[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
'BusySnake' Infostealer Slithers into Critical Infrastructure Networks
CitrixBleed-ing Again? NetScaler Vulnerability Under Attack
JadePuffer: The First Complete LLM-Driven Ransomware Attack
Chinese LLMs Broaden the Gap Between Attackers & Defenders
Aussies Face Reduced Cybercrime Risk, as Pressure Shifts to SMBs
Apple Reverses Age-Old Patch Policy to Keep Up With AI
FortiBleed Actors Collaborating With Inc, Lynx Ransomware Gangs
Ransomware Thugs Masquerade as Interpol to Entice Small Biz
Anthropic's AI Finds Bugs. IBM Bets $5B It Can Fix Them.
Crafty Phishing Campaigns Auto-Adapt to Victim's Device, OS
Ars Technica
Newly discovered PamStealer isn't your typical macOS malware
T-Mobile moving tens of thousands of virtual machines off VMware amid lawsuit
New attack provides one more reason why AI browsers are a bad idea
US offers $10 million for info on group behind Signal and WhatsApp hacking spree
Notion killing Skiff-influenced email app since most users use AI agents instead
One-two punch delivered in global operation disrupts cybercrime "assembly line"
White House drastically shortens deadline for dropping quantum-vulnerable crypto
Oracle’s 21,000 layoffs help drive its debt-fueled AI investments
Following user outcry, AMD reinstates memory encryption in consumer CPUs
Microsoft discovers new lightweight backdoor that steals cryptocurrency
CyberScoop
Suspected Chinese espionage group used a Roundcube exploit chain to burrow into universities
US Army websites defaced with pro-Kurdish sentiments, insults to Trump
Sysdig clocks first documented case of agentic ransomware
Finding vulnerabilities was never the hard part
Someone infected a spyware probe overseer with spyware
Alleged longstanding member of Scattered Spider extradited to US
Researchers spot exploitation of another critical Oracle defect
US lifting export control restrictions on Anthropic’s Mythos, Fable
This phishing kit looks more like BEC-as-a-service
Citrix patches a new NetScaler flaw with echoes of CitrixBleed
InfoSecurity Magazine
UK Government Launches Cyber Resilience Pledge, Claiming 60+ Signatories
Hackers Exploit Maximum Severity Adobe ColdFusion Flaw
New Iran-Nexus Hacking Group Targets Israel Government and IT Sectors
Indirect Prompt Injection in Web Content Targets AI Agents
Opera GX Flaw Let Sites Auto-Install Mods to Steal Data
NCA Issues Warning to Parents As Shared Child Photos Exploited by AI Tools
Researchers Claim First Fully Agentic Ransomware: JadePuffer
Qilin Dominates Ransomware Market Amid Growing Cybercrime Consolidation
Warning Over “Industrialized” Cyber-Attacks After Ransomware Gang Partners With TeamPCP
FBI, Google Take Down NetNut Proxy Network Used by Cyber Threat Actors
SecurityWeek
Iran-Linked Hackers Using Modular C&C Framework in Cyberattacks
CISO Conversations: Tarah Wheeler, Cybersecurity Leader, Thought Leader and Original Thinker
Linux Kernel Vulnerability Allows VM Escape on Intel and AMD Systems
Keyfactor Scores $1 Billion+ Investment for AI, Post-Quantum Security
Blogspot-Hosted Payloads Delivered in ‘Veil#Drop’ Attacks
The Shift Toward Business-Aligned Risk Management
Armored Likho APT Targeting Government, Electric Power Entities
North Korean Hackers Target Open Source Developers in Supply Chain Attacks 
Proof-of-Concept Exploit Released for Linux ‘Bad Epoll’ Root Access Vulnerability
Prompt Injection Attacks Trick AI Agents Into Making Crypto Payments
ZDNet
The best Apple Watch Ultra bands of 2026: Expert tested
How I deleted hundreds of old photos on my Android in seconds with the Sponge app - for free
How to make Zorin OS look like Windows 11 - for free
5 tiny Linux tools I can't live or work without
I compared Apple AirTags to competing Bluetooth trackers - including this $2 one
How I turned an old Android phone into my home internet backup solution - 3 methods
I sideloaded 3 apps into my Android Auto, and they've made my drives so much easier
I tested the new Claude Desktop on Linux - here's how it compares to rival apps
I'm recommending this 14-inch HP laptop to almost everyone in 2026 - even with the RAM crisis
Want to convince a Windows user to try Linux? Here's how I do it
The Hacker News
What Changes When Your Software Supply Chain Includes AI Writing Your Code?
Suspected China-Aligned Hackers Exploit Roundcube Flaws Against Universities
CERT/CC Warns of Hidden Admin Backdoor in Tenda Router Firmware
BeyondTrust Patches Critical Auth Bypass Flaws in Remote Support and PRA
Iran-Linked Hackers Use New Cavern C2 Framework to Target Israeli Organizations
16-Year-Old Linux KVM Flaw Lets Guest VMs Escape to Host on Intel and AMD x86 Systems
Threat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure
⚡ Weekly Recap: Proxy Botnets, Browser Ransomware, AI Agent Tricks, Fake PoC Malware and More
How to Evaluate an AI SOC Platform in 2026: 6 Capabilities That Separate Leaders from Bolt-On AI solutions
Suspected China-Nexus Hackers Use Fake Indian Tax Filing Utility to Deploy DcRAT
BleepingComputer
Webinar tomorrow: Why modern email attacks require a new approach to defense
New Januscape Linux flaw allows VM escape on Intel, AMD devices
Microsoft to enable Windows settings backup by default for orgs
BeyondTrust warns of critical flaws in remote access software
Microsoft testing new Cloud Rebuild Windows 11 recovery feature
Phishing poses as big-brand job interview to steal Google accounts
Fake IT support calls on Microsoft Teams push EtherRAT malware
Vietnam arrests suspects behind HiAnime anime piracy service
Software Is Now Written at the Speed of Thought. Security Isn't.
Max severity Adobe ColdFusion flaw now exploited in attacks
gbhackers
TeamPCP Supply Chain Attacks Feed VECT Ransomware With Stolen CI/CD Credentials
Attackers Exfiltrate AnyDesk Configuration Data via Blat SMTP in Aerospace Phishing Campaign
Thousands of MCP Servers Found Vulnerable to File Access and Injection Attacks
Windows 11 26H2 Enables Backup Policy to Restore User Apps and Settings
US Cyber Agency Uses Anthropic Mythos to Audit Government Code for Bugs
Kazuar Backdoor Uses DLL Side-Loading and PowerShell Loaders for Stealthy Execution
Microsoft Introduces Execution Containers to Secure AI Agents on Windows
16-Year-Old Januscape KVM Escape Vulnerability Lets Attackers Compromise Linux Hosts
PHP PDO Emulated Prepares Expose pdo_pgsql to NULL Pointer Dereference Crash
Fake Interview Phishing Campaign Impersonates Top Brands to Steal Gmail Credentials
Cybersecurity Dive
Alleged member of Scattered Spider extradited to US
Why schools are easy prey for hackers — and why they struggle to fight back
The security leaders defining the next decade aren’t in CISO seats yet
FortiBleed campaign traced to INC and Lynx ransomware operations
Most cybersecurity workers have been told to conceal a breach, report finds
Critical flaw in Oracle E-Business Suite is under immediate threat
Anthropic reactivates Fable, Mythos after securing government approval
Critical flaw in SimpleHelp exploited in attacks targeting sensitive credentials
DHS proposes new system for public-private infrastructure security collaboration
Insurance body confirms hackers posted Oracle PeopleSoft breach data
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
Fake IT bods on Microsoft Teams coax workers into installing malware
Spain collars alleged pro-Russia hacktivist after FBI tip-off
Government's cyber pledge lands 60 signatories, including M&S and, somehow, Capita
EU urged to act after Pegasus infects phone of spyware inquiry MEP
Brit supermarket giant triples down on facial recog to nab shoplifters
Moody Bible Institute breach leaves 2.3M accounts needing salvation, says cyber expert
Secure Unix ancestor KSOS did type safety before Rust made it cool
MFA-optional banks leave safe doors (and accounts) wide open for thieves to pillage
Confidential computing's core trust mechanism is broken. The fix may not exist
AdaptHealth says attackers sweet-talked their way into cloud systems and stole patient data
VentureBeat
Digital resilience compounds when AI and human expertise scale together
The attack that hijacked Claude Code came through Sentry. Datadog, PagerDuty, and Jira have the same exposure.
Prompt injection is exploiting enterprise AI's biggest design flaws by targeting agents, RAG pipelines and model routers
Autonomous security agents need complete data. Here's how to check if yours is ready.
Frontier AI is rewriting the economics of software supply chain security
Visa will offer an inside look at Project Glasswing and how the most powerful agentic models are changing enterprise security at VB Transform 2026
7,000 Langflow servers are under attack. LangGraph and LangChain have the same holes
TechCrunch
The ‘first’ AI-run ransomware attack still needed a human
Canadian spy agency says it hacked drug traffickers, extremists, and a ransomware gang last year
Alibaba reportedly bans employees from using Claude Code
Politician who investigated spyware abuses had his phone hacked with Pegasus spyware
US government says it got hacked — again
In major privacy win, Supreme Court rules geofence warrants are protected by privacy rights
Russian hackers were behind $2.5B hack of Jaguar Land Rover: Report
Polymarket says hackers stole users’ funds
Hacked Klue says criminals are deleting stolen customer data, but now other hackers are making threats
Cellebrite said it cut off Russia, but Russia used its tools anyway
Network World Security
Network evolution for the Agentic AI era
Meta reuses old RAM in new servers with custom bridge chip
Cloud sovereignty: First four providers sign up to CISPE certification program
Cheap Chinese chips could offer way out of RAM price crisis, Apple suggests
Cisco details Live Protect’s real-time threat mitigation capabilities
What Meta, Oracle moves say about data center economics
Network jobs watch: Hiring, skills and certification trends
Kyndryl: AI success hinges on workforce readiness
Netgear brings AI-driven network management to SMEs and MSPs
2026 network outage report and internet health check
Help Net Security
Attackers exploit critical Adobe ColdFusion vulnerability (CVE-2026-48282)
Radware updates Agentic AI Protection with AI governance and compliance capabilities
Researchers make the case for a cybersecurity AI scientist
Review: Building Machine Learning Systems with a Feature Store
Your company already adopted AI and nobody is governing access
Apple Container: Open-source tool for Linux containers on the Mac
Microsoft wants to keep your AI agents from going rogue
Power shortages could slow AI data center expansion
Cybersecurity jobs available right now: July 7, 2026
Criminal IP integrates threat intelligence with OpenCTI for automated indicator enrichment
SC Magazine
Malicious websites trick AI agents into crypto payments, context poisoning
Defense-in-depth strategies for securing mobile applications - Ryan Lloyd - ASW #390
'Bad Epoll' vulnerability allows root access on Linux and Android
U.S. Army websites defaced in apparent 404 hijacking campaign
Iranian hackers use new modular C2 framework against Israeli organizations
NatWest CEO targeted in AI deepfake scam
Sainsbury's expands facial recognition use to combat shoplifting
7 arrested in Vietnam for operating large anime piracy site HiAnime
Microsoft Teams allows users to turn off AI features
Canada's spy agency conducted state-authorized cyberattacks against drug traffickers and ransomware gangs
© 2026 RiskDiscovery | Sponsored by: Deception Logic