[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
Former Citigroup CISO Blauner on What Makes A Great Security Leader
AI Agent Drives Espionage Attack on Thai Ministry of Finance
Agentic Browsers Rewind Web Security by 20 years
'Confused Deputy' Flaws Persist in Google Cloud, Microsoft Azure
FBI: Breaking Affiliate Trust Sped Along LockBit's Takedown
Why Resetting Passwords No Longer Stops Attackers
Adversaries Don't Need a Zero-Day — They Read Your Rulebook
CISOs vs. Boards: Myth or Misunderstanding?
Escape Artists: 'Incorrigible' AI Models Resist Rehabilitation
Vatican's Official Prayer App Leaks 700K+ Global Users' PII
Ars Technica
Microsoft unveils AI security tools it says outperform competing platforms
TreeSize won't renew perpetual-license support unless users subscribe
HP fined 1.4 billion rupees for “cartelization” of ink cartridges, toner, PCs
Now, even Russia's most elite hackers are using Clickfix to infect devices
Energy IPOs surge as investors hunt for ways to play AI boom
Sheetz is quitting VMware, migrating 11,000 virtual machines
Windows 0-day drops the same day Microsoft releases record number of patches
Microsoft’s Secure Boot has been broken for a decade and no one noticed until now
The US government warns that Russia state hackers are coming after your router
Now, defenders are embracing the prompt injection, too
CyberScoop
Microsoft debuts AI cybersecurity offerings as competition heats up
Trump asks Supreme Court to let him curtail mail-in voting ahead of midterms
Google’s solution to hacker name confusion? Yet another naming system
Sen. Wyden urges feds to discard older, insecure, public-facing VPNs
Industry’s message on CIRCIA: Please ask us fewer questions about cyberattacks
Despite multiple takedowns, botnets continue to grow
Microsoft, tech companies throw weight behind spread of open-source AI
Rubio restricts visas for sextortionists, cyber scammers
Russian espionage group using novel Zimbra exploit to steal sensitive data from Western countries
ANCHOR-CI could fix 20 years of broken government-industry collaboration
InfoSecurity Magazine
Phishing Dominates as Initial Entry Method for Cyber-Attacks, as Hackers Hone Evasion Techniques
Microsoft Launches Flurry of AI Security Initiatives to Combat AI-Enabled Threats
Coca-Cola Reveals Subsidiary Fairlife Suffered Data Breach
NVIDIA’s Open Secure AI Alliance Is Missing Some Big Names
New CREST AI Standards to Deliver AI-Enabled Pentesting Accreditation
SourTrade Malvertising Campaign Secretly Builds Malware in the Browser
Ransomware Groups Increasingly Deploy EDR Kill Techniques
Hotel Wi-Fi Routers Compromised to Steal Corporate Login Credentials From Visitors
ChatGPT Among Top 10 Most Impersonated Brands in Phishing Attacks, Says Check Point
Ransomware Attacks Targeting Universities on the Rise
SecurityWeek
OT Security Startup Frenos Raises $1.52 Million
Microsoft Unveils MAI-Cyber-1-Flash, Its First Cybersecurity AI Model 
Act Security Emerges from Stealth to Fight the Patch Problem
Hacker Conversations: Tal Kollander’s Journey From Black Hat to Hack Blocker
Hush Security Raises $30 Million for AI Agent Governance
Google Adopts New Threat Actor Naming System
Unpatched Fastjson Vulnerability Exploited in Attacks
Critical Arista VeloCloud Orchestrator Vulnerability Exploited as Zero-Day
Origin Energy Data Breach Affects 900,000 Australians
For Some, So-Called ‘Skynet Day’ Came too Close to Sci-Fi After a Rogue Agent Hacked Into a Startup
ZDNet
You've been using your power bank wrong, and airline rules make that obvious
How much RAM does your phone really need in 2026?
AIO Launcher is one of the coolest minimal Android launchers I've used - and it's free
My 5 favorite Windows Insider features in 2026 so far
Get Spotify's student discount plus Hulu for just $6 a month - here's how
I wore the two best Amazfit smartwatches for a month - Is the flagship worth $230 more?
I'm recommending this 14-inch HP laptop to almost everyone in 2026 - even with the RAM crisis
I tested a new Debian Linux loaded with local AI - see if it's right for you
Costco will take your old tech and gift you a gift card - here's what to know
Is open source the answer to rogue AI agents? Nvidia's new alliance says yes
The Hacker News
Nimbus Manticore Deploys NightLedger and Turns Victim Systems Into Covert Relays
Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging In
Researcher Says AI Helped Develop Linux Traffic-Control Race Into Root Exploit
Microsoft Says New Cybersecurity AI Model Helps MDASH Score 95.95% at Half the Cost
Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw
NVIDIA Forms 37-Member Open Secure AI Alliance and Open-Sources NOOA Framework
Dysphoria IoT Botnet Adds Blockchain C2 and Victim Relays After JackSkid Disruption
Public Exploit Released for Patched vBulletin Pre-Auth Code Execution Flaw
⚡ Weekly Recap: Rogue AI Agents, Check Point Exploit, Slopsquatting, ClickFix Lures and More
n8n Sandbox Escape Lets Workflow Editors Run OS Commands as the n8n Process
BleepingComputer
Over 24,000 exposed server BMCs leak password hash via decades-old flaw
Data breach at medical billing firm MCBS affects 1.26 million people
Hackers target US firms in FastJson RCE zero-day attacks
Arista patches VeloCloud Orchestrator zero-day exploited in attacks
New Dysphoria DDoS botnet spreads to 200k devices worldwide
New Certighost PoC exploit lets attackers hijack Windows domains
Apple sued over fake App Store crypto wallet app stealing $1.8M in Bitcoin
Coca-Cola confirms data theft in Fairlife ransomware attack
Ernst & Young data breach claimed by ShinyHunters extortion gang
Shadow AI agents are multiplying. Here's how to find and secure them.
gbhackers
Fake Claude Code Installer Delivers MacSync macOS Infostealer Through Google Ads
Dismantled Kratos Phishing Kit Becomes Blueprint for Attacks on Microsoft 365 Users
CastleLoader Campaign Deploys NeedleStealer to Steal Crypto Wallet Seeds and Browser Sessions
Critical TeamCity Flaw Lets Unauthenticated Attackers Execute System Commands
Chinese Hackers Use RedRelay Multi-Hop Network to Conceal Global Cyber Operations
AI-Discovered Linux Kernel Zero-Day Enables Root Privilege Escalation
Tengu Mirai Botnet Uses Watchdog Reboots and Binary Bricking to Resist Removal
Fake ShinyHunters Emails Give Victims 48 Hours to Pay $2,000 Bitcoin Ransom
LegacyHive Exploit Abuses Windows Profile Loading to Hijack User Registry Hives
Top 10 Best VPN Alternatives For Secure Remote Access in 2026
Cybersecurity Dive
Coca-Cola restores most production capacity at dairy unit after ransomware attack
Tech industry giants say US must embrace openness, transparency in AI
What the Trojan horse gets right (and wrong) about AI security
In the Mythos era, security belongs at runtime
Zero-day flaw in Check Point SmartConsole is under exploitation
The most vulnerable AI products are also some of the most commonly exposed online
Russia-backed threat actor targets Western organizations in phishing campaign
CISA, FBI warn that Iran-linked hackers are expanding target set for water, energy
GAO report details scope of cybersecurity regulation overlap
Threat group claims credit for ransomware attack on Coca-Cola’s dairy unit
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
Uncle Sam needs you to fight for 6G leadership and security, lest Beijing get there first
Arista patches actively exploited VeloCloud bug as CISA puts admins on the clock
Microsoft's solution to AI security: more AI and more acronyms
Tech giants link hands to praise open AI models after OpenAI - Hugging Face attack
Microsoft Defender for Endpoint leaves some Linux boxes defenseless after update
Google goes it alone with a new cybercrime crew taxonomy
Pope's official prayer app commits cardinal sin, leaks 700K+ users' info
Europol flags 4,340 'horrific' URLs linked to The Com
Uncle Sam tells overseas cybercrooks their visas are canceled
OpenAI-Hugging Face attack doesn't mean agents are evil – unless you tell them to be
VentureBeat
Snowflake launches Cortex AI Gateway to control AI agents and prevent runaway enterprise costs
Microsoft launches AI cybersecurity model, agentic defense platform to cut enterprise security costs
New ransomware targets AI model weights and can't even collect the ransom
Multi-turn attacks broke AI models 88% of the time — single-turn testing missed it, Cisco AI security lead warns at VB Transform 2026
An AI now judges every move Rubrik's agents make, its AI chief said at VB Transform 2026 — but no one's measured if the judge is right
The credential that let OpenAI's agents into Hugging Face exists in most enterprises right now
OpenAI's models broke containment and cyberattacked Hugging Face — what enterprises need to know
TechCrunch
PSA: Your Claude shared chats and Artifacts may have ended up on Google
Microsoft launches its first cybersecurity model, plus a new agentic cybersecurity system
Hugging Face CEO calls for ‘radical transparency’ after ‘unprecedented’ OpenAI hack
The hacker who humiliated spyware makers and was never caught
US accuses American of allegedly wiping his phone using a ‘duress’ password during border search
How AI guardrails are impeding the work of offensive cybersecurity researchers
AegisAI, founded by former Google security execs, lands $36M to stop AI-driven spear phishing
US government says Iran-linked hackers are disrupting American water and energy providers
How OpenAI’s human mistake led to the AI-powered hack on Hugging Face
If you pay a hacker’s ransom, chances are that they’ll come back for more
Network World Security
Up to 50% of data center capacity slated for 2026 could be delayed
Network jobs watch: Hiring, skills and certification trends
Cisco, AMD bring enterprise-level security, visibility to Ryzen AI Halo systems
Cloudflare Internal DNS puts public and private DNS on one policy engine
Atos launches sovereign cloud service to power comeback
Microsoft explains why its West US Azure and cloud services failed
ISC2 seeks input from IT pros for AI security certification
Why enterprises should care about Nokia’s AI-RAN platform
IPv4 address exhaustion drives NetworkManager 1.58 release
Google has started selling TPUs, but still keeps most for itself
Help Net Security
Prescient Security adds attack surface management to Cait, broadens AI-assisted pentesting
Cyberhaven launches Flow to secure data across human and AI workflows
Intel 471 expands Verity471 with AI agent and MCP support for threat intelligence
SpecterOps brings AWS attack path management and AI to hybrid identity security
Team Cymru unveils Pure Signal Command for AI-powered threat intelligence and incident response
Exposed BMCs hand out password hashes before login
JetBrains fixes critical unauthenticated RCE in TeamCity On-Premises (CVE-2026-63077)
VERITAS project could change the way scientists secure AI
Grafana Assistant expands with AI agents for investigations, automation, and observability
AWS to retire Shield Advanced L7 automatic mitigation on January 1, 2027
SC Magazine
Inside the OWASP Agent Security Regression Harness Project - Mert Satilmaz - ASW #393
How to Design Segmentation That Actually Reduces Blast Radius
GitHub and PyPI implement new security measures against supply-chain attacks
Russian hackers exploited Zimbra zero-day in espionage campaigns
Steam forums used for ClickFix cryptominer attacks
The enduring mystery of hacker Phineas Fisher
Malvertising campaign assembles malware in browser
Phishing attacks on insurance companies evolve to real-time account hijacking
Scammers impersonate ShinyHunters in new sextortion email campaign
Pope's prayer app leaks 700,000 user emails
© 2026 RiskDiscovery | Sponsored by: Deception Logic