[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
State IDs for AI Agents: Will Estonia Set a Precedent?
Big Brand Jobs Scam Targets Marketing Pros' Google Accounts
Dialogflow CX 'Rogue Agent' Flaw Enabled AI Chatbot Data Theft
'GitLost' Flaw Leaks Private Data From GitHub's Agentic Workflows
'BusySnake' Infostealer Slithers Into Critical Infrastructure Networks
CitrixBleed-ing Again? NetScaler Vulnerability Under Attack
JadePuffer: The First Complete LLM-Driven Ransomware Attack
Chinese LLMs Broaden the Gap Between Attackers & Defenders
Aussies Face Reduced Cybercrime Risk, as Pressure Shifts to SMBs
Apple Reverses Age-Old Patch Policy to Keep Up With AI
Ars Technica
US rare earths flow to Asia as domestic demand is slow to emerge
Hackers can use 9 of the most popular AI tools to assemble massive botnets
Newly discovered PamStealer isn't your typical macOS malware
T-Mobile moving tens of thousands of virtual machines off VMware amid lawsuit
New attack provides one more reason why AI browsers are a bad idea
US offers $10 million for info on group behind Signal and WhatsApp hacking spree
Notion killing Skiff-influenced email app since most users use AI agents instead
One-two punch delivered in global operation disrupts cybercrime "assembly line"
White House drastically shortens deadline for dropping quantum-vulnerable crypto
Oracle’s 21,000 layoffs help drive its debt-fueled AI investments
CyberScoop
Found fast, fixed slow: The gap the AI clearinghouse must close
Spain arrests suspected hacker linked to Russian hacktivist campaign
Deepfake CSAM lawsuit against xAI, Grok expands
Suspected Chinese espionage group used a Roundcube exploit chain to burrow into universities
US Army websites defaced with pro-Kurdish sentiments, insults to Trump
Sysdig clocks first documented case of agentic ransomware
Finding vulnerabilities was never the hard part
Someone infected a spyware probe overseer with spyware
Alleged longstanding member of Scattered Spider extradited to US
Researchers spot exploitation of another critical Oracle defect
InfoSecurity Magazine
RedWing Android Spyware Sold as a Service on Telegram
China-Linked APT Expands Proxy Network With New Malware
Threat Actors Uses Agentic AI to Rapidly Compromise Cloud Target
New Malicious Campaign Delivers Vidar Infostealer and Monero Crypto Miner
NCSC Touts National Scale, AI-Powered “Cyber Shield” for Defense
Suspected Chinese Threat Group Targets Universities via Vulnerable Roundcube Servers
Scattered Spider’s Structure More Like a Cybercrime Collective Than a Unified Gang
UK Government Launches Cyber Resilience Pledge, Claiming 60+ Signatories
Hackers Exploit Maximum Severity Adobe ColdFusion Flaw
Phishing Attacks Targeted Facebook Users With Fake Verification Offer
SecurityWeek
Webinar Today: Why Email Security Keeps Failing
Google Dialogflow CX Bug Allowed Attackers to Hijack AI Conversations
CISA Urges Immediate Patching of Exploited ColdFusion, Langflow, Joomla Flaws
Critical Vulnerability Exposes GitHub Agentic Workflows to Prompt Injection
County Government Reportedly Paid $1 Million to Cyber Extortion Group
Critical Gitea Flaw Under Active Exploitation, Researchers Warn
CISA Reportedly Using Anthropic’s Mythos to Scan Government Software for Flaws
Critical Adobe ColdFusion Vulnerability Exploited in Attacks
Iran-Linked Hackers Using Modular C&C Framework in Cyberattacks
CISO Conversations: Tarah Wheeler, Cybersecurity Leader, Thought Leader and Original Thinker
ZDNet
I tried DuckDuckGo's new video player, and it blocks YouTube ads for free
I tried Claude Cowork on my Gmail inbox after Gemini choked - and it saved me hours of work
I tested the Roborock Saros 20, and I'd trust it for the next decade
GitHub's former CEO launches a distributed Git network built for the agentic coding age
Why we're all posting less on social media these days
3 Android Auto automations that make my drives much easier - and how I set them up
Why leaving extension cords plugged in permanently is riskier than you realize
This free Android app makes sharing files across Windows, Mac, and iOS so easy for me
I spent a week with Sony's $3,500 Bravia TV - the True RGB display is the real deal
Samsung unveils Galaxy Z Fold 8 deal for up to $1,230 off ahead of July Unpacked - how to qualify
The Hacker News
New HalluSquatting Attack Could Trick AI Coding Assistants Into Installing Botnet Malware
Ubiquiti Patches Critical UniFi Flaws Across Connect, Talk, Access, Protect, and OS
New Ghost Phishing Wave Is Breaking Traditional Email Security
SCMBANKER Malware Uses ClickFix Lures to Target Mexican Banking Users
GitHub 'Verified' Commits Can Be Rewritten Into New Hashes Without Breaking Signatures
The Verification Step Is the New ATO Battleground in 2026
GitHub Copilot Refuses Harmful Requests in Chat, Then Writes Them in Code
China-Linked UAT-7810 Expands ORB Network With New LONGLEASH Malware
15-Year-Old GhostLock Flaw Enables Root and Container Escape on Most Linux Distros
CISA Adds 4 Actively Exploited Adobe, Joomla, and Langflow Flaws to KEV
BleepingComputer
3 Ways AI Powers Service Desk Attacks and How to Prevent Them
DuckDuckGo browser now blocks YouTube video ads
Telco giant KDDI says data breach affects over 12 million people
CISA orders feds to prioritize patching Langflow auth bypass flaw
Ubiquiti warns of new max severity UniFi OS vulnerability
CISA orders feds to patch max severity ColdFusion flaw by Friday
Accenture confirms breach after hacker offers stolen data for sale
Chinese hackers develop LONGLEASH malware to expand ORB network
Hidden backdoor in Tenda router firmware grants admin access
Spain arrests suspected member of pro-Russian hacktivist groups
gbhackers
OpenMatter Network Joins HOL Initiative to Help Define Standards for Verifiable AI Collaboration and Security
Best Next-Generation Firewall (NGFW) Solutions Compared (2026): Features & Pricing 
Claude Cowork Expands to Web and Mobile With Background AI Agent Workflows
Attackers Can Generate Duplicate Verified GitHub Commits Using Signature Malleability
IonStack Exploit Chain Lets Hackers Root Android 17 Phones With a Single URL Click
Fancy Bear Uses LSB Steganography and Reflective Loading to Run C# Remote-Control Trojan
ESET Threat Report H1 2026 Highlights Malicious AI Skills, ClickFix Surge, and EDR Killers
Exposed Banana RAT Infrastructure Reveals Payload Generator and Obfuscator Tooling
CrowdStrike Uncovers 5 New Prompt Injection Techniques Targeting AI Agents
AI-as-a-Service Botnet Routes Malicious Workloads Across Compromised Windows and Linux Hosts
Cybersecurity Dive
Businesses modernizing networks for AI fear expanding attack surface, limited visibility
Alleged member of Scattered Spider extradited to US
Why schools are easy prey for hackers — and why they struggle to fight back
The security leaders defining the next decade aren’t in CISO seats yet
FortiBleed campaign traced to INC and Lynx ransomware operations
Most cybersecurity workers have been told to conceal a breach, report finds
Critical flaw in Oracle E-Business Suite is under immediate threat
Anthropic reactivates Fable, Mythos after securing government approval
Critical flaw in SimpleHelp exploited in attacks targeting sensitive credentials
DHS proposes new system for public-private infrastructure security collaboration
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
Bug in top AI coding agents shows that Unix-era security headaches never really die
China tells devs to ditch Claude Code over 'backdoor code' fears
Windows is watching: Anti-piracy tool fingers Scattered Spider suspect
GitHub AI agent leaks private repos when asked nicely
CAI cloud worm gives competitors' malware the boot, then steals secrets and mines for coin
Predatorgate snoopfest victims launch €8M sueball at spyware maker
Enterprise AI still smarting from leaping before looking
Fake IT bods on Microsoft Teams coax workers into installing malware
Spain collars alleged pro-Russia hacktivist after FBI tip-off
Government's cyber pledge lands 60 signatories, including M&S and, somehow, Capita
VentureBeat
AI has collapsed the cyber response window — resilience now starts before the attack
The real cost, security, and culture problems behind enterprise AI agents
Digital resilience compounds when AI and human expertise scale together
The attack that hijacked Claude Code came through Sentry. Datadog, PagerDuty, and Jira have the same exposure.
Prompt injection is exploiting enterprise AI's biggest design flaws by targeting agents, RAG pipelines and model routers
Autonomous security agents need complete data. Here's how to check if yours is ready.
Frontier AI is rewriting the economics of software supply chain security
TechCrunch
Another massive data breach exposed millions of driver’s license numbers
Hacked, leaked, and held for ransom: The worst breaches of 2026 so far
Hacktivists call out Trump by hacking and defacing US Army websites
Savi’s app aims to protect consumers from realistic AI scams like kidnappers demanding ransom
The ‘first’ AI-run ransomware attack still needed a human
Canadian spy agency says it hacked drug traffickers, extremists, and a ransomware gang last year
Alibaba reportedly bans employees from using Claude Code
Politician who investigated spyware abuses had his phone hacked with Pegasus spyware
US government says it got hacked — again
In major privacy win, Supreme Court rules geofence warrants are protected by privacy rights
Network World Security
Infoblox acquires Kentik, adding network observability to its DNS and DDI platform
SpaceXAI wants to compete on AI infrastructure, not just AI models
Gartner: Data center electricity consumption to grow 26% in 2026
IBM grows mainframe family with rack, frame models targeting AI, hybrid clouds
2026 network outage report and internet health check
Envirotech Vehicles Closes Merger with Azio AI Ahead of Schedule, Positioning Combined Company to Capture $487 Billion 2026 AI Infrastructure Opportunity
Network evolution for the Agentic AI era
Meta reuses old RAM in new servers with custom bridge chip
Cloud sovereignty: First four providers sign up to CISPE certification program
Cheap Chinese chips could offer way out of RAM price crisis, Apple suggests
Help Net Security
Attackers using Langflow flaw for credential harvesting (CVE-2026-55255)
Censys Internet Map links real-time DNS data to internet infrastructure
Blackpoint AI SOC Agent autonomously contains identity-based attacks
First Recon AI Security Runtime helps enterprises govern AI with audit-ready evidence
FalconStor Cloud Clean Room enables validated recovery without dedicated infrastructure
DNSFilter makes its DNS threat protection available to OEM partners
Attestiv DeepScan combines AI and forensic analysis for file validation
Accenture acknowledges security incident following 35GB data theft claim
Crusoe brings serverless fine-tuning to AI model development
Automox MCP Server adds visual reviews and AI-driven patch policy creation
SC Magazine
Here's what our industry learned the past 90 days since the Mythos announcement
AI is turning overshared data into a major security risk
‘GitLost’ prompt injection leaks private repos via GitHub Agentic Workflows
Why AI Just Broke Traditional IT Security as Leaders Clash Over AI's Value and Hiring - Matt Quinn - BSW #455
Dune References, FAT, Claude, ZhiPu, PolinRider, RentaBot, Sony, Aaran Leyland & More - SWN #596
Why we need governance frameworks that match the speed of AI
Linux bug dormant for 16 years can cause a VM escape
Your edge infrastructure has no witness
SSH Keys Are a Silent Security Risk: The Machine Identity Crisis Explained - WC #1
Attackers use Microsoft Teams voice calls to deliver EtherRAT malware
© 2026 RiskDiscovery | Sponsored by: Deception Logic