[ News | Newsletters | Blogs | Reddits | Lists | Media | Jobs ] HoneyDB
DarkReading
How Has IoT Security Changed Over the Past 5 Years?
Critical SAP S/4HANA Vulnerability Under Attack, Patch Now
Anyone Using Agentic AI Needs to Understand Toxic Flows
Secretive MaaS Group 'TAG-150' Develops Novel 'CastleRAT'
Scammers Are Using Grok to Spread Malicious Links on X
Embracing the Next Generation of Cybersecurity Talent
Federal Cuts Put Local, State Agencies at Cyber-Risk
Sitecore Zero-Day Sparks New Round of ViewState Threats
Bridgestone Americas Confirms Cyberattack
Chinese Hackers Game Google to Boost Gambling Sites
Ars Technica
ChatGPT’s new branching feature is a good reminder that AI chatbots aren’t people
The number of mis-issued 1.1.1.1 certificates grows. Here’s the latest.
Microsoft open-sources Bill Gates’ 6502 BASIC from 1978
New AI model turns photos into explorable 3D worlds, with caveats
Mis-issued certificates for 1.1.1.1 DNS service pose a threat to the Internet
OpenAI announces parental controls for ChatGPT after teen suicide lawsuit
Zuckerberg’s AI hires disrupt Meta with swift exits and threats to leave
Google warns that mass data theft hitting Salesloft AI agent has grown bigger
High-severity vulnerability in Passwordstate credential manager. Patch now.
Unpacking Passkeys Pwned: Possibly the most specious research in decades
CyberScoop
NYU team behind AI-powered malware dubbed ‘PromptLock’ 
AI can help track an ever-growing body of vulnerabilities, CISA official says
Sitecore zero-day vulnerability springs up from exposed machine key
Streameast, world’s largest pirated live sports network, shut down by Egyptian authorities
Cato Networks acquires AI security startup Aim Security
CISA guide seeks a unified approach to software ‘ingredients lists’
House panel approves cyber information sharing, grant legislation as expiration deadlines loom
FTC announces settlement with toy robot makers that tracked location of children
Google patches two Android zero-days, 120 defects total in September security update
Court rules ‘fired’ FTC commissioners be reinstated — again
HITBSecNews
Found on VirusTotal: The world’s first UEFI bootkit for Linux
OpenAI is at war with its own Sora video testers following brief public leak
North Korean hackers posing as IT workers steal over $1B in cyberattack
WhatsApp: NSO Group Operates Pegasus Spyware for Customers
Korea extradites Russian, Vietnamese suspects linked to $16M ransomware scheme
CISA Director Jen Easterly, in Place Since 2021, to Step Down
Man sick of crashes sues Intel for allegedly hiding CPU defects
North Korean hackers target cryptocurrency with malware
Law enforcement operation takes down 22,000 malicious IP addresses worldwide
Youth of today say passwords are old news, passkeys are the future
ZDNet
My favorite Garmin smartwatch feature just came to Amazfit - and now I'm torn
Your Android phone just got a major Bluetooth upgrade for free - how it works
I used this simple YouTube TV trick and saved $66 - here's how you can, too
How to clear your iPhone cache (and why you should do it before upgrading to iPhone 17)
If these iPhone 17 Air rumors are confirmed on Tuesday, I'm saying goodbye to my phone
The 7 coolest gadgets I saw at IFA Berlin 2025 (including picks you can actually buy)
I used these 14 secret codes to enable hidden menus on my iPhone and Android
Running on iOS 18? Changing these settings greatly improved my iPhone's battery life
Watch ZDNET's preview of the Apple Event - and the rest of Techtember
I hope iPhone 17 adopts these 7 features from Google, OpenAI, and others
The Hacker News
You Didn’t Get Phished — You Onboarded the Attacker
Noisy Bear Targets Kazakhstan Energy Sector With BarrelFire Phishing Campaign
Malicious npm Packages Impersonate Flashbots, Steal Ethereum Wallet Keys
CISA Orders Immediate Patch of Critical Sitecore Vulnerability Under Active Exploitation
TAG-150 Develops CastleRAT in Python and C, Expanding CastleLoader Malware Operations
SAP S/4HANA Critical Vulnerability CVE-2025-42957 Exploited in the Wild
Automation Is Redefining Pentest Delivery
VirusTotal Finds 44 Undetected SVG Files Used to Deploy Base64-Encoded Phishing Pages
Russian APT28 Deploys “NotDoor” Outlook Backdoor Against Companies in NATO Countries
GhostRedirector Hacks 65 Windows Servers Using Rungan Backdoor and Gamshen IIS Module
BleepingComputer
Google to make it easier to access AI Mode as default
ChatGPT makes Projects feature free, adds a toggle to split chat
iCloud Calendar abused to send phishing emails from Apple’s servers
Czech cyber agency warns against Chinese tech in critical infrastructure
VirusTotal finds hidden malware phishing campaign in SVG files
AI-powered malware hit 2,180 GitHub accounts in “s1ngularity” attack
Microsoft now enforces MFA on Azure Portal sign-ins for all tenants
EU fines Google $3.5 billion for anti-competitive ad practices
Financial services firm Wealthsimple discloses data breach
Max severity Argo CD API flaw leaks repository credentials
Cybersecurity Dive
Marriott checks out AI agents amid technology transformation
Swiss Re warns of rate deterioration in cyber insurance
Researchers warn of zero-day vulnerability in SiteCore products
How the newest ISAC aims to help food and agriculture firms thwart cyberattacks
How Tampa General Hospital worked to quantify cyber risk
Cloudflare, Proofpoint say hackers gained access to Salesforce instances in attack spree
Palo Alto Networks, Zscaler customers impacted by supply chain attacks
FCC investigation could derail its own IoT security certification program
Federal, state officials investigating ransomware attack targeting Nevada
US, allies warn China-linked actors still targeting critical infrastructure
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
The crazy, true story behind the first AI-powered ransomware
Shell to pay: Crims invade your PC with CastleRAT malware, now in C and Python
Critical, make-me-super-user SAP S/4HANA bug under active exploitation
Knock-on effects of software dev break-in hit schools trust
Attackers snooping around Sitecore, dropping malware via public sample keys
Boffins build automated Android bug hunting system
China-aligned crew poisons Windows servers to manipulate Google results
Enterprises sticking with Windows 10 could shell out billions for continued support
Sainsbury's eyes up shoplifters with live facial recognition
France fines Google, SHEIN for undercooked cookie policies that led to crummy privacy
VentureBeat
TechCrunch
The growing debate over expanding age verification laws
X is now offering me end-to-end encrypted chat — you probably shouldn’t trust it yet
Venezuela’s president thinks American spies can’t hack Huawei phones
ICE reactivates contract with spyware maker Paragon
WhatsApp fixes ‘zero-click’ bug used to hack Apple users with spyware
TransUnion says hackers stole 4.4 million customers’ personal information
FBI says China’s Salt Typhoon hacked at least 200 US companies
US sanctions fraud network used by North Korean ‘remote IT workers’ to seek jobs and steal money
DOGE uploaded live copy of Social Security database to ‘vulnerable’ cloud server, says whistleblower
Security researcher maps hundreds of TeslaMate servers spilling Tesla vehicle data
Network World Security
Network discovery gets a boost from Intel-spinout Articul8
Intel: Latest news and insights
Google adds Gemini to its on-prem cloud for increased data protection
Cisco, Nvidia, VAST team to offer turnkey AI infrastructure components
Cato Networks acquires AI security startup Aim Security
Nvidia networking roadmap: Ethernet, InfiniBand, co-packaged optics will shape data center of the future
Inside the AI-optimized data center: Why next-gen infrastructure is nonnegotiable
For many NFL teams, a new season means infrastructure modernization
2025 global network outage report and internet health check
SAP data sovereignty service lets customers run cloud workloads inside their data centers
Help Net Security
Linux Kernel Runtime Guard hits 1.0.0 with major updates and broader support
Cybersecurity research is getting new ethics rules, here’s what you need to know
InterceptSuite: Open-source network traffic interception tool
Cyber defense cannot be democratized
Identity management was hard, AI made it harder
AI moves fast, but data security must move faster
Week in review: Several companies affected by the Salesloft Drift breach, Sitecore 0-day vulnerability
Attackers are exploiting critical SAP S/4HANA vulnerability (CVE-2025-42957)
Stealthy attack serves poisoned web pages only to AI agents
DigitalOcean adds Single Sign-On to help businesses centralize user access
InfoSecurity Magazine
GhostAction Supply Chain Attack Compromises 3000+ Secrets
SAP S/4HANA Users Urged to Patch Critical Exploited Bug
Bridgestone Confirms "Limited Cyber Incident" Impacting Facilities in North America
South Carolina School District Data Breach Affects 31,000 People
macOS Stealer Campaign Uses “Cracked” App Lures to Bypass Apple Security
US and 14 Allies Release Joint Guidance on Software Bill of Materials
61% of US Companies Hit by Insider Data Breaches
GhostRedirector Emerges as New China-Aligned Threat Actor
North Korean Hackers Exploit Threat Intel Platforms For Phishing
CMS Provider Sitecore Patches Exploited Critical Zero Day
© 2025 RiskDiscovery | Sponsored by: Deception Logic