[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
No-Filter 'Kriminal' AI Platform Raises Cybercrime Concerns
Agentic AI Presents New Insider Threat Model for Orgs
SilkParasite Threatens Central Asian Orgs With Flurry of RATs
China-Linked Hacker Shows AI Capabilities in APAC Attack
Critical GitLab Zero-Click Flaw Poses Mitigation Challenges
'CoSnitch' Attack Tricked Copilot Into Mapping Out Architecture
The 'Industrial Accidents' Behind Rogue AI Agent Attacks — and the Sandbox Failures Exposed
CISOs Break Their Silence in 'Declassified' Docuseries
Silent 'TwinLoot' Cyber Threat Operates Entirely From Microsoft's Cloud
'Ransom Busters': Ransomware Actor Poses as Incident-Recovery Service
Ars Technica
Microsoft Copilot reveals secret input that allowed it to be hacked
Nvidia discloses $21B stake in SpaceX
Vulnerability giving attackers full control of Macs is under active exploitation
PBS station fears losing 50TB of data after being ghosted by cloud storage provider
OpenAI and Anthropic in price war as Chinese AI rivals gain ground
Private security firms will soon be allowed to hack overseas cybercriminals
Terabytes of credentials leaked in massive supply-chain attack
DEF CON crowd suspected in fake-hotspot attack on Delta flight
Chrome adopts what may be the best protection yet against account takeovers
New Pass-ta-key attack reveals all the things we didn't know about passkeys
CyberScoop
AI-fueled attacks pose ‘active threat’ to water, other sectors, U.S. agencies warn
A California county wants to hire Tina Peters to help run its elections
The long tail of Clop’s PTC hack is just beginning to emerge
Eight years later, federal authorities re-up charges against alleged Iranian hackers at Mabna Institute
Medusa ransomware tallies hundreds of new victims, says updated advisory on group’s tactics
Details emerge on BlackFile’s recent attacks on financial companies
Irregular says ‘human oversight’ responsible for AI sandbox escape incidents
A bold new strategy or a dangerous precedent? Experts are divided on Trump’s memo.
Tech contractor for Brightly Software sentenced to 2 years in prison for insider attack
AI’s ‘middle class’ has gotten dramatically better at hacking
InfoSecurity Magazine
ICS Operators Warned of AI-Driven Attacks on Siemens PLCs
Updated ToxicPanda Variant Targets 140+ Banking and Crypto Apps
Def Con Attendees Targeted by Persistent Phishing Campaign
Exclusive: Linux Foundation's Akrites to Go Live in September
MaaS Campaign Combines ClickFix, ErrTraffic and Cruciferra
Grandoreiro Resurfaces in Mexico With New DLL Sideloading Campaign
OpenAI Tightens AI Safeguards Following Hugging Face Incident
Over 500 Critical Infrastructure Organizations Hit by Medusa Ransomware
ICO Urges Police to Improve Data Governance in Facial Recognition Rollouts
UK Fraud Cases Hit Record High in 2026
SecurityWeek
AI-Assisted Tool Helped Secure Satellite Communication System After 2022 Russian Hacking
OpenAI Overhauls Model Security With Sandboxing, 30-Minute Alerts, and Training Pauses
Exploitation Expected for Critical Authentication Bypass Patched in Citrix NetScaler
Critical GitLab Flaw Exploited Shortly After Disclosure
Hackers Using AI to Target Siemens PLCs in Critical US Sectors
Virtual Event Today: CodeSecCon – Secure Your Code and Applications
Prevalent AI Raises $22 Million to Expand Data Fabric Platform
US Charges 17 Iranian Hackers, Offers $10 Million Rewards for 5 of Them
Cl0p Ransomware Group Names Over 40 Victims of PTC Windchill Campaign
CISA Urges Immediate Patching of Exploited Microsoft, VMware, Apple Vulnerabilities
ZDNet
4 iPad accessories I swear by (including a cheaper Apple Pencil alternative)
The TCL QM8L proves it's worth the upgrade in our lab testing
These 2 WFH items are a splurge - but I'd highly recommend them
How to use your TV as a PC monitor in 3 simple steps (and without buying anything)
Is leasing an iPhone right for you? How Apple's Upgrade Program works and who it's for
Can MainstreamOS finally make Linux a household name? I tried it to find out
Your Comcast router doubles as a motion detector now - and a potential police informant
After testing the Pixel 11, I feel fine about skipping the Pro models - here's why
I replaced my Samsung with the Google Pixel 11 Pro Fold - a week later, I'm going back
I've tested dozens of rugged smartwatches - this one's battery is on a different level
The Hacker News
NASA AIT-GUI Flaws Could Let Unauthenticated Attackers Issue Spacecraft Commands
ToxicPanda 2.0 and GoldDigger Expand Android Banking Attacks with On-Device Fraud
40 Malicious Firefox Extensions Pose as Web3 Products to Steal Wallet Secrets
Elementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute Code
Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second
OpenAI Pauses Frontier RL Training as It Tightens Defenses Against Unsafe AI Behavior
SilkParasite Espionage Campaign Targets Central Asian Governments with Five New RATs
Hackers Compromised 14,500+ Dahua Devices Using Credential Attacks, Auth Bypasses, and P2P
Phishing 3.0: The Fight Moves to Agent Versus Agent
StopAndProtect Uses Nearly 2,000 Hacked WordPress Sites to Spread Malware and Steal Data
BleepingComputer
CISA warns of hackers exploiting critical MLflow vulnerability
New Manic Android malware can exfiltrate data through nearby devices
Critical Zimbra RCE flaw now actively exploited in attacks
Microsoft says August Windows updates may cause gaming issues
OpenAI confirms ChatGPT is down as logins and signups fail
Rogue ransomware affiliate poses as recovery firm to steal payments
Sakura Internet hack exposes data of up to 1.36 million accounts
Healthtech firm CareCloud data breach impacts 3.7 million patients
Hackers compromise 14,500 Dahua web cameras in 35-day campaign
US warns of AI-powered attacks on Siemens PLCs in critical infrastructure
gbhackers
Cisco BroadWorks Vulnerability Allows Remote Attackers to Access Sensitive Files
Hackers Use Fake CAPTCHA to Deploy Malware That Shuts Down Endpoint Security
Red Hat Kubernetes Flaw Lets Unauthenticated Attackers Access Internal Cluster Services
Splunk Fixes 17 Vulnerabilities Including Critical MCP Server RCE
Hackers Create Hidden Microsoft 365 Inbox Rules to Conceal Vendor Payment Fraud
CyberPanel Pre-Auth RCE Flaws Let Attackers Gain Remote Server Access
Claude AI Finds Authentication Bypass Flaws in Multiple SAML Implementations
Hackers Trick AI Agents Into Telling Users to Install the Malware Themselves
Zimbra RCE Vulnerability Lets Remote Attackers Execute System Commands
ClearFake Fake CAPTCHA Campaigns Use New WordlistLoader to Deploy Amatera Stealer
Cybersecurity Dive
AI-backed campaign targeting vulnerable Siemens S7 devices, CISA and FBI warn
Ransomware disproportionately targets medium-sized firms, straining customer relationships
DOJ charges 17 people in Iran-backed hacking campaign against US
GitLab issues emergency patch for critical code-injection flaw
AI-powered vulnerability clearinghouse faces deep skepticism, major challenges
Critical flaw in SAP Commerce Cloud faces initial exploitation attempts
Major genetic-testing firm says hack compromised sensitive patient data
Why more security data has blurred companies’ view of risk
Researchers confirm breach claims by data-extortion group
Cisco security revenue jumps 14% as agentic AI sharpens cyberattacks
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
AI agent suggested installing a malware package. Engineer almost took its advice
'Not a theoretical risk,' feds warn as attackers use AI-made code to hack critical infrastructure controllers
ICE boss to agents: Leave the Meta spy glasses at home
Flock surveillance backlash mounts as fiendish Halloween plans circulate
Comcast gives its Wi-Fi motion detector a security makeover
Australian hotel chain leaks guests’ PII after breach at third-party database operator
OpenAI's overhead will rise 20 percent for some workloads as it hardens security
Expired credit cards revived by researchers to make unauthorized payments
CISA gives feds 3 days to fix actively exploited Ray RCE bug
Apple plugs image-processing hole ripe for spyware abuse
VentureBeat
Three Claude agents given conflicting orders sabotaged each other on a shared server — then didn't tell users what they'd done
Four of five enterprises that secured AI agent identities still can't contain one that goes rogue
OpenAI launches GPT-5.6-Cyber with reduced refusals, 95% completion on advanced cybersecurity tasks
AWS Continuum integrates with OpenAI Codex and Anthropic Claude Code in major AI security push
AI agents are part of your team now. Here’s how to secure all of them.
The browser is where attacks land. Why is security still focused on the endpoint?
Claude Mythos 5 made sock puppet accounts to socially engineer developers: here's what enterprises should know
TechCrunch
Researchers say OpenAI revoked their access to limited cyber program
T-Mobile ‘chopped a cable’ to expel Chinese hackers from its network
CareCloud confirms 3.7M patients had their medical records stolen in data breach
OpenAI institutes new safeguards after Hugging Face breach
Comcast adds motion sensing to millions of its newer routers, with a privacy catch
Bluesky says its recent outage was caused by another DDoS attack
‘Unprecedented’ number of Apple users received recent spyware alert, say investigators
Crypto hardware wallet owners face fresh security risks after recent spate of personal data thefts
How to tell if your AI platforms’ accounts have been hacked
What we know about the alleged Iranian hacks on US water utilities
Network World Security
Cerebras reimagines AI cluster design with switchless CS-4 architecture
IBM moves closer to fault-tolerant quantum computing with modular cryogenic systems
Reports: Google partnering with AMD for next-gen hybrid TPU
Why 6 GHz Wi-Fi will make or break the modern enterprise
Is your networking built for AI’s traffic patterns and data volumes?
IBM partners with OpenAI to drive enterprise AI deployment
It’s final! Judge says HPE’s Juniper acquisition is complete
Google, Microsoft and Nvidia back 800V DC standard for AI data centers
Five takeaways from Cisco’s Q4 and what they mean for IT pros
Cisco rides ‘networking supercycle’ for strong Q4
Help Net Security
Corero brings cloud-based AI threat analysis to SmartWall ONE
AWS limits AI agents’ data access, even when manipulated
Fake Gemini installer delivers Vidar infostealer via Google Colab lure
OpenAI previews privacy-focused system for detecting AI misuse
US agencies warn of AI-powered attacks on Siemens industrial controllers
Tufin expands Unified Control Plane with AI intelligence and multi-vendor automation
US charges 17 Iranian hackers over 31-terabyte academic data theft
AI is making fraud harder to spot and identity harder to prove
Researchers find a loophole that lets expired credit cards make unauthorized payments
8,539 reasons to rethink how vulnerabilities get patched
SC Magazine
A ‘kill switch’ law only makes sense for a worst-case scenario
The CISO Doesn't Own the Outcome: A Shared-Accountability Model for Security Decisions
Medusa ransomware group attacked more than 500 victims since 2021
Perspective and lessons learned from mergers and acquisitions
Geekom admits malware found in legacy mini PC driver download
Microsoft removes WMIC tool from Windows 11
Critical vulnerability in Ray framework allows remote code execution
CISA explores single contract for cybersecurity software purchases
Heights Finance data breach impacts over 700,000 customers
‘TWINLOOT’ Python implant abuses Microsoft services for stealthy C2
© 2026 RiskDiscovery | Sponsored by: Deception Logic