[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
As Russia's Cyberwar Evolves, Belarus Steps Forward
Anthropic-Themed Phishing Emails Bypass Top Security Tools
Rethinking Cybersecurity Awareness in the AI Era
Claude Model Builds Exploits Across Major Browsers & OSes
Threat Modeling With 4 Simple Questions on a White Board
Shadowy AI Relay Disables OpenAI Codex, Claude Code Sandboxes
Cyber Vulnerabilities Besiege Italy, Absent Clear Cause
GhostAction Hacking Wave Fizzles, but Attackers Lurk on in GitHub
AI Takes Root in Hospital Corridors, Raises Security Stakes
Attacker Relentlessly Scans for Credentials by Impersonating AI Bots
Ars Technica
Code-execution flaw in UEFI firmware affects most servers on planet Earth
Disgraced eMudhra drops out of TLS business after using cert private key of 4
333 Tor exit nodes hijacked to intercept SSH traffic and retrieve plaintext email
Enterprises keep buying software upgrades that IT thinks will make things worse
PHP warns it plans to release 2 emergency patches imminently
The Internet goes on high alert after discovery of 8 compromised TLS certs
Meta Muse exposes users' personal and business secrets when they share conversations
PSA: Patch your Plex media server before someone hacks it
ReactOS reaches major milestone with NTFS install support
OpenAI models hacked a crypto wallet and breached more websites
CyberScoop
Leaked DHS employee archive, Icepick, faces challenges to stay online
Officials seize domain of top bulletproof hosting provider Virtualine
Leak site publishes data on more than 41,000 DHS employees obtained by hacktivists
Lawsuit against Ex-Overstock CEO tied to 2020 election film falls apart over question of ‘actual malice’
Researchers uncover Volt Typhoon’s covert, ephemeral network
Prosecutors charge Madagascar scammers in NFT-stealing scheme based on fake online dating profiles
Before you file that AI bug report, OpenAI has some advice
All the security risks Anthropic is worried about before its IPO 
Prolific Hive and Nefilim ransomware affiliate sentenced to 70 months in prison
National cyber director rolls out latest pilot in South Carolina, this time for rural hospitals
InfoSecurity Magazine
NIK C2 Malware Can Use Victims’ OpenAI Keys for AI Queries
CREST Urges Whole-Ecosystem Approach to Financial Cyber Resilience
Online Scam Volumes Double to Overtake Phishing
ICO Reprimands Staffordshire Police After Domestic Abuse Breach
NIST Publishes Guidance to Meet Federal Post-Quantum Deadlines
MR ROBOT Malware-as-a-Service Targets Indian Bank Customers
Japan’s GMO Internet Urges Customers to Disconnect PCs
Attackers Hide Malware Behind Signed ChatGPT and Claude Binaries
AI Is Turning CISOs Into Business-Risk Translators, Says Nvidia’s Head of Cyber
Energy Giant Engie Notifies Customers of Supply Chain Breach
SecurityWeek
TeamViewer Flaw Could Let Malicious Hosts Take Over Support Technicians’ Machines
$6 Billion Binance Hack Bears Hallmarks of North Korea’s TraderTraitor
When Risk Becomes Personal: What Security Leaders Can Learn From a Cancer Diagnosis
Google Touts Powerful Cybersecurity Capabilities in Gemini 4 Carbon Model
How Secure Are US Elections? Voting Machine Risks and the Growing Threat of AI
Cisco Open Sources Quarry to Catch AI Agent Attacks Hidden in Harmless Steps
Adobe, Veeam, Juniper Networks Patch Critical Vulnerabilities
BAE Says No Data Extracted in Incident Hitting Bankruptcy Courts
Over 41,000 DHS Employee Records Leaked Online
Hackers Steal 2.6 Million Records From Sony’s Japanese ISP So-net
ZDNet
Your headphones have hidden LE Audio features you’ll want to know about
Firefox and Chrome patch 200+ security flaws combined – update both ASAP
Stop sharing your passwords with AI agents, Bank of America warns customers
Mistral’s Le Chonk is now a top open model for coding, ranking alongside Codex GPT-6.1 Terra
The 4 biggest Amazon smart home announcements from today
Apple’s new touchscreen MacBook Pros may be late, but they have one big advantage
Your public Discord messages may soon appear in Google search results – how to opt out
Amazon’s new Alexa Photo Frame could have what I’ve been missing – here’s why
These Claude Enterprise features let you track AI ROI – what’s new
Amazon’s Echo Show 16 makes Apple’s 7-inch HomeView look puny – is it worth $100+ extra?
The Hacker News
Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw
CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV
Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion Frozen
ThreatsDay: Critical Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 More Stories
Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions
Fake ChatGPT and Claude Apps Abuse Signed Executables to Deploy Crypto Miners
Google's Gemini 4 Carbon Leads Benchmarks for Finding, Exploiting, and Patching Vulnerabilities
Webinar: How to Build AI Threat Readiness Into Your Security Operations
Telegram Android Flaw Lets Attackers Run Code When Users Answer Voice Calls
The Rise of the Threat Operator: How AI Will Redefine Security Operations and Careers
BleepingComputer
OpenAI doubles ChatGPT Pro usage limits after backlash over planned 50% cut
Binance probes potential $5.8 billion crypto-theft hack
Hugging Face malware campaign returns to hijack GPUs for crypto mining
Japan Airlines suffers third-party data breach exposing passenger info
Polymarket halts trading after crypto-draining script breach, $2.5M traced
Fake crypto app on Apple App Store linked to $23K wallet theft
Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware
Chrome extensions with 13.4 million installs caught hijacking searches
Microsoft fixes Remote Desktop failures caused by recent Windows updates
3 Ways AI Agents Already Operate in Your Browser
gbhackers
Claude AI Exposes Internal Sandbox Details That Help Researcher Bypass Local Connection Restrictions
Malicious Claude Code VS Code Extension Installs Persistent SSH Backdoor to Give Attackers Remote Access
12 Incident Response Retainer Services: The 2026 Buyer’s Verdict Guide
12 Digital Forensics & Incident Response (DFIR) Companies: The 2026 Buyer’s Verdict Guide
12 Managed SIEM Services: The 2026 Buyer’s Verdict Guide
11 SOC-as-a-Service Providers: The 2026 Buyer’s Verdict Guide
12 Managed Security Service Providers (MSSP): The 2026 Buyer’s Verdict Guide
WordPress 7.1.4 Fixes 22 Security Vulnerabilities, Including RCE Flaw Under Active Attack
Critical Linux Kernel Vulnerability Lets Remote Attackers Crash Ubuntu Systems
Hackers Launch Over 18 Million DDoS Attacks in Three Months, Cloudflare Reports
Cybersecurity Dive
JPMorgan Chase, Goldman Sachs underscore security in AI plans
Hackers could poison AI models by tampering with core infrastructure
Insurance industry fears potential impacts from PHP2Shell
Hackers seize on vulnerable IoT devices to spy, pivot and route traffic
CISA, security researchers confirm successful exploitation of PHP flaws
US launches program to deliver free cybersecurity help to rural hospitals
CISA promises proactive defense in new strategic plan
PwC confirms learning records breached in attack on vendor site
Security anchors a modern hybrid sovereign architecture
PHP exploitation moves at slower-than-expected pace, but millions remain at risk
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
In the year AI re-wrote the infosec rulebook, it’s comforting to know crypto exchanges still have bad security
Researchers find bugs in 5 AI developer tools, with OpenAI and Microsoft flaws still unpatched
Suspected Chinese attackers built a custom PHP2Shell exploit and rooted 25 servers
Belgium's tax agency confirms cyberattack, pulls services offline
Shortlist of age checks for the UK's under-16 social media ban is out, 'some' adults will need verifying
Attackers turn GitHub issues into supply chain campaign against 61 public repos in less than an hour
Admin dropped the F-bomb in a password to show hackers who was really 1337
Oracle celebrates end of Cybersecurity Awareness Month with quadruple trouble
Serial ransomware crook gets 70 months behind bars for Nefilim, Hive roles
Cisco open sources tool for detecting AI agents on hacking sprees
VentureBeat
Agents are rewriting the book on security. Can your data layer keep up?
AI agent access is moving faster than identity controls can govern
AI agents are about to put least privilege to the test
DeepSeek-V4.1-Flash-1017 arrives with improved benchmarks just as the U.S. government bans it from agencies — what enterprises should do
AI cloud security needs to prove control before agents reach production
Anyone can build apps with AI. But who owns them?
17 of 40 teams that say they enforce AI agent permissions still share the credentials behind them
TechCrunch
Binance pauses withdrawals as hackers suspected of stealing billions in crypto
Bluesky blocks links to leaked DHS employee data as government seeks takedowns
Upwind raises $400M after walking away from Datadog acquisition offer
Hacker stole personnel data about thousands of Homeland Security employees, including CBP and ICE agents
Wiz’s CTO on PHP2Shell and the coming ‘vulnpocalypse’
The ‘Vulnpocalypse’ is coming for the internet’s aging code, says Wiz’s CTO 
South Korea’s financial industry hit by fresh wave of cyberattacks
Bank of America kindly asks that you don’t share your banking password with your AI assistant
US government says hackers are now exploiting critical PHP web bugs
Japan internet giant GMO says hackers posted stolen customer data
Network World Security
New Cisco firewall zero-day being actively exploited
Gartner warns $3.5T in AI infrastructure spending could be at risk by 2030
Oracle adds Google TPUs to OCI to expand enterprise AI compute options
Cisco’s partner shift: What customers should expect from their Cisco partner in the AI era
IBM connects quantum chips with ‘quantum channels’ at 99% accuracy
2026 network outage report and internet health check
IBM aims to bring AI agent sprawl under enterprise control
HPE extends AI-driven networking to SD-WAN and SASE
FluidCloud replaces VDDK with its own disk copy engine for VMware exits
Cisco taps AI, partners to modernize IT operations and fortify network security
Help Net Security
Binance hit by $6.3 billion theft in what could be the biggest crypto heist on record
Fake IT help desk callers got by on little more than names and email addresses
What exactly is ISOC? And what does it mean for you?
Scammers rebuild fake shopping sites within hours of a takedown
Smart TVs can harbor unpatched security flaws and track what you watch
Chinese hackers used VMware ESX zero-day; PHP2Shell and Fragnesia chained to root firewalls
Yoba malware hides in fake desktop versions of ChatGPT and Claude
Researchers broke the browsers built into VS Code, Cursor, Copilot, Codex and Claude Desktop
Volt Typhoon targeted enterprise control planes via ever-changing “Silent Train” relay network
Exploitation attempts against recently patched Oracle EBS flaw have begun (CVE-2026-101767)
SC Magazine
Indonesia seeks storage upgrades to bolster national identity infrastructure
County election websites show persistent security vulnerabilities
Valve steam platform vulnerabilities enable zero-click remote code execution
Federal Election Commission systems go offline during cyberattack
Security researchers warn of camera management software exploitation
CISA adds Linux kernel and Broadcom VMware ESX flaws to known exploited vulnerabilities catalog
Enterprise networking market growth faces component supply challenges
Security researcher gains network access via legacy server vulnerability
Unauthorized AI relay service poses security risks to enterprise users
SecurityScorecard releases benchmark for testing AI in vendor risk management
© 2026 RiskDiscovery | Sponsored by: Deception Logic