[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
9 Cyber Awareness Tips That Actually Match Today’s Maze of Threats
LLMJacking Emerges as Thriving Cybercriminal Enterprise
3AM Affiliate Embraces AI-Like Loops in European School Attack
One Compromised Laptop, Billions Lost: The Binance Attack-Path Warning
Microsoft's AI Risk Report Misses This Key Detail
PapRAT Cyber-Espionage Campaign Leaves a 'Bitter' Taste in South Asia
Investors Dish on New Startups & What They'd Back Next
Devs Hit by Trojanized Claude Code Extension for Cursor
Behind the Scenes of How Operation Blackout Went Down
L’Italia è afflitta da vulnerabilità informatiche, senza una causa chiara
Ars Technica
UEFI bootkit infected fully patched Windows machines. Is Microsoft to blame?
Anthropic VS code extension on Cursor backdoored for nearly 12 hours
Code-execution flaw in UEFI firmware affects most servers on planet Earth
Disgraced eMudhra drops out of TLS business after using cert private key of 4
333 Tor exit nodes hijacked to intercept SSH traffic and retrieve plaintext email
Enterprises keep buying software upgrades that IT thinks will make things worse
PHP warns it plans to release 2 emergency patches imminently
The Internet goes on high alert after discovery of 8 compromised TLS certs
Meta Muse exposes users' personal and business secrets when they share conversations
PSA: Patch your Plex media server before someone hacks it
CyberScoop
Europol dismantles investment scheme that impacted potential victims in 50 countries
Ballot scanner malfunctions, flurry of federal legal actions test election officials on final day of voting 
CrowdStrike moves to acquire Fiddler and Dreadnode, adding AI observability and testing to its security platform
CISA’s new strategy runs into America’s blind trust problem
Google shuts down global botnet running on certified Android devices
Business groups mount fresh campaign for long-term renewal of information sharing law
Could Nick Andersen’s leadership outlast the clock on his acting role?
Federal court tosses Trump lawsuit challenging Alaska Senate certification
China-backed threat group used agentic AI pentesting tool to compromise 140 sensitive targets in 11 days
Apple notifications alert victims in 99 countries about mercenary spyware infections
InfoSecurity Magazine
Russia-Aligned Gorbag Targets Ukraine for Intelligence
Hackers Exploit BTCPay Server Flaw to Steal Cryptocurrency
Cyber-Attack on Refrigeration Systems Hits Supermarkets Across Europe
NCSC Chief Warns of Imminent AI Ransomware Threat to UK Critical Infrastructure
LLMJacking is Costing Some Businesses Up to $1m, Warns Google
Police and Tech Firms Team Up to Dismantle XCPE Botnet
Armadin Tests Find 88% of Severe Flaws Outside Vendor Advisories
Bitter Deploys PapRAT in Asian Cyber-Espionage Campaign
FBI Attributes Binance Heist to North Korea’s TraderTraitor
Chainalysis Warns Customers After “Offensive Agentic” Security Incident
SecurityWeek
Frontline Education Data Breach Impacts Over 1.3 Million
CrowdStrike Reportedly Paying $495 Million for AI Security Firms Fiddler, Dreadnode
Android’s November 2026 Updates Patch Over 200 Vulnerabilities
Critical Node-RED Flaw Exploited in Attacks
UK Cyber Chief Says the UK Will Face AI Cyberattacks on Critical Infrastructure by 2028
Google Dismantles XCPE Botnet of 1.3 Million Android Devices
NATO’s Crossed Swords Exercise Brings AI Agents Into Cyber Operations Training
Over 100 European Stores Hit as Supermarket Fridge Attacks Return
Cybersecurity M&A Roundup: 37 Deals Announced in October 2026
Florida Student Aid Website Hack Puts Data of 4.9 Million People at Risk
ZDNet
Roku is taking away a fan-favorite screensaver – but you have alternatives
This clever banking scam keeps phishing by faking its own demise – how it works
I tested the RedMagic 12 Pro – and it’s the fastest Android I’ve ever seen
Is Claude Code truly faster with message threads? I did the math on my logs
OpenAI will merge ChatGPT’s chat and work tabs – here’s when, and what to expect
Athenahealth patients can ask Claude about their medical records now
Don’t want a touchscreen? All premium MacBook Pros could have one soon, reports say
Firefox’s new Mini Window is every multitasker’s dream – Chrome can’t do this
Samsung’s Privacy Display may be coming to more Galaxy phones – what we know
Apple’s HomeView may double as security camera – watch out Ring, Nest, and Wyze
The Hacker News
Google Warns LLMjacking Attacks Are Costing Some Enterprises Up to $1 Million in Cloud Charges
cPGuard Update Channel Hijacked to Backdoor Linux Servers and Collect Password Hashes
Red Hat Patches 9.8-Rated Linux TCP RCE Flaw While Ubuntu Releases Fixes for Testing
The 4 Elements of Exposure Prioritization and How to Operationalize Them
Russia-Aligned Gorbag Hackers Exploit WinRAR Flaw to Deploy Data-Stealing Malware
Hackers Exploit BTCPay Server Flaw to Steal Bitcoin and Litecoin From Hot Wallets
Synology NAS Devices Targeted in Ransomware Attacks Exploiting Patched DSM Flaw
New Wave of Refrigeration Cyberattacks Hits Supermarkets Across Europe, Forcing Stores to Pull Food
Attackers Exploit Critical Siemens IoT2050 Flaw to Plant Remote Command Backdoors
Attackers Target Unpatched CryptoPayment Gateway Flaw That Can Expose Wallet Credentials
BleepingComputer
Barracuda warns of critical flaws allowing root access to devices
Gartner Predicts SOCs Will Have 50% More Engineers Than Analysts by 2028
UK school estate hit by 3AM ransomware in suspected AI-assisted attack
Police seizes over 100 servers in investment scam crackdown
Google adds new $250,000 Cloud VRP reward for Root-in-Cloud bugs
Harvard University data breach exposed info of 851,000 accounts
Chinese hackers use ARTEX AI in automated attacks against 200 orgs
Fintech platform Sageworks taken offline after suspected cyberattack
Google disrupts million-device XCPE Android malware botnet, bans TV box maker
BTCPay Server warns of hot wallet crypto thefts on outdated instances
gbhackers
Researcher Discovers Path Traversal Flaw in Renault Navigation System That Enables Root Code Execution
Microsoft Analyzes 383,000 Security Vulnerabilities and Reveals Which Flaws Hackers Exploit Most
NIST Releases New Cybersecurity Guidelines to Protect Small Businesses From Phishing and Ransomware Attacks
11 GenAI SOC Copilots: The 2026 Buyer’s Verdict Guide
11Detection Engineering Tools: The 2026 Buyer’s Verdict Guide
11 Deception Technology Solutions: The 2026 Buyer’s Verdict Guide
CrowdStrike and Deloitte Spain Expand Cybersecurity Alliance With AI-Powered Threat Detection
Cogent Security Makes the Fortune Cyber 60 for a Second Year, With a Plan to Run Cyber Defense Like a Factory
Ubuntu Releases Security Fixes for Critical Linux Kernel Vulnerability Allowing Remote Code Execution
Hackers Exploit DLL Sideloading in Signed OpenAI and Anthropic Binaries to Deploy YobaLoader Malware
Cybersecurity Dive
European authorities probe ongoing attacks targeting grocery refrigerators
AI threats create ‘urgent’ need to renew cybersecurity information-sharing law, businesses tell Congress
Agentic pen-testing tool employed in multiple espionage campaigns around the globe
As the White House touts its AI task force, CISA is conspicuously missing
3 questions for securing AI agents
Protecting OT, IoT and medical devices without disrupting operations
Palo Alto Networks firewalls compromised in chained attacks using PHP2Shell
Top cybersecurity conferences to attend in 2027
North Korea-linked group steals $6.3B from Binance in largest-ever cryptocurrency hack
JPMorgan Chase, Goldman Sachs underscore security in AI plans
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
Password manager mSecure tells users to change passwords, won't say why
Britain on notice: AI-powered ransomware attacks to arrive by 2028
Max-severity bug in widely used OT programming tool exploited to deliver Linux malware
Cops bust botnet of 1.3M infected Android TV boxes
Thieves pilfer environment variables from Trigger AI workflow tool
Token thieves costing companies $100K+ per day in illicit LLM charges
Nuclear threats and street brawls: Russia, Ukraine report attacks on their emergency alert apps
Frozen part II: Hackers remotely defrost produce in Euro supermarkets ... again
FBI pins $6.3B Binance crypto heist on North Korean hackers
Crim spent $7K+ on AI services in extortion attacks, then left evidence for all to see
VentureBeat
AI agents don't have to break security controls to go rogue. Here's how to keep them in check
Agents are rewriting the book on security. Can your data layer keep up?
AI agent access is moving faster than identity controls can govern
AI agents are about to put least privilege to the test
DeepSeek-V4.1-Flash-1017 arrives with improved benchmarks just as the U.S. government bans it from agencies — what enterprises should do
AI cloud security needs to prove control before agents reach production
Anyone can build apps with AI. But who owns them?
TechCrunch
New York City’s Mamdani criticizes Madison Square Garden owner over surveillance tech
Germany says lawmakers’ iPhones may have been hacked with spyware
A fresh wave of cyberattacks has hit Europe’s supermarket refrigerators, destroying food across countries
Applebee’s exposed customers’ personal data after leaving database password in app
North Korean hackers blamed for stealing record $6.3B in Binance breach
Binance pauses withdrawals as hackers suspected of stealing billions in crypto
Bluesky blocks links to leaked DHS employee data as government seeks takedowns
Upwind raises $400M after walking away from Datadog acquisition offer
Hacker stole personnel data about thousands of Homeland Security employees, including CBP and ICE agents
Wiz’s CTO on PHP2Shell and the coming ‘vulnpocalypse’
Network World Security
Network appliances go more than a year without patches as exploits speed up
European supermarkets that failed to act after French freezer attack are now feeling the heat
IBM aims to simplify mainframe modernization with AI-powered insight
NaaS hasn’t lived up to the hype. Is it still worth it?
AI networking spending grows, but enterprise network readiness lags
New Cisco firewall zero-day being actively exploited
Gartner warns $3.5T in AI infrastructure spending could be at risk by 2030
Oracle adds Google TPUs to OCI to expand enterprise AI compute options
Cisco’s partner shift: What customers should expect from their Cisco partner in the AI era
IBM connects quantum chips with ‘quantum channels’ at 99% accuracy
Help Net Security
Police seize over 100 servers linked to investment fraud with more than €4 million in losses
Novee puts forgotten internet-facing assets through penetration testing
Assured helps recovery teams find clean backups after ransomware attacks
Attackers exploit critical Node-RED flaw to deploy Linux bot and backdoors (CVE-2026-58115)
AI agents scale and speed up Chinese-linked attacks
Gorbag APT group hits Ukrainian courts and city councils with self-deleting malware
Stolen AI access leaves companies with cloud bills of up to $1 million
OpenAI raises top bug bounty payout to $172,000 with bonuses
Opal’s agent.ID virtual event: Top security leaders on governing Al agents
What human hackers still do better than AI, according to HackerOne’s CEO
SC Magazine
The MCP server nobody inventoried
Industry coalition urges Congress to extend Cyber Information Sharing law
Hackers compromise emergency alert apps in Ukraine and Russia
South Asian threat group BITTER expands cyber espionage with updated malware
Mazebolt launches radar validation for Akamai DDoS protection
NIS2 directive mandates board accountability for cybersecurity oversight
Critical vulnerability in Node-RED exploited to deploy Linux bot
More Vulns and More Guesswork from Less Data - Jeremiah Grossman - ASW #407
New research reveals limitations of vendor advisories in identifying critical security vulnerabilities
Researchers demonstrate specter attack on air-gapped computers
© 2026 RiskDiscovery | Sponsored by: Deception Logic