[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
Cyera's Oasis Security Buy is All About AI Agent Control
Global Threat Campaign Hits Critical VMware vCenter Flaw
'Jewelbug' APT Balances State Espionage & Cryptocurrency Theft
Belgium's eID Authentication Opens Citizen Accounts to RCE
Long-running Data Theft Campaign Targeting Salesforce, ServiceNow
Walmart Takes a 'Trusted Agent' Approach to Purple Teaming
Ransomware Hits Colombian Justice Ministry Days Before Presidential Transition
Walmart Leaders Transform Security Operations Without Going Bananas
Microsoft's Patch Tuesday Deluge Continues With August Updates
Gunra Ransomware Gang Exploits Fortinet Flaws, Bypasses MFA
Ars Technica
Private security firms will soon be allowed to hack overseas cybercriminals
Terabytes of credentials leaked in massive supply-chain attack
DEF CON crowd suspected in fake-hotspot attack on Delta flight
Chrome adopts what may be the best protection yet against account takeovers
New Pass-ta-key attack reveals all the things we didn't know about passkeys
Thousands of servers can be backdoored by exploiting buggy motherboard controllers
Claude published malicious code to the Internet and attacked 3 real companies
Max-severity Exchange server flaw under active exploitation by Kremlin hackers
Mythos attack on 3rd-round PQC algorithm candidate puts it out of commission
We now have a better understanding how OpenAI hacked into Hugging Face
CyberScoop
A bold new strategy or a dangerous precedent? Experts are divided on Trump’s memo.
Tech contractor for Brightly Software sentenced to 2 years in prison for insider attack
AI’s ‘middle class’ has gotten dramatically better at hacking
Trump turns to private sector in offensive hacking operations memo
Researchers observe first ‘near-autonomous’ AI attack on government target in Taiwan
Kimwolf botnet rebuilt to survive takedowns, researchers say
Federal judge issues second order blocking Trump mail-in voting directive
Delta investigates in-flight Wi-Fi spoofing on post-DEF CON flight from Las Vegas
NIST wants to overhaul its vulnerability database for the AI age
The FTC wants to regulate AI for ideological bias 
InfoSecurity Magazine
New Mirai-Based Linux Botnet ‘Evooo1Bot’ Turns Victims Into Proxies
Novel macOS Infostealer AmnesiaStealer Spread via ClickFix
Researchers Link 'Jewelbug' Chinese APT to Hack-for-Hire Operations
Exposed AWS Access Key Linked to Data Breach Affecting 1500+ UK Charities
Google Cloud Targets 2027 for First Major Post-Quantum Security Milestone
vCenter Flaw Exploited Just Five Days After Disclosure
Trump Authorizes Private Sector Participation in Offensive Cyber Operations
Akira Affiliate Crashes Ransomware After Attempting EDR Evasion
ICO Reprimands Criminal Records Office After 2023 Breach
WindRelay Malware Pairs With SpyNote RAT in Live-Call Scam
SecurityWeek
In Other News: Rapid7 Layoffs, Hacking a Boeing 737, Refrigeration System Vulnerabilities
Trivy, Not LiteLLM Behind the 2,500 Org Compromise
Google Cloud Sets Out Post-Quantum Roadmap With 2029 Readiness Goal
1.6 Million Likely Impacted by RingCentral Data Breach
Over 1,000 Charities Hit by Beacon CRM Data Breach
14,000 Trezor Customers Impacted by Data Breach at ShipMonk
Hackers Exploiting Unpatched GeoServer Zero-Day
AmnesiaStealer macOS Malware Steals Data, Controls Browser Sessions
Cybersecurity M&A Roundup: 21 Deals Announced in July 2026
Adobe Commerce Bug Targeted Immediately After Disclosure
ZDNet
I used OpenFactory to build my own Linux distro overnight - this AI tool is going to be big
This free Android assistant fixes my biggest Gemini frustration - and keeps my data private
I tried the new ChatGPT Desktop App for Linux - but I'll stick to my browser for now
Gemini voice calling on Android Auto keeps failing me - and Google has until September to fix it
This Micro RGB TV rivals pricier OLED models - and I'd recommend it, especially on sale
I wore Samsung's and Apple's Ultra smartwatches for 3 weeks - apps made all the difference
You're using DND all wrong: 5 powerful Do Not Disturb settings to try on your iPhone today
Microsoft is merging Copilot and Copilot 365 into one unified app - and retiring 3 features
75% of developers I surveyed prefer Claude Code - here's why they choose it over Codex
Android can now tap to share for contact info, photos, and more - which phones get it first
The Hacker News
Attackers Exploit SharePoint Authentication Bypass After Public PoC Release
Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor
737 Chrome VPN Extensions Caught Routing Traffic Through Proxies. Check If You Have One
OpenAI, Anthropic, Google API Flaw Let Weaker AI Models Decode Stronger Models' Reasoning
Enterprise Defenses Recovered at the Edge and Collapsed Inside
Adobe Patches Three CVSS 10.0 ColdFusion and Campaign Classic Flaws
Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access
Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organizations
SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code
ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access
BleepingComputer
Shell investigates 'potential incident' after Clop data theft claims
RingCentral data breach exposed info of 1.6 million accounts
Data analyst sent to prison for stealing data, extorting employer
Apple sends new ‘Threat Notification’ alerts over mercenary spyware attacks
Ukraine shuts down 94 fraudulent call centers, seize millions in cash
Akira hackers disable EDR with Safe Mode, steal data but fail to encrypt
Hackers breach govt webmail while running parallel crypto fraud
Microsoft patches LegacyHive Windows zero-day vulnerability
AI 'watermark removers' flood the web. Almost none can prove they work.
Critical VMware vCenter RCE flaw exploited for reverse SSH access
gbhackers
Agentic AI Models Rebuild Malware and Sustain Real-World Cyber Intrusions, SentinelOne Warns
GeoServer Zero-Day SQL Injection Vulnerability Actively Exploited to Gain RCE
Dysphoria Hijacks Routers, Gateways and IP Cameras to Build Massive IoT Botnet
Malicious SVG Reconstructs DCRat Archive Entirely Inside Victim’s Browser
24 Malware Crypter Sellers Turn EDR Evasion and In-Memory Execution Into Paid Services
New Bring Your Own EDR Attack Turns SentinelOne Into Trojan Horse to Bypass Windows PPL
New DRAM Scrambling Attack Unlocks AMD CPU PSP, SMM and Microcode
Apple Warns iPhone Users in 110 Countries of Mercenary Spyware Attacks
PATCHCORD Infrastructure Hosts SuperShell C2 for Remote Commands and Webshell Management
Hackers Steal One AI Key, Resell the Compute, and Leave Victims With a Million-Dollar Bill
Cybersecurity Dive
Researchers find AI-powered hacking tools for sale in underground forums
US government will let private companies hack criminal gangs
Hackers abuse AI models to find new entry paths
Cisco says software vulnerability could let hackers crash firewalls
Former BlackFile affiliates linked to extortion campaign targeting private equity
CVE Program eyes automation and globalization to weather AI ‘vulnpocalypse’
Civil-society initiative will pay cybersecurity vendors to protect rural water systems
Secure development can help turn the tables as AI alters cyber landscape
Experts say healthcare faces cybersecurity crisis: ‘These are patient safety issues’
Critical flaws allow hackers to exploit zero-touch provisioning process in TP-Link Omada
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
Autonomous AI attacks pose 'clear and present danger' to critical infrastructure
Crypto wallet maker Trezor confirms 13,000 customers' details exposed in logistics breach
Scottish prosecutors cast eye over leaky supplier after staff data exposed
New Zealand says China tried using space investments to spy on local affairs
OpenAI ditches Recall-style screenshot surveillance for friendly keylogging
Trump wants to grant private cyber firms a license to hack back
The backup Microsoft never promised you
AWS key exposed in JavaScript may have lit way to Beacon's charity data
Passwords stored in public Google Doc then showed up in search results
Chinese Loongson processors have leaky caches, researchers find
VentureBeat
Three Claude agents given conflicting orders sabotaged each other on a shared server — then didn't tell users what they'd done
Four of five enterprises that secured AI agent identities still can't contain one that goes rogue
OpenAI launches GPT-5.6-Cyber with reduced refusals, 95% completion on advanced cybersecurity tasks
AWS Continuum integrates with OpenAI Codex and Anthropic Claude Code in major AI security push
AI agents are part of your team now. Here’s how to secure all of them.
The browser is where attacks land. Why is security still focused on the endpoint?
Claude Mythos 5 made sock puppet accounts to socially engineer developers: here's what enterprises should know
TechCrunch
US courts will start publishing how often the government uses spyware
Flock says its new tool will help identify police abuse, but hasn’t explained how it works
If Apple sends you a push notification alerting you to a spyware attack, take it seriously
Anthropic set AI agents loose on the same task. They started a turf war.
In a first, US will allow some private firms to carry out cyberattacks
Uber Freight reportedly investigating after hacking group claims data breach
After Microsoft threatened legal action, a security researcher publishes a new Windows zero-day bug
FBI says cybercriminals are hacking into victims’ online accounts to steal their intimate pictures
Delta investigating after someone set up fake Wi-Fi network mid-flight
North Korean remote IT staffer worked for US government agency, says FBI
Network World Security
IBM partners with OpenAI to drive enterprise AI deployment
It’s final! Judge says HPE’s Juniper acquisition is complete
Google, Microsoft and Nvidia back 800V DC standard for AI data centers
Five takeaways from Cisco’s Q4 and what they mean for IT pros
Cisco rides ‘networking supercycle’ for strong Q4
North American data center vacancy holds at just 1%
2026 network outage report and internet health check
Nvidia: Latest news and insights
Oracle set to bring quantum computing to OCI for hybrid AI workloads
Nvidia’s $500B AI investment pool could impact enterprise chip pricing, availability
Help Net Security
New Android malware relays bank cards to fraudsters while victims still hold them
OpenAI’s GPT-5.6 Sol runs up to 14× faster with Ultrafast mode
AWS Certificate Manager sets 2027 end date for email-validated certificate renewals
Ukrainian police raid 94 fraudulent call centers, seize $2 million
The hardest part of agentic AI may be rebuilding the business
Weak IAM affects up to 98% of cloud environments
17 draft Cyber Resilience Act standards are open for comment
New infosec products of the week: August 14, 2026
White House authorizes private US companies to hack foreign criminal networks
DataGrout helps enterprises control AI usage, governance and LLM costs
SC Magazine
DPRK’s Lazarus Group exploits Windows zero-day in backdoor campaign
China-linked Jewelbug group conducts espionage and cryptocurrency theft
Rubrik rebuilds code review pipeline after AI model finds numerous security flaws
Market for AI watermark removal tools emerges after Anthropic's Claude update
Loongson processors vulnerable to LoongLeak cache attack
Trump allows private companies to conduct cyber operations against criminals
Pennsylvania budget boosts cybersecurity and digital services funding
The Breached WiFi AI Ports... What? - PSW #939
Taiwan confirms AI-assisted cyberattack on government systems
To compete with China, America must deliver at home
© 2026 RiskDiscovery | Sponsored by: Deception Logic