[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
[Virtual Event] Cybersecurity Outlook 2027
Microsoft Disrupts EvilTokens Device Code Phishing Service
Shai-Hulud Attack Nips Cyber-Firm CrowdSec's GitHub Data
Amid Ongoing Rogue Incidents, Debate Over AI Safety Gets Real
More Than a Third of Industrial Orgs See Cybersecurity Risk as a Top Obstacle to Growth, Study Finds
How AI Agents Can Trigger Runaway Costs for Enterprises
ShinyHunters Hacked Cl0p. Now What About Cl0p's Victims?
Cybercriminals Are Hiding New Malware in Torrents for Popular Films
Rogue Behavior: OpenAI Reveals More Model Misalignment Incidents
Vectra AI Launches Ascent to Help Address New Era of AI-Driven Attacks
Ars Technica
IT mistake erases 11 years of viewing history for hospitals’ maternity records
Muse, Meta's extraordinarily privileged AI assistant, has a serious 0-day
An undercover Google analyst infiltrated a notorious supply-chain hacking gang
LLMs respond differently to harmful prompts when AI watermarking is used
Nonprofit that tracks meteors taken down by "critical blow" from a cyberattack
AI bots "Timmy," "Ren," and "Jackie" are flooding social media with slop
ClickFix attacks infecting PCs and Macs are going viral
Four groups caught using the same Chrome and Windows exploit kit
Why this month's Microsoft patch release is a doozy
OpenAI agents discussed ways to escape their sandbox on public wiki
CyberScoop
Volexity spots another China-aligned threat group exploiting Chrome and Microsoft defects
Citing China, President Trump doubles down on hands-off approach to AI regulation
Microsoft and partners disrupt EvilTokens, a comprehensive cybercrime service for financial fraud
Another worry for water systems: infostealer exposure
Dems seek top-to-bottom assessment of CISA workforce
Early Scattered Spider member pleads guilty to cybercrime spree
Researchers use AI to find widespread software decoder flaw 
International security agencies warn about North Korean hackers exploiting job seekers to steal crypto, data
Cisco alerts customers to second actively exploited zero-day in as many days
The AI hacking apocalypse is not inevitable
InfoSecurity Magazine
North Korean Attackers Hit 30,000 Devices and Steal $10.7m
AI Incident Response Readiness Lags Behind AI Adoption, ISACA Finds
Network Segmentation Failures Are Expanding the Corporate Attack Surface
AI Drives Surge in Bot and API Threats
CISOs Must Update Incident Response Playbooks for Multimodal Deepfakes, Gartner Warns
Google Hit with €403m GDPR Fine Over Location Data Practices
New Exvicy ClickFix Framework Built on Rival ErrTraffic's Code
Attackers Abuse npm Trusted Publishing in GHAPPIER Campaign
ShinyHunters Claim Hack of Rival Ransomware Gang Clop
Experts Alarmed Over Gyazo’s Breach of 490 Million Metadata Records
SecurityWeek
BigCommerce Data Stolen via Ribon Apps Hack
Cyera Raises $400 Million at $12+ Billion Valuation
Nightmare Eclipse Drops New Microsoft Defender Exploit After Revealing Identity
Only 13% of OT Network Segments Are Fully Isolated: Analysis
Recent ZyXEL Switch Vulnerability Exploited by Chinese Hackers
Malicious B-tree NPM Package Accumulates Millions of Downloads
WordPress Patches ‘Click2Shell’ Vulnerability
Japan Dismantles First North Korean Laptop Farm as US and Allies Detail Wider Scheme
US Proposes AI Incident Alert System in Talks With China, Bessent Says
Google Hit With $463 Million Fine for EU Location Data Rule Breach
ZDNet
Claude Opus 5.5 delivers Fable 5.1 performance – and costs 40% less
Claim up to $95 today from Apple’s Siri AI settlement – here’s how
The AI models that cheat the most, according to new CAIS benchmark
Businesses finally seeing AI ROI, but 62% can’t handle the storage demands
Fake calendar invites can infect your system, and they’re surging – how to protect yourself
Roku rolls out over 30 subscription bundles for up to 30% off, plus a new Labs feature
Claude Code’s revised projects adds AI orchestration, but local developers must wait
Bose returns with new open earbuds (and a refreshed favorite)
I recommend you don’t run these appliances on your power station – even if you can
Anthropic merges Claude chat and Cowork into one
The Hacker News
Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks
WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers
Malicious npm Package Poses as Twilio Bug-Bounty Probe, Can Exfiltrate Credentials
Microsoft Takes Down EvilTokens Device-Code Phishing Service Tied to 12,000 Inbox Compromises
Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials
Researcher Drops BigDiskBuster Zero-Day PoC That Blocks Microsoft Defender Updates
AI Agents Are Rewriting the Rules of Lateral Movement
New CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setups
DORA Year Two: Can Your SOC Actually See the Attack?
New Linux Kernel Flaw Gives ARM64 KVM Guests Read-Write Access to Host Memory
BleepingComputer
Chinese hackers exploit WordPress, Zyxel flaws to steal govt data
ShinyHunters claims FBI hack, data theft in PeopleSoft zero-day breach
New ClosedQuorum Windows malware uses AI for attack decisions
Reducing shadow IT visibility gaps with Wazuh
Check Point warns of Management Server zero-day exploited in attacks
EvilTokens PhaaS disrupted after compromising 12,000 Microsoft accounts
Webinar tomorrow: Inside real-world Google Workspace breaches
D-Link warns of max severity zero-day bug in DIR-822A routers
New Windows Defender zero-day blocks Microsoft antivirus updates
CISA orders feds to patch Zyxel flaw exploited for data theft
gbhackers
Aembit Launches Support for Okta Cross App Access, Extending Enterprise Identity Controls to AI Agents
Critical Linux KVM Flaw Enables Guest-to-Host Escape on ARM64 Systems
TASK#STOMP PowerShell Backdoor Steals Business Documents and Executes Remote Commands
Hackers Exploit Veeam Agent Vulnerability to Gain SYSTEM-Level Access on Windows
Red Hat OpenShift Flaw Lets Attackers Poison Disconnected Registries With Malicious Releases
Linux BambooToken Malware Uses MQTT C2 for Remote Shell Access and File Exfiltration
Critical MaxKB AI Agent Flaw Lets Prompt Injection Execute System Commands
Hackers Abuse Stolen BigCommerce App Key to Steal Master of Malt Customer Data
Chinese APT Clones Legitimate Websites to Deliver Chrome and Windows Zero-Day Exploits
D-Link DIR-822A Router Vulnerability Scores CVSS 10.0 With Public PoC Available
Cybersecurity Dive
Insurance sector begins to offer clarity on AI-related cyber claims
Retailers tamp down shadow AI but struggle to oversee agentic sprawl
China-nexus actor steals thousands of documents in monthslong exploitation campaign
Google AI models broke out of sandbox, hacked three companies
More CVEs than ever. The same old ones keep getting exploited.
Security’s 30-year habit: layering around the problem
Settra ransomware variant deployed in recent attacks
CISA ends weekly vulnerability roundups as part of shift to prioritization approach
FBI, Coast Guard probe suspected cyberattacks on ships entering US waters
Manufacturers make patching progress, but identity management still major weakness
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
ShinyHunters claims FBI hack: 'This is NOT financially motivated'
NightmareEclipse's latest zero-day leaves Microsoft Defender stuck in the past
Z.ai says sorry for slurping up your code, open sources ZCode
Who signed off on that AI agent? Nobody? Thought so.
UK cops arrest 2 EvilTokens suspects, Microsoft seizes 50 phishing kit websites
Anthropic-linked CVEs pile up, attackers mostly shrug
Meta Muse AI app flaw lets local malware redirect dictation traffic
Treasury chief says AI bosses, not their bots, will carry the can for criminal acts
Clop gets a taste of its own medicine after ShinyHunters hijack leak site
Rustaceans warned of job interviews with a malicious payload
VentureBeat
Meta patched Muse’s zero-day, but security teams still lack visibility into what the agent can access
Companies are putting Jev in charge of AI agent decisions — and prompt injection can influence the verdict
OpenAI hacked by small team of white hat security researchers using Anthropic's Claude Opus 5
Cohere's Model Vault now encrypts AI inference so even Cohere cannot see enterprise customers' data
AI agents breached 395 organizations using credentials your IAM policy still treats as human
Nobody can compare the security-AI numbers CrowdStrike, Google, Palo Alto and Microsoft published, including the CISOs who are stuck with the results
AI is changing the economics of software supply chain attacks
TechCrunch
Hacking group ShinyHunters claims it breached the FBI, stole agents’ and applicants’ data
Stolen passwords are exposing America’s water providers to hackers
Google’s Gemini is the latest AI model to hack other companies
FBI, Coast Guard boarded hacked oil tankers heading toward US coast
Researchers used Anthropic’s Claude to hack into OpenAI
Hackers publish thousands of drivers’ data after breaching Florida motor vehicle database
Google says some Pixel phone owners were hacked in zero-day attacks
US military says it has launched weapons into space
Leaks, data breaches, and ransom notes: The worst hacks of 2026 so far
New Italian unicorn Exein rides the physical AI wave
Network World Security
9 career-boosting Wi-Fi certifications
Lenovo expands virtualization portfolio for AI
2026 network outage report and internet health check
California joins US states clamping down on data center gold rush
Huawei aims to deliver faster AI chips, faster
Practical quantum computers are over a decade away, says NEC
Local AI is getting small enough to make every app multilingual
The amount of e-waste caused by AI is underestimated: we can’t only include the servers
Cisco patches max-severity ISE flaw, the second critical zero-day this week
Riverbed bolsters network performance monitoring with agentic AI
Help Net Security
Researchers uncover malware that uses AI to choose its next move
Brief hijack makes Elsevier domains redirect to LAPSUS$ “Chapter II” page
The latest deepfake numbers give CISOs plenty to worry about
The next intellectual property thief may sound like your CEO
Attacker compromised nearly 1000 Zyxel switches since August (CVE-2026-7273)
Somewhere in your traffic logs, a bot is doing more than looking
Scammers use genuine Google sign-ins to sell costly, unverified AI subscriptions
A cheap fake base station can still track 5G subscribers
Passwork NIS2 efficiency guide: Save your team hours before the 2026 audit
European AI spending is on track to reach nearly $470 billion by 2030
SC Magazine
WWIII, Debt, JFK, CISA, SUSE, OpenAI, Google, DORA, Aaran Leyland, and More - SWN #618
Just 13% of network segments are OT-only, says Forescout Research
The US can take down the hackers – but it’s up to us to make OT environments safe
Microsoft and Google dismantle major cybercrime marketplace RedVDS
How Cloud Privilege Escalation Paths Form
LDAP, Active Directory, and Entra ID: Directory Services for Security Teams
North Korean hackers target IT firm with macOS backdoors
Biometric Authentication: Methods, Risks, and Behavioral Signals
Secrets, Certificates, and Tokens: Choosing the Right Credential for Machine Identity
Authentication Fundamentals: Factors, Methods, and Trust Models
© 2026 RiskDiscovery | Sponsored by: Deception Logic