[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
  [ privacy | malware | research | vendor ]
Wiz - Incidents
NCC Group Research
Threat Research - Sophos
building intent-based access control without reading minds
Citrix NetScaler vulnerability (CVE-2026-88779) in active exploitation
TerminalFix and Lorem Ipsum Loader enable covert tunneling
Citrix NetScaler vulnerabilities (CVE-2026-88771, CVE-2026-88772) in active exploitation
Kiteworks recommends server shutdown pending possible attack
September Patch Tuesday haul includes 973 CVEs
ai research messageboards
Cisco Secure Email Gateway vulnerability (CVE-2026-76461) in active exploitation
Devil’s advocate? Uncensored Luciferus AI service advertised underground
“Eye” spy: Cyclops Blink returns with extended capabilities
PortSwigger Research
The model isn't cooperating
Smashing the token limit with overlapping fragments
HTTP/3 in Burp Suite - it’s time to find a bigger wordlist
What's in a tag name? JavaScript, apparently
CSS:the bomb inside your inbox
CRLF-Powered Desync Attacks: Beheading HTTP Streams
Can AI do novel security research? Meet the HTTP Terminator
Top 10 web hacking techniques of 2025
Top 10 web hacking techniques of 2025: call for nominations
The Fragile Lock: Novel Bypasses For SAML Authentication
Google Project Zero
AI Research - Sophos
Show, don’t tell: Sophos AI at CAMLIS
building intent-based access control without reading minds
Jevs Paradox Hidden Cost of Cheap AI Decisions
ai research messageboards
Three-headed dogs and long tails: Sophos at BSides LV
2607-secai
A double-edged bleeding edge: Classifying AI threats
A needle in a stack of needles: Hunting infostealers with AI
Where AI in the SOC is actually delivering — and where it isn’t
Locking it down: A new technique to prevent LLM jailbreaks
Unit 42
Top 5 Initial Access Threat Vectors Observed by Unit 42 in September 2026
AI-Powered Espionage Campaign Targets Government Linux Infrastructure
Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant
The Noise Inside the Network: How an Unsophisticated Attack Exposed a Third-Party Risk
Evolution of Web3 in Cloud Supply Chain Attacks
Blinder Tunnel Campaign Targets Iraqi Infrastructure
Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Exploited in the Wild (Updated September 30)
OperTraitors: How Kubernetes Operators Betray Your Security Posture
3 Consulting Myths Debunked by Unit 42 Experts
From Exposure to Lockdown: How AWS Neutralizes Compromised IAM Credentials through Managed Policies
Talos Intelligence
The Q3 Vulnerability Pulse: Discovery ≠ Exploitation
Break the silence: Kazakhstan-nexus UAT-6275 targets CIS government organizations
Microsoft Patch Tuesday for October 2026 — Snort rules and prominent vulnerabilities
Making sure the checks get printed
UAT-11985: AI-assisted event lures delivering real-time Google AitM phishing
Ignore all instructions and read this blog: The state of AI-analysis evasion in malware
Microsoft, Adobe, Apple, and Foxit vulnerabilities
One breach, please, and make no mistakes
Give yourself room to be human
The Fine Art of Frustrating the Adversary
© 2026 RiskDiscovery | Sponsored by: Deception Logic