[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
Trust Is Not What It Seems — And Fraudsters Are Counting on It
Exposed to PHP2Shell? Cyber Experts Weigh in With Advice
AI Tools Are Generating Massive Attacks for Little Cost
Why Caribbean Threats Cascade Into Global Cyber-Risk
Cyber Insurance's New Reality: Underwriting Isn't Enough
AI Agents as Insider Threats: Inside Microsoft's Bet on a Unified Security Stack
State Bank of India Suffers a Customer PII Data Leak
Microsoft Links Storm-0940 to ConnectWise Supply Chain Attack
What We Missed: Feds Lasso Texas Laptop Farms
Les supermarchés de l'UE paient d'un firmware de réfrigérateur non mis à jour
Ars Technica
Disgraced eMudhra drops out of TLS business after using cert private key of 4
333 Tor exit nodes hijacked to intercept SSH traffic and retrieve plaintext email
Enterprises keep buying software upgrades that IT thinks will make things worse
PHP warns it plans to release 2 emergency patches imminently
The Internet goes on high alert after discovery of 8 compromised TLS certs
Meta Muse exposes users' personal and business secrets when they share conversations
PSA: Patch your Plex media server before someone hacks it
ReactOS reaches major milestone with NTFS install support
OpenAI models hacked a crypto wallet and breached more websites
Targeted ads delivered 0-click exploits to install mercenary malware
CyberScoop
Senators say targeted ads are a security risk. Ad groups say the critics are off base.
Exclusive: Bipartisan bill would develop federal guidance for distillation attacks, convene industry on defensive cyber
eMudhra kills its certificate business after researchers cracked its private keys in under a second
Encryption isn’t enough to protect data wherever it goes 
Microsoft pins ConnectWise supply-chain attack to China-state aligned threat group
PHP releases emergency fixes for 2 critical vulnerabilities
Philippines-based American pleads guilty to running expansive fraud scheme targeting US servicemembers
Nigerian sentenced to 8 years for long-running tax business hacking and fraud scheme
Russian GRU hackers hit NATO shipbuilder, aircraft engine maker, law enforcement agency in espionage campaign
ConnectWise customers hit by supply-chain attack linked to compromised API secret
InfoSecurity Magazine
Blue Initiative Offers Maritime Sector Dedicated Vulnerability Database
PHP Publishes Mitigation Advice for New RCE Flaw
Gaming Giant Capcom Confirms Data Breach Exposed Users’ Personal Information
Widespread Token-Spraying Attacks Target Microsoft 365 Accounts For Email Compromise
Attacks on Tech Firms Behind Most Third-Party Data Breach Victims
EU Regulators to Investigate Booking.com Over Scam Risks
Iranian Hacking Group Found Hosting C2 Infrastructure in the US
Microsoft: Chinese State Actor Used AI to Compromise ConnectWise Tenants
PHP2Shell Exploitation Attempt Detected by Amazon Four Days Before Vulnerability Disclosure
Cloud Security Maturity Lags Despite Widespread Adoption, SANS Warns
SecurityWeek
Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages
Mythos 5 Ignored Real-World Harm in July Attack
Former Unit 8200 Officers Raise $34 Million for Agentic SecOps Startup Mave
In Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents, Self-Rebuilding macOS Ransomware
Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge
China APT Uses AI Pentest Tool Artex in ConnectWise Attacks
Attackers Exploit Third Arista VCO Zero-Day in Four Months
11 Million Impacted by Capcom Data Breach
Quest Diagnostics Data Breach Exposed ‘Certain Patient Records’
LiteLLM Compromised in Fresh Supply Chain Attack
ZDNet
Android lets you ‘bubble’ apps for easy access now – how it works
PHP2Shell: Haven’t patched yet? Take these steps now to mitigate
Amazon’s Kindle Unlimited is now Kindle+, and the 2 big changes include AI audiobooks
The latest PowerToys gives your mouse 2 new tricks for free – how to use them
GridCraft is the open-source Excel clone for Linux I’ve been waiting for
Not impressed with Google Maps? Make Waze your default on Pixel – here’s how
Hold onto your old HomePod – an upgrade is on the way
OpenAI’s most powerful AI models turned off safety monitoring – then lied about it
Chrome warns you about suspicious websites now – how to turn on Google’s new scam protection
Amazon unveiled 5 new Blink cameras, including a 4K model that caught my eye
The Hacker News
uCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat Accounts
Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations
Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions Logs
Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware
Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers
PHP2Shell Exploitation Attempts Continue Amid Suspected N. Korea Global Scanning Activity
OpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbox Communication
Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software
Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline
Google Says Gmail and Photos Data Shared With AI Search Could Be Used for Targeted Ads
BleepingComputer
Kali Linux 2026.3 released with 6 new tools, desktop updates
PHP2Shell security flaws now sucessfully exploited in the wild
AI coding agents hijacked using AGENTS.md file in Downloads folder
BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot
Abandoned Popcorn Time app exposed millions of devices to RCE attacks
Microsoft Teams to get AI-powered, context-aware phishing detection
Microsoft: Windows Server 2016 reaches end of support in January
Quest Diagnostics confirms data breach exposed patient records
PHP shares mitigation for new RCE vulnerability with no patch
You gave your AI agent access, but who is giving it orders?
gbhackers
Kali Linux 2026.3 Released With 6 New Penetration Testing Tools and Major Updates
OpenBSD 8.0 Released With Enhanced Firewall Security and Critical Vulnerability Fixes
12 Ransomware Recovery Solutions: The 2026 Buyer’s Verdict Guide
Hackers Can Use DarkCore RAT to Hijack Gmail and WhatsApp Sessions Without Passwords
11 Backup & Recovery Solutions: The 2026 Buyer’s Verdict Guide
12 Data Masking Tools: The 2026 Buyer’s Verdict Guide
12 Data Privacy Management Platforms: The 2026 Buyer’s Verdict Guide
10 Database Security & Activity Monitoring Tools: The 2026 Buyer’s Verdict Guide
New TRUST#GRAFT Attack Tricks WordPress Admin Browsers Into Installing Malicious Plugins
Hackers Can Hijack AI Agents Just by Planting Malicious Files in the Downloads Folder
Cybersecurity Dive
Security anchors a modern hybrid sovereign architecture
PHP exploitation moves at slower-than-expected pace, but millions remain at risk
Large businesses’ cybersecurity insurance claims are now less frequent but more expensive
China-nexus actor linked to attack on ConnectWise Cloud Backup
Agentic AI helps hackers level up, even without detailed instructions
Weak encryption certificates could have let hackers easily spoof websites
FBI, CISA warn that SafePay ransomware poses threat to critical infrastructure
Critical PHP vulnerabilities expose most websites to potential compromise
Russia-linked hackers broke into NATO shipbuilder in latest espionage campaign
Ransomware groups expand targeting of Palo Alto Networks vulnerability
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
Britain bets big on AI to defend against the threats AI is helping create
Work to protect DNS from quantum decryption attacks is speeding up
Autonomous attack agent in 'Skynet mode' hijacks other models to carry out its evil deeds
There's a third PHP2Shell bug, but it won't get an emergency fix
Red-team report found OpenAI utterly failed to monitor its agents during Hugging Face attack
Torvalds: AI is fine for competent devs, but spare us the 'drive-by' patches
UK threatens subsea cable saboteurs with 14 years behind bars
PHP2Shell exploit bypasses protections designed to stop remote code execution
Max-severity GitLab bug allows remote code execution over 12 years of releases
Disgraced Indian cert issuer leaves the cert issuing business
VentureBeat
AI agents are about to put least privilege to the test
DeepSeek-V4.1-Flash-1017 arrives with improved benchmarks just as the U.S. government bans it from agencies — what enterprises should do
AI cloud security needs to prove control before agents reach production
Anyone can build apps with AI. But who owns them?
17 of 40 teams that say they enforce AI agent permissions still share the credentials behind them
Browser security’s buying spree rests on one engine, without a clear Plan B
Anthropic’s Cyber Mission starts with 6,157 findings reported to maintainers and 516 patched
TechCrunch
Will AI expose the rickety infrastructure of the internet?
PHP-ocalypse: How two critical web bugs almost broke the internet
Lab testing giant Quest Diagnostics confirms patients’ personal and health data was compromised during breach
Chinese hackers spied on thousands of companies after breaching IT giant ConnectWise
Developer platform Railway urges ‘all users’ to revoke secret keys after cyberattack
The internet is having a very bad cybersecurity day
PHP Armageddon: OpenAI, Google’s Wiz find ancient holes, panicking the internet
Blackwall quadruples valuation to $2.2B as websites wrangle an increasingly crowded internet
Governments are hacking people with ‘zero-click’ spyware by showing them online ads
Flock CEO defends surveillance technology amid national backlash: ‘We shouldn’t pause progress’
Network World Security
Google will pay people to use less electricity so its data centers can use more
Hyperscalers allow more scrutiny of controversial data center plans
Midmarket AI gap: Small IT teams are being asked to do enterprise-sized jobs
Nvidia GTC Berlin: Faster AI factories, lower power use, more secure agents
Gartner forecasts 15% global IT spending growth, recaps top tech predictions
Extreme wants to use idle network compute capacity for local AI
IT/OT convergence exposes skills gap. Cisco responds with new OT security certification
Microsoft exits UK AI data center project over electricity delays
AI networks drive SONiC boom
Microsoft expands sovereign cloud offerings as data control concerns grow
Help Net Security
AI coding agents fall for malicious instructions planted in the Downloads folder
Fortinet patches critical FortiOS flaws found with AI help
Anthropic details what stops Claude Duet from going rogue
Witness: Open-source framework for verifying how your software was built
AI slop is piling up highest on the biggest open-source projects
Product showcase: Stellar Cyber’s ISOC platform provides full-cycle architecture
Forgotten AI agents may still access sensitive company data
Synthetic identities leave US lenders with $2.4 billion in fraud exposure
r/opensource bans AI projects, and solo devs go down with them
Google open-sources the Elephant-Goldfish Model plugin its engineers use to catch AI coding mistakes
SC Magazine
Building a parallel Internet, security buzzwords that should be retired, and the news - Barrett Lyon - ESW #482
Security firm disables vulnerable Popcorn Time updater
Security researcher identifies potential privilege escalation in Tailscale SSH
Federal judge rules OPM access for DOGE personnel was unlawful
The importance of usage intelligence for artificial intelligence companies
The Pentagon establishes covert office to disrupt foreign technology
Virginia governor orders new cybersecurity plan to address artificial intelligence risks
Diplomatic entities in Central Asia targeted by new BlackX UEFI bootkit
Enterprises face evolving insurance landscape for artificial intelligence risks
Cyber insurance providers adapt to evolving threat landscape
© 2026 RiskDiscovery | Sponsored by: Deception Logic