocery hacks to Iran-backed threat actors
Truth or consequences: What your AI strategy is standing on
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
Big Tech takes a beating as online safety experts accuse companies of doing bare minimum
This year’s bug count just passed 100K
Quantum Systems drones back in the air after malware scare
Crackdown on UK medical record snooping after staff reported sneaking 300+ times this year
Brit police watchdog says cops' use of facial recog risks wrongful arrests
C++26 stumbles at finish line over Contracts dispute
OpenAI launches security products, tells orgs they’re doomed if they don’t use them
Lego marketplace BrickLink in pieces after 'unusual activity' takes it offline for almost a week
Software Samaritan revamps borked Indian certs to block smart TV ads
Microsoft Exchange Server 2016 and 2019 enter their 'permanently vulnerable' era
VentureBeat
The fake app on an employee’s phone could be a gateway into your enterprise
AI agents are stealing credentials in minutes, and security’s old response targets can’t keep up
Attackers breached the Fireworks AI storage where Notion AI chats sat outside zero data retention
Did Claude Code’s ‘don’t ask again’ option accidentally expose your enterprise's passwords and keys?
AI agents don't have to break security controls to go rogue. Here's how to keep them in check
Agents are rewriting the book on security. Can your data layer keep up?
AI agent access is moving faster than identity controls can govern
TechCrunch
Transportation secretary blames ‘routine’ equipment upgrade for grounding flights nationwide
US government grounds all flights across the United States ‘due to extraordinary circumstances’
Uber confirms hackers stole thousands of drivers’ license information in data breach
Microsoft’s latest email outage turned into a full-blown global cloud crisis
United Airlines blocks AI agents from booking flights, citing cybersecurity risks
Cyberattack on Fireworks AI allowed hackers to access Notion customers’ chat transcripts
Nvidia’s Jensen Huang resigns, chipmaker names CFO Colette Kress as interim CEO
N-able takes its remote access service offline after researcher publishes dozens of zero-day bugs
Cyberattacks threaten to make open source AI a little less open, Hugging Face exec warns 
Hotel giant Wyndham exposed customer data after app security lapse
Network World Security
The firewall becomes the foothold: Attackers turn Check Point gateways against customers
Cisco forecasts $9 billion in AI infrastructure revenue in FY27
What’s next for Nvidia?
10 SASE certifications to validate converged network and security skills
Nvidia’s leadership crisis puts enterprise AI’s dependence on one company under scrutiny
2026 network outage report and internet health check
Red Hat joins race to be ‘air traffic controller’ for AI agents
AMD takes on Intel and Nvidia with new 256-core EPYC server CPUs
Cisco boosts its AI Defense platform with Anthropic’s Claude Mythos
Commvault rolls out an automated recovery mechanism, promising faster restoration of business
Help Net Security
ChatGPT Wallet lets agents pay without seeing your card number
Fake GTA 6 download goes after Steam logins and crypto wallet data
Apple details Secure Exclaves, isolated runtimes for camera and microphone data
354 dark web vendors and buyers arrested in Operation TorNado
OpenAI’s Daybreak brings AI agents to security testing and vulnerability fixes
Stolen webcam clips of 900+ victims feed North Korea’s $400 million fake Zoom scheme
How attackers turned a Teams meeting booking into a device code phishing trap
Suspected North Korean IT workers reached onboarding at companies with open data
Your pinned MCP server may not be as pinned as you think
Digital sovereignty leaves enterprises chasing their own audit trails
SC Magazine
Uber drivers impacted by data breach at third-party provider
Lithuanian publisher Appsalt linked to unauthorized proxy network activity
Experts predict AI will revolutionize ransomware tactics by 2027
Unocoin investigates potential exploitation of multisignature wallet backup mechanism
Cybersecurity threats escalate across Europe
National Cyber Security Centre launches adversary simulation scheme
German drone manufacturer Quantum Systems reports cyberattack
OWASP Global AppSec: Paradigm shifts and circular code-checking
Googleglass, Microsoft, SignDrop, ConnectWise, Trezor, Dr. Zikel, Apache, Josh Marpet - SWN #633
OWASP Global AppSec: How to nudge developers into implementing best security practices
© 2026 RiskDiscovery | Sponsored by: Deception Logic