[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
Third Serengeti Sweep Tops 1,400 Arrests as Investigations Mature
3 Frameworks to Protect CISOs & Orgs Against AI Liability
External Teams Chats Anchor 15-Minute Malware Delivery
SBOMs Alone Can't Reveal the Scope of a Supply Chain Attack
Beware the Slasher: AI Could Kill Off Cybersecurity Pros' Skills
'Aokigahara' Stealer Targets 'Developer Keyrings' & AI Assistants
So Many AI Security Benchmarks, But None Tell the Whole Story
Risks & Rewards: How AI Is Redefining the CISO's Role
In-the-Wild Attack Abuses AI Agents' Trust in Markdown
'Gheist' Weaponizes GitHub Tokens to Steal Cloud Secrets
Ars Technica
Code-execution flaw in UEFI firmware affects most servers on planet Earth
Disgraced eMudhra drops out of TLS business after using cert private key of 4
333 Tor exit nodes hijacked to intercept SSH traffic and retrieve plaintext email
Enterprises keep buying software upgrades that IT thinks will make things worse
PHP warns it plans to release 2 emergency patches imminently
The Internet goes on high alert after discovery of 8 compromised TLS certs
Meta Muse exposes users' personal and business secrets when they share conversations
PSA: Patch your Plex media server before someone hacks it
ReactOS reaches major milestone with NTFS install support
OpenAI models hacked a crypto wallet and breached more websites
CyberScoop
Before you file that AI bug report, OpenAI has some advice
All the security risks Anthropic is worried about before its IPO 
Prolific Hive and Nefilim ransomware affiliate sentenced to 70 months in prison
National cyber director rolls out latest pilot in South Carolina, this time for rural hospitals
What happens when security tools go dark before the ransomware
Experts temper emergency-level alarms over critical Brotli defect
Senators, rights groups say Trump administration breaking law by withholding surveillance court opinion
Authorities extradite Chinese national for alleged $37M investment scam
CISA publishes strategy with eye on the next four years
Senators say targeted ads are a security risk. Ad groups say the critics are off base.
InfoSecurity Magazine
Cyber Incident Forces UNM Health to Cancel Surgeries, Divert Ambulances
OpenAI Compaction Flaw Exposed AI Reasoning to Researchers
Hackers Infect 953 Online Stores With Scanner-Evading Code
ISC2 Launches Cyber-AI Workforce Coalition to Address the Future of AI Security Jobs
Attackers Exploit Teams External Chat to Breach Organizations in Under 15 Minutes
Copenhagen University Breach Compromises Data on Half a Million People
First ISC2 AI Security Certification Expected for Early 2027
Watchdog Urges Police and Fire Service to Improve Cybersecurity
CISA 2030 Sets Out ‘Aggressive, Anticipatory’ Cyber Defense Strategy for Critical Infrastructure
Gheist Attackers Stumble in Attempt to Abuse GitHub Tokens
SecurityWeek
Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ Flaws
Vendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk
HPE Patches Dozens of Critical Flaws in Networking Products
Unexplained DreamHost Incident Prompts Email, FTP Password Resets
iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18
Risks Spelled Out for Anthropic Investors Include Possible Harms From Runaway AI
This is Fine: What NetScaler Zero-Days Tell Us About the New Normal
Dead Popcorn Time Updater Put Millions of Computers at Risk of Takeover
Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems
Cybersecurity Issue Forces a Major New Mexico Hospital to Divert Patients and Close Clinics
ZDNet
iPhone Duo screen cracks: Serious issue or overblown? What we know
Why this new Fitbit feature takes us one step closer to non-invasive glucose tracking
Netflix now, Hulu later? T-Mobile’s T-Mix plans let you switch perks – what you need to know
Windows finally gets a built-in internet speed test tool – how to try it
This tool can recover deleted AI chats from your phone – how it works
The new iPad Mini’s best upgrade has nothing to do with its flashy OLED screen
Apple’s M6 iMac has arrived – here’s what’s changed since the M4
A fake TikTok shop is Surfshark’s most-blocked phishing scam – how to steer clear
I tried Windows 11’s customizable right-click menu – and it’s a much-needed change
Apple’s iOS 27.2 update offers major Siri AI upgrades, dual camera support for FaceTime
The Hacker News
Japan's GMO Offers $1 Million Bounty to Catch Hackers Behind FX Trading Cloud Breach
Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers
ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws
Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges
CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan Targets
GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session Decryption
Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPads
Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens
Keystone to Destroy 18,835 Hardware Wallets After Hackers Steal Device Verification Key
AI-Generated Fake Login Pages Are Making Account Takeovers Easier
BleepingComputer
Japan's GMO urges customers to shut down PCs amid ransomware threat
OpenAI's GPT-6.1 Terra is safer overall, but shows more destructive-action flags in tests
UNM Health ransomware attack disrupts patient care, surgeries
Hackers hijack Convertr analytics script to steal payment card data
Microsoft releases Windows OOB updates to distrust eMudhra certificates
Warp discloses breach exposing AI agent logs, user telemetry data
Tailscale warns of SSH flaws allowing root privilege escalation
The Huntress Tragic Quadrant: Ranking Threats Hitting Businesses Hardest
Apple backports CoreGraphics zero-day patches to older iPhones
Energy giant ENGIE discloses data breach affecting customers
gbhackers
Hackers Attempt to Breach U.S. Election Commission Systems, Triggering Major Service Outage
Critical GoAhead Web Server Flaw Allows Attackers to Bypass Client Certificate Authentication
Hackers Abuse Indian Government Domains to Push Illegal Gambling Websites Through Google Search
Sweet Security Offers All Organizations Affected by HTTP2Shell Virtual Patching Protection at No Cost
CISA Offers Free Security Tools to Protect Microsoft 365 and Google Workspace From Cyber Threats
Hackers Abuse Online Ads to Track Starlink Users and Spy on Individuals Across 49 Countries
Malicious npm Campaign Hijacks 42 GitHub Repositories to Steal Credentials and Spread Malware
Hackers Use Signed ChatGPT and Claude Binaries to Deploy Yoba Malware
Cisco Talos Uncovers 1,400 Scam Emails Sent Through Staples and Dell Order Notification Systems
Criminal IP Joins INTERPOL’s Gateway Initiative to Support Global Cybercrime Efforts
Cybersecurity Dive
CISA, security researchers confirm successful exploitation of PHP flaws
US launches program to deliver free cybersecurity help to rural hospitals
CISA promises proactive defense in new strategic plan
PwC confirms learning records breached in attack on vendor site
Security anchors a modern hybrid sovereign architecture
PHP exploitation moves at slower-than-expected pace, but millions remain at risk
Large businesses’ cybersecurity insurance claims are now less frequent but more expensive
China-nexus actor linked to attack on ConnectWise Cloud Backup
Agentic AI helps hackers level up, even without detailed instructions
Weak encryption certificates could have let hackers easily spoof websites
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
AI 'hacker' finds 4 severe bugs in popular industrial control software in under 4 hours
Day 2 of canceled classes at University of New Mexico after Health Sciences Center cyberattack
CISA confirms PHP2Shell under attack as researchers clock successful exploits
Microsoft releases out-of-band Windows fixes with certificate updates
Attack on email hosting provider for German far right party AfD exposed 345k accounts
Japanese virtual desktop cloud hacked so hard it asks to be banned
Worm armed 42 GitHub repos by hiding a payload too big to fail
Alibaba's Qwen AI caught trying to contact server in China
LiteLLM supply chain attack started with an exposed master key
Microsoft releases emergency .NET security fixes for Google Brotli bug
VentureBeat
AI agents are about to put least privilege to the test
DeepSeek-V4.1-Flash-1017 arrives with improved benchmarks just as the U.S. government bans it from agencies — what enterprises should do
AI cloud security needs to prove control before agents reach production
Anyone can build apps with AI. But who owns them?
17 of 40 teams that say they enforce AI agent permissions still share the credentials behind them
Browser security’s buying spree rests on one engine, without a clear Plan B
Anthropic’s Cyber Mission starts with 6,157 findings reported to maintainers and 516 patched
TechCrunch
Bank of America kindly asks that you don’t share your banking password with your AI assistant
US government says hackers are now exploiting critical PHP web bugs
Japan internet giant GMO says hackers posted stolen customer data
Will AI expose the rickety infrastructure of the internet?
PHP-ocalypse: How two critical web bugs almost broke the internet
Lab testing giant Quest Diagnostics confirms patients’ personal and health data was compromised during breach
Chinese hackers spied on thousands of companies after breaching IT giant ConnectWise
Developer platform Railway urges ‘all users’ to revoke secret keys after cyberattack
The internet is having a very bad cybersecurity day
PHP Armageddon: OpenAI, Google’s Wiz find ancient holes, panicking the internet
Network World Security
Cisco’s partner shift: What customers should expect from their Cisco partner in the AI era
IBM connects quantum chips with ‘quantum channels’ at 99% accuracy
2026 network outage report and internet health check
IBM aims to bring AI agent sprawl under enterprise control
HPE extends AI-driven networking to SD-WAN and SASE
FluidCloud replaces VDDK with its own disk copy engine for VMware exits
Cisco taps AI, partners to modernize IT operations and fortify network security
Key security concepts NetOps must understand to proactively support SecOps
Is it time to retire VPNs?
Google will pay people to use less electricity so its data centers can use more
Help Net Security
Bellini Capital CISO on AI security governance and the limits of patching faster
AbuseBox: Open-source monitor for blacklists, DNS, SSL and email records
NIST starts the countdown to retire quantum-vulnerable encryption
Breach victims discover their data was held by companies they’ve never heard of
Brotli bug reaches far beyond Node.js (CVE-2026-111497)
Hackers bury inboxes in spam then show up on Microsoft Teams posing as IT support
Socure links AI agents to verified people and businesses
Sekoia introduces self-hosted deployment for organizations with strict data controls
DNSFilter LUMINATE unifies DNS security, AI controls and remote work protection
FireMon Agentic AI helps teams investigate access and prepare policy changes
SC Magazine
Engie confirms customer data breach via marketing platform
Police and fire services in England and Wales face significant cyber risks
China-linked Warlock ransomware group targets global infrastructure
Japanese ISP GMO Internet suffers major data breach and ransomware demand
University of Copenhagen reports data breach affecting over 500,000 individuals
The shadow AI epidemic: Uncovering hidden AI agents and components on the endpoint
Agents, Train Robberies, Jazz, Microsoft, Elvis Gyrates, Aaran Leyland, and More - SWN #628
OpenAI calls for industry to raise its cyber defenses  
Closure codes are chosen to close the case
What OT security failure costs the business
© 2026 RiskDiscovery | Sponsored by: Deception Logic