[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
Critical Rails Bug Threatens to Derail Vulnerable Servers
Google, Partners Disrupt 1.3 Million-Device-Strong XCPE Botnet
Incidents Move Too Fast for Pen & Paper
Philippine Migrant Worker Data Likely Leaked in 69GB Government Breach
Phishing-Resistant Isn't Enough; Yubico Takes Aim at Identity-Verification Gap
Fresh European Fridge Attacks Put Cold-Chain Security in Focus
Germany Busts 'Crime-as-a-Service' Investment Fraud Outfit
9 Cyber Awareness Tips That Actually Match Today's Maze of Threats
LLMjacking Emerges as Thriving Cybercriminal Enterprise
3AM Affiliate Embraces AI-Like Loops in European School Attack
Ars Technica
Binance says hackers who stole billions in crypto spent months planning heist
UEFI bootkit infected fully patched Windows machines. Is Microsoft to blame?
Anthropic VS code extension on Cursor backdoored for nearly 12 hours
Code-execution flaw in UEFI firmware affects most servers on planet Earth
Disgraced eMudhra drops out of TLS business after using cert private key of 4
333 Tor exit nodes hijacked to intercept SSH traffic and retrieve plaintext email
Enterprises keep buying software upgrades that IT thinks will make things worse
PHP warns it plans to release 2 emergency patches imminently
The Internet goes on high alert after discovery of 8 compromised TLS certs
Meta Muse exposes users' personal and business secrets when they share conversations
CyberScoop
Officials extradite Canadian man to US for alleged cryptomining spree
Defense and aerospace firm settles with government over allegedly failing to meet cybersecurity contract requirements
Oklahoma man charged with mailing threats, substances to election officials nationwide 
Europol dismantles investment scheme that impacted potential victims in 50 countries
Ballot scanner malfunctions, flurry of federal legal actions test election officials on final day of voting 
CrowdStrike moves to acquire Fiddler and Dreadnode, adding AI observability and testing to its security platform
CISA’s new strategy runs into America’s blind trust problem
Google shuts down global botnet running on certified Android devices
Business groups mount fresh campaign for long-term renewal of information sharing law
Could Nick Andersen’s leadership outlast the clock on his acting role?
InfoSecurity Magazine
China-Aligned Group Abuses Sogou Input Method to Deliver Malware
APT29 Watering Holes Target Unpatched iPhones and Android Devices
France Blood Service Cyber-Attack Sends Blood Storage Temperatures to 110°C
3AM Ransomware Used Human-AI Hybrid Tactics in UK School Estate Compromise
Police Seize 100+ Servers After Four-Year Investment Fraud Probe
Fake Interview of Software Engineer Led to Binance Mega-Heist
Russia-Aligned Gorbag Targets Ukraine for Intelligence
Hackers Exploit BTCPay Server Flaw to Steal Cryptocurrency
Cyber-Attack on Refrigeration Systems Hits Supermarkets Across Europe
NCSC Chief Warns of Imminent AI Ransomware Threat to UK Critical Infrastructure
SecurityWeek
Sysdig Adds Runtime Security and Governance for AI Agents
Barracuda ESG Authentication Bypass Flaw Opens Path to Root
Agentic Data Security Firm Sentra Raises $150 Million
AI-Linked Breaches Mount as WorkOS, Northflank, Trigger.dev Disclose Hacks
Canadian Extradited to US Over Cryptomining Hacks on University Supercomputers
Malicious cPGuard Updates Served in OpsShield Supply Chain Attack
Chrome 157 Rolls Out With 213 Security Fixes, Seven Rated Critical
Rigged Coding Assignment, Abused AI Tool Opened Path to $6 Billion Binance Heist
North Korea Launches Missiles Toward the Sea as Pyongyang Protests Against US Claims on Binance Hack
Meta Shares Top Muse Bug Bounty Findings as Payouts Reach $1.2 Million
ZDNet
Is Chrome’s settings menu getting a search bar? What we know
Researchers asked people to use AI chatbots for election info – results were mixed
Want an AI job? Deployment engineers are earning executive-level pay – up to $1.45M a year
Safari finally gets 3 popular browser features – and I can’t wait to try them
Can Netflix’s new AI tool stop your TV-streaming doomscrolling? How to try it
Want an iPhone Duo for the holidays? Apple’s latest stock update isn’t reassuring
Your Apple Watch has 2 new controversial listening features – but you have to opt in
SUSE lays off 1 in 10 workers – citing AI and automation
HomeView with an arm? Apple reportedly plans $1,000 swiveling smart panel
Nvidia RTX 50 GPUs hit with more price hikes – up to $500
The Hacker News
Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root
SonicWall Won't Patch EoL GMS Flaws That Could Expose Files, Alter Database Records
Researchers Uncover Prompt Adware Hidden in OpenAI Codex Jailbreak Toolkit
APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits
Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads
Xen Hypervisor Flaws Let One Malicious VM Read and Write Any Other VM's Memory
Radio With No Radar: Why Agent Runtime Security Fails Without the Layers Beneath It
China-Aligned Hackers Hijack Sogou Input Method DNS Requests to Deploy DarkVigil Backdoor
Russian Police Arrest 3 Suspected VasyGrek Hackers, Dismantle Criminal Infrastructure
Google Issues Patches for Critical Android Flaw That Could Allow RCE Without User Interaction
BleepingComputer
Vercel rolls out new protection against stolen session cookie attacks
Zyxel fixes zero-day exploited to hack nearly 1,000 network switches
DreamHost confirms data breach exposed FTP logins and webmail sessions
Cyberattack disrupts blood storage refrigeration systems in France
NIKKE PC game launcher hacked to spread remote access, data-stealing malware
mSecure password manager hack prompts password reset warnings
Google Calendar phishing campaign hijacks sessions, bypasses MFA
SonicWall warns of unpatched flaws in end-of-life GMS software
US charges two Canadians accused of hacking US universities
CISA flags WordPress RCE flaw as actively exploited in attacks
gbhackers
The Sandbox Fights Back: Joe Security Launches Adaptive Detonation
Russia-Aligned Gorbag APT Exploits WinRAR CVE-2025-8088 to Deploy BeautyStealer Infostealer
Russian Hackers Create Fake US and UK Websites to Target Visitors With Mobile Exploits
Google Patches Critical Android RCE Flaws That Let Attackers Execute Code Without User Interaction
CISA Warns of Active Attacks Exploiting WordPress Core Code Execution Vulnerability
Hackers Use Stolen Microsoft Entra ID App Credentials to Breach 27 Organizations and Steal Sensitive Data
Cloudflare Launches Zero Wire to Track Critical Vulnerabilities and Active Exploitation Across the Internet
3AM Ransomware Hackers Use AI-Assisted Attacks to Breach UK Schools and Spread Across Windows Domains
Fake Microsoft Support Scams Spread Through Online Ads as Researchers Uncover Organized Fraud Network
Hackers Abuse LuaJIT and Windows Process Injection to Hide XLoader Credential-Stealing Malware
Cybersecurity Dive
Attacker abuses Microsoft Entra ID to target downstream MSP clients
Companies spending more on cybersecurity but still struggling with AI oversight
European authorities probe ongoing attacks targeting grocery refrigerators
AI threats create urgent need to renew cybersecurity information-sharing law, businesses tell Congress
Agentic pen-testing tool employed in multiple espionage campaigns around the globe
As the White House touts its AI task force, CISA is conspicuously missing
Protecting OT, IoT and medical devices without disrupting operations
3 questions for securing AI agents
Palo Alto Networks firewalls compromised in chained attacks using PHP2Shell
Top cybersecurity conferences to attend in 2027
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
Apple turns iCloud into spy cloud, will start looking at public share links
US gov IT worker pleads guilty to sending Top Secret files to Ethiopia
Cyberattack on French plasma stores is enough to make your blood boil
North Korean fake job interview led to $6.3B Binance heist
AI policy wonks declare 'sovereign agents' a threat to civilization
Password manager mSecure tells users to change passwords, won't say why
Britain on notice: AI-powered ransomware attacks to arrive by 2028
Max-severity bug in widely used OT programming tool exploited to deliver Linux malware
Cops bust botnet of 1.3M infected Android TV boxes
Thieves pilfer environment variables from Trigger AI workflow tool
VentureBeat
AI agents don't have to break security controls to go rogue. Here's how to keep them in check
Agents are rewriting the book on security. Can your data layer keep up?
AI agent access is moving faster than identity controls can govern
AI agents are about to put least privilege to the test
DeepSeek-V4.1-Flash-1017 arrives with improved benchmarks just as the U.S. government bans it from agencies — what enterprises should do
AI cloud security needs to prove control before agents reach production
Anyone can build apps with AI. But who owns them?
TechCrunch
Hackers stole DreamHost customer files and inboxes during months-long attack
Building on open source AI? Hugging Face’s policy chief on the costs, risks, and trade-offs
Ted Schlein’s Ballistic Ventures seeks $490M for new funds amid AI-driven cybersecurity boom
Researchers warned of North Korean hacking tactics years before record $6.3B Binance heist
CrowdStrike to shell out nearly $500M for 2 AI security startups as the market for securing agents takes off
New York City’s Mamdani criticizes Madison Square Garden owner over surveillance tech
Germany says lawmakers’ iPhones may have been hacked with spyware
A fresh wave of cyberattacks has hit Europe’s supermarket refrigerators, destroying food across countries
Applebee’s exposed customers’ personal data after leaving database password in app
North Korean hackers blamed for stealing record $6.3B in Binance breach
Network World Security
Arista posts record growth as AI networking supercycle accelerates
Broadcom expands VMware Cloud Foundation with AI, security, and recovery capabilities
2026 network outage report and internet health check
Barracuda’s security appliances have a security problem of their own
Network appliances go more than a year without patches as exploits speed up
European supermarkets that failed to act after French freezer attack are now feeling the heat
IBM aims to simplify mainframe modernization with AI-powered insight
NaaS hasn’t lived up to the hype. Is it still worth it?
AI networking spending grows, but enterprise network readiness lags
New Cisco firewall zero-day being actively exploited
Help Net Security
Cycurion Habit verifies threats and validates fixes before closing cases
Russian hackers target iOS and Android users with n-day exploits
Descope Envoy brings AI agent authentication to consumer apps
BlueFlag Security adds controls for AI agents working under developer identities
Citrix expands oversight of autonomous browsing and AI agent activity
Live Q&A: CISSP exam prep with ISC2 experts
Cyberattack hits French blood banks
Impart uses AI to build virtual patches without putting models in the traffic path
Poisoned cPGuard update hits thousands of web hosting servers
Fake job interview opened the door to $6.34 billion Binance heist
SC Magazine
CrowdStrike introduces AI kill switch to manage rogue agents
WordPress Core bug added to CISA's exploited vulnerabilities list
Sovereign artificial intelligence agents pose potential national security risks
AI doesn’t create new cyber threats – it just makes the old ones unstoppable
New York City officials push to restrict biometric surveillance at entertainment venues
Ballistic Ventures seeks 490 million dollars for new cybersecurity funds
Philippine government agency suffers massive data breach
Russia imposes new data retention mandates on Apple and Microsoft
OpsShield cPGuard update infrastructure compromised to distribute malware
The EU AI Act has entered the real world: What organizations need to do now
© 2026 RiskDiscovery | Sponsored by: Deception Logic