[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
Researchers Infiltrate Microsoft Tech Support Scam Operation
'AdFection' Turns Ad Impressions Into Zero-Click Spyware Delivery
ConnectWise Disables Cloud Backups Amid Concerns for Downstream MSPs
OnlyFans Copyright Takedowns Expose Compromised Websites
The Evolving Cybersecurity Lexicon: Vulnerability Discovery to Resilience
BeyondTrust Remote Support Zero-Day Continues Trend of Exploited Edge Bugs
Fake Claude, ChatGPT Attacks Surge, Putting Developers at Risk
Biomemory Launches DNA Shield, First Commercial Product Built on Its Molecular IT Platform
Enterprise AI Enters Risk Management Phase as Security Concerns Rise
AI Takes Control of Robotic Arm in 16 Minutes Flat
Ars Technica
PSA: Patch your Plex media server before someone hacks it
ReactOS reaches major milestone with NTFS install support
OpenAI models hacked a crypto wallet and breached more websites
Targeted ads delivered 0-click exploits to install mercenary malware
Fridge hack costing millions and sparking fires stemmed from poor security
Anthropic warns small AI models could self-replicate through IoT devices
Topgolf saved over $11.3 million after leaving VMware
PC shipments fall 20.1 percent in “sharpest decline” since Q1 2023
Hackers obtain counterfeit TLS certificates for Google and other large services
OpenAI agents tried to hack Wikipedia tools and flooded it with traffic
CyberScoop
Wyden seeks adoption of encryption tech at hundreds of federal agencies to protect visitors’ sensitive traffic
DHS to ban DeepSeek from federal civilian agencies
Spyware found on devices belonging to prominent Serbian critics as elections loom
Federal agencies recommend cyber controls, independent testing for frontier AI systems
Prolific Chinese espionage group exploits BeyondTrust zero-day
Cybersecurity incident at BAE Systems disrupts US bankruptcy court system
Proofpoint to buy Varonis for $6.3 billion
The next election influence campaign will target your AI chatbot
AdFection: How mercenary spyware invades victims’ devices through targeted advertising
Authorities charge alleged OLVX cybercrime marketplace operator in North Macedonia
InfoSecurity Magazine
AI Agent Adoption Creates Risk as Oversight Struggles to Keep Pace, Splunk Finds
Siemens Customers Targeted by ClickFix Attackers Exploiting DLL Side-Loading Flaw
Exploited Vulnerabilities Typically Take Three Months to Patch, Moody’s Finds
Conduent Agrees to Pay $80m to Settle Data Breach Class Action
OpenCode Breach Could Affect OpenAI, Anthropic and Google
ConnectWise Shuts Off Cloud Services After ‘Unauthorized Access’ to Microsoft 365 Tenants
US Cybersecurity Job Postings Fall 26%, Hitting Four Year Low
Ransomware Gangs Increasingly Turn to Threats of Physical Violence to Extort Payments
China Espionage Actor Actively Targeting Critical BeyondTrust Flaw, Google Warns
Cyber Incident at BAE Systems Disrupts US Federal Bankruptcy Noticing
SecurityWeek
Microsoft Targets Rogue AI Agents With Dynamic Permissions, Risk Scoring
Hackers Steal 1.8 Million Records From Nikkei
970,000 Medi-Cal Members Affected by Paradigm Healthcare Data Breach
Siemens Software Center Vulnerability Exploited in ClickFix Malware Attacks
Drupal Warns of Fast Exploitation Risk for Critical Core RCE Flaw
Rank Math PRO WordPress Plugin Compromised in Supply Chain Attack
ConnectWise Suspends Cloud Services in Response to Cyberattack
Plex2Shell Exploit Chain Weaponized Against Plex Servers Hours After Disclosure
One Compromised Login Exposed Millions of California Students’ Records
Exploited Fortinet Bug Linked to Stealthy FortiGate Implant in Telecom Hack
ZDNet
TechPulse puts ZDNET and 5 other tech sites in one feed – for free
How to find Flock cameras near you with MapQuest’s new ‘surveillance layer’
Plug-in solar is legal in these 10 states now – how it could save you money
Have a Meta business account? You’re consenting to AI scraping now, legal experts say
Munich dumps proprietary for open source (again) – but no Linux desktop
Anthropic gives third-party auditors ’employee-like access’ in AI industry first
Want an iPhone Duo before 2027? Don’t preorder from Apple – try this instead
How many jobs is your state losing to AI? This dashboard tracks the cuts – and the cost
Renting? These 2 new Apple smart home devices are worth your money (and these 5 are not)
Apple’s first touchscreen MacBook is days away – with another OLED surprise
The Hacker News
WhatsApp Hid Instructions in Help Pages Telling Its AI Chatbot Not to Recommend Privacy Regulators
What Security Teams Can Do To Tame Wild Code
Go Issues Emergency Update Blocking Eight CA Keys Over Undisclosed Security Concerns
Russian APT28 Breaches NATO Naval Shipbuilder in NATO Country, Deploys New Reflective Loader
ConnectWise Resets Credentials as Cloud Backup Remains Offline After Security Incident
Hackers Hijack Five OVHcloud CLI Releases to Distribute Secret-Stealing Malware
ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access Trojan
Ex-OpenAI Engineer Detained in Spy Device Case as Saudi Royal Contacts Emerge
Hackers Use New ROMULUS ClickFix Platform to Deliver LegionLoader and Other Malware
Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor
BleepingComputer
OVHcloud CLI releases backdoored on GitHub to steal developer secrets
Windows Server 2025 gets support for quick machine recovery
Ahold Delhaize: Cyberattack affects services across US and Europe
Revolut outage disrupts online banking operations worldwide
Nikkei discloses third data breach in a month, 1.8M records exposed
WordPress SEO plugin Rank Math compromised to backdoor websites
Hackers hijack AOMEI update servers to secretly spread malware
Bullhorn takes staffing platform offline to contain cyberattack
OpenCode hack exposes API keys amid AI distillation attacks
Microsoft fixes game, app crashes caused by recent Windows update
gbhackers
Scammers Turn Legitimate Fintech Platforms Into Phishing Tools to Steal Banking Details
Hackers Compromise OVHcloud GitHub Repository to Distribute Secret-Stealing Malware
Rank Math PRO WordPress Plugin Compromised to Spread Malware and Steal Credentials
Hackers Can Take Over WordPress Websites Without a Password Using Two Security Flaws
Ransomware Gangs Use AI to Find and Steal the Most Sensitive Company Data Quickly
Hackers Exploit Zimbra Zero-Click Flaw to Take Control of Email Servers
Hackers Turn Low-Cost Android Phones Into Hidden Proxy Botnets Through Preinstalled Malware
GhostAction Hackers Inject Malicious Security Workflows Into 790 GitHub Repositories
Hacker Uses AI Agents to Breach Over 100 Company Websites With Minimal Human Effort
New RedAgents AI Platform Deploys Multiple Hacking Agents to Find and Exploit Vulnerabilities
Cybersecurity Dive
Boards confident on cybersecurity, AI oversight, but tech changes outpace readiness
Q-day is coming: How to prepare for post-quantum security challenges
Hybrid mesh firewalls: Distributed security enforcement for a self-driving network
China-nexus espionage actor targets BeyondTrust support tool in zero-day campaign
Open-source security rests on understanding risks, scaling fixes
Thousands of refrigerator devices remain exposed following French cyberattack
Internet exposure of AI tools, ICS devices continues to grow
Hacker targets Ivanti Connect Secure in chained exploitation
Ahold Delhaize USA banners remain offline
Feds crack down on North Korean IT-worker schemes with new raids, charges and arrests
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
VentureBeat
DeepSeek-V4.1-Flash-1017 arrives with improved benchmarks just as the U.S. government bans it from agencies — what enterprises should do
AI cloud security needs to prove control before agents reach production
Anyone can build apps with AI. But who owns them?
17 of 40 teams that say they enforce AI agent permissions still share the credentials behind them
Browser security’s buying spree rests on one engine, without a clear Plan B
Anthropic’s Cyber Mission starts with 6,157 findings reported to maintainers and 516 patched
Microsoft's record Patch Tuesday shows why severity can't decide what gets patched first
TechCrunch
Blackwall quadruples valuation to $2.2B as websites wrangle an increasingly crowded internet
Governments are hacking people with ‘zero-click’ spyware by showing them online ads
Flock CEO defends surveillance technology amid national backlash: ‘We shouldn’t pause progress’
Flock CEO says its microphones detect ‘just gunshots’ — its website says different
Flock CEO: We haven’t ‘fired’ any police departments as customers
Apate sends AI agents undercover to get scammed so they can gather fraud intelligence
Justice Department says North Koreans have infiltrated dozens of US companies
FBI arrests OpenAI employee accused of planting hidden recording device in conference room
Pluto Security raises $42M as AI gives enterprise security teams a new headache
Surveillance company Flock cuts staff as privacy backlash grows
Network World Security
AI datacenter capex will far exceed forecast revenue through 2030
OPC Global Summit: News spans AI-optimized hardware, cooling equipment
Ultra Ethernet 1.1 extends the specification to scale-up networks and adds programmable congestion control
SolarWinds launches Avior AI agents to automate network operations
IBM, IonQ, Diraq, and Atom Computing advance to DARPA’s quantum hardware testing stage
IonQ’s $1.2 billion acquisition of Elisity is trying to position it for quantum cybersecurity
WebexOne 2026: Key themes and why they matter to network engineers
NetBox Labs adds network design templates and AI agents to streamline infrastructure operations
2026 network outage report and internet health check
Cisco, Nvidia push ultra-dense networking for Ethernet AI fabrics
Help Net Security
Attackers exploit Siemens Software Center flaw in active ClickFix malware campaign
Quarantined, but still on your calendar: The explosion of invite-based attacks
Teradata expands AI data security with post-quantum protection and immutable backups
Extend Verify helps AI agents flag suspicious documents before acting
US Army is developing AI agents that could strike enemy networks and vanish without a trace
Microsoft wants to limit AI agents’ permissions when they stray from the job
Mastercard helps banks assess stablecoin risks before funds move
EasyDMARC and GMO GlobalSign connect email authentication with verified branding
Your frontline workers have a workaround for that MFA prompt
Cybersecurity jobs available right now: October 20, 2026
SC Magazine
Account takeover is an identity governance problem
Standardizing Mobile Defense: Inside the OWASP Mobile App Security Project v2 - Ryan Lloyd, Jan Seredynski - ASW #405
Attackers compromise Microsoft 365 credential via ConnectWise Cloud Backup
Mobile communications are a blind spot security leaders can’t ignore
Vishing (voice phishing): how the attack works and how to stop it
CISA adds Fortinet and BeyondTrust vulnerabilities to exploited list
Hackers exploit SiteGuard WAF vulnerability for root access
Fake WatchGuard website steals VPN credentials with legitimate software download
Smishing (SMS phishing): how the attack works and how to stop it
Norwegian army rental cars recorded soldiers, security codes
© 2026 RiskDiscovery | Sponsored by: Deception Logic