[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
Passing the Baton: Dark Reading Names New Editor-in-Chief
ASOS Breach Reveals the Risks in Customer-Facing SaaS
AI Scramble Drives Cybersecurity M&A Boom
What We Missed: FBI Strikes Back at ShinyHunters
Security Threats Don't Stop at the Office: Why Executives' Families Need Training, Too
Social Engineering AI Agents: The New BEC for 2026
'AgentCorruption' Puts AWS Environments at Risk With Single Prompt
Venezuelan Cartel's Malware Honcho Nabbed for ATM Jackpotting
Russian Spies Give 'MatchBoil' Malware a Stealthy Facelift
Writing the Next Chapter
Ars Technica
PC shipments fall 20.1 percent in “sharpest decline” since Q1 2023
Hackers obtain counterfeit TLS certificates for Google and other large services
OpenAI agents tried to hack Wikipedia tools and flooded it with traffic
Licensing costs driving 90 percent of VMware users to explore options: Survey
MCP for agent-to-agent comms may be the riskiest protocol you've never heard of
Apple changes full-disk access permissions to curb abuse from AI agents
Hacks of 2 federal agencies in a month have spilled a bonanza of sensitive data
Memory executives expect RAM shortage to continue through 2028
Attackers have been exploiting critical Zimbra flaw to steal emails
Cloudflare plans to issue quantum-safe TLS certificates
CyberScoop
Your AI agent is only as safe as the packages it downloads
Canadian cybersecurity executive arrested in federal extortion case
Leader of 764 pleads guilty, faces up to 30 years in prison
Anthropic rolls out program for ‘long-term commitment’ to secure critical infrastructure, open source software
DOJ, FBI seize Flax Typhoon-linked hacking tools Microscan, FishHub
Ransomware recovery CEO indicted after allegedly paying hackers and pocketing millions
OpenAI says Iran, Russia used AI journalists, think tanks to influence Western media
Quantum computers could break today’s encryption. Washington needs to prepare now.
Major rules for federal contractors handling sensitive data are nearing the finish line
FBI, French authorities seize deepfake CSAM-for-sale websites 
InfoSecurity Magazine
Major French Supermarket Chains Hit by Cyber-Attack, Food Stock Impacted
Net Closes Around ShinyHunters with Another FBI Arrest
Months-Old Palo Alto VPN Vulnerability Remains a Target for Ransomware Groups
Karaoke Giant Reveals Data Breach Impacting Eight Million
Wikimedia Says Rogue AI Agents Abused its Platforms
Q3 2026 Sets New Record for Ransomware Attacks
UK and Allies Warn of Cyber Threat from China’s Integrity Technology Group
AI Training Critical as Governance Challenges Grow
Major AI Firms Pledge Data Protection Changes Following UK Privacy Watchdog Push
Attackers Hijack Three ccTLDs to Obtain Google Certificates
SecurityWeek
IonQ to Acquire Zero Trust Firm Elisity for Up to $1.3 Billion
Bricksforge WordPress Plugin Vulnerability Exploited in the Wild
Canonical Websites Disrupted in Second DDoS Attack This Year
Mastermind of 15,000-Mule Cybercrime Laundering Network Pleads Guilty in US
iRhythm Data Breach Impacts at Least 360,000 People
Ransomware Response Expert Arrested in ShinyHunters FBI Hack Probe
Critical SonicWall Vulnerability Exploited Days After Disclosure
Let’s Encrypt Cuts Default Certificate Validity to 64 Days Ahead of 45-Day Switch
Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison
OpenAI Fires 3 Safety Researchers in Dispute Over AI Risks
ZDNet
Google’s new Fitbit Edge solves my biggest gripe with the Pixel Watch
Ring’s new smart lock has a manual fallback that can’t lock you out – how it works
4 ways Amazon’s new Alexa tablets eclipse the Fire line – starting with Google Play
‘I use AI to do the things that I’m bad at’: Linus Torvalds on why it works for him
Got a Microsoft 365 subscription? Your storage is about to shrink
Regulators are trying to protect you from being fired by AI – here’s how
Can AI fix legacy IT? The ‘economics don’t hold up,’ says former IBM strategist
Yelp, who? 4 ways Google Maps can help you find your next meal – and order it
Microsoft’s new Surface Laptop Ultra finally has a starting price (you should sit down)
Managers are using AI to write performance reviews – and it shows
The Hacker News
Bring Your Own Agent: Your Employees' Assistants Are Already Logged In
Ledger Finds Unauthorized Hardware Implant in CryptoBilis-Sold Wallet Amid Fund Theft Reports
Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch
Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE
CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records
P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands
The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn't
Anthropic Cuts Live Internet Access for Internal AI Tests After Claude Exploits Injection Flaws
Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories
FBI Arrests Another ShinyHunters Suspect Reportedly Involved in Its Jobs Portal Hack
BleepingComputer
Inside AvisLoader: A Windows Malware Loader Built to Resist Disruption
Retail giant Ahold Delhaize takes systems offline after cyberattack
GitLab warns of max severity code execution vulnerability
Microsoft: Windows 11 23H2 reaches end of support in 30 days
Nippon Columbia malware incident exposes 8.6 million karaoke fan records
Cyber exec arrested in case allegedly tied to ShinyHunters hackers
ARTEX AI, Claude agents used in cyberattacks on South Korean banks
Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management
Hackers abuse Google Ads, Bing redirects to push Claude ClickFix attacks
Unpatched AhsayCBS flaws exploited to deploy webshells, mine crypto
gbhackers
Critical Google DevSite Flaw Allowed Attackers to Execute Remote Code Without Authentication
Critical WordPress Bricksforge Flaw Lets Unauthenticated Attackers Execute Remote Code
Researchers Discover New Domain Spoofing Techniques That Bypass Chrome’s Phishing Protections
FBI Arrests Canadian Cybersecurity Executive in ShinyHunters-Linked Cybercrime Investigation
Nippon Columbia Malware Infection Puts 8.72 Million Daiichikosho Customer Records at Risk
Discourse ImageMagick Vulnerability Enables Arbitrary File Read Through Malicious Image Uploads
CISA Adds Actively Exploited Apache Struts Command Injection Flaw to KEV Catalog
WhatsApp-Delivered Malware Injects Into Windows Task Scheduler to Run as SYSTEM
Android Firmware Malware Uses Ad Fraud and Proxy Botnets to Generate Revenue
AnyDesk Vulnerability Allowing Remote Code Execution With Root Privileges
Cybersecurity Dive
AI-driven security: Why agentic AI is changing cybersecurity
FBI seizes domains linked to China-nexus botnet
As frontier models go rogue, colleges beef up AI cybersecurity education
What the C-suite needs to know about AI governance
US government lagging in transition to post-quantum encryption, GAO finds
AI underscores singular importance of phishing-resistant authentication, Okta says
FBI warns that FortiBleed credential-harvesting attacks are locking out firewall users
IBM’s AI-powered vulnerability clearinghouse finds hundreds of Java flaws
US cyber resilience, oversight tested in series of attacks
Citrix issues patch for third exploited flaw in NetScaler
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
Ukrainian drone strikes on Yandex datacenters knock cloud and payments offline
Imagine there's no Shiny Hunters – AI could make human hacking crews obsolete
AI systems are fully capable of carrying out nightmare attacks against infrastructure and nobody's ready
Two characters open up a world of typosquatting opportunities in Chromium browsers
AWS AgentCore security undone by prompt requesting credentials
Citrix gives NetScaler admins another critical reason to patch
US disrupts Chinese hacking tools as 7 govts warn of PRC spies stealing sensitive data worldwide
High-severity Nvidia bug could crash GPU monitoring on exposed servers
Shai-Hulud worm makes jump to AI infrastructure with Tensorlake compromise
Fighting GenAI with GenAI: The New Email Security Landscape
VentureBeat
Anthropic’s Cyber Mission starts with 6,157 findings reported to maintainers and 516 patched
Microsoft's record Patch Tuesday shows why severity can't decide what gets patched first
Your vibe-coded apps are a ticking time bomb for your business. Here’s how to secure them.
AI agents need more than access control — they need identity at runtime
22 of 37 surveyed companies that enforce AI agent permissions still have agents sharing credentials
OpenAI’s new ‘Private Intelligence' targets a growing enterprise concern: who can see your AI data?
Anthropic documented a new problem for security teams: Attacks that can adapt while they're underway
TechCrunch
Surveillance company Flock cuts staff as privacy backlash grows
Asos confirms breach of customer data after hackers send rogue app notification
CIA officer admits to creating fake top secret government program to steal over $190M, including gold bars
LibreOffice says ‘no AI’ is now a software feature
Hackers steal 8 million citizens’ records from Danish government database
Google froze its open source bug bounty program due to a ‘significant rise’ in AI submissions
Federal judge calls Flock ‘indiscriminate mass surveillance’
OpenAI safety employee resigns, claiming the company’s ‘culture is broken’
Apple says it’s tightening macOS ‘Full Disk Access’ controls due to new risks from AI agents
Medical records giant Epic pauses product development to fix security bugs that risk patients’ data
Network World Security
Ørsted builds compliance into automation, speeds firewall changes
It’s not your model — AI has a data movement problem
ICANN set to expand gTLD: Brands, AI, and crypto all get new domains
Oracle reportedly lands $7B GPU deal for Tencent
Bidding war over key component could eliminate third hard disk maker
Citrix issues its weekly critical security patch for NetScaler ADC and NetScaler Gateway
Tool sprawl, AI complicate enterprise network operations
Nvidia-backed Upscale takes on AI networking silos with Token Fabric
2026 network outage report and internet health check
SonicWall’s latest critical flaw indicates a security pattern, not another one-off bug
Help Net Security
Microsoft’s new model helps AI agents judge their next move
Low-cost Android phones are arriving with malware that owners can’t uninstall
Hidden implant in Ledger hardware wallets linked to $93M theft
Windows PCs missing key updates could lose security fixes in 2027
Let’s Encrypt TLS certificate lifetimes to drop from 90 to 64 days starting February 2027
Geopolitics and the cyber resilience gap belong in your threat model
Strands Box: Open-source sandbox for AI agents
AI vulnerability patching has a grading problem
What makes some open source updates so difficult?
Week in review: FortiBleed is still active, Patch Tuesday forecast
SC Magazine
What CISOs can learn from fraud teams
Why AI reuse makes privacy risk a business decision
How to evaluate data use governance and AI reuse controls
Data Security in the AI Era, Don't Let AI Ruin your Presentation, and the Weekly News - Hadar Krasner - ESW #480
New characters allow lookalike domains to fool browsers
Hackers use Bing redirects in Google ads for fake Claude installers
Amazon Bedrock agent vulnerability allowed credential theft and code access
AI agents make identity the front line of enterprise security
OpenAI revenue miss shakes AI stocks, but innovation continues
AnyDesk Linux exploit grants root access before connection approval
© 2026 RiskDiscovery | Sponsored by: Deception Logic