[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
Inside an AI Attack Against a US Retailer
Chinese AI Project Scouts Spies in Taiwan Chip Industry
Japan Pushes Emergency Funding for Cybersecurity as AI-Assisted Breaches Rise
Attackers Say 'Hello' to a Different Scale of Cloud Attack
AI Raises the Stakes for Cyber Resilience
N-able Takes N-central Platform Offline After Discovery of 33 Flaws
November Patch Tuesday: An Overflowing Cornucopia of CVEs
Artex: The AI Pen-Test Tool Hackers Turned Into a Weapon
F-Secure Identifies 26 Ways AI Can Harm Consumers, and Where to Stop Them
Checkmarx Appoints Kobi Sivilya as Chief Information Security Officer
Ars Technica
Grok Build coding agent leaks oodles of confidential info, some belonging to SpaceXSI
Vulnerability that lets hackers SSH into Linux devices is under active exploitation
Chainalysis says hackers stole credentials and tokens for all of its customers
Meet *sshole, the vulnerability that lets hackers SSH into Linux devices
Hackers exploited iOS and Android flaws to infect phones
VMware releases vSphere Express for virtualization on up to 128 cores
Binance says hackers who stole billions in crypto spent months planning heist
UEFI bootkit infected fully patched Windows machines. Is Microsoft to blame?
Anthropic VS code extension on Cursor backdoored for nearly 12 hours
Code-execution flaw in UEFI firmware affects most servers on planet Earth
CyberScoop
CISA director pick already drawing concern from Hill Dems over Palantir connection
The US wants its quantum lead to turn into factories and supply chains
Microsoft fixes over 1,000 vulnerabilities in November Patch Tuesday
Vanderbilt University reels following ransomware attack claimed by BYOD group
Spyware attacks trend toward hitting just about anyone
Russian Turla group used new toolset to silently pilfer emails from Kazakhstan, Romanian governments
Trump picks Palantir’s LoSapio to head CISA
AI doesn’t have to go rogue to break the world
Authorities accuse trio of using AI deepfakes to defraud $129M from businesses
Air Force cyber official: need to invest in digital forensics
InfoSecurity Magazine
Security Teams Must Shift from Patching to Mitigation in the AI Era
NCSC Launches Cyber Adversary Testing to Boost Resilience
Maersk Reveals Data Breach as Extortion Group Demands $5m
N-able Rushes Out N-central Fixes After 33 Zero-Days Go Public
Anthropic's Glasswing Finds Many Vulnerabilities Yet Delivers Few Fixes, Researcher Says
Suspected Chinese Malware Supplier Tied to Three Hacking Campaigns
OT Incidents Hit a Third of Industrial Organizations, SANS Finds
Microsoft Fixes 1235 Flaws in Another Record Patch Tuesday
CISA Expands Incident Reporting Form While CIRCIA Mandate Waits
Russia-Linked Turla Hijacks Exchange Servers to Spy on NATO and EU Emails
SecurityWeek
Notion Customer Data Compromised in Fireworks AI Hack
Hackers Deploy Malware in Fresh ScreenConnect Campaign
Hackers Target N-central Zero-Days as N-able Rushes Patches 
Critical Red Hat Quay Vulnerability Could Expose Private Container Images
Maersk Confirms Data Theft Amid $5 Million Extortion Attempt
Today: CISO Forum Virtual Summit 2026 Day 2 – Join Cybersecurity Leaders Online
Critical Xen Orchestra Flaws Exploited in Attacks
Asus, Zoom Release Security Patches
Citrix, Ivanti Patch Critical and High-Severity Vulnerabilities
Finite State Raises $27 Million to Secure Software and Firmware in Connected Devices
ZDNet
This tiny box gives your older tech smart home superpowers – and it’s only $69
Google Fi now switches between the best mobile networks automatically – how it works
Oura Ring users may get in-app access to real doctors soon – what we know
Pixel users are getting a major Android Auto update – and it rivals Siri AI
Claude can collaborate in your team meetings soon – like an intern
Over Ubuntu? Fedora is the Linux distro I’d hop to next – here’s why
Microsoft fixes over 1,000 Windows flaws – and one is being exploited
Need more AI in Creator Studio? Apple may charge you for it
I found a hidden Android tool that solves all my tiny text troubles
All your Apple devices need to be patched ASAP – here’s why
The Hacker News
Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Processes in VMs
Webinar: See How Identity Blind Spots Put Your SOC at Risk and How to Close Them
New N-central Exploits Work Against Patched Servers, Enable Root RCE and Windows SYSTEM Access
Calendar Invites and Live Proxies: Inside a Google Session Hijacking Campaign
PTC Patches Critical Windchill and FlexPLM Flaw That Could Enable Remote Code Execution
Critical Pre-Auth MongoDB Flaw (CVE-2026-118383) Can Crash Lagging Servers on Failover
Node.js Fixes 16 Flaws, Including HTTP/2 Bugs That Crash Servers and Leak Other Connections' Data
Attacker Used 4,837 Hijacked GitHub Accounts to Run a CI Secret Stealer in 1,806+ Repositories
Critical Apache HTTP/2 Flaw Could Let Unauthenticated Attackers Execute Code Remotely
ScreenConnect Attacks Target at Least 288 Endpoints Across 48 Organizations With Rogue Clients
BleepingComputer
Microsoft: Recent Windows updates cause SQL Server performance issues
Microsoft confirms Windows security updates installation issues
Hackers plant GSocket on Linux servers for persistent access
Baker Tilly notifies clients of data breach at third-party provider
Active ScreenConnect attacks breach MSPs, impact dozens of organizations
eMudhra revokes 8 more CA certificates after private key mishap
Notion says Fireworks breach exposed customer AI chat transcripts
Maersk confirms data breach as WhiteArmor ransomware demands $5 million
Hackers use AntiFox AI agents in AWS credential-theft attacks
eBPF Rootkits: Why Underground Actors Are Taking Notice
gbhackers
Critical MongoDB Use-After-Free Vulnerability Allows Remote Code Execution Without Authentication
Google Chrome Fixes 83 Security Flaws, Including 5 Critical Use-After-Free Vulnerabilities
AntiFox AI Agents Linked to AWS Attacks That Exposed Production Secrets and Compromised Web Servers
State-Sponsored Hackers Deploy Up to 8 AI Agents to Target Taiwanese Government Systems
PoC Exploit Released for Critical Cisco Expressway RCE Vulnerability With CVSS 9.8 Score
Palo Alto Networks Patches PAN-OS Vulnerability Allowing Remote Code Execution With Root Privileges
Qilin Ransomware Gang Leader Allegedly Identified as 36-Year-Old Russian Man
12 Adversarial Exposure Validation Tools: The 2026 Buyer’s Verdict Guide
Microsoft Finds Hackers Using GSocket to Hide Linux Backdoors as Legitimate System Processes
Shipping Giant Maersk Confirms Data Breach Following Unauthorized Access to IT Systems
Cybersecurity Dive
N-able issues hotfix after researcher dumps PoCs in disclosure spat
CISA sets operational priorities for partnerships, risk assessments and systemic action
Trump picks Palantir cybersecurity executive to lead CISA
France attributes grocery hacks to Iran-backed threat actors
Truth or consequences: What your AI strategy is standing on
Financially motivated threat cluster uses AI-enabled tools against banking sector
Cybersecurity education in the AI era: What’s new, what’s different
5 critical steps organizations should take to secure AI
Improving incident response with AI agents
Hackers enlist Artex to scan GitHub repositories for exposed secrets
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
European tech buyers add digital sovereignty to cyber shopping list
London hotel put admin login for booking website on whiteboard behind the front desk
Disgraced former CA eMudhra blames buggy script for hopelessly weak certificates
Shipping giant Maersk probes 'IT security incident,' data theft
OpenAI builds a kill switch for its research models
November Patch Tuesday boasts over 1,000 bugs, one already under attack
Ring robots ready to patrol paranoids’ pads
Barracuda’s email security gateways bitten by make-me-root vulns
Trump taps Palantir security chief to run battered US cyber defense agency
Fireworks AI gets burned twice as customer data exposure widens
VentureBeat
Attackers breached the Fireworks AI storage where Notion AI chats sat outside zero data retention
Did Claude Code’s ‘don’t ask again’ option accidentally expose your enterprise's passwords and keys?
AI agents don't have to break security controls to go rogue. Here's how to keep them in check
Agents are rewriting the book on security. Can your data layer keep up?
AI agent access is moving faster than identity controls can govern
AI agents are about to put least privilege to the test
DeepSeek-V4.1-Flash-1017 arrives with improved benchmarks just as the U.S. government bans it from agencies — what enterprises should do
TechCrunch
N-able takes its remote access service offline after researcher publishes dozens of zero-day bugs
Cyberattacks threaten to make open source AI a little less open, Hugging Face exec warns 
Hotel giant Wyndham exposed customer data after app security lapse
France blames Iran for mass-hacks targeting freezers in grocery stores and blood banks
Hundreds of Artex AI hacking tools found publicly exposed to the web
Palo Alto Networks in talks to buy AI agent security startup Clutch for $500M
US government warns of ‘ongoing cyber threat’ amid mass hacks of industrial retail and military freezers
Hackers stole DreamHost customer files and inboxes during months-long attack
Building on open source AI? Hugging Face’s policy chief on the costs, risks, and trade-offs
Ted Schlein’s Ballistic Ventures seeks $490M for new funds amid AI-driven cybersecurity boom
Network World Security
Red Hat joins race to be ‘air traffic controller’ for AI agents
AMD takes on Intel and Nvidia with new 256-core EPYC server CPUs
Cisco boosts its AI Defense platform with Anthropic’s Claude Mythos
Commvault rolls out an automated recovery mechanism, promising faster restoration of business
Cisco Live Melbourne: AI agents will break today’s enterprise network, and Cisco wants to rebuild it
Oracle cancels $7 billion Tencent AI chip deal
Data center champions lose badly as ballot initiatives target AI infrastructure
Google targets AI’s next infrastructure bottlenecks with two new TPUs
A mole in the White House? Residential proxies are everywhere
Don’t mention the data center: OpenAI calls them ‘compute campuses’ instead
Help Net Security
Microsoft Entra adds a seven-day safeguard against irreversible identity deletion
Stolen Claude API keys can turn Claude Code into a remote-controlled implant
Photos: IRISSCON 2026 cybercrime conference
AWS Emulator: Open-source tool for testing AWS apps locally, built by autonomous AI agents
Check your GitHub repos: A secret stealer hit tens of thousands of them
.NET 11 security changes target the software supply chain
GitHub Agentic Autofix and the question of who owns a bad AI patch
Dagster: Open-source cloud-native data pipeline orchestrator
Who collects the keys when an AI agent retires?
CISOs say OT will survive a cyberattack, but their engineers aren’t so sure
SC Magazine
Google releases open-source agent substrate for secure AI sandboxing
Researchers link Qilin ransomware administrator to St. Petersburg man
Google DeepMind uses AI to verify Signal protocol security
Cloud recovery startup Dreeze secures $33 million in seed funding
CISA adds IBM, SignalWire, OpenSSH and GPUStack flaws to known exploited vulnerabilities catalog
Intel and AMD release security updates for over 200 vulnerabilities
Japan faces rising cybersecurity threats to its national ID infrastructure
Attackers leverage AntiFox platform on Alibaba cloud to target aws environments
British banking customers express concerns over AI deepfake security
Cisco BroadWorks flaw added to CISA's exploited vulnerabilities list
© 2026 RiskDiscovery | Sponsored by: Deception Logic