[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
Philippine Migrant Worker Data Likely Leaked in 69GB Government Breach
Phishing-Resistant Isn't Enough; Yubico Takes Aim at Identity-Verification Gap
Fresh European Fridge Attacks Put Cold-Chain Security in Focus
Germany Busts 'Crime-as-a-Service' Investment Fraud Outfit
9 Cyber Awareness Tips That Actually Match Today's Maze of Threats
LLMjacking Emerges as Thriving Cybercriminal Enterprise
3AM Affiliate Embraces AI-Like Loops in European School Attack
One Compromised Laptop, Billions Lost: The Binance Attack-Path Warning
Microsoft's AI Risk Report Misses This Key Detail
PapRAT Cyber-Espionage Campaign Leaves a 'Bitter' Taste in South Asia
Ars Technica
UEFI bootkit infected fully patched Windows machines. Is Microsoft to blame?
Anthropic VS code extension on Cursor backdoored for nearly 12 hours
Code-execution flaw in UEFI firmware affects most servers on planet Earth
Disgraced eMudhra drops out of TLS business after using cert private key of 4
333 Tor exit nodes hijacked to intercept SSH traffic and retrieve plaintext email
Enterprises keep buying software upgrades that IT thinks will make things worse
PHP warns it plans to release 2 emergency patches imminently
The Internet goes on high alert after discovery of 8 compromised TLS certs
Meta Muse exposes users' personal and business secrets when they share conversations
PSA: Patch your Plex media server before someone hacks it
CyberScoop
Defense and aerospace firm settles with government over allegedly failing to meet cybersecurity contract requirements
Oklahoma man charged with mailing threats, substances to election officials nationwide 
Europol dismantles investment scheme that impacted potential victims in 50 countries
Ballot scanner malfunctions, flurry of federal legal actions test election officials on final day of voting 
CrowdStrike moves to acquire Fiddler and Dreadnode, adding AI observability and testing to its security platform
CISA’s new strategy runs into America’s blind trust problem
Google shuts down global botnet running on certified Android devices
Business groups mount fresh campaign for long-term renewal of information sharing law
Could Nick Andersen’s leadership outlast the clock on his acting role?
Federal court tosses Trump lawsuit challenging Alaska Senate certification
InfoSecurity Magazine
APT29 Watering Holes Target Unpatched iPhones and Android Devices
France Blood Service Cyber-Attack Sends Blood Storage Temperatures to 110°C
3AM Ransomware Used Human-AI Hybrid Tactics in UK School Estate Compromise
Police Seize 100+ Servers After Four-Year Investment Fraud Probe
Fake Interview of Software Engineer Led to Binance Mega-Heist
Russia-Aligned Gorbag Targets Ukraine for Intelligence
Hackers Exploit BTCPay Server Flaw to Steal Cryptocurrency
Cyber-Attack on Refrigeration Systems Hits Supermarkets Across Europe
NCSC Chief Warns of Imminent AI Ransomware Threat to UK Critical Infrastructure
LLMJacking is Costing Some Businesses Up to $1m, Warns Google
SecurityWeek
AI-Linked Breaches Mount as WorkOS, Northflank, Trigger.dev Disclose Hacks
Canadian Extradited to US Over Cryptomining Hacks on University Supercomputers
Malicious cPGuard Updates Served in OpsShield Supply Chain Attack
Chrome 157 Rolls Out With 213 Security Fixes, Seven Rated Critical
Rigged Coding Assignment, Abused AI Tool Opened Path to $6 Billion Binance Heist
North Korea Launches Missiles Toward the Sea as Pyongyang Protests Against US Claims on Binance Hack
Meta Shares Top Muse Bug Bounty Findings as Payouts Reach $1.2 Million
Frontline Education Data Breach Impacts Over 1.3 Million
CrowdStrike Reportedly Paying $495 Million for AI Security Firms Fiddler, Dreadnode
Android’s November 2026 Updates Patch Over 200 Vulnerabilities
ZDNet
Want an iPhone Duo for the holidays? Apple’s latest stock update isn’t reassuring
Your Apple Watch has 2 new controversial listening features – but you have to opt in
SUSE lays off 1 in 10 workers – citing AI and automation
HomeView with an arm? Apple reportedly plans $1,000 swiveling smart panel
Nvidia RTX 50 GPUs hit with more price hikes – up to $500
I tried Sonos’ latest app features – these 2 small upgrades fix big annoyances
Windows 11 can run better on PCs with 8GB now, Microsoft says – here’s why
Roku is taking away a fan-favorite screensaver – but you have alternatives
This clever banking scam keeps phishing by faking its own demise – how it works
I tested the RedMagic 12 Pro – and it’s the fastest Android I’ve ever seen
The Hacker News
Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads
Xen Hypervisor Flaws Let One Malicious VM Read and Write Any Other VM's Memory
Radio With No Radar: Why Agent Runtime Security Fails Without the Layers Beneath It
China-Aligned Hackers Hijack Sogou Input Method DNS Requests to Deploy DarkVigil Backdoor
Russian Police Arrest 3 Suspected VasyGrek Hackers, Dismantle Criminal Infrastructure
Google Issues Patches for Critical Android Flaw That Could Allow RCE Without User Interaction
CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades
mSecure Warns Users to Change Passwords, Reset 2FA and Passkeys After Suspicious Activity
Chainstack Reports Production Systems Breach Exposing Customer Data and Password Hashes
Binance Reveals How Fake Job Interviews and AI Tool Abuse Led to $6.43 Billion Theft
BleepingComputer
US charges two Canadians accused of hacking US universities
CISA flags WordPress RCE flaw as actively exploited in attacks
Hackers use n-day exploits in zero-click attacks on iOS, Android devices
Hackers hijack cPGuard autoupdate to deploy backdoor, steal data
WorkOS says attacker used ARTEX AI to breach internal sales app
Binance says fake job interview led to $6.3 billion crypto heist
Google: LLMjacking attacks rack up $1 million in cloud AI charges
Barracuda warns of critical flaws allowing root access to devices
Gartner Predicts SOCs Will Have 50% More Engineers Than Analysts by 2028
UK school estate hit by 3AM ransomware in suspected AI-assisted attack
gbhackers
The Sandbox Fights Back: Joe Security Launches Adaptive Detonation
Russia-Aligned Gorbag APT Exploits WinRAR CVE-2025-8088 to Deploy BeautyStealer Infostealer
Russian Hackers Create Fake US and UK Websites to Target Visitors With Mobile Exploits
Google Patches Critical Android RCE Flaws That Let Attackers Execute Code Without User Interaction
CISA Warns of Active Attacks Exploiting WordPress Core Code Execution Vulnerability
Hackers Use Stolen Microsoft Entra ID App Credentials to Breach 27 Organizations and Steal Sensitive Data
Cloudflare Launches Zero Wire to Track Critical Vulnerabilities and Active Exploitation Across the Internet
3AM Ransomware Hackers Use AI-Assisted Attacks to Breach UK Schools and Spread Across Windows Domains
Fake Microsoft Support Scams Spread Through Online Ads as Researchers Uncover Organized Fraud Network
Hackers Abuse LuaJIT and Windows Process Injection to Hide XLoader Credential-Stealing Malware
Cybersecurity Dive
European authorities probe ongoing attacks targeting grocery refrigerators
AI threats create ‘urgent’ need to renew cybersecurity information-sharing law, businesses tell Congress
Agentic pen-testing tool employed in multiple espionage campaigns around the globe
As the White House touts its AI task force, CISA is conspicuously missing
3 questions for securing AI agents
Protecting OT, IoT and medical devices without disrupting operations
Palo Alto Networks firewalls compromised in chained attacks using PHP2Shell
Top cybersecurity conferences to attend in 2027
North Korea-linked group steals $6.3B from Binance in largest-ever cryptocurrency hack
JPMorgan Chase, Goldman Sachs underscore security in AI plans
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
Cyberattack on French plasma stores is enough to make your blood boil
North Korean fake job interview led to $6.3B Binance heist
AI policy wonks declare 'sovereign agents' a threat to civilization
Password manager mSecure tells users to change passwords, won't say why
Britain on notice: AI-powered ransomware attacks to arrive by 2028
Max-severity bug in widely used OT programming tool exploited to deliver Linux malware
Cops bust botnet of 1.3M infected Android TV boxes
Thieves pilfer environment variables from Trigger AI workflow tool
Token thieves costing companies $100K+ per day in illicit LLM charges
Nuclear threats and street brawls: Russia, Ukraine report attacks on their emergency alert apps
VentureBeat
AI agents don't have to break security controls to go rogue. Here's how to keep them in check
Agents are rewriting the book on security. Can your data layer keep up?
AI agent access is moving faster than identity controls can govern
AI agents are about to put least privilege to the test
DeepSeek-V4.1-Flash-1017 arrives with improved benchmarks just as the U.S. government bans it from agencies — what enterprises should do
AI cloud security needs to prove control before agents reach production
Anyone can build apps with AI. But who owns them?
TechCrunch
Ted Schlein’s Ballistic Ventures seeks $490M for new funds amid AI-driven cybersecurity boom
Researchers warned of North Korean hacking tactics years before record $6.3B Binance heist
CrowdStrike to shell out nearly $500M for 2 AI security startups as the market for securing agents takes off
New York City’s Mamdani criticizes Madison Square Garden owner over surveillance tech
Germany says lawmakers’ iPhones may have been hacked with spyware
A fresh wave of cyberattacks has hit Europe’s supermarket refrigerators, destroying food across countries
Applebee’s exposed customers’ personal data after leaving database password in app
North Korean hackers blamed for stealing record $6.3B in Binance breach
Binance pauses withdrawals as hackers suspected of stealing billions in crypto
Bluesky blocks links to leaked DHS employee data as government seeks takedowns
Network World Security
Barracuda’s security appliances have a security problem of their own
Network appliances go more than a year without patches as exploits speed up
European supermarkets that failed to act after French freezer attack are now feeling the heat
IBM aims to simplify mainframe modernization with AI-powered insight
NaaS hasn’t lived up to the hype. Is it still worth it?
AI networking spending grows, but enterprise network readiness lags
New Cisco firewall zero-day being actively exploited
Gartner warns $3.5T in AI infrastructure spending could be at risk by 2030
Oracle adds Google TPUs to OCI to expand enterprise AI compute options
Cisco’s partner shift: What customers should expect from their Cisco partner in the AI era
Help Net Security
Live Q&A: CISSP exam prep with ISC2 experts
Cyberattack hits French blood banks
Impart uses AI to build virtual patches without putting models in the traffic path
Poisoned cPGuard update hits thousands of web hosting servers
Fake job interview opened the door to $6.34 billion Binance heist
Open-source file sync tool rsync 3.5.2 fixes a CPU exhaustion flaw
What AI-generated malware looks like under the microscope
Ghostunnel: Open-source TLS proxy with mutual authentication
Secure your containers without breaking what works
Companies going all in on AI could see their strategy backfire
SC Magazine
New York City officials push to restrict biometric surveillance at entertainment venues
Ballistic Ventures seeks 490 million dollars for new cybersecurity funds
Philippine government agency suffers massive data breach
Russia imposes new data retention mandates on Apple and Microsoft
OpsShield cPGuard update infrastructure compromised to distribute malware
The EU AI Act has entered the real world: What organizations need to do now
It's The Trickery While Empowering Employees and Redesigning Work for AI - Frank Riccardi - BSW #472
Barracuda Networks issues patches for critical security vulnerabilities
Gartner report outlines evolving roles in AI-enabled security operations centers
Identity and access management spending to surge due to AI adoption
© 2026 RiskDiscovery | Sponsored by: Deception Logic