[ News | Newsletters | Blogs | Reddits | Lists | Media | Jobs ] HoneyDB
DarkReading
Secure Your Spot at RSAC 2026 Conference
Predator Spyware Sample Indicates 'Vendor-Controlled' C2
Winter Olympics Could Share Podium With Cyberattackers
Vulnerabilities Surge, But Messy Reporting Blurs Picture
Trio of Critical Bugs Spotted in Delta Industrial PLCs
Retail, Services Industries Under Fire in Oceania
Microsoft Disrupts Cybercrime Service RedVDS
'VoidLink' Malware Poses Advanced Threat to Linux Systems
Taiwan Endures Greater Cyber Pressure From China
CrowdStrike to Buy Seraphic Security in Bid to Boost Browser Security
Ars Technica
Wikipedia signs AI training deals with Microsoft, Meta, and Amazon
A single click mounted a covert, multistage attack against Copilot
Bandcamp bans purely AI-generated music from its platform
The RAM shortage’s silver lining: Less talk about “AI PCs”
Never-before-seen Linux malware is “far more advanced than typical”
Hegseth wants to integrate Musk’s Grok AI into military networks this month
Microsoft vows to cover full power costs for energy-hungry AI data centers
Google removes some AI health summaries after investigation finds “dangerous” flaws
ChatGPT Health lets you connect medical records to an AI that makes things up
ChatGPT falls to new data-pilfering attack as a vicious cycle in AI continues
CyberScoop
Trump’s cyber chief pick tells lawmakers he’ll assess efficacy of Cybercom-NSA dual-hat role, if confirmed
CISA’s secure-software buying tool had a simple XSS vulnerability of its own
The quiet way AI normalizes foreign influence
Sources: DHS finalizing replacement for disbanded critical infrastructure security council 
Kimwolf botnet’s swift rise to 2M infected devices agitates security researchers
California AG launches investigation into X’s sexualized deepfakes
Predator spyware demonstrates troubleshooting, researcher-dodging capabilities
Microsoft seizes RedVDS infrastructure, disrupts fast-growing cybercrime marketplace
Sean Plankey re-nominated to lead CISA
Microsoft Patch Tuesday addresses 112 defects, including one actively exploited zero-day
HITBSecNews
ZDNet
I ditched Google Chrome for a free local browser on my Pixel, and I'd happily pay a premium for it
Google confirms Android 17 features that should make every fan excited - but I'd love to see these, too
I've tested dozens of cheap power banks from Amazon - this $17 one is my favorite
These unassuming devices promised to lower my electricity bills - only this one was legit
Your Raspberry Pi 5 just got a major functionality upgrade - and it looks very promising
Own a PS5? I changed these 3 settings to give the system a big performance boost
Still on Windows 10? I installed 0patch on my old PC, and it's easily the best defense in the 'End of Support' era
I tried this Reddit alternative that's friendlier and paywall-free - it's exactly what I've been waiting for
I compared phone plans: T-Mobile saves $1,000 over AT&T and Verizon, but there's a catch
Google Maps vs. Waze: I compared the two best navigation apps, and this one wins easily
The Hacker News
Your Digital Footprint Can Lead Right to Your Front Door
LOTUSLITE Backdoor Targets U.S. Policy Entities Using Venezuela-Themed Spear Phishing
China-Linked APT Exploits Sitecore Zero-Day in Attacks on American Critical Infrastructure
Cisco Patches Zero-Day RCE Exploited by China-Linked APT in Secure Email Gateways
AWS CodeBuild Misconfiguration Exposed GitHub Repos to Potential Supply Chain Attacks
Critical WordPress Modular DS Plugin Flaw Actively Exploited to Gain Admin Access
Researchers Reveal Reprompt Attack Allowing Single-Click Data Exfiltration From Microsoft Copilot
ThreatsDay Bulletin: AI Voice Cloning Exploit, Wi-Fi Kill Switch, PLC Vulns, and 14 More Stories
Model Security Is the Wrong Frame – The Real Risk Is Workflow Security
4 Outdated Habits Destroying Your SOC's MTTR in 2026
BleepingComputer
Cisco finally fixes AsyncOS zero-day exploited since November
Microsoft: Some Windows PCs fail to shut down after January update
Google now lets you change your @gmail.com address, rolling out
ChatGPT is now more reliable at finding and remembering your past chat
Gootloader now uses 1,000-part ZIP archives for stealthy delivery
Grubhub confirms hackers stole data in recent security breach
Hackers exploit Modular DS WordPress plugin flaw for admin access
Verizon blames nationwide outage on a "software issue"
Microsoft Copilot Studio extension for VS Code now publicly available
Critical WhisperPair flaw lets hackers track, eavesdrop via Bluetooth audio devices
Cybersecurity Dive
DHS prepares replacement for critical infrastructure collaboration framework
Critical flaw in AWS Console risked compromise of build environment
AI surges among top business risk concerns, while cybersecurity holds firm
Trump resubmits Sean Plankey for CISA director
Majority of hedge funds boosted cybersecurity spending in 2025
Healthcare breaches double as shadow AI, vendor risks proliferate
Critical vulnerability found in n8n workflow automation platform
Executives worry most about cyber-enabled fraud, geopolitics and AI
How to stop insider-driven data loss in browser sessions
Telecom sector sees steady rise in ransomware attacks
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
Bankrupt scooter startup left one private key to rule them all
Probably not the best security in the world: Carlsberg wristbands spill visitor pics
Cisco finally fixes max-severity bug under active attack for weeks
Chinese spies used Maduro's capture as a lure to phish US govt agencies
Flipping one bit leaves AMD CPUs open to VM vuln
Contagious Claude Code bug Anthropic ignored promptly spreads to Cowork
A simple CodeBuild flaw put every AWS environment at risk – and pwned 'the central nervous system of the cloud'
US regulator tells GM to hit the brakes on customer tracking
Woman bailed as cops probe doctor's surgery data breach
Microsoft taps UK courts to dismantle cybercrime host RedVDS
VentureBeat
Nvidia Rubin's rack-scale encryption signals a turning point for enterprise AI security
The 11 runtime attacks breaking AI security — and how CISOs are stopping them
Seven steps to AI supply chain visibility — before a breach forces the issue
Legacy IAM was built for humans — and AI agents now outnumber them 82 to 1
The enterprise voice AI split: Why architecture — not model quality — defines your compliance posture
OpenAI admits prompt injection is here to stay as enterprises lag on defenses
Red teaming LLMs exposes a harsh truth about the AI security arms race
TechCrunch
Iran’s internet shutdown is now one of its longest ever, as protests continue
The multibillion-dollar AI security problem enterprises can’t ignore 
AI security firm, depthfirst, announces $40 million Series A
US cargo tech company publicly exposed its shipping systems and customer data to the web
How WitnessAI raised $58M to solve enterprise AI’s biggest risk
Man to plead guilty to hacking US Supreme Court filing system
Fintech firm Betterment confirms data breach after hackers send fake crypto scam notification to users
Instagram says there’s been ‘no breach’ despite password reset requests
Critics pan spyware maker NSO’s transparency claims amid its push to enter US market
Internet collapses in Iran amid protests over economic crisis
Network World Security
The perfect certificate migration until it wasn’t: How certificates can break RADIUS trusts
Palo Alto Networks patches firewalls after discovery of a new denial-of-service flaw
Power shortages, carbon capture, and AI automation: What’s ahead for data centers in 2026
Dell bolsters PowerStore array with capacity, security features
Google warns grid connection delays are now the biggest threat to data center expansion
OpenAI turns to Cerebras in a mega deal to scale AI inference infrastructure
IBM pushes sovereign computing with a software stack that works across cloud platforms
Nvidia H200 chips in China: US says yes, China says no
Startup IO River aims to virtualize the edge and break CDN vendor lock-in
Cisco’s 2026 agenda prioritizes AI-ready infrastructure, connectivity
Help Net Security
FalconStor Habanero simplifies compliant offsite backup for IBM Power users
Ransomware activity never dies, it multiplies
Product showcase: Penetration test reporting with PentestPad
As AI raises the stakes, app modernization and security are becoming inseparable
New intelligence is moving faster than enterprise controls
Who’s on the other end? Rented accounts are stress-testing trust in gig platforms
New infosec products of the week: January 16, 2026
Sensitive data of Eurail, Interrail travelers compromised in data breach
Delinea expands identity security platform through StrongDM acquisition
Tines rolls out a governance layer for agents, copilots, and MCPs
InfoSecurity Magazine
TamperedChef Malvertising Campaign Drops Malware via Fake PDF Manuals
Account Compromise Surged 389% in 2025, Says eSentire
RondoDox Botnet Targets HPE OneView Vulnerability in Exploitation Wave
Global Agencies Release New Guidance to Secure Industrial Networks
Hackers Increasingly Shun Encryption in Favour of Pure Data Theft and Extortion
Cyber Threat Actors Ramp Up Attacks on Industrial Environments
CodeBuild Flaw Put AWS Console Supply Chain At Risk
CISO Role Reaches “Inflexion Point” With Executive-Level Titles
Data Privacy Teams Face Staffing Shortages and Budget Constraints, ISACA Warns
ICE Agent Doxxing Site DDoS-ed Via Russian Servers
© 2026 RiskDiscovery | Sponsored by: Deception Logic