[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
Cyber Experts Weigh In: How to Fight Artex & AntiFox
Extortion Group Luna Moth Flits Into Law Firms a Second Time
Inside an AI Attack Against a US Retailer
Chinese AI Project Scouts Spies in Taiwan Chip Industry
Japan Pushes Emergency Funding for Cybersecurity as AI-Assisted Breaches Rise
AIを活用したサイバー攻撃の増加を受け、日本がサイバーセキュリティへの緊急資金拠出を推進
Attackers Say 'Hello' to a Different Scale of Cloud Attack
AI Raises the Stakes for Cyber Resilience
N-able Takes N-central Platform Offline After Discovery of 33 Flaws
November Patch Tuesday: An Overflowing Cornucopia of CVEs
Ars Technica
Grok Build coding agent leaks oodles of confidential info, some belonging to SpaceXSI
Vulnerability that lets hackers SSH into Linux devices is under active exploitation
Chainalysis says hackers stole credentials and tokens for all of its customers
Meet *sshole, the vulnerability that lets hackers SSH into Linux devices
Hackers exploited iOS and Android flaws to infect phones
VMware releases vSphere Express for virtualization on up to 128 cores
Binance says hackers who stole billions in crypto spent months planning heist
UEFI bootkit infected fully patched Windows machines. Is Microsoft to blame?
Anthropic VS code extension on Cursor backdoored for nearly 12 hours
Code-execution flaw in UEFI firmware affects most servers on planet Earth
CyberScoop
Rogue remote-access campaign spread through ScreenConnect add-on, researchers say
Don’t put Section 702 spying law renewal in defense bill, groups urge Hill leaders
International operation dismantles malware networks, exposes 6.4 million stolen credentials
CISA director pick already drawing concern from Hill Dems over Palantir connection
The US wants its quantum lead to turn into factories and supply chains
Microsoft fixes over 1,000 vulnerabilities in November Patch Tuesday
Vanderbilt University reels following ransomware attack claimed by BYOD group
Spyware attacks trend toward hitting just about anyone
Russian Turla group used new toolset to silently pilfer emails from Kazakhstan, Romanian governments
Trump picks Palantir’s LoSapio to head CISA
InfoSecurity Magazine
Weak Passwords Expose SQL Servers to Cryptominer and Gh0st RAT
Hacked Asian Telcos Used to Intercept Taiwanese Calls and Texts
Lego Takes BrickLink Marketplace Offline After Detecting Unusual Activity
Security Teams Must Shift from Patching to Mitigation in the AI Era
NCSC Launches Cyber Adversary Testing to Boost Resilience
Maersk Reveals Data Breach as Extortion Group Demands $5m
N-able Rushes Out N-central Fixes After 33 Zero-Days Go Public
Anthropic's Glasswing Finds Many Vulnerabilities Yet Delivers Few Fixes, Researcher Says
Suspected Chinese Malware Supplier Tied to Three Hacking Campaigns
OT Incidents Hit a Third of Industrial Organizations, SANS Finds
SecurityWeek
Microsoft 365 Outage Disrupts Outlook, Exchange Online and Teams
Apache Patches Critical HTTP Server RCE Found by Anthropic, Google
Chrome, Firefox Updates Patch Over 180 Vulnerabilities
Attacker Targets 60,000 GitHub Repositories in Credential Theft Campaign
Daylight Lands $80 Million for AI-Powered Security Operations
Notion Customer Data Compromised in Fireworks AI Hack
Hackers Deploy Malware in Fresh ScreenConnect Campaign
Hackers Target N-central Zero-Days as N-able Rushes Patches 
Critical Red Hat Quay Vulnerability Could Expose Private Container Images
Maersk Confirms Data Theft Amid $5 Million Extortion Attempt
ZDNet
Several Microsoft services appear to be down – what we know
Roku drops smart home products to focus on streaming – what that means for your devices
Attention, Android power users: This app unlocks 30+ features you won’t find in Settings
You can force Gemini to forget about you now – how to edit its Memory
Google Wallet just turned your Android phone into a digital house key – how it works
Google’s Pixel Tag tracker won’t work as well on older Android phones – check our list
Fitbit users can’t see Google Health metrics after update – how to fix it
If the November Windows update fails to install on your PC, here’s what to do
This tiny box gives your older tech smart home superpowers – and it’s only $69
Google Fi now switches between the best mobile networks automatically – how it works
The Hacker News
Webinar: See How Identity Blind Spots Put Your SOC at Risk and How to Close Them
ThreatsDay: 59 Linux Kernel Bugs, Falcon Spyware, GSocket Backdoors + 17 More Stories
New SignDrop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access
Critical Red Hat Quay Flaw Lets Attackers Read and Overwrite All Private Container Images in a Registry
Citrix Patches 12 NetScaler and Secure Access Client Flaws, Including Authentication Bypass
186 Fake AI Domains Redirect Users to ClickFix Lures, Browser Malware, and Search Hijackers
SCKit Malware Turns ScreenConnect Support Sessions Into Potential MSP Attack Paths
Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Processes in VMs
New N-central Exploits Work Against Patched Servers, Enable Root RCE and Windows SYSTEM Access
Calendar Invites and Live Proxies: Inside a Google Session Hijacking Campaign
BleepingComputer
New worm-like 'SCKit' malware targets MSPs in ScreenConnect attacks
Hackers compromise 4,800 GitHub accounts to steal cloud credentials
Massive Microsoft 365 outage disrupts Outlook, Teams, Copilot worldwide
New N-able "4EverAble2Shell" zero-day exploited hours after PoC released
Apache HTTP Server patches critical HTTP/2 remote code execution flaw
New Windows SignDrop zero-day gives hackers SYSTEM privileges
Police dismantle Gootloader, CastleRAT, StealC malware infrastructure
Your Endpoint Management Platform Could Be Your Biggest Security Risk
Apify rotates API tokens, prompts 2FA resets after breach
Microsoft: Recent Windows updates cause SQL Server performance issues
gbhackers
nDiligence Releases Four-Year Study Identifying a Critical Supply-Chain Vulnerability Across 50 Platform Types
CISA Warns of Actively Exploited Microsoft Outlook Zero-Day Vulnerability
ESET Blocks Over 700,000 Cruciferra Malware Attacks Using Advanced Encryption to Evade Antivirus Detection
Global Scam Networks Use AI, Deepfakes, and Crypto to Steal Billions From Victims, FATF Warns
Critical MongoDB Use-After-Free Vulnerability Allows Remote Code Execution Without Authentication
Google Chrome Fixes 83 Security Flaws, Including 5 Critical Use-After-Free Vulnerabilities
AntiFox AI Agents Linked to AWS Attacks That Exposed Production Secrets and Compromised Web Servers
State-Sponsored Hackers Deploy Up to 8 AI Agents to Target Taiwanese Government Systems
PoC Exploit Released for Critical Cisco Expressway RCE Vulnerability With CVSS 9.8 Score
Palo Alto Networks Patches PAN-OS Vulnerability Allowing Remote Code Execution With Root Privileges
Cybersecurity Dive
AI found widespread IoT vulnerabilities more quickly and cheaply than humans could
N-able issues hotfix after researcher dumps PoCs in disclosure spat
CISA sets operational priorities for partnerships, risk assessments and systemic action
Trump picks Palantir cybersecurity executive to lead CISA
France attributes grocery hacks to Iran-backed threat actors
Truth or consequences: What your AI strategy is standing on
Financially motivated threat cluster uses AI-enabled tools against banking sector
Cybersecurity education in the AI era: What’s new, what’s different
5 critical steps organizations should take to secure AI
Improving incident response with AI agents
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
OpenAI launches security products, tells orgs they’re doomed if they don’t use them
Lego marketplace BrickLink in pieces after 'unusual activity' takes it offline for almost a week
Software Samaritan revamps borked Indian certs to block smart TV ads
Microsoft Exchange Server 2016 and 2019 enter their 'permanently vulnerable' era
Hackers exploiting ScreenConnect plugin flaw to spread malware across hundreds of PCs
European tech buyers add digital sovereignty to cyber shopping list
London hotel put admin login for booking website on whiteboard behind the front desk
Disgraced former CA eMudhra blames buggy script for hopelessly weak certificates
Shipping giant Maersk probes 'IT security incident,' data theft
OpenAI builds a kill switch for its research models
VentureBeat
AI agents are making security’s breakout-time metric obsolete, and no one agrees on what replaces it
Attackers breached the Fireworks AI storage where Notion AI chats sat outside zero data retention
Did Claude Code’s ‘don’t ask again’ option accidentally expose your enterprise's passwords and keys?
AI agents don't have to break security controls to go rogue. Here's how to keep them in check
Agents are rewriting the book on security. Can your data layer keep up?
AI agent access is moving faster than identity controls can govern
AI agents are about to put least privilege to the test
TechCrunch
United Airlines blocks AI agents from booking flights, citing cybersecurity risks
Cyberattack on Fireworks AI allowed hackers to access Notion customers’ chat transcripts
Nvidia’s Jensen Huang resigns, chipmaker names CFO Colette Kress as interim CEO
N-able takes its remote access service offline after researcher publishes dozens of zero-day bugs
Cyberattacks threaten to make open source AI a little less open, Hugging Face exec warns 
Hotel giant Wyndham exposed customer data after app security lapse
France blames Iran for mass-hacks targeting freezers in grocery stores and blood banks
Hundreds of Artex AI hacking tools found publicly exposed to the web
Palo Alto Networks in talks to buy AI agent security startup Clutch for $500M
US government warns of ‘ongoing cyber threat’ amid mass hacks of industrial retail and military freezers
Network World Security
2026 network outage report and internet health check
Red Hat joins race to be ‘air traffic controller’ for AI agents
AMD takes on Intel and Nvidia with new 256-core EPYC server CPUs
Cisco boosts its AI Defense platform with Anthropic’s Claude Mythos
Commvault rolls out an automated recovery mechanism, promising faster restoration of business
Cisco Live Melbourne: AI agents will break today’s enterprise network, and Cisco wants to rebuild it
Oracle cancels $7 billion Tencent AI chip deal
Data center champions lose badly as ballot initiatives target AI infrastructure
Google targets AI’s next infrastructure bottlenecks with two new TPUs
A mole in the White House? Residential proxies are everywhere
Help Net Security
Fake Zillow pages use ClickFix NetSupport RAT to target apartment hunters
PostgreSQL security update fixes 52 vulnerabilities, ends support for PostgreSQL 14
Self-hosted Claude Managed Agents keeps agent credentials in your environment
Picus puts AI agents on the offensive with autonomous pentesting
Attackers breached 10 organizations with an open-source AI pentest framework
Operation Endgame malware takedown turns up over 6 million stolen logins
Microsoft Entra adds a seven-day safeguard against irreversible identity deletion
Stolen Claude API keys can turn Claude Code into a remote-controlled implant
Photos: IRISSCON 2026 cybercrime conference
AWS Emulator: Open-source tool for testing AWS apps locally, built by autonomous AI agents
SC Magazine
Poland takes e-government platform offline following cyberattack
Notion discloses data exposure following security breach at AI vendor
Holes In Everything, Even SSH - PSW #952
Your AI pilot needs an offboarding plan
The exposure window: How to manage AI risk when agents fail at machine speed
ConnectWise investigating reports of unauthorized access to third-party extensions
Complying with CISA: How continuous analysis aligns with BOD 26-04
Model Context Points of Failure: MCP Security Meets Scale - Moshe Siman Tov Bustan - OWSP26 #1
Context Confusion Is the New Broken Access Control - Anusha Vajha - OWSP26 #1
OWASP Global AppSec 2026 Preview: Insights, Interviews & AppSec Trends - OWSP26 #1
© 2026 RiskDiscovery | Sponsored by: Deception Logic