[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
Fake Bahrain Alert App Deploys Android Surveillance Malware
When AI Attacks: OpenAI Models Autonomously Hack Hugging Face
EU Financial Institutions Leak Data Through Cookie Trackers
Ransomware Is Accelerating, but It's Not Because of AI
Using LLMs to Find and Prioritize Vulnerabilities Is No Easy Task
Hacker Turns AI Jailbreaks Into Offensive Attack Platform
Choose Wisely: AI-Generated Coding Risk Varies, a Lot
'WP2Shell' Opens Millions of WordPress Sites to Remote Takeover
Remediating Vulnerabilities With LLMs: Inside Ivanti's Automation Push
25 Years After Code Red: What the Worm Era Can Teach Us About AI Security
Ars Technica
TreeSize won't renew perpetual-license support unless users subscribe
HP fined 1.4 billion rupees for “cartelization” of ink cartridges, toner, PCs
Now, even Russia's most elite hackers are using Clickfix to infect devices
Energy IPOs surge as investors hunt for ways to play AI boom
Sheetz is quitting VMware, migrating 11,000 virtual machines
Windows 0-day drops the same day Microsoft releases record number of patches
Microsoft’s Secure Boot has been broken for a decade and no one noticed until now
The US government warns that Russia state hackers are coming after your router
Now, defenders are embracing the prompt injection, too
Patch for Windows Defender 0-day could allow attackers to fill hard disk
CyberScoop
Most federal cybersecurity reporting rules are duplicative, study finds
Malware is targeting AI tools in software development environments
White House accuses Chinese company of distilling Anthropic’s Fable
OpenAI says model test was behind Hugging Face hack
AI models keep getting caught cheating
Where’s the Trump administration line on AI regulation?
House intel bill includes provisions on state and local threat intelligence, election security, AI
North Korea’s IT worker scheme funds Russia’s war effort
What the World Cup can teach us about cybersecurity resilience
Director of Commerce AI standards office out after three months
InfoSecurity Magazine
TrickBot Ditches HTTP for DNS Tunneling in Latest Variant
Open AI Claims Its AI Models Went Rogue and Hacked Another Company
Ubuntu snap-confine Vulnerability Enables Local Root Access
Google Makes CodeMender Available as Managed AI Security Agent
Russian Hacker Turns Jailbroken Claude Into Pentest Platform
A New Ransomware Threat Actor Emerges Every Week, Warns Report
FBI Warns of Deepfake Videos Impersonating IC3 Leadership
US Hospital Finance Software Provider Craneware Reports Data Theft
Researchers Uncover North Korean 'ClickFake' Campaign Targeting Web3 Pros
Cruciferra Crypter Uses Process Ghosting to Evade Detection
SecurityWeek
Suno, Paidwork Data Breaches Affect Tens of Millions of Accounts
Palo Alto Networks to Acquire Observability Platform Provider Embrace
Flaw in Adobe Extension With 300M Installs Enabled WhatsApp Data Theft
When Identity Verification Fails: Lessons from a Real-World SIM Swap and Near Account Takeover
Vibe-Coded Apps Riddled With Exploitable Security Flaws
StrongestLayer Raises $4.1 Million in Seed Funding Extension
Fourth SharePoint Vulnerability Exploited in Past Month’s Wave of Attacks
Endpoint Security Firm Glow Launches With $180M in Funding at $1.2B Valuation
Oracle Patches Over 1,400 Vulnerabilities With Quarterly Security Updates
Ransomware Group Threatening to Leak Data Stolen From Coca-Cola’s Fairlife
ZDNet
New to Linux? This 10-day checklist will help you settle in nice and easy
Samsung Galaxy Z Flip 8 vs. Moto Razr Ultra: I've spent time with both, here's what I prefer
I lost 100 pounds in 7 months: How a smart scale and an Apple Watch helped track my progress
I tested this fan-equipped MagSafe charger in a heat wave - and it actually kept my iPhone cool
I gave Perplexity's agentic AI 5 complex tasks to run on my Mac - and I'll do it again
Firefox 153 enables Containers by default, and you can create your own - here's how
The best Samsung Galaxy Z Flip 8 cases: Expert recommended
The best Samsung Galaxy Z Fold 8 and Fold 8 Ultra cases of 2026: Expert recommended
Narwal Flow 2 review: The robot vacuum that finally perfected obstacle avoidance
Samsung Galaxy Z Fold 8 Ultra vs. Motorola Razr Ultra: This one is the better value
The Hacker News
GitHub Cuts Public Bug Bounty Payouts, Moves Top Rewards to VIP Tier
Ubuntu snap-confine Flaw Could Give Local Users Root on Default Desktop Installs
Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data
Hackers Exploit Windmill Flaw to Read Arbitrary Server Files Without Authentication
The Fastest Path to AI Adoption Runs Through Security
OpenAI Says Its AI Models Escaped Sandbox, Targeted Hugging Face to Cheat Benchmark
Why Modern SOCs Need Multi-Layered Detections
Police Dismantle Kratos Phishing Kit Built to Steal Microsoft 365 Sessions and Bypass MFA
Trojanized Newtonsoft.Json Fork Hides Game-Rigging Code in a Working Library
Microsoft Azure DevOps MCP Flaw Lets Hidden PR Comments Hijack AI Review Agents
BleepingComputer
South Korea discloses data breach impacting diplomats worldwide
Swiss rail giant Stadler rejects $12.3M ransom demand after cyberattack
How enterprise GenAI can amplify ransomware risk — and how to contain it
New InfraTrust report reveals infrastructure flaws admins should patch first
Adobe Chrome extension flaw let sites access private WhatsApp chats
CISA orders urgent action on actively exploited Langflow RCE flaw
Stop renting storage space — this lifetime 2TB plan is yours for $59
Microsoft to stop Exchange 2016 / 2019 security updates in October
Chick-fil-A discloses data breach after credential stuffing attacks
OpenAI says its AI models hacked Hugging Face during testing
gbhackers
Malicious NuGet Typosquat Targets Digitain Betting Platform and Rigs Game Results
AppViewX Arms Enterprise CLM Teams for Post-Quantum Migration and AI Adoption in Latest Product Release
Critical Meta IDOR Flaw Let Attackers Access Customer Support Cases
Apple Fixes Hide My Email Vulnerability That Exposed Users’ Real Email Addresses
CISA Warns WordPress Core SQL Injection Vulnerability Is Actively Exploited in Attacks
Zimbra 10.1.20 Fixes Critical SNMP Command Injection and Multiple XSS Flaws
FBI Warns Scammers Use AI Deepfakes and Fake IC3 Websites to Target Fraud Victims
Critical ASUS Router Flaw Lets Remote MITM Attackers Execute Arbitrary Commands
Hackers Clone Microsoft Login Portals to Capture Credentials and Session Tokens in Real Time
North Korean Hackers Use Fake Job Interviews to Deploy PylangGhost and GolangGhost RATs
Cybersecurity Dive
Threat group claims credit for ransomware attack on Coca-Cola’s dairy unit
OpenAI models escaped containment and hacked a major AI application library
4 ways to secure local developer IDEs and tools without sacrificing velocity
Ransomware victims fail to fix flaws that exposed them
Microsoft SharePoint under attack via new exploit
Researchers trace SonicWall SMA1000 exploitation to late June
Hackers steal customer data from major hospital software vendor
Your attack surface is bigger than you think
The secret problem in AI infrastructure: Why MCP security starts with secrets
Abbott discloses cyberattack on cancer diagnostics business
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
Linux kernel team publishes 432 CVEs in two days
Sneaky Windows stealer targets 300+ apps, gives crims an AI profiler to maximize profits
Greedy ransomware crews return for seconds after victims cough up first extortion payments
Council worker spared prison after four-day data-snooping spree
OpenAI admits it was the source of the agent swarm that attacked Hugging Face
Cisco's open-weight bug busters take on Google and OpenAI
AI's cheatin' heart will make you weep
Kratos phishing-as-a-service kit loses its battle with international law enforcement
AI music platform Suno hits bum note as 55M users exposed in data breach, claims infosec expert
Intel fortifies Foundry with an actual customer: Fortinet
VentureBeat
OpenAI's models broke containment and cyberattacked Hugging Face — what enterprises need to know
Evals are the new PRD, Expedia’s AI chief tells VB Transform 2026
Safety guardrails blocked Hugging Face's defenders, not the attacker, when an AI agent breached its systems
AI confidence just dropped 17 points in six months. That’s actually great news.
Capital One releases VulnHunter, an open-source AI tool that finds software flaws before hackers do
Zero trust must now move at agent speed
1Password moves into AI cost management, betting that token spend is the next enterprise budget crisis
TechCrunch
How OpenAI’s human mistake led to the AI-powered hack on Hugging Face
If you pay a hacker’s ransom, chances are that they’ll come back for more
Glow emerges from stealth at $1.2B valuation to challenge endpoint security in the AI era
AI music generator Suno breach affects 55M users, per Have I Been Pwned
Hackers are exploiting recently patched WordPress bugs, putting millions of websites at risk
Hackers stole ‘significant’ amount of data from tech firm relied on by thousands of US hospitals and pharmacies
Watch Flock Safety CEO Garrett Langley discuss the future of surveillance at TechCrunch Disrupt 2026
Hugging Face confirms breach affected internal datasets and credentials, urges users to take action
The Zoom hack that says, ‘Don’t record me’
FBI arrests man accused of using Steam games to drain victims’ crypto wallets
Network World Security
Oracle expands Cloud@Customer with new database service for mid-sized workloads
Nvidia unveils Spectrum-X networking platform designed to connect millions of GPUs
Arista debuts unified SD-WAN edge platform
2026 network outage report and internet health check
Helios marks AMD’s biggest AI infrastructure push yet
Sheetz replaces VMware at more than 830 stores
AI workloads shake up observability market
New York State just hit pause on the AI data center boom
Huawei eying possible DRAM market entry
IBM targets AI edge with Power server, software upgrades
Help Net Security
OpenAI: Our models breached Hugging Face during a cyber capability test
OpenAI Presence connects AI agents to enterprise data with built-in guardrails
Astelia extends reachability analysis with agentic AI for vulnerability management
ThreatDown expands security visibility to AI tools and machine identities
Swimlane AI SOC automates security operations for MSSPs
Another SharePoint RCE exploited: Patch, then rotate your machine keys (CVE-2026-50522)
Glow exits stealth with $180 million to secure the AI-enabled endpoint
US seizes over 1,000 domains used for illegal World Cup 2026 streams
Lookout identifies exploitable vulnerabilities in mobile apps
Box expands enterprise AI governance with new agent security featuresox
SC Magazine
SharePoint vulnerability steals machine keys; fourth recent exploit
JADEPUFFER agentic ransomware returns, targets AI assets with ENCFORGE payload
In Europe, security has become the price of entry to the AI market
AI's Disruption as Cybersecurity’s Economics Are Broken, Compounding Security Debt - Ben Gilliland - BSW #457
Argon2id password hashing neutralizes GPU advantage in cracking attempts
North Korea's IT worker scheme funds Russia's war effort, report finds
UK government scraps controversial digital ID card scheme
Cyberattack disrupts internet service for 23 Maine towns
Military-focused apps contain foreign-sourced code, raising data security concerns
German authorities dismantle Kratos phishing-as-a-service infrastructure
© 2026 RiskDiscovery | Sponsored by: Deception Logic