[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
[Virtual Event] Shields Up: Key Technologies Reshaping Cybersecurity Defenses
Microsoft Under Pressure to Bolster Defenses for BYOVD Attacks
Nation-State Hackers Put Defense Industrial Base Under Siege
AI Agents 'Swarm,' Security Complexity Follows Suit
Ivanti EPMM Zero-Day Bugs Spark Exploit Frenzy — Again
Booz Allen Announces General Availability of Vellox Reverser to Automate Malware Defense
SpecterOps Launches BloodHound Scentry to Accelerate the Practice of Identity Attack Path Management
Gone With the Shame: One in Two Americans Are Reluctant to Talk About Romance Scam Incidents
Those 'Summarize With AI' Buttons May Be Lying to You
Senegalese Data Breaches Expose Lack of Security Maturity
Ars Technica
OpenAI sidesteps Nvidia with unusually fast coding model on plate-sized chips
Attackers prompted Gemini over 100,000 times while trying to clone it, Google says
Once-hobbled Lumma Stealer is back with lures that are hard to resist
OpenAI researcher quits over ChatGPT ads, warns of "Facebook" path
Sixteen Claude AI agents working together created a new C compiler
Malicious packages for dYdX cryptocurrency exchange empties user wallets
AI companies want you to stop chatting with bots and start managing them
OpenAI is hoppin' mad about Anthropic's new Super Bowl TV ads
Increase of AI bots on the Internet sparks arms race
Microsoft releases urgent Office patch. Russian-state hackers pounce.
CyberScoop
Proofpoint acquires Acuvity to tackle the security risks of agentic AI
Apple discloses first actively exploited zero-day of 2026
Google finds state-sponsored hackers use AI at ‘all stages’ of attack cycle 
CISA to host industry feedback sessions on cyber incident reporting regulation
0APT ransomware group rises swiftly with bluster, along with genuine threat of attack
Acting CISA chief says DHS funding lapse would limit, halt some agency work
Your AI doctor doesn’t have to follow the same privacy rules as your real one
GOP Congress moves to shape election law in Trump’s image
Microsoft Patch Tuesday matches last year’s zero-day high with six actively exploited vulnerabilities
After major Poland energy grid cyberattack, CISA issues warning to U.S. audience
InfoSecurity Magazine
Munich Security Conference: Cyber Threats Lead G7 Risk Index, Disinformation Ranks Third
Fake AI Assistants in Google Chrome Web Store Steal Passwords and Spy on Emails
World Leaks Ransomware Group Adds Stealthy, Custom Malware ‘RustyRocket’ to Attacks
Nation-State Hackers Embrace Gemini AI for Malicious Campaigns, Google Finds
AI Skills Represent Dangerous New Attack Surface, Says TrendAI
Time to Exploit Plummets as N-Day Flaws Dominate
North Korean Hackers Use Deepfake Video Calls to Target Crypto Firms
US Court Hands Crypto Scammer 20 Years in $73m Case
FIRST Forecasts Record-Breaking 50,000+ CVEs in 2026
Microsoft Fixes Six Zero Day Vulnerability in February Patch Tuesday
SecurityWeek
In Other News: Google Looks at AI Abuse, Trump Pauses China Bans, Disney’s $2.7M Fine
Check Point Announces Trio of Acquisitions Amid Solid 2025 Earnings Beat
Dutch Carrier Odido Discloses Data Breach Impacting 6 Million
BeyondTrust Vulnerability Targeted by Hackers Within 24 Hours of PoC Release
CISA Warns of Exploited SolarWinds, Notepad++, Microsoft Vulnerabilities
Chrome 145 Patches 11 Vulnerabilities
China Revives Tianfu Cup Hacking Contest Under Increased Secrecy
How to Eliminate the Technical Debt of Insecure AI-Assisted Software Development
ApolloMD Data Breach Impacts 626,000 Individuals
Microsoft to Enable ‘Windows Baseline Security’ With New Runtime Integrity Safeguards
ZDNet
Got a TCL TV? Change these 16 settings ASAP - here's why
Why my favorite Linux distro is slowing down - and I'm thrilled about it
How to download YouTube videos for free - 2 easy and reliable methods I always use
Last year's MacBook Pro just dropped to a new low price at Best Buy for Presidents' Day
Turn your doodles into video clips in minutes with this new AI tool - here's how
I replaced my Meta Ray-Bans with the Oakleys for a week - and they're better in every way
The best early Presidents' Day TV sales live now
Looking for an OLED laptop with great battery life? Here's one I recommend
Want off-grid Starlink Mini? This power bank kept mine online for hours
The best early Presidents' Day sales we've found so far: Save on Apple, Sony, and more
The Hacker News
Google Ties Suspected Russian Actor to CANFAIL Malware Attacks on Ukrainian Orgs
Google Links China, Iran, Russia, North Korea to Coordinated Defense Sector Cyber Operations
UAT-9921 Deploys VoidLink Malware to Target Technology and Financial Sectors
Malicious Chrome Extensions Caught Stealing Business Data, Emails, and Browsing History
npm’s Update to Harden Their Supply Chain, and Points to Consider
Researchers Observe In-the-Wild Exploitation of BeyondTrust CVSS 9.9 Vulnerability
Google Reports State-Backed Hackers Using Gemini AI for Recon and Attack Support
Lazarus Campaign Plants Malicious Packages in npm and PyPI Ecosystems
ThreatsDay Bulletin: AI Prompt RCE, Claude 0-Click, RenEngine Loader, Auto 0-Days & 25+ Stories
The CTEM Divide: Why 84% of Security Programs Are Falling Behind
BleepingComputer
Claude LLM artifacts abused to push Mac infostealers in ClickFix attack
Louis Vuitton, Dior, and Tiffany fined $25 million over data breaches
Turning IBM QRadar Alerts into Action with Criminal IP
CISA flags critical Microsoft SCCM flaw as exploited in attacks
Microsoft fixes bug that blocked Google Chrome from launching
Russia tries to block WhatsApp, Telegram in communication blockade
Bitwarden introduces ‘Cupid Vault’ for secure password sharing
Critical BeyondTrust RCE flaw now exploited in attacks, patch now
Microsoft: New Windows LNK spoofing issues aren't vulnerabilities
Romania's oil pipeline operator Conpet confirms data stolen in attack
gbhackers
Phishing Campaigns Target Users with Fake Meeting Invites and Update Alerts via Zoom, Teams, and Google Meet
CVE-2025-64712 in Unstructured.io Puts Amazon, Google, and Tech Giants at Risk of Remote Code Execution
Chrome Extensions Infect 500K Users to Hijack VKontakte Accounts
Malicious Chrome AI Extensions Target 260,000 Users with Injected Iframes
CISA Alerts Users to Notepad++ Flaw Allowing Code Execution
New XWorm RAT Campaign Leverages Phishing and CVE-2018-0802 Excel Exploit to Bypass Detection
OpenClaw 2026.2.12 Released to Patch Over 40 Security Vulnerabilities
OysterLoader Evasion Tactics Exposed: Advanced Obfuscation and Rhysida Ransomware Ties Uncovered
CISA Issues Urgent Warning on Microsoft Configuration Manager SQL Injection Vulnerability Under Active Exploitation
AI-Driven Phishing and QR Code Quishing Surge in 2025 Spam and Phishing Report
Cybersecurity Dive
Critical flaw in BeyondTrust Remote Support sees early signs of exploitation
Ransomware attacks increase against IT and food sectors
CISA will shutter some missions to prioritize others
CISA seeks infrastructure sector consultation on incident reporting rule
SmarterMail facing widespread attacks targeting critical flaws
The Future of DAST in an AI-First World: Why Runtime Security Testing Remains Critical
Majority of Ivanti EPMM threat activity linked to hidden IP
Extortion attacks on the rise as hackers prioritize supply-chain weaknesses
Microsoft prepares to refresh Secure Boot’s digital certificate
Ivanti EPMM exploitation widespread as governments, others targeted
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
Attackers finally get around to exploiting critical Microsoft bug from 2024
Top Dutch telco Odido admits 6.2M customers caught in contact system caper
Enforcing piracy policy earned helpdesk worker death threats
30+ Chrome extensions disguised as AI chatbots steal users' API keys, emails, other sensitive data
Who's the bossware? Ransomware slingers like employee monitoring tools, too
Apple patches decade-old iOS zero-day, possibly exploited by commercial spyware
Supply chain attacks now fuel a 'self-reinforcing' cybercrime economy
Feeling brave? Ministry of Defence seeks £300K digital boss to manage £4.6B spend
Google: China's APT31 used Gemini to plan cyberattacks against US orgs
Microsoft warns that poisoned AI buttons and links may betray your trust
VentureBeat
How to test OpenClaw without giving an autonomous agent shell access to your corporate laptop
Anthropic published the prompt injection failure rates that enterprise security teams have been asking every vendor for
How recruitment fraud turned cloud IAM into a $2 billion attack surface
OpenClaw proves agentic AI works. It also proves your security model doesn't. 180,000 developers just made that your problem.
Infostealers added Clawdbot to their target lists before most security teams knew it was running
SOC teams are automating triage — but 40% will fail without governance boundaries
Theorem wants to stop AI-written bugs before they ship — and just raised $6M to do it
TechCrunch
Sex toys maker Tenga says hacker stole customer information
Dutch phone giant Odido says millions of customers affected by data breach
Amazon’s Ring cancels partnership with Flock, a network of AI cameras used by ICE, feds, and police
Hacker linked to Epstein removed from Black Hat cyber conference website
More US investors sue South Korean government over handling of Coupang data breach
Microsoft says hackers are exploiting critical zero-day bugs to target Windows and Office users
DOJ says Trenchant boss sold exploits to Russian broker capable of accessing ‘millions of computers and devices’
Google sent personal and financial information of student journalist to ICE
Singapore says China-backed hackers targeted its four largest phone companies
Vega raises $120M Series B to rethink how enterprises detect cyber threats
Network World Security
Nvidia claims 10x cost savings with open-source inference models
AI agent traffic drives first profitable year for Fastly
Network jobs watch: Hiring, skills and certification trends
IT bonuses reward network, security skills that can’t be automated
Starcloud prepares to launch AWS Outpost into space
Data center capex to hit $1.7 trillion by 2030 due to AI boom
IBM Research: When AI and quantum merge
Cisco highlights memory costs, Silicon One growth in Q2 recap
Intel says Google engineers spotted Xeon vulnerabilities
How Cisco’s platform mindset is meeting the AI era
Help Net Security
Bitcoin trading firm CEO gets 20 years for operating $200 million Ponzi scheme
Hackers probe, exploit newly patched BeyondTrust RCE flaw (CVE-2026-1731)
Proofpoint acquires Acuvity to secure AI and agent-driven workflows
Brutus: Open-source credential testing tool for offensive security
Police arrests distributor of JokerOTP password-stealing bot
OpenAI released GPT-5.3-Codex-Spark, a real-time coding model
Why secure OT protocols still struggle to catch on
Arctic Wolf expands MSP Security with Aurora Managed Endpoint Defense
Ubuntu 24.04.4 LTS arrives with cumulative security and bug fixes
Edge computing’s biggest lie: “We’ll patch it later”
SC Magazine
Critical vulnerability in WPvivid backup plugin allows remote code execution
Vincenzo Iozzo removed from Black Hat and Code Blue review boards amid Epstein document release
Russia intensifies communication crackdown, targets WhatsApp
Cyberintelligence Institute launches CYROS app to warn against cyber threats
Odido reports cyberattack exposing data of 6.2 million customers
Three ways to mitigate third-party risk in this new AI world
Unstructured.io flaw enables path traversal by email attachment
First statewide data classification standards introduced by Nevada
House child online safety bill deemed lacking by state AG coalition
Former Trenchant exec's sale of trade secrets harmed US intelligence
© 2026 RiskDiscovery | Sponsored by: Deception Logic