[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
[Virtual Event] What Every Enterprise Should Know About Securing Cloud Assets in the Age of AI
[Virtual Event] Building a Secure AI Strategy for the Enterprise
AI Is Ending the Era of Hidden Vulnerabilities — Are Vendors Ready?
Large Enterprises Targeted in Fake Merger & Acquisition Scams
What We Missed: Did ShinyHunters 'Breach' ReliaQuest?
AI 'Machine Speed' Cuts 2-Week Attack Down to 10 Hours
'Breeze Comet' Tears Into Brazilian & Global Financial Systems
AI's Vulnerability Surge May Be More Manageable Than First Feared
SonicWall SMA 1000 Zero-Days Enable Unauthenticated RCE
AI Gives Cybercriminals a Dangerous Time Advantage
Ars Technica
Confused about which VPN is right, US senator asks the NSA for guidance
VMware migration reduces Tottenham Hotspur's licensing fees by 85 percent
I rented a car, and within hours, my driver's license was for sale
BGP hijack infecting networks caused by a comedy of errors that’s not funny at all
Think twice before installing this device promising free movies
Inside Meta’s push to put robots to work in data centers
Authorities arrest 2 alleged members of prolific hacking group TeamPCP
Claude, Codex, and Hermes installed unowned code inside corporate networks
How OpenAI let a mob of LLM agents game a test and ransack Hugging Face
AI agents meant to replace Meta workers made “large-scale, disruptive actions”
CyberScoop
Why judgment is emerging as cybersecurity’s defining skill
Attackers exploit zero-days in consistently besieged SonicWall product
The G7 tells industry to hurry up and prep for post-quantum encryption
Jail time for Maine child in 764 marks turning point in federal law enforcement
FCC proposes public scorecard to rate telecoms on anti-robocall efforts
Dogged Russia-based botnet dismantled after 23-year run
Pegasus, NoviSpy variant spyware found on devices of Serbian activists
Wyden seeks upgraded NSA security guidance on commercial VPN use
FBI raises alarm over deceptive phishing campaign targeting prominent people
Tina Peters, through attorney, backs off formal role in Shasta County elections
InfoSecurity Magazine
OpenAI Pledges $1bn to Bring its AI Cybersecurity Tools to Essential Services
G7 Urges Fast-Track on Quantum-Safe Cybersecurity Rules
Pegasus Zero-Click Exploit Infects Serbian Student Activist's iPhone
Outsider Phishing Kit Survives Takedown With 700 New Pages
CREST Onboards First Cohort for AI-Enabled Pentesting Accreditation
US and Canadian Court Records Breached Following Thomson Reuters Incident
FBI Probes Possible Breach of 153 Million Driver’s Licenses
International Operation Disrupts Sality P2P Botnet
Russian Man Extradited Over Malware Campaign Targeting Freelancers
Gambling Goblin Turns Brazilian Government Sites Into SEO Weapons
SecurityWeek
Sangoma Switchvox Vulnerabilities Exploited in the Wild
12-Year-Old PostgreSQL Vulnerability Enables Database, Server Takeover
Catch Raises $5 Million for AI Executive Assistant With Guardrails
VMware Workstation and Fusion Updates Patch Critical Vulnerability
Google Patches 6th Chrome Zero-Day of 2026
Nvidia Is Buying AI Platform Hugging Face for $13 Billion
Manchester Airports Group Data on 8.8 Million People Leaked After Ransom Refusal
Capsule Security Launches ‘AI Circuit Breaker’ to Stop Rogue Agents
HiddenLayer Raises $100 Million for AI Runtime Security
AI Agent Firewall Startup AIR Security Emerges From Stealth With $50 Million
ZDNet
The Hacker News
New Ted Backdoor Hides Inside Victims' Own HAProxy Builds to Intercept Web Traffic
Over 440,000 Exploit Attempts Target Super Forms and Elementor Pro RCE Flaws
Plex Urges Immediate Updates After Patching Multiple Undisclosed Security Flaws
Google Releases Chrome Update to Patch Actively Exploited V8 Zero-Day
GPT-6 Astra Scores 100% on ExploitBench as OpenAI Blocks PoC Exploit Requests
ThreatsDay: CEO Phishing Kits, 5K Dropbox Account Hacks, OAuth Traps + 17 More Stories
Critical Cisco Nexus 9000 Flaw Lets Unauthenticated Remote Attackers Run Code as Root
BraZetsu Malware Turns Compromised Windows Hosts Into Criminal Marketplace Inventory
Thomson Reuters Court Software Breach May Have Exposed SSNs and Sealed Data
US Becomes Top Target in RMM Phishing Campaign Spanning 46 Countries
BleepingComputer
Critical Citrix NetScaler auth bypass now leveraged in attacks
Microsoft says some users can’t open the Teams desktop client
39 New Methods That Compromise Passkey Authentication
New CrowdStrike 'FalconFlank' zero-day grants SYSTEM privileges
Exchange Online outage causes email delays, 'Server busy' errors
Google warns of new Chrome zero-day flaw exploited in attacks
French hospital fined €500,000 after breach exposes data of 727,000
Coder's registry infrastructure compromised to push malicious modules
HPE patches critical ArubaOS-CX remote code execution flaw
Microsoft: KB5120998 mouse reset bug affects only non-English PCs
gbhackers
Hackers Turn HiveMQ and Element Messenger Into Control Channels for Windows Backdoors
OpenAI Agents Collude on Public Wiki to Share Sandbox Bypass and Evasion Techniques
ShipMonk Data Breach Exposes Personal Data of 67,000 Additional Trezor Customers
NodeStealer Spyware Adds Keylogging, Screenshot Capture and Facebook Data Theft
Microsoft Teams Adds QR Code Protection to Block Phishing and Fraud
MECCHA CHAMELEON Flaw Lets Malicious Custom Maps Achieve Remote Code Execution
Critical Super Forms WordPress Flaw Actively Exploited to Achieve Remote Code Execution
Plex Urges Users to Update Media Server as Multiple Security Flaws Are Discovered
Hackers Abuse AI-Era ASCII Smuggling to Hide Phishing Content in Millions of Emails
Chinese-Speaking Hackers Use Claude, Qwen and DeepSeek AI Agents to Attack Government Systems
Cybersecurity Dive
SonicWall urges immediate patching of chained vulnerabilities
Government, industry partner to shut down long-running Sality botnet
CISA scraps 6 free cybersecurity assessments for critical infrastructure operators
Security policies fail to keep up with a hybrid cloud world
Frontier AI helps exploit flaws in tests using key industrial devices
PaperCut issues emergency patches as threat actors target chained vulnerabilities
State-linked actor targets Cisco routers for espionage
Frontier AI tipping the scales toward cyber adversaries
CISA identifies security hurdles that led to very different results in two red-team engagements
Hundreds of agents went rogue in lead up to Hugging Face breach
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
Cisco searched for IOS XR bugs and found so many it rolled them into an update release
OpenAI commits $1B in AI credits to frontline cyber defenders
Prolific Microsoft 0-day hunter drops CrowdStrike Falcon exploit PoC
Drowning in CVEs and thirsty for answers? Try CTEM
Cybercrooks trawl Fishbrain to net password hashes
UK's Online Safety Act has made 'absolutely no difference,' kids say
Terminated employee cost company hundreds of thousands of dollars because nobody revoked access
To keep the AI hacking genie bottled up, try one-way networks
Claude Mythos only model to complete full cyber kill chain, experts say
AI agents carried out every step of this ransomware attack – then left the victim an 80-page security audit
VentureBeat
China-linked hackers backdoored executives' laptops via USB, exploiting a fix companies had but weren't using
Google’s Gemini 3.8 Flash is built for agents, while its Cyber twin hunts vulnerabilities
Stolen Claude session cookies can reach corporate Gmail through grants no IT admin can revoke
Closing an Azure OpenAI assistant's retrieval gap didn't take a new identity platform. It took one filter and a narrower assistant.
Identity and permissions aren’t enough to govern AI agent behavior
AI agents need their own identity before they need a gateway
AI agents that pass authentication can still drift, expose data, or get memory-poisoned
TechCrunch
US military disabled ad tracking on troops’ devices following reports of targeted attacks
Abliteration.ai is making a business out of removing AI guardrails
It sure looks like hackers breached a major ID card verification service
HiddenLayer nabs $100M as enterprises rush to secure their AI deployments
Norway considers ban on camera-enabled wearable ‘pervert glasses’
X says attackers are targeting user accounts after the launch of X Money
AIR raises $50M to help companies vet the skills and add-ons AI agents use
Florida and Texas move to block Flock cameras over privacy concerns
Hackers claim millions of patient records stolen during data breach at healthcare giant McKesson
How AI could make it harder for governments to use hacking tools
Network World Security
Nvidia lets you build your own AI clusters locally with PAIR software
When analyst benchmarks miss the mark: Why Nvidia doesn’t fit Forrester’s data center matrix
HPE’s record Q3: AI infrastructure, networking demands drive growth, but supply constraints tap the brakes
VMware Cloud Foundation 9.1 adds transit gateway flexibility, segmentation, and native EVPN VXLAN support
Dell’s $95B AI backlog shows the infrastructure crunch is far from over
SonicWall reports two major security holes under active exploit
Arista warns customers ahead of next week’s security disclosures
VMware by Broadcom: Product, service and support news
Palo Alto Networks buys Console to boost agentic security
Mainframe shops tap AI for system insights and recommendations
Help Net Security
Synology ActiveProtect Manager 2.0 improves AI-driven security
Google patches actively exploited Chrome zero-day (CVE-2026-85046)
Microsoft Teams is about to make QR code phishing much harder
September 2026 Patch Tuesday forecast: All we need is more time
A five-part inventory for your AI agent credentials
Scammers have figured out the best time to text you
OpenAI is putting $1 billion behind Daybreak for defenders working without enterprise budgets
Most of the bugs Claude Mythos found have never been checked by a human
New infosec products of the week: September 4, 2026
Thomson Reuters reveals breach that exposed U.S. and Canadian court records
SC Magazine
Are our AI agents turning rogue?
‘Empty envelope’ email attacks target company leaders
Linux Threat Hunting - PSW #942
Phishing campaign targets widely used RMM platforms in 46 countries
The next insider threat doesn't have a pulse
Human attacker uses AI agents to breach enterprise network in under 10 hours
AI models show increasing capability for autonomous cyberattacks, report warns
Senator Wyden urges NSA to update VPN guidance amid foreign surveillance concerns
Capsule Security unveils 'AI circuit breaker' to control rogue AI agents
SQL injection vulnerability in WordPress plugin affects millions of sites
© 2026 RiskDiscovery | Sponsored by: Deception Logic