[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
Critical Rails Bug Threatens to Derail Vulnerable Servers
Google, Partners Disrupt 1.3 Million-Device-Strong XCPE Botnet
Incidents Move Too Fast for Pen & Paper
Philippine Migrant Worker Data Likely Leaked in 69GB Government Breach
Phishing-Resistant Isn't Enough; Yubico Takes Aim at Identity-Verification Gap
Fresh European Fridge Attacks Put Cold-Chain Security in Focus
Germany Busts 'Crime-as-a-Service' Investment Fraud Outfit
9 Cyber Awareness Tips That Actually Match Today's Maze of Threats
LLMjacking Emerges as Thriving Cybercriminal Enterprise
3AM Affiliate Embraces AI-Like Loops in European School Attack
Ars Technica
Hackers exploited iOS and Android flaws to infect phones
VMware releases vSphere Express for virtualization on up to 128 cores
Binance says hackers who stole billions in crypto spent months planning heist
UEFI bootkit infected fully patched Windows machines. Is Microsoft to blame?
Anthropic VS code extension on Cursor backdoored for nearly 12 hours
Code-execution flaw in UEFI firmware affects most servers on planet Earth
Disgraced eMudhra drops out of TLS business after using cert private key of 4
333 Tor exit nodes hijacked to intercept SSH traffic and retrieve plaintext email
Enterprises keep buying software upgrades that IT thinks will make things worse
PHP warns it plans to release 2 emergency patches imminently
CyberScoop
What Democratic control of Congress means for cybersecurity
Officials extradite Canadian man to US for alleged cryptomining spree
Defense and aerospace firm settles with government over allegedly failing to meet cybersecurity contract requirements
Oklahoma man charged with mailing threats, substances to election officials nationwide 
Europol dismantles investment scheme that impacted potential victims in 50 countries
Ballot scanner malfunctions, flurry of federal legal actions test election officials on final day of voting 
CrowdStrike moves to acquire Fiddler and Dreadnode, adding AI observability and testing to its security platform
CISA’s new strategy runs into America’s blind trust problem
Google shuts down global botnet running on certified Android devices
Business groups mount fresh campaign for long-term renewal of information sharing law
InfoSecurity Magazine
Residential Proxy Traffic Traced to White House Network
Zyxel Switch Patch Missed Flaw Behind Wave of Attacks
India Warns of New AI-Driven Cyber-Attacks Targeting Financial and Crypto Businesses
Chinese Nation-State Threat Activity Falls Sharply in Q2 and Q3 2026
GhostMap Bug Leaves Android Phones Stuck in Reboot Loop
NATS Air Traffic Control Failure Cost UK Economy £33m
China-Aligned Group Abuses Sogou Input Method to Deliver Malware
APT29 Watering Holes Target Unpatched iPhones and Android Devices
France Blood Service Cyber-Attack Sends Blood Storage Temperatures to 110°C
3AM Ransomware Used Human-AI Hybrid Tactics in UK School Estate Compromise
SecurityWeek
Bank Phishing Sites Show Fake ‘Suspended’ Pages to Evade Takedowns
Cyberattack Hits French Blood Bank Site but No Blood Products Are Compromised
Cisco, WatchGuard Release Patches; SonicWall Won’t Fix GMS Flaws
The Agent Smith Dilemma: Governing Agentic Identities
CISO Conversations: Ryan Davis – The Unknown Is Where Security Meets Reality
Zyxel Switch Hacks Blamed on Patched Flaw Actually Exploited a Zero-Day
Russia-Linked Hackers Hit iOS, Android Devices With Exploit Chains via Watering Holes
OpenAI Finds GPT-6 Astra Quietly Holding Back on Internal Red-Teaming, Exploit Tasks
Sysdig Adds Runtime Security and Governance for AI Agents
Barracuda ESG Authentication Bypass Flaw Opens Path to Root
ZDNet
Linux Mint 27 arrives next month, and I like it already: New features and other upgrades to expect
Is Chrome’s settings menu getting a search bar? What we know
Researchers asked people to use AI chatbots for election info – results were mixed
Want an AI job? Deployment engineers are earning executive-level pay – up to $1.45M a year
Safari finally gets 3 popular browser features – and I can’t wait to try them
Can Netflix’s new AI tool stop your TV-streaming doomscrolling? How to try it
Want an iPhone Duo for the holidays? Apple’s latest stock update isn’t reassuring
Your Apple Watch has 2 new controversial listening features – but you have to opt in
SUSE lays off 1 in 10 workers – citing AI and automation
HomeView with an arm? Apple reportedly plans $1,000 swiveling smart panel
The Hacker News
ThreatsDay: Apache OFBiz RCE, DreamHost Breach, DeFi Site Hijacks + 17 More Stories
Is Your Exposure Management Platform Leaving You Exposed? Five Tests to Find Out
OpenAI AI Pipeline Generates 948 Linux Root Escalation Exploits in 30-Hour Run
5 Active Cyber Threats That Put US Enterprises at Risk in October 2026
Apple to Start Scanning Publicly Shared iCloud Photos and Files for Harmful Content
CERT-In Flags AI-Driven Attacks as Backdoored ARTEX Exposes 62 Consoles to Root Access
Zyxel GS1900 Patch Fails to Block Zero-Day Exploit Allowing Root Command Execution
Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says
Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root
SonicWall Won't Patch EoL GMS Flaws That Could Expose Files, Alter Database Records
BleepingComputer
Hackers backdoor Linux servers using trojanized CWP web server
DigiCert data breach exposes customer information, identity documents
Closing the Identity Gap at the Service Desk
GhostMap Android flaw lets malicious app trigger persistent boot loop
Vercel rolls out new protection against stolen session cookie attacks
Zyxel fixes zero-day exploited to hack nearly 1,000 network switches
DreamHost confirms data breach exposed FTP logins and webmail sessions
Cyberattack disrupts blood storage refrigeration systems in France
NIKKE PC game launcher hacked to spread remote access, data-stealing malware
mSecure password manager hack prompts password reset warnings
gbhackers
China-Aligned Hackers Hijack Popular Sogou Keyboard Software to Secretly Install DarkVigil Malware
Apple to Scan Publicly Shared iCloud Photos and Files for Harmful Content Starting With iOS 27.3
Hackers Develop New HYFLOCK Ransomware That Encrypts Files and Attempts to Block Recovery
ARTEX Hackers Used Claude Code, DeepSeek, and Grok in Attacks Targeting South Korean Banks
Hackers Spread Marsalek Infostealer Through Fake Game Downloads to Steal Browser Passwords and Cookies
DigiCert Confirms Data Breach After Security Misconfiguration Exposes Customer Personal Information
Critical Citrix XenServer Flaw Allows Unauthenticated Attackers to Take Control of Virtualization Hosts
10 Third-Party / Vendor Risk Management (TPRM) Tools: The 2026 Buyer’s Verdict Guide
11 Compliance Automation Software (SOC 2 / ISO 27001): The 2026 Buyer’s Verdict Guide
AI-Powered BOSSAI Attacks Expose Patient Records and Emergency Dispatch Data in Taiwan
Cybersecurity Dive
Attacker abuses Microsoft Entra ID to target downstream MSP clients
Companies spending more on cybersecurity but still struggling with AI oversight
European authorities probe ongoing attacks targeting grocery refrigerators
AI threats create urgent need to renew cybersecurity information-sharing law, businesses tell Congress
Agentic pen-testing tool employed in multiple espionage campaigns around the globe
As the White House touts its AI task force, CISA is conspicuously missing
Protecting OT, IoT and medical devices without disrupting operations
3 questions for securing AI agents
Palo Alto Networks firewalls compromised in chained attacks using PHP2Shell
Top cybersecurity conferences to attend in 2027
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
Tobacco company got smoked by leaving secret recipes on a file share
Anthropic won't fix a Claude Dispatch flaw that could let attackers execute remote commands across corporate boundaries
New York's Queens Public Library battles ransomware crims: Wi-Fi, checkouts, and website go dark
Norway's aid agency pwned and all users' data is stolen
Apple turns iCloud into spy cloud, will start looking at public share links
US gov IT worker pleads guilty to sending Top Secret files to Ethiopia
Cyberattack on French plasma stores is enough to make your blood boil
North Korean fake job interview led to $6.3B Binance heist
AI policy wonks declare 'sovereign agents' a threat to civilization
Password manager mSecure tells users to change passwords, won't say why
VentureBeat
AI agents don't have to break security controls to go rogue. Here's how to keep them in check
Agents are rewriting the book on security. Can your data layer keep up?
AI agent access is moving faster than identity controls can govern
AI agents are about to put least privilege to the test
DeepSeek-V4.1-Flash-1017 arrives with improved benchmarks just as the U.S. government bans it from agencies — what enterprises should do
AI cloud security needs to prove control before agents reach production
Anyone can build apps with AI. But who owns them?
TechCrunch
Hackers stole DreamHost customer files and inboxes during months-long attack
Building on open source AI? Hugging Face’s policy chief on the costs, risks, and trade-offs
Ted Schlein’s Ballistic Ventures seeks $490M for new funds amid AI-driven cybersecurity boom
Researchers warned of North Korean hacking tactics years before record $6.3B Binance heist
CrowdStrike to shell out nearly $500M for 2 AI security startups as the market for securing agents takes off
New York City’s Mamdani criticizes Madison Square Garden owner over surveillance tech
Germany says lawmakers’ iPhones may have been hacked with spyware
A fresh wave of cyberattacks has hit Europe’s supermarket refrigerators, destroying food across countries
Applebee’s exposed customers’ personal data after leaving database password in app
North Korean hackers blamed for stealing record $6.3B in Binance breach
Network World Security
Zyxel patches a zero-day hiding behind an old fix
Attackers turned OpsShield’s trusted update channel into a supply-chain attack
Arista posts record growth as AI networking supercycle accelerates
Broadcom expands VMware Cloud Foundation with AI, security, and recovery capabilities
2026 network outage report and internet health check
Barracuda’s security appliances have a security problem of their own
Network appliances go more than a year without patches as exploits speed up
European supermarkets that failed to act after French freezer attack are now feeling the heat
IBM aims to simplify mainframe modernization with AI-powered insight
NaaS hasn’t lived up to the hype. Is it still worth it?
Help Net Security
Cyberhaven launches Agentic Data Security to track and control AI data use
Rubrik hosts NAS backups in isolated, immutable vaults
Vercel ties login sessions to devices, rolls out AI security reviews in public beta
Arkose Labs expands Agent Trust Manager to govern agent sessions
Box pairs agentic workflow plans with new threat protections
Cyberattack on Norway’s aid agency may have swept up all user data
PortSwigger’s Burp AT lets enterprises delegate pentests with defined limits
Sysdig AI Defense puts runtime guardrails on AI agents
Patched Zyxel GS1900 switches remained open to in-the-wild exploit (CVE-2026-107441)
Scammers capitalize on GTA 6 hype to push malware and crypto cons
SC Magazine
Joe Security introduces adaptive detonation to counter evasive malware
Apple to moderate public iCloud links for harmful content
Vercel implements Device Bound Session Credentials to block infostealer malware
Datadog, Rapid7 and Fastly report third-quarter earnings
Online poker players targeted by malware in cheating scheme
Russian state-backed hackers launch mobile cyberespionage campaign
Sentra raises $150 million to secure enterprise data against AI agents
Researchers identify prompt adware targeting OpenAI Codex
Former US government contractor pleads guilty to espionage
Operation CloudFire: phishing campaign targets corporate Google sessions
© 2026 RiskDiscovery | Sponsored by: Deception Logic