[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
[Virtual Event] Anatomy of a Data Breach: What to Do if it Happens to You
Infosecurity Europe
Latin American Cybercriminals Hoover Up Government Data
AI-Assisted Exploit Development Outpaces Scanner Detection
Cybersecurity Evolution: How We Went From Perimeter Defense to AI-Native Security
Feeding Frenzy: 'Megalodon' Malware Infects Thousands of GitHub Repos
State Cyber Leaders Beg Congress for More Funding, Support
Shai-Hulud Hackers TeamPCP: Lucky or Skilled?
For Enterprises, Security Remains Agentic AI's Biggest Challenge
Microsoft Issues Out-of-Band SharePoint Patch
Ars Technica
Millions of AI agents imperiled by critical vulnerability in open source package
US's big bet on quantum computing may not be entirely legal
Texas AG sues Meta over claims that WhatsApp doesn't provide end-to-end encryption
A hacker group is poisoning open source code at an unprecedented scale
US government takes $2 billion equity stake in nine quantum computing firms
Google publishes exploit code threatening millions of Chromium users
In stunning display of stupid, secret CISA credentials found in public GitHub repo
Zero-day exploit completely defeats default Windows 11 BitLocker protections
Cisco announces record revenue and 4,000 layoffs in the same day
Linux bitten by second severe vulnerability in as many weeks
CyberScoop
CrowdStrike disrupts Glassworm botnet that preyed on open-source supply chain
Apple open-sources quantum-resistant encryption code
White House charts new course for federal agencies and cybersecurity logging
Anthropic: Mythos finds more than 10,000 software flaws in first month
FBI warns about fast-growing phishing kit targeting Microsoft 365 users
Alleged leader of Kimwolf, a sweeping botnet for cybercriminals, arrested in Canada
Lawmakers from both parties say CISA cuts have gone too far
Trump postpones executive order focused on AI security 
CISA chief frets about open-source vulnerabilities, delayed security improvements
European authorities take down prolific cybercrime VPN service
InfoSecurity Magazine
CrowdStrike, Google Take Down Glassworm Botnet
Infosecurity Europe: Why Burnout in Cybersecurity Demands Risk-Based Response
All Major LLMs Exposed to Multi-Turn Manipulation, Warn Researchers
Thousands of Fake FIFA Domains Target World Cup Fans
68% of UK Firms Plan to Increase Cyber Spending as AI Risks Rise
PureLogs Variant Steals Data via Purchase Order Lures
Chinese Threat Actors Ditch Static Phishing Pages for Live Credential Interception
BTMOB Android RAT Spreads Through No-Code Builder Tooling
India's CERT-In Sets 12-Hour Patch Deadline for Exposed Flaws
Iran-Linked Hackers Target US Aviation with Phishing and SEO Poisoning Campaign
SecurityWeek
Vulnerability in Popular Conference Software Granted Attackers a 100% Talk Acceptance Rate
SecurityWeek to Host AI Risk Summit August 11-12 at the Ritz-Carlton, Half Moon Bay
RevEng.AI Raises $15 Million to Hunt for Flaws and Backdoors in Software Binaries
Romanian Hacker Sentenced to Prison in US for Selling Access to State Network
Lastwall Raises $11.5 Million for Quantum-Resilient Identity Platform
The Credential Crisis: How Stolen Credentials Defeat Modern Security
‘SymJack’ Attack Turns AI Coding Agents Into Supply Chain Attack Delivery Systems
GlassWorm Botnet Disrupted
LA Metro Cyberattack Linked to Iranian State-Sponsored Hackers
FBI: Hackers Sending Operatives in Person to Insert USB Drives and Steal Data
ZDNet
I found an easy way to automatically keep AI out of my search results - and it works in nearly every browser
Sony Bravia 9 II vs. Sony Bravia 9: I compared the True RGB TV to standard Mini LED - this model wins
I listened to Sony's new modular Bravia theater system, and 'Dune' never sounded so real
AI is an arms race, and the US wants $9 billion in Nvidia superchips to keep up
My new favorite Windows app made my PC safer and more reliable - and it's free
Why the future of AI is on-premises - business advice from Dell Tech World 2026
Acer vs. Asus: I've tested dozens of laptops from both brands, and this one's better
Fitbit Air vs. Whoop: I've worn both trackers for health and fitness, and this model wins
Own a Hisense TV? I'd change these 12 settings to noticeably improve the picture quality
Rust will save Linux from AI, says Greg Kroah-Hartman
The Hacker News
Grandoreiro Malware and BTMOB RAT Campaigns Target Windows and Android Users
Malicious npm Package Stole Files From Claude AI User Directory via GitHub
5 Steps to Managing Shadow AI Tools Without Slowing Down Employees
GlassWorm Malware Takedown Disrupts Developer Supply Chain Attack Infrastructure
3 SOC Steps that Shut Down Incident Risks Early
Gitea Vulnerability Exposes Private Container Images without Authentication
AI Chatbot Recommendations Redirect Users to Cryptojacking Malware Sites
MuddyWater Uses DLL Side-Loading in Espionage Campaign Targeting 9 Countries
[THN Webinar] New AI DDoS Attacks Are Smarter. Learn How to Fight Back
Microsoft Patches SharePoint RCE Flaw CVE-2026-45659 Across Server Versions
BleepingComputer
Can you enforce strong Active Directory password rules without frustrating users?
Glassworm botnet disrupted after resilient C2 infrastructure takedown
FBI warns of in-person data theft attacks from extortion gang
CISA gives feds 4 days to patch actively exploited cPanel plugin flaw
Dutch police arrests suspect linked to Ajax football club hack
Windows 11 KB5089573 update released with performance improvements
KnowledgeDeliver flaw exploited as a zero-day to install web shells
Charter confirms data breach after ShinyHunters extortion threat
How Varonis Atlas integrates Claude Compliance API for AI governance
Microsoft Defender can now automatically isolate hacked endpoints
gbhackers
Link11 is fully committed to Europe and is opening a Customer Excellence Hub in Lisbon
BadHost Vulnerability Exposes Sensitive AI Agent Server Endpoints to Attackers
CISA Warns LiteSpeed cPanel Plugin Vulnerability Is Being Exploited in Attacks
BTMOB Malware Allows Cybercriminals to Remotely Hijack Android Phones
Windows Kernel Vulnerability Lets Attackers Modify Kernel Memory Counters
GitHub Enterprise Server 3.20.3 Addresses Critical Security Flaws
New Zero-Click WhatsApp Account Takeover Attack Targets iOS 16 Users
Hackers Exploit Shared CDN Edge IPs to Evade Protective DNS Filtering
Anthropic Launches Free Claude Code Terminal Plugin to Detect Security Vulnerabilities
Microsoft SharePoint Server Flaw Enables Remote Code Execution Attacks
Cybersecurity Dive
Coordinated operation takes down Glassworm botnet
Leading AI models are more vulnerable to malicious prompts than vendors claim
Iranian government, not hacktivist group, breached LA Metro system, security firm says
FBI warns about PhaaS platform used to access Microsoft 365 environments
Iran-linked hackers target key US, allied sectors with sophisticated spear-phishing messages
New York regulator calls for additional cyber mitigation amid heightened threat environment
CISA asks cybersecurity community to alert it to vulnerability exploitation
Grafana Labs links GitHub environment breach to TanStack npm supply chain attack
7-Eleven hit by data breach
Microsoft disrupts cybercrime operation that hid behind legitimate software
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
Bosses blinded by confidence about shadow AI use by workers
FBI: Get to know your IT guy – extortion crews are visiting law firms pretending to be tech support
India's cyber agency sets clock at 12 hours to tackle exploited bugs as AI turns up the heat
How to guarantee a speaker gig: Hack the system. Literally
MyPillow must decide whether to be firm or soft as ransomware crims demand pay
Experts pour cold borscht on Farage's Russian hack claim
Anthropic to release Mythos-class models to the public
AI eyes scanning for bugs create a worrisome Linux security trend
A Russian speaker and jailbroken Gemini went on a hacking spree and emptied at least one MAGA victim's crypto wallets
Megalodon chums the waters in 5.5K+ GitHub repo poisonings
VentureBeat
DataGrail report finds your vendor may be sending data to AI models you never approved
The attack dominating financial services doesn't steal passwords. It resets MFA and steals the token.
Valid certificates, stolen accounts: how attackers broke npm's last trust signal
Americans can’t spot a deepfake, and that’s a business crisis, not just a consumer problem
MFA verifies who logged in. It has no idea what they do next.
GitHub confirms 3,800 internal repos stolen through poisoned VS Code extension as supply chain worm hits Microsoft’s Python SDK
Four AI supply-chain attacks in 50 days exposed the release pipeline red teams aren't covering
TechCrunch
CrowdStrike and Google take down botnet used by hackers to target software developers in supply chain attacks
TechCrunch Disrupt 2026 Early Bird ticket savings end in 3 days
UK Visa Portal spilled thousands of applicants’ passports and selfies online — and hasn’t fixed the leak
Dutch government blocks US company from acquisition, citing ‘risk to public interest’
Ghost hackers: the cybersecurity mystery that nobody has solved
Iranian hackers blamed for breach of Los Angeles transit system that took weeks to recover
7-Eleven data breach affects over 185,000 people’s personal data
These special phone and app features can help protect you from spyware
Kash Patel’s clothing brand website shut down after reports it was hacked
Trump Mobile confirms it exposed customers’ personal data, including phone numbers and home addresses
Network World Security
Zero trust isn’t broken, but most companies are doing it wrong
As AI datacenter memory becomes hot commodity, SK Hynix makes it cooler
Cisco research finds standard AI safety benchmarks miss the real threat
Cisco redefines ‘job-ready’ for network engineers with its certification overhaul
2026 network outage report and internet health check
IBM plans $2B quantum chip foundry; government will pay half
Cisco: AI traffic is radically reshaping WANs
xAI-Anthropic deal signals the rise of AI compute as a standalone business
Critical vulnerability in Cisco Secure Workload rated at maximum severity
Cisco’s new certs are a wake-up call for AI-era network engineers
Help Net Security
Hackers are knocking on office doors pretending to be IT staff
Google AI Threat Defense targets attackers using AI to find flaws faster
Claude now reviews and fixes vulnerabilities as you write code
Cogent targets exploit-to-remediation gap with new AI-powered security capabilities
Ping Identity advances agentic security with AI governance and trusted access
eSentire launches new Atlas AI Operatives for autonomous threat detection and response
Fake ChatGPT and Claude installers on GitHub are dropping Deno RAT malware
Apple makes its quantum-resistant encryption open source
Franklin Access adds three-layer security system to Wi-Fi routers
Jetico expands BestCrypt Data Shelter with zero-trust file access controls
SC Magazine
Apple releases quantum-resistant code and verification tools
How attackers engineer BECs against specific organizations
BTMOB Android RAT poses significant threat with easy-to-use builder
Mass database extortion causes significant damage despite low payment rates
UK Visa Portal exposes passport and selfie photos of applicants
California amendment would exempt Linux from age verification law
Iranian threat group targets US aviation sector with AI-assisted ‘MiniFast’ backdoor
What Security Leaders Should Expect from RSAC - Joseph Blankenship - BSW #449
Novee launches Agentic Fix to automate vulnerability remediation
Formula 1 fans targeted by evolving scams, Bitdefender warns
© 2026 RiskDiscovery | Sponsored by: Deception Logic