[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
No-Filter 'Kriminal' AI Platform Raises Cybercrime Concerns
SilkParasite Threatens Central Asian Orgs With Flurry of RATs
China-Linked Hacker Shows AI Capabilities in APAC Attack
Critical GitLab Zero-Click Flaw Poses Mitigation Challenges
'CoSnitch' Attack Tricked Copilot Into Mapping Out Architecture
The 'Industrial Accidents' Behind Rogue AI Agent Attacks — and the Sandbox Failures Exposed
CISOs Break Their Silence in 'Declassified' Docuseries
'Ransom Busters': Ransomware Actor Poses as Incident-Recovery Service
Silent 'TwinLoot' Cyber Threat Operates Entirely From Microsoft's Cloud
Video Call Exploit Chains Two Flaws in Unisoc Modems
Ars Technica
Microsoft Copilot reveals secret input that allowed it to be hacked
Nvidia discloses $21B stake in SpaceX
Vulnerability giving attackers full control of Macs is under active exploitation
PBS station fears losing 50TB of data after being ghosted by cloud storage provider
OpenAI and Anthropic in price war as Chinese AI rivals gain ground
Private security firms will soon be allowed to hack overseas cybercriminals
Terabytes of credentials leaked in massive supply-chain attack
DEF CON crowd suspected in fake-hotspot attack on Delta flight
Chrome adopts what may be the best protection yet against account takeovers
New Pass-ta-key attack reveals all the things we didn't know about passkeys
CyberScoop
AI-fueled attacks pose ‘active threat’ to water, other sectors, U.S. agencies warn
A California county wants to hire Tina Peters to help run its elections
The long tail of Clop’s PTC hack is just beginning to emerge
Eight years later, federal authorities re-up charges against alleged Iranian hackers at Mabna Institute
Medusa ransomware tallies hundreds of new victims, says updated advisory on group’s tactics
Details emerge on BlackFile’s recent attacks on financial companies
Irregular says ‘human oversight’ responsible for AI sandbox escape incidents
A bold new strategy or a dangerous precedent? Experts are divided on Trump’s memo.
Tech contractor for Brightly Software sentenced to 2 years in prison for insider attack
AI’s ‘middle class’ has gotten dramatically better at hacking
InfoSecurity Magazine
Exclusive: Linux Foundation's Akrites to Go Live in September
MaaS Campaign Combines ClickFix, ErrTraffic and Cruciferra
Grandoreiro Resurfaces in Mexico With New DLL Sideloading Campaign
OpenAI Tightens AI Safeguards Following Hugging Face Incident
Over 500 Critical Infrastructure Organizations Hit by Medusa Ransomware
ICO Urges Police to Improve Data Governance in Facial Recognition Rollouts
UK Fraud Cases Hit Record High in 2026
Wiz AI Agent Finds Critical Snowflake GitHub Repo Flaw Advanced Security Missed
Enterprise Applications Carry 4.31x More Critical and High Vulnerabilities
NASA Ground Control Software Flaw Enables Unauthenticated Commands
SecurityWeek
Exploitation Expected for Critical Authentication Bypass Patched in Citrix NetScaler
Critical GitLab Flaw Exploited Shortly After Disclosure
Hackers Using AI to Target Siemens PLCs in Critical US Sectors
Virtual Event Today: CodeSecCon – Secure Your Code and Applications
Prevalent AI Raises $22 Million to Expand Data Fabric Platform
US Charges 17 Iranian Hackers, Offers $10 Million Rewards for 5 of Them
Cl0p Ransomware Group Names Over 40 Victims of PTC Windchill Campaign
CISA Urges Immediate Patching of Exploited Microsoft, VMware, Apple Vulnerabilities
943 Patches Rolled Out With Oracle’s August 2026 Security Update
Chrome, Firefox Updates Patch Dozens of Vulnerabilities
ZDNet
Is leasing an iPhone right for you? How Apple's Upgrade Program works and who it's for
Can MainstreamOS finally make Linux a household name? I tried it to find out
Your Comcast router doubles as a motion detector now - and a potential police informant
After testing the Pixel 11, I feel fine about skipping the Pro models - here's why
I've tested dozens of rugged smartwatches - this one's battery is on a different level
I replaced my Samsung with the Google Pixel 11 Pro Fold - a week later, I'm going back
Pixel 11 XL Pro: Google's big flagship is more Pro than ever, but the camera is no big thing
I tried the Fairphone 6+ and - hoo boy! - this repairable phone could be the one
The best Android phones of 2026: Expert tested and reviewed
Best robot vacuum mops of 2026: Expert tested
The Hacker News
Elementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute Code
Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second
OpenAI Pauses Frontier RL Training as It Tightens Defenses Against Unsafe AI Behavior
SilkParasite Espionage Campaign Targets Central Asian Governments with Five New RATs
Hackers Compromised 14,500+ Dahua Devices Using Credential Attacks, Auth Bypasses, and P2P
Phishing 3.0: The Fight Moves to Agent Versus Agent
StopAndProtect Uses Nearly 2,000 Hacked WordPress Sites to Spread Malware and Steal Data
Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation
Microsoft Links 30+ Rotating Domains to MacSync Stealer Infrastructure
Clop-Linked Windchill Web Shell Decrypts Credentials and Maps Engineering Data
BleepingComputer
Microsoft says August Windows updates may cause gaming issues
OpenAI confirms ChatGPT is down as logins and signups fail
Rogue ransomware affiliate poses as recovery firm to steal payments
Sakura Internet hack exposes data of up to 1.36 million accounts
Healthtech firm CareCloud data breach impacts 3.7 million patients
Hackers compromise 14,500 Dahua web cameras in 35-day campaign
US warns of AI-powered attacks on Siemens PLCs in critical infrastructure
US charges Iranian hackers over $3.4 billion intellectual property theft
Password spraying attacks surge 155x as hackers exploit MFA gaps
Microsoft fixes known issue causing Windows Defender crashes
gbhackers
CyberPanel Pre-Auth RCE Flaws Let Attackers Gain Remote Server Access
Claude AI Finds Authentication Bypass Flaws in Multiple SAML Implementations
Hackers Trick AI Agents Into Telling Users to Install the Malware Themselves
Zimbra RCE Vulnerability Lets Remote Attackers Execute System Commands
ClearFake Fake CAPTCHA Campaigns Use New WordlistLoader to Deploy Amatera Stealer
Hackers Impersonate Claude, ChatGPT and Copilot to Deliver Infostealers and Backdoors
Microsoft Defender Update Crashes Virus Scans on Windows PCs
13 Malicious Rabby Firefox Extensions Steal Wallet Keyrings Before They Are Encrypted
Critical Citrix NetScaler Flaw Allows Attackers to Bypass Authentication
CISA, NSA and FBI Warn Hackers Using AI-Generated Scripts to Target Siemens S7 PLCs
Cybersecurity Dive
AI-backed campaign targeting vulnerable Siemens S7 devices, CISA and FBI warn
Ransomware disproportionately targets medium-sized firms, straining customer relationships
DOJ charges 17 people in Iran-backed hacking campaign against US
GitLab issues emergency patch for critical code-injection flaw
AI-powered vulnerability clearinghouse faces deep skepticism, major challenges
Critical flaw in SAP Commerce Cloud faces initial exploitation attempts
Major genetic-testing firm says hack compromised sensitive patient data
Why more security data has blurred companies’ view of risk
Researchers confirm breach claims by data-extortion group
Cisco security revenue jumps 14% as agentic AI sharpens cyberattacks
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
AI agent suggested installing a malware package. Engineer almost took its advice
'Not a theoretical risk,' feds warn as attackers use AI-made code to hack critical infrastructure controllers
ICE boss to agents: Leave the Meta spy glasses at home
Flock surveillance backlash mounts as fiendish Halloween plans circulate
Comcast gives its Wi-Fi motion detector a security makeover
Australian hotel chain leaks guests’ PII after breach at third-party database operator
OpenAI's overhead will rise 20 percent for some workloads as it hardens security
Expired credit cards revived by researchers to make unauthorized payments
CISA gives feds 3 days to fix actively exploited Ray RCE bug
Apple plugs image-processing hole ripe for spyware abuse
VentureBeat
Three Claude agents given conflicting orders sabotaged each other on a shared server — then didn't tell users what they'd done
Four of five enterprises that secured AI agent identities still can't contain one that goes rogue
OpenAI launches GPT-5.6-Cyber with reduced refusals, 95% completion on advanced cybersecurity tasks
AWS Continuum integrates with OpenAI Codex and Anthropic Claude Code in major AI security push
AI agents are part of your team now. Here’s how to secure all of them.
The browser is where attacks land. Why is security still focused on the endpoint?
Claude Mythos 5 made sock puppet accounts to socially engineer developers: here's what enterprises should know
TechCrunch
Researchers say OpenAI revoked their access to limited cyber program
T-Mobile ‘chopped a cable’ to expel Chinese hackers from its network
CareCloud confirms 3.7M patients had their medical records stolen in data breach
OpenAI institutes new safeguards after Hugging Face breach
Comcast adds motion sensing to millions of its newer routers, with a privacy catch
Bluesky says its recent outage was caused by another DDoS attack
‘Unprecedented’ number of Apple users received recent spyware alert, say investigators
Crypto hardware wallet owners face fresh security risks after recent spate of personal data thefts
How to tell if your AI platforms’ accounts have been hacked
What we know about the alleged Iranian hacks on US water utilities
Network World Security
Cerebras reimagines AI cluster design with switchless CS-4 architecture
IBM moves closer to fault-tolerant quantum computing with modular cryogenic systems
Reports: Google partnering with AMD for next-gen hybrid TPU
Why 6 GHz Wi-Fi will make or break the modern enterprise
Is your networking built for AI’s traffic patterns and data volumes?
IBM partners with OpenAI to drive enterprise AI deployment
It’s final! Judge says HPE’s Juniper acquisition is complete
Google, Microsoft and Nvidia back 800V DC standard for AI data centers
Five takeaways from Cisco’s Q4 and what they mean for IT pros
Cisco rides ‘networking supercycle’ for strong Q4
Help Net Security
OpenAI previews privacy-focused system for detecting AI misuse
US agencies warn of AI-powered attacks on Siemens industrial controllers
Tufin expands Unified Control Plane with AI intelligence and multi-vendor automation
US charges 17 Iranian hackers over 31-terabyte academic data theft
AI is making fraud harder to spot and identity harder to prove
Researchers find a loophole that lets expired credit cards make unauthorized payments
8,539 reasons to rethink how vulnerabilities get patched
Intezer adds native response automation without separate SOAR
Medusa ransomware gang has hit over 500 organizations, CISA warns
Brinqa acquires PlexTrac to bring validated remediation to exposure management
SC Magazine
A ‘kill switch’ law only makes sense for a worst-case scenario
The CISO Doesn't Own the Outcome: A Shared-Accountability Model for Security Decisions
Medusa ransomware group attacked more than 500 victims since 2021
Perspective and lessons learned from mergers and acquisitions
Geekom admits malware found in legacy mini PC driver download
Microsoft removes WMIC tool from Windows 11
Critical vulnerability in Ray framework allows remote code execution
CISA explores single contract for cybersecurity software purchases
Heights Finance data breach impacts over 700,000 customers
‘TWINLOOT’ Python implant abuses Microsoft services for stealthy C2
© 2026 RiskDiscovery | Sponsored by: Deception Logic