[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
November Patch Tuesday: An Overflowing Cornucopia of CVEs
Artex: The AI Pen-Test Tool Hackers Turned Into a Weapon
F-Secure Identifies 26 Ways AI Can Harm Consumers, and Where to Stop Them
Checkmarx Appoints Kobi Sivilya as Chief Information Security Officer
How to Assess OT Incident Response Preparedness
AI Coding Agents Leak Thousands of Secrets to GitHub
AI Makes Reverse Engineering Mainstream Software & Malware Far Easier
People Are Getting Weird About AI
CISA Announces Enhanced Reporting Form for Cyber Incidents
Microsoft Fixes RCE Bug in Windows Paint After Weeks of Confusion
Ars Technica
Grok Build coding agent leaks oodles of confidential info, some belonging to SpaceXSI
Vulnerability that lets hackers SSH into Linux devices is under active exploitation
Chainalysis says hackers stole credentials and tokens for all of its customers
Meet *sshole, the vulnerability that lets hackers SSH into Linux devices
Hackers exploited iOS and Android flaws to infect phones
VMware releases vSphere Express for virtualization on up to 128 cores
Binance says hackers who stole billions in crypto spent months planning heist
UEFI bootkit infected fully patched Windows machines. Is Microsoft to blame?
Anthropic VS code extension on Cursor backdoored for nearly 12 hours
Code-execution flaw in UEFI firmware affects most servers on planet Earth
CyberScoop
CISA director pick already drawing concern from Hill Dems over Palantir connection
The US wants its quantum lead to turn into factories and supply chains
Microsoft fixes over 1,000 vulnerabilities in November Patch Tuesday
Vanderbilt University reels following ransomware attack claimed by BYOD group
Spyware attacks trend toward hitting just about anyone
Russian Turla group used new toolset to silently pilfer emails from Kazakhstan, Romanian governments
Trump picks Palantir’s LoSapio to head CISA
AI doesn’t have to go rogue to break the world
Authorities accuse trio of using AI deepfakes to defraud $129M from businesses
Air Force cyber official: need to invest in digital forensics
InfoSecurity Magazine
OT Incidents Hit a Third of Industrial Organizations, SANS Finds
Microsoft Fixes 1235 Flaws in Another Record Patch Tuesday
CISA Expands Incident Reporting Form While CIRCIA Mandate Waits
Russia-Linked Turla Hijacks Exchange Servers to Spy on NATO and EU Emails
Cloud Vulnerabilities Surge Fourfold in Less Than a Year
Default Admin Password Let Researchers Unlock and Start Cars
Vanderbilt University Takes Systems Offline After Cyber Incident
France Blames Iran for Supermarket Fridge Hack, Requests International Arrest Warrants
Binance Investigates ShinyHunters Breach Claims
Jailbroken AI Agent Ran Two-Week Attack on European Telecom
SecurityWeek
Finite State Raises $27 Million to Secure Software and Firmware in Connected Devices
Fortinet Patches Nearly 100 Vulnerabilities
Bay Raises $50 Million to Control What Enterprise AI Agents Can Do
Dreeze Emerges From Stealth With $33M to Rebuild Cloud Apps After Cyberattacks
ICS Patch Tuesday: Siemens Flags High-Severity Flaws, Node2Shell Exposure
Threat Actors Exploit Openwave, Cisco BroadWorks Vulnerabilities
Chipmaker Patch Tuesday: Over 200 Vulnerabilities Addressed by Intel, AMD
Recently Patched Barracuda Vulnerabilities Exploited in Attacks
Bluetooth, AirPlay Pairing Vulnerabilities Patched Across Apple Platforms
Exploited Outlook Zero-Day Among 1,094 Flaws Patched by Microsoft
ZDNet
New Windows 11 update fixes File Explorer menu mess – and patches an exploited flaw
Need more AI in Creator Studio? Apple may charge you for it
I found a hidden Android tool that solves all my tiny text troubles
All your Apple devices need to be patched ASAP – here’s why
Google’s new AI tool just proved Signal encryption really works – here’s how
Your FitBit Versa and Sense smartwatches will lose some features this month – what to know
Done with Debian Linux distros? Try Fedora next – 7 reasons why
Reddit launches AI-powered Reviews feature – with 10,000 products to start
5 apps I need Siri AI to work with now that it’s open to third-party developers
Ring’s new drone patrols your home to keep an eye on things – even upstairs
The Hacker News
Over 35,000 Grok-Built Apps Exposed Online, Some Leaking Confidential Data and Passwords
We Built An Agent That Broke All of Our Security Rules. Here's What We Learned.
eMudhra Revokes 8 More CAs It Previously Declared Unaffected by Key Compromise
Microsoft Patches 1,259 Flaws, Including Exploited Outlook Bug That May Expose NTLMv2 Hashes
Railway Says Stolen Customer AI Keys Led to $740,000 in Estimated Unauthorized Usage Charges
Microsoft Researchers Show AI Agents Can Be Backdoored by Editing Fewer Than 10 Neurons
Cisco BroadWorks and Openwave Flaws Actively Exploited Despite Available Patches
Git Patches Flaw That Lets Malicious Repositories Execute Code During Recursive Clones
SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users
Hackers Exploit Critical Xen Orchestra Auth Bypass Flaw to Gain Admin Access
BleepingComputer
N-able releases security hotfixes for zero-day vulnerabilities
Microsoft fixes audio issues caused by September security updates
CISA flags Cisco BroadWorks flaw as actively exploited in attacks
Microsoft fixes Exchange sign-ins broken by Windows Server updates
Railway breach leads to $740,000 in fraudulent AI charges
Japanese furniture giant Nitori says hackers stole 37.6M customer records
Microsoft releases Windows 10 KB5131096 extended security update
Hackers exploit trusted AWS access to breach multiple cloud environments
Microsoft November 2026 Patch Tuesday fixes 1,235 flaws, Outlook zero-day
Windows 11 KB5132061 & KB5131087 cumulative updates released
gbhackers
Fortinet2Shell Vulnerability Lets Hackers Execute Code on FortiClient Systems Through Malicious Websites
N-able Warns of Critical N-central Zero-Day Vulnerability Actively Exploited by Hackers
BluePhishing Attack Abuses Microsoft Entra OAuth Consent to Create Hidden AI Agent Identities
Windows Active Directory RCE and DoS Vulnerabilities Put Windows Systems at Risk
Researchers Uncover 45 AI Hacking Frameworks, With Hundreds of Attack Consoles Exposed on the Internet
Ivanti Patches Critical SQL Injection Flaw Allowing Remote Code Execution Without Login
Corelight Warns AI Agents Can Silently Run Unreviewed Code With Privileged Access to Enterprise Networks
Notion AI Data Breach Exposes Customer Chat Transcripts After Third-Party Fireworks AI Cyberattack
Railway Security Breach Exposes Customer API Keys, Database Passwords and Cloud Secrets
Critical SAP PROXYGATE and ICM2SHELL Vulnerabilities Allow Server Takeover Without Authentication
Cybersecurity Dive
Trump picks Palantir cybersecurity executive to lead CISA
Truth or consequences: What your AI strategy is standing on
Financially motivated threat cluster uses AI-enabled tools against banking sector
Cybersecurity education in the AI era: What’s new, what’s different
5 critical steps organizations should take to secure AI
Improving incident response with AI agents
Hackers enlist Artex to scan GitHub repositories for exposed secrets
Companies struggle to know what normal looks like for AI agents
What to expect from Democrats’ cybersecurity agenda in Congress
French authorities probe cyberattack targeting nation’s blood supply
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
Shipping giant Maersk probes 'IT security incident,' data theft
OpenAI builds a kill switch for its research models
November Patch Tuesday boasts over 1,000 bugs but only one zero-day so far
Ring robots ready to patrol paranoids’ pads
Barracuda’s email security gateways bitten by make-me-root vulns
Trump taps Palantir security chief to run battered US cyber defense agency
Fireworks AI gets burned twice as customer data exposure widens
Chrome zero-day whack-a-mole continues as 2026 tally hits 8
Ransomware threat blares from Vanderbilt University computers during cyberattack
Google DeepMind melds humans and AI agents to vet Signal's secure messaging techniques
VentureBeat
Did Claude Code’s ‘don’t ask again’ option accidentally expose your enterprise's passwords and keys?
AI agents don't have to break security controls to go rogue. Here's how to keep them in check
Agents are rewriting the book on security. Can your data layer keep up?
AI agent access is moving faster than identity controls can govern
AI agents are about to put least privilege to the test
DeepSeek-V4.1-Flash-1017 arrives with improved benchmarks just as the U.S. government bans it from agencies — what enterprises should do
AI cloud security needs to prove control before agents reach production
TechCrunch
N-able takes its remote access service offline after researcher publishes dozens of zero-day bugs
Cyberattacks threaten to make open source AI a little less open, Hugging Face exec warns 
Hotel giant Wyndham exposed customer data after app security lapse
France blames Iran for mass-hacks targeting freezers in grocery stores and blood banks
Hundreds of Artex AI hacking tools found publicly exposed to the web
Palo Alto Networks in talks to buy AI agent security startup Clutch for $500M
US government warns of ‘ongoing cyber threat’ amid mass hacks of industrial retail and military freezers
Hackers stole DreamHost customer files and inboxes during months-long attack
Building on open source AI? Hugging Face’s policy chief on the costs, risks, and trade-offs
Ted Schlein’s Ballistic Ventures seeks $490M for new funds amid AI-driven cybersecurity boom
Network World Security
Cisco boosts its AI Defense platform with Anthropic’s Claude Mythos
Commvault rolls out an automated recovery mechanism, promising faster restoration of business
Cisco Live Melbourne: AI agents will break today’s enterprise network, and Cisco wants to rebuild it
Oracle cancels $7 billion Tencent AI chip deal
Data center champions lose badly as ballot initiatives target AI infrastructure
Google targets AI’s next infrastructure bottlenecks with two new TPUs
A mole in the White House? Residential proxies are everywhere
Don’t mention the data center: OpenAI calls them ‘compute campuses’ instead
Broadcom has quietly changed VMware availability, support for parts of Europe
Agentic AI boom expected to reshape CPU market
Help Net Security
Rubrik enhances DevOps Protection to preserve legitimate work during recovery
Microsoft researchers demonstrate hidden backdoor technique for AI agents
Ubuntu certificate revocation checks arrive in curl, OpenSSL is next
Red Hat OpenShift 5 brings autonomous troubleshooting to hybrid clouds
Druva helps restore AI agents without rolling back entire environments
Fingerprint trains specialized models to detect distinct fraud types
Orca Security adds visibility into AI-generated code and agent risks
Obsidian expands AI agent security with runtime policy enforcement
The Cyber Resilience Act clock doesn’t stop for weekends
A CISO’s guide to trimming waste from a flat security budget
SC Magazine
Cyber Resilience as AI Tops CISO Priorities and Security Strategy for 2027 and Beyond - Mone' Ross - BSW #473
Managed service providers face client trust challenges during ransomware recovery
Amplifon Americas discloses data breach affecting sensitive customer information
Flashpoint launches agentic AI to automate cybersecurity threat investigations
Critical authentication bypass vulnerability in Xen Orchestra under active exploitation
Cowbell Cyber introduces AI liability insurance for small and midsized businesses
Blind Eagle threat group launches new phishing campaign in Latin America
Teleport releases beams to secure artificial intelligence agents in production
Bay AI launches with $50 million to secure enterprise AI agents
Cloud security risks rise as AI adoption accelerates
© 2026 RiskDiscovery | Sponsored by: Deception Logic