[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
GhostAction Hacking Wave Fizzles, But Attackers Lurk on in GitHub
Attacker Relentlessly Scans for Credentials by Impersonating AI Bots
Third Serengeti Sweep Tops 1,400 Arrests as Investigations Mature
3 Frameworks to Protect CISOs & Orgs Against AI Liability
External Teams Chats Anchor 15-Minute Malware Delivery
SBOMs Alone Can't Reveal the Scope of a Supply Chain Attack
Beware the Slasher: AI Could Kill Off Cybersecurity Pros' Skills
'Aokigahara' Stealer Targets 'Developer Keyrings' & AI Assistants
So Many AI Security Benchmarks, But None Tell the Whole Story
Risks & Rewards: How AI Is Redefining the CISO's Role
Ars Technica
Code-execution flaw in UEFI firmware affects most servers on planet Earth
Disgraced eMudhra drops out of TLS business after using cert private key of 4
333 Tor exit nodes hijacked to intercept SSH traffic and retrieve plaintext email
Enterprises keep buying software upgrades that IT thinks will make things worse
PHP warns it plans to release 2 emergency patches imminently
The Internet goes on high alert after discovery of 8 compromised TLS certs
Meta Muse exposes users' personal and business secrets when they share conversations
PSA: Patch your Plex media server before someone hacks it
ReactOS reaches major milestone with NTFS install support
OpenAI models hacked a crypto wallet and breached more websites
CyberScoop
Leak site publishes data on more than 41,000 DHS employees obtained by hacktivists
Lawsuit against Ex-Overstock CEO tied to 2020 election film falls apart over question of ‘actual malice’
Researchers uncover Volt Typhoon’s covert, ephemeral network
Prosecutors charge Madagascar scammers in NFT-stealing scheme based on fake online dating profiles
Before you file that AI bug report, OpenAI has some advice
All the security risks Anthropic is worried about before its IPO 
Prolific Hive and Nefilim ransomware affiliate sentenced to 70 months in prison
National cyber director rolls out latest pilot in South Carolina, this time for rural hospitals
What happens when security tools go dark before the ransomware
Experts temper emergency-level alarms over critical Brotli defect
InfoSecurity Magazine
Japan’s GMO Internet Urges Customers to Disconnect PCs
Attackers Hide Malware Behind Signed ChatGPT and Claude Binaries
AI Is Turning CISOs Into Business-Risk Translators, Says Nvidia’s Head of Cyber
Energy Giant Engie Notifies Customers of Supply Chain Breach
Cyber Incident Forces UNM Health to Cancel Surgeries, Divert Ambulances
OpenAI Compaction Flaw Exposed AI Reasoning to Researchers
Hackers Infect 953 Online Stores With Scanner-Evading Code
ISC2 Launches Cyber-AI Workforce Coalition to Address the Future of AI Security Jobs
Attackers Exploit Teams External Chat to Breach Organizations in Under 15 Minutes
Copenhagen University Breach Compromises Data on Half a Million People
SecurityWeek
Ukrainian Hive and Nefilim Ransomware Affiliate Gets 70 Months in US Prison
Upwind Security Raises $400 Million at $3.8 Billion Valuation
Chrome and Firefox Updates Patch Over 200 Vulnerabilities
TLS Flaws Found in GoAhead Web Server Used in Hundreds of Millions of Devices
China-Linked Hackers Exploit PHP2Shell to Root Firewalls
Long-Hidden Flaws Patched in EPICS Research Facility Control Software
Nobody Trusts the Security Questionnaire. We Rely on It Anyway.
Secrets Management Firm Infisical Valued at $600 Million After $40 Million Raise
Hackers Start Probing Fresh Oracle EBS Vulnerability
CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts
ZDNet
The 4 biggest Amazon smart home announcements from today
Apple’s new touchscreen MacBook Pros may be late, but they have one big advantage
Your public Discord messages may soon appear in Google search results – how to opt out
Amazon’s new Alexa Photo Frame could have what I’ve been missing – here’s why
These Claude Enterprise features let you track AI ROI – what’s new
Amazon’s Echo Show 16 makes Apple’s 7-inch HomeView look puny – is it worth $100+ extra?
Opera will run AI locally in your browser now – why that’s a gamechanger and how to try it
Amazon’s new Echo Studio gives Alexa+ an AI camera to see inside your home
Samsung’s new clip-style Galaxy Buds On have a major advantage over Sony and Bose
Amazon’s new Echo Dot can turn into a Wi-Fi extender – how it works
The Hacker News
Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns
Google to Allow One-Tap Android App Installs From Approved Third-Party Stores Outside U.S.
Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own Win
PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network
Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch
Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers
Wazuh and AI for Enhanced SOC Workflows
Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass
American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign Exposed
Anthropic's Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits
BleepingComputer
Police seize Virtualine bulletproof service tied to ransowmare, cybercrime
Discord to let search engines index public server messages
Sony ISP subsidiary data breach exposes 2.5 million customer records
Volt Typhoon hides zero-day attacks using 'Silent Train' framework
Microsoft urges Entra ID admins to migrate users to passkeys
InfraTrust report warns of exploited flaws in critical network infrastructure
Even after PHP2Shell, blast radius matters more than a CVSS score
Hackers now scanning systems for recently-patched Oracle flaw
CISA warns of hackers now exploiting critical Node2Shell flaw
Nefilim and Hive ransomware affiliate gets 70 months in prison
gbhackers
OffSec Launches Free PHP2Shell Lab Following Critical Vulnerability Discovery
Hackers Use Fake Phantom, Jupiter, and Bitget Firefox Extensions to Target Cryptocurrency Wallets
Hackers Reuse XWorm Malware Loader Across Phishing Campaigns Targeting Colombia and the UK
Anthropic’s Claude Chains One-Click and Zero-Click Exploits to Bypass Chrome, Android and Linux Security
OWASP Warns AI Agents Are Making Cyberattacks Easier for Less-Skilled Hackers
Microsoft Releases Emergency Windows Updates to Revoke Trust in Compromised eMudhra Certificates
FortiBleed 2.0 Exposes 40,573 FortiGate Secrets Across 975 Previously Unlisted Domains
Sony Data Breach Exposes 2.58 Million Customer Records and 54,401 Email Credentials
Critical Veeam Backup & Replication Flaw Allows Unauthenticated Attackers to Bypass Authorization
Microsoft Whistleblower Claims Foreign Engineers Can Access Sensitive U.S. Government Cloud Systems
Cybersecurity Dive
Insurance industry fears potential impacts stemming from PHP2Shell
Hackers seize on vulnerable IoT devices to spy, pivot and route traffic
CISA, security researchers confirm successful exploitation of PHP flaws
US launches program to deliver free cybersecurity help to rural hospitals
CISA promises proactive defense in new strategic plan
PwC confirms learning records breached in attack on vendor site
Security anchors a modern hybrid sovereign architecture
PHP exploitation moves at slower-than-expected pace, but millions remain at risk
Large businesses’ cybersecurity insurance claims are now less frequent but more expensive
China-nexus actor linked to attack on ConnectWise Cloud Backup
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
Oracle celebrates end of Cybersecurity Awareness Month with quadruple trouble
Serial ransomware crook gets 70 months behind bars for Nefilim, Hive roles
Cisco open sources tool for detecting AI agents on hacking sprees
123 Reg discloses 'AI cyberattack' on customer data, suspects China nexus
AI 'hacker' finds 4 severe bugs in popular industrial control software in under 4 hours
Day 2 of canceled classes at University of New Mexico after Health Sciences Center cyberattack
CISA confirms PHP2Shell under attack as researchers clock successful exploits
Microsoft releases out-of-band Windows fixes with certificate updates
Attack on email hosting provider for German far right party AfD exposed 345k accounts
Japanese virtual desktop cloud hacked so hard it asks to be banned
VentureBeat
AI agent access is moving faster than identity controls can govern
AI agents are about to put least privilege to the test
DeepSeek-V4.1-Flash-1017 arrives with improved benchmarks just as the U.S. government bans it from agencies — what enterprises should do
AI cloud security needs to prove control before agents reach production
Anyone can build apps with AI. But who owns them?
17 of 40 teams that say they enforce AI agent permissions still share the credentials behind them
Browser security’s buying spree rests on one engine, without a clear Plan B
TechCrunch
Hacker stole personnel data about thousands of Homeland Security employees, including CBP and ICE agents
Wiz’s CTO on PHP2Shell and the coming ‘vulnpocalypse’
The ‘Vulnpocalypse’ is coming for the internet’s aging code, says Wiz’s CTO 
South Korea’s financial industry hit by fresh wave of cyberattacks
Bank of America kindly asks that you don’t share your banking password with your AI assistant
US government says hackers are now exploiting critical PHP web bugs
Japan internet giant GMO says hackers posted stolen customer data
Will AI expose the rickety infrastructure of the internet?
PHP-ocalypse: How two critical web bugs almost broke the internet
Lab testing giant Quest Diagnostics confirms patients’ personal and health data was compromised during breach
Network World Security
Oracle adds Google TPUs to OCI to expand enterprise AI compute options
Cisco’s partner shift: What customers should expect from their Cisco partner in the AI era
IBM connects quantum chips with ‘quantum channels’ at 99% accuracy
2026 network outage report and internet health check
IBM aims to bring AI agent sprawl under enterprise control
HPE extends AI-driven networking to SD-WAN and SASE
FluidCloud replaces VDDK with its own disk copy engine for VMware exits
Cisco taps AI, partners to modernize IT operations and fortify network security
Key security concepts NetOps must understand to proactively support SecOps
Is it time to retire VPNs?
Help Net Security
GitHub’s npm package firewall can block brand-new versions before they install
I underestimated how fast security teams would trust AI to act in the SOC
ControlUp’s Pulse AI Resolve diagnoses and fixes IT issues within admin-defined controls
Compromised camera management software gives attackers a way into corporate networks
Digitate adds AI agents for patch planning, service desks, and SAP operations
345,000 email addresses stolen in cyberattack on Germany’s far-right party AfD
Swimlane connects custom detections to AI-led investigation and response
VikingCloud gives businesses a scorecard for AI governance readiness
Upwind secures $400 million to protect AI across endpoints, code, and cloud
Tailscale fixes SSH flaws allowing lateral movement within tailnets
SC Magazine
After the breach: Uncovering the full scope of the attack
Federal Election Commission systems taken offline following cyberattack
Upwind Security raises $400 million to scale cloud and AI security platform
Discord to index discoverable server discussions for web search
Cisco releases open source project quarry to monitor AI agent behavior
FCC commissioner outlines timeline for US Cyber Trust Mark rollout
Security researchers identify bluetooth vulnerabilities in warehouse barcode scanners
Malicious AI desktop applications distribute Yoba malware
Army selects Amazon Web Services and World Wide Technology for Project Griffin
Federal agencies face growing fraud threats requiring better data visibility
© 2026 RiskDiscovery | Sponsored by: Deception Logic