[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under Attack
Prominent Ransomware Negotiator Faces Extortion Charges
No Identity, No Recovery: Cyber Resilience Starts With IAM
Passing the Baton: Dark Reading Names New Editor-in-Chief
ASOS Breach Reveals the Risks in Customer-Facing SaaS
AI Scramble Drives Cybersecurity M&A Boom
What We Missed: FBI Strikes Back at ShinyHunters
Security Threats Don't Stop at the Office: Why Executives' Families Need Training, Too
Social Engineering AI Agents: The New BEC for 2026
'AgentCorruption' Puts AWS Environments at Risk With Single Prompt
Ars Technica
PC shipments fall 20.1 percent in “sharpest decline” since Q1 2023
Hackers obtain counterfeit TLS certificates for Google and other large services
OpenAI agents tried to hack Wikipedia tools and flooded it with traffic
Licensing costs driving 90 percent of VMware users to explore options: Survey
MCP for agent-to-agent comms may be the riskiest protocol you've never heard of
Apple changes full-disk access permissions to curb abuse from AI agents
Hacks of 2 federal agencies in a month have spilled a bonanza of sensitive data
Memory executives expect RAM shortage to continue through 2028
Attackers have been exploiting critical Zimbra flaw to steal emails
Cloudflare plans to issue quantum-safe TLS certificates
CyberScoop
FTC says ‘sextortion’ protection companies deceived customers about services 
West African scammers targeted in joint international government-industry operation
Flock can now issue CVEs for its own products. Should we trust it?
IonQ to buy zero-trust security firm Elisity in deal valued at up to $1.3 billion
Your AI agent is only as safe as the packages it downloads
Canadian cybersecurity executive arrested in federal extortion case
Leader of 764 pleads guilty, faces up to 30 years in prison
Anthropic rolls out program for ‘long-term commitment’ to secure critical infrastructure, open source software
DOJ, FBI seize Flax Typhoon-linked hacking tools Microscan, FishHub
Ransomware recovery CEO indicted after allegedly paying hackers and pocketing millions
InfoSecurity Magazine
European Retail Firms Confirm Cyber Incidents
Defenders Reluctant to Deploy Agentic AI as a Cybersecurity Tool
UK Government Announces Sweeping New AI Security Plans
Fifth of CISOs Take Time Off to Avoid Patch Tuesday
Luna Moth Leaks Shed Light on Ransomware Group's Inner Workings
Major French Supermarket Chains Hit by Cyber-Attack, Food Stock Impacted
Net Closes Around ShinyHunters with Another FBI Arrest
Months-Old Palo Alto VPN Vulnerability Remains a Target for Ransomware Groups
Karaoke Giant Reveals Data Breach Impacting Eight Million
Wikimedia Says Rogue AI Agents Abused its Platforms
SecurityWeek
Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN
Adobe Patches 140 Vulnerabilities Across 10 Products
Google Partially Reverses Chrome Bug Bounty Cuts
Meta Says Hackers Took Code, Personal Data of 1,500 in GitHub Breach
Small AI Models Could Soon Self-Replicate on IoT Devices, Anthropic Warns
XWorm RAT Evolves Into Surveillance Platform
AI Turns Familiar Cyberattacks Into a Race Against Time
$86 Million Crypto Heist Linked to Ledger Signer Hardware Implant
Cyberattack Prompts Grocery Giant Ahold Delhaize to Disconnect Systems
Refrigeration Controller Hack Spoils Food Across European Supermarkets
ZDNet
Linus Torvalds is using AI to develop Linux kernel code now
Google lets you make personal Android apps for free now – with just prompts
Apple’s smart home event: All 7 devices, prices, and release dates
4 upgrades HomePod Mini 2 has over its 6-year-old predecessor
Apple’s $299 HomeView smart hub is here: 8 highlights, including the wall model
Dutch tax authorities cancel Microsoft 365 cloud rollout – and turn toward open source
Claude sent a false homicide tip to police – and it’s part of a troubling AI pattern
Google’s new Fitbit Edge solves my biggest gripe with the Pixel Watch
Ring’s new smart lock has a manual fallback that can’t lock you out – how it works
4 ways Amazon’s new Alexa tablets eclipse the Fire line – starting with Google Play
The Hacker News
Anthropic Warns Small AI Models Could Soon Form Self-Propagating IoT Botnets
Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another
Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far
SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft
GitHub Tightens npm Publishing After Flaw Left 1,500+ Packages Vulnerable to Hijacking
Xandr Fined a Record €8.6 Million for Relaying Grindr Data Revealing Sexual Orientation
[Webinar] How to Stop AI-Driven Privilege Escalation With Runtime Identity Controls
LG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local Network
Product Walkthrough: Bitdefender AI Visibility and Control
Attackers Heat French Supermarket Fridges Up to 50°C by Hijacking Danfoss Controllers
BleepingComputer
Microsoft October 2026 Patch Tuesday fixes 1,411 flaws, 3 zero-days
Microsoft releases Windows 10 KB5126657 extended security update
Microsoft: Windows 11 24H2 Home and Pro reached end of support
UK Housing Ombudsman Service investigates 'security incident'
Windows 11 KB5127648 & KB5126653 cumulative updates released
TFG London cyberattack disrupts systems at Hobbs and Whistles retailers
Ivanti warns of Connect Secure zero-day exploited in attacks
Docker Hub flaw let attackers impersonate users, tamper with images
The MFA Gaps Attackers are Still Exploiting
SAP warns of maximum severity OAuth2 SSRF security flaw
gbhackers
Criminal IP to Showcase Threat Intelligence and AITEM at Security Days Fall 2026 Tokyo
G2A.COM Reports 35% Growth in Security Software Orders, Outpacing VPN Growth
Hackers Target Hundreds of French Supermarkets, Heating Refrigeration Systems to 50°C
SAP Patches Critical NetWeaver and S/4HANA Security Flaws Affecting Enterprise Systems
Attackers Can Hijack npm Packages Without Stealing Developer Credentials
Anthropic Warns AI Models Could Soon Self-Replicate Across Smart TVs and IoT Devices
New macOS Malware Uses Fake System Prompts to Steal Passwords and Deploy RAT
Hackers Exploit Citrix NetScaler Zero-Days to Deploy Modified Platypus Backdoor
Researchers Discover 253 Security Vulnerabilities Across 343 AI Agent Tools in MCP Servers
XWorm HBrowser Plugin Lets Attackers Control Authenticated Browser Sessions Without Credentials
Cybersecurity Dive
Dangerous flaws in refrigeration equipment were disclosed months before retail attacks
Businesses need more integrated risk management to counter cyberattacks, AI-powered fraud
Ahold Delhaize experiencing cybersecurity issue
CISA calls on Citrix NetScaler customers to patch as new flaws disclosed
GitLab fixes critical vulnerability that exposed software environments to sabotage
AI-driven security: Why agentic AI is changing cybersecurity
FBI seizes domains linked to China-nexus botnet
As frontier models go rogue, colleges beef up AI cybersecurity education
What the C-suite needs to know about AI governance
US government lagging in transition to post-quantum encryption, GAO finds
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
Claude submitted fake murder tip to Philly police during summertime testing
Anthropic conjures another threat that doesn't exist yet to stoke fears of AI apocalypse
Cyberattacks crank French supermarket refrigeration systems up to 50°C
'123456' password linked to Denmark data breach affecting 8.8M people
Owner of fashion brands Hobbs and Whistles joins autumn pwned collection
VMware is pushing so many patches, it thinks users need new tools to manage the flood
Chatbot refuseniks edge out users in the US, and they’re not for turning
Ukrainian drone strikes on Yandex datacenters knock cloud and payments offline
Imagine there's no Shiny Hunters – AI could make human hacking crews obsolete
AI systems are fully capable of carrying out nightmare attacks against infrastructure and nobody's ready
VentureBeat
Anthropic’s Cyber Mission starts with 6,157 findings reported to maintainers and 516 patched
Microsoft's record Patch Tuesday shows why severity can't decide what gets patched first
Your vibe-coded apps are a ticking time bomb for your business. Here’s how to secure them.
AI agents need more than access control — they need identity at runtime
22 of 37 surveyed companies that enforce AI agent permissions still have agents sharing credentials
OpenAI’s new ‘Private Intelligence' targets a growing enterprise concern: who can see your AI data?
Anthropic documented a new problem for security teams: Attacks that can adapt while they're underway
TechCrunch
Pluto Security raises $42M as AI gives enterprise security teams a new headache
Surveillance company Flock cuts staff as privacy backlash grows
Asos confirms breach of customer data after hackers send rogue app notification
CIA officer admits to creating fake top secret government program to steal over $190M, including gold bars
LibreOffice says ‘no AI’ is now a software feature
Hackers steal 8 million citizens’ records from Danish government database
Google froze its open source bug bounty program due to a ‘significant rise’ in AI submissions
Federal judge calls Flock ‘indiscriminate mass surveillance’
OpenAI safety employee resigns, claiming the company’s ‘culture is broken’
Apple says it’s tightening macOS ‘Full Disk Access’ controls due to new risks from AI agents
Network World Security
WebexOne 2026: Key themes and why they matter to network engineers
NetBox Labs adds network design templates and AI agents to streamline infrastructure operations
2026 network outage report and internet health check
Cisco, Nvidia push ultra-dense networking for Ethernet AI fabrics
AMD unveils Helion as agentic AI fuels demand for data center CPUs
It’s not your model — AI has a data movement problem
Ørsted builds compliance into automation, speeds firewall changes
ICANN set to expand gTLD: Brands, AI, and crypto all get new domains
Oracle reportedly lands $7B GPU deal for Tencent
Bidding war over key component could eliminate third hard disk maker
Help Net Security
Trellix Wise for Private Cloud delivers auditable AI investigations for security teams
NinjaOne combines Katana AI and MCP server to accelerate IT problem resolution
Ukrainian drones hit Yandex data centers, sparking claims that Russian troll farms went quiet
Lattice Sentry 5.0 brings quantum-resistant firmware security to AI data centers
Ridge Security’s RidgeOne keeps autonomous penetration testing data inside customer environments
Mozilla’s Firefox Enterprise lets companies block shadow AI in the browser
Meta outlines Muse Wonder safeguards for AI agents acting on your behalf
GitLab admins urged to patch critical RCE flaw (CVE-2026-97229)
npm Trusted Publishing flaw exposed 1,500+ npm packages to takeover
Be a good AI ancestor: Cybersecurity already gave us the playbook
SC Magazine
GitLab patches 10.0 flaw in its CE and EE products
The AI you can't see: Bringing third-party shadow AI into the risk picture
Meta releases new AI models, Muse Wonder and Muse Wonder Full
Flock granted authority to assign CVE IDs for its own products amid privacy concerns
AI governance challenges emerge as enterprises deploy autonomous agents
IonQ to acquire Elisity for $1.3 billion to bolster quantum security
Human error cited as top cybersecurity challenge
MFA bypass: fatigue attacks, push bombing, and SIM swapping
Canonical faces second DDoS attack this year, disrupting public websites
Microsoft-owned Xandr fined $9.6 million for unlawful Grindr user data sharing
© 2026 RiskDiscovery | Sponsored by: Deception Logic