[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
Vulnerability Management Isn't About the Score — It's About How It Applies to You
EU Grocers Pay a Steep Price for Unpatched Fridge Firmware
Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles
Yam Store: The Phishing Network Behind a Billion Messages
Anthropic 'SneakPeek' Flaw Is a Silent Zero-Click Threat
Russian Influence Operation Widely Targets Latin America
Ransomware Gangs Embrace Physical Threats, Family Stalking?
Zero-Days Lurk in Microsoft's Overgrown October Patch Tuesday
North Korea Phishes Ukrainians for War Intel
Anthropic Finds Ingredients for Future AI Worms
Ars Technica
Fridge hack costing millions and sparking fires stemmed from poor security
Anthropic warns small AI models could self-replicate through IoT devices
Topgolf saved over $11.3 million after leaving VMware
PC shipments fall 20.1 percent in “sharpest decline” since Q1 2023
Hackers obtain counterfeit TLS certificates for Google and other large services
OpenAI agents tried to hack Wikipedia tools and flooded it with traffic
Licensing costs driving 90 percent of VMware users to explore options: Survey
MCP for agent-to-agent comms may be the riskiest protocol you've never heard of
Apple changes full-disk access permissions to curb abuse from AI agents
Hacks of 2 federal agencies in a month have spilled a bonanza of sensitive data
CyberScoop
AdFection: How mercenary spyware invades victims’ devices through targeted advertising
Authorities charge alleged OLVX cybercrime marketplace operator in North Macedonia
Microsoft drops an actively exploited zero-day among record high of 1,413 vulnerabilities
Senators press Trump admin to rally federal government around AI safety, security 
Microsoft and partners disrupt vast Chinese-language phishing kit ecosystem
Ivanti misses opportunity to fix vulnerability before attackers got to work and made it a zero-day
DOJ charges 14 over a sprawling North Korean remote work scheme
FTC says ‘sextortion’ protection companies deceived customers about services 
West African scammers targeted in joint international government-industry operation
Flock can now issue CVEs for its own products. Should we trust it?
InfoSecurity Magazine
France: Internet-Exposed Danfoss Controllers Drop 71% After Cyber-Attack
New Aoki Infostealer Targets AI Coding Assistant Credentials
Warning Over High-Risk Vulnerabilities in Widely Used LLM Gateway Tool
Microsoft Disrupts Global Yam Store Network Behind One Billion Phishing Messages
ICO Reprimands Met Over Third-Party Data Leak
ROMULUS Malware Server Leverages ClickFix to Deliver Multiple Payloads
Passkey Authentications Double but Adoption Remains Slow
French Supermarket Cyber-Attack Impacts More Refrigeration Controllers
Microsoft Breaks Patch Tuesday Record Again with 1400+ CVEs
Billion-Dollar Companies Twice as Likely to Leave Critical Vulnerabilities Unpatched
SecurityWeek
UK Legal Aid Agency Hack Scope Widens After Forensic Review
Supermarket Refrigeration Attack Widens to Copeland, Dixell Controllers
CikaBika Bot RAT Uses Discord for C&C
Novel Android RAT ‘Hirudo’ Replaces Banking Apps With Trojanized Copies
CenterPoint Energy Data Breach Impacts 1 Million Texans
CISO Conversations: James Robinson – Many Jobs, One Journey to Netskope CISO
Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution
Cisco Warns of Exploited Secure Email Gateway Vulnerability
AI Agents Navigate Unfamiliar OT Systems and Move Equipment in Minutes, Booz Allen Finds
ICS Patch Tuesday: Siemens Issues 17 Advisories, Rockwell Fixes ArmorBlock Takeover Flaw
ZDNet
Renting? These 2 new Apple smart home devices are worth your money (and these 5 are not)
Apple’s first touchscreen MacBook is days away – with another OLED surprise
Nvidia’s new Nemotron 3.5 Super VL is another step forward for US open-weight AI
Google’s new Universal Cart tracks prices on items you want now – plus 3 other tricks
Windows update patches a whopping 1,400 security bugs –  including 2 zero days
Linus Torvalds is using AI to develop Linux kernel code now
Google lets you make personal Android apps for free now – with just prompts
Apple’s smart home event: All 7 devices, prices, and release dates
4 upgrades HomePod Mini 2 has over its 6-year-old predecessor
Apple’s $299 HomeView smart hub is here: 8 highlights, including the wall model
The Hacker News
Citizen Lab Traces Zero-Click Candiru Spyware Infections at Al Jazeera to Targeted Online Ads
Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks
Help TDS Linked to Hotejka as 20,000+ Cloudflare Pages Domains Host Tech Support Scams
NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks
Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing
Drupal Patches Critical Field UI Flaw With Unauthenticated RCE Path via Contributed Modules
Fake AI Attacks Spread Across US Companies: How MSSPs Can Stop Incidents Early
Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation
Why AI Confidence Is Not Validation
India Mandates Registered Caller Name Display on 4G and Newer Networks From November 1
BleepingComputer
Fake Arch Linux packages push malware with root privileges
Is AI pentesting as good as a human pentester?
Microsoft: Windows Server 2022 reached end of mainstream support
Police arrests 95 suspects in international CSAM crackdown action
Microsoft fixes bug causing Windows black screens, Explorer crashes
UK Legal Aid Agency: Hackers stole records dating back to 1978
Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks
FBI raids DPRK IT worker laptop farms in Texas, US nationals arrested
Ledger asks sellers across Asia to halt sales after supply-chain attack
Cisco patches new Secure Email Gateway zero-day exploited in attacks
gbhackers
Cisco Warns of Secure Email Gateway 0-Day Vulnerability Actively Exploited in Attacks
Palo Alto Warns of PAN-OS 0-day Flaw Actively Exploited in Attacks
Hackers Use Online Ads to Infect Devices With Spyware Without a Single Click
New PEERSTITCH Malware Targets FortiGate Firewalls and Hides Inside System Memory
Hackers Steal UK Legal Aid Records Dating Back to 1978 in Major Cyberattack
New ClickFix Attack Deploys Lorem Ipsum Malware Loader to Establish Remote Access
Claude Code Helps Linux Creator Address Longstanding Kernel Memory Performance Bottleneck
AI Agent Workflows Could Expose Credentials Through Trusted Developer Tools
Critical Next.js SVG Image Processing Vulnerability Could Enable Remote Code Execution
Iron Man Phishing-as-a-Service Kit Impersonates Banks, Couriers and Government Agencies Worldwide
Cybersecurity Dive
Thousands of refrigerator devices remain exposed following French cyberattack
Internet exposure of AI tools, ICS devices continues to grow
Hacker targets Ivanti Connect Secure in chained exploitation
Ahold Delhaize USA banners remain offline
Feds crack down on North Korean IT-worker schemes with new raids, charges and arrests
Microsoft, Health-ISAC and partners take down popular phishing kit services
Dangerous flaws in refrigeration equipment were disclosed months before retail attacks
Businesses need more integrated risk management to counter cyberattacks, AI-powered fraud
Ahold Delhaize experiencing cybersecurity issue
CISA calls on Citrix NetScaler customers to patch as new flaws disclosed
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
Spyware vendors found a way to make targeted ads even worse
Bank of America had to bring in 1,000 contractors to patch all the bugs Mythos identified
X purges 13,000 accounts linked to suspected meddling ahead of US midterms
Legal Aid Agency hackers made off with records dating back to 1978
US Air Force pilots used malware-laden USB drives to plan Afghanistan missions
UK keeps AI safeguards in the maybe pile for Cyber Security BIll
Metropolitan Police's unchecked use of shoplifting platform lands force in trouble with data watchdog
Jev and other decision models can still be tricked with prompt injection
Cisco make-me-root email bug exploited as a 0-day by unknown crims
Security researchers spent 6 days doing their Chromework, built 1B user exploit
VentureBeat
Browser security’s buying spree rests on one engine, without a clear Plan B
Anthropic’s Cyber Mission starts with 6,157 findings reported to maintainers and 516 patched
Microsoft's record Patch Tuesday shows why severity can't decide what gets patched first
Your vibe-coded apps are a ticking time bomb for your business. Here’s how to secure them.
AI agents need more than access control — they need identity at runtime
22 of 37 surveyed companies that enforce AI agent permissions still have agents sharing credentials
OpenAI’s new ‘Private Intelligence' targets a growing enterprise concern: who can see your AI data?
TechCrunch
Citizen Lab says governments are abusing online ads to hack people with ‘zero-click’ spyware
Flock CEO defends surveillance technology amid national backlash: ‘We shouldn’t pause progress’
Flock CEO says its microphones detect ‘just gunshots’ — its website says different
Flock CEO: We haven’t ‘fired’ any police departments as customers
Apate sends AI agents undercover to get scammed so they can gather fraud intelligence
Justice Department says North Koreans have infiltrated dozens of US companies
FBI arrests OpenAI employee accused of planting hidden recording device in conference room
Pluto Security raises $42M as AI gives enterprise security teams a new headache
Surveillance company Flock cuts staff as privacy backlash grows
Asos confirms breach of customer data after hackers send rogue app notification
Network World Security
OPC Global Summit: News spans AI-optimized hardware, cooling equipment
Ultra Ethernet 1.1 extends the specification to scale-up networks and adds programmable congestion control
SolarWinds launches Avior AI agents to automate network operations
IBM, IonQ, Diraq, and Atom Computing advance to DARPA’s quantum hardware testing stage
IonQ’s $1.2 billion acquisition of Elisity is trying to position it for quantum cybersecurity
WebexOne 2026: Key themes and why they matter to network engineers
NetBox Labs adds network design templates and AI agents to streamline infrastructure operations
2026 network outage report and internet health check
Cisco, Nvidia push ultra-dense networking for Ethernet AI fabrics
AMD unveils Helion as agentic AI fuels demand for data center CPUs
Help Net Security
ServiceNow gives AI agents a passport, and limits on what they can do
KGB RAT trojan packs webcam spying, password theft and a “fun” menu to terrorize victims
Fake CAPTCHAs are tricking users into running malware on their own devices
CISA flags exploited flaws in Palo Alto, Cisco and Ahsay products
Microsoft disrupts phishing network behind more than a billion scam messages
Optro automates GRC workflows with auditable AI agents
Qualys introduces TruConfidence to orchestrate cyber risk remediation
Immuta CISO predicts critical AI incidents at major enterprises within 18 months
The internet’s attack surface moves at very different speeds
AI-generated changes create review bottlenecks in software delivery
SC Magazine
Risk advisory: ransomware planning still starts too late
How to build a ransomware threat model for the business
What ransomware actually controls today
Why frontier AI model safety pledges won’t save cybersecurity
How to get enterprise-grade security without an enterprise-sized team
LG smart TV vulnerabilities allow root access over local network
FTC seeks to shut down companies accused of defrauding sextortion victims
Ransomware actors reportedly escalating to physical threats and violence
Critical Ghostscript vulnerability allows remote code execution
North Korean hackers target Ukraine for war intelligence
© 2026 RiskDiscovery | Sponsored by: Deception Logic