[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
Russian Influence Operation Widely Targeting Latin America
Ransomware Gangs Embrace Physical Threats, Family Stalking?
Zero-Days Lurk in Microsoft's Overgrown October Patch Tuesday
North Korea Phishes Ukrainians for War Intel
Anthropic Finds Ingredients for Future AI Worms
Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under Attack
Prominent Ransomware Negotiator Faces Extortion Charges
No Identity, No Recovery: Cyber Resilience Starts With IAM
Passing the Baton: Dark Reading Names New Editor-in-Chief
ASOS Breach Reveals the Risks in Customer-Facing SaaS
Ars Technica
Anthropic warns small AI models could self-replicate through IoT devices
Topgolf saved over $11.3 million after leaving VMware
PC shipments fall 20.1 percent in “sharpest decline” since Q1 2023
Hackers obtain counterfeit TLS certificates for Google and other large services
OpenAI agents tried to hack Wikipedia tools and flooded it with traffic
Licensing costs driving 90 percent of VMware users to explore options: Survey
MCP for agent-to-agent comms may be the riskiest protocol you've never heard of
Apple changes full-disk access permissions to curb abuse from AI agents
Hacks of 2 federal agencies in a month have spilled a bonanza of sensitive data
Memory executives expect RAM shortage to continue through 2028
CyberScoop
Microsoft and partners disrupt vast Chinese-language phishing kit ecosystem
Ivanti misses opportunity to fix vulnerability before attackers got to work and made it a zero-day
DOJ charges 14 over a sprawling North Korean remote work scheme
FTC says ‘sextortion’ protection companies deceived customers about services 
West African scammers targeted in joint international government-industry operation
Flock can now issue CVEs for its own products. Should we trust it?
IonQ to buy zero-trust security firm Elisity in deal valued at up to $1.3 billion
Your AI agent is only as safe as the packages it downloads
Canadian cybersecurity executive arrested in federal extortion case
Leader of 764 pleads guilty, faces up to 30 years in prison
InfoSecurity Magazine
ROMULUS Malware Server Leverages ClickFix to Deliver Multiple Payloads
Passkey Authentications Double but Adoption Remains Slow
French Supermarket Cyber-Attack Impacts More Refrigeration Controllers
Microsoft Breaks Patch Tuesday Record Again with 1400+ CVEs
Billion-Dollar Companies Twice as Likely to Leave Critical Vulnerabilities Unpatched
European Retail Firms Confirm Cyber Incidents
Defenders Reluctant to Deploy Agentic AI as a Cybersecurity Tool
UK Government Announces Sweeping New AI Security Plans
Fifth of CISOs Take Time Off to Avoid Patch Tuesday
Luna Moth Leaks Shed Light on Ransomware Group's Inner Workings
SecurityWeek
Harmonic Security Raises $50 Million for Workforce AI Protection
Virtual Event Today: Zero Trust Strategies Summit
Microsoft Disrupts Chinese-Language Phishing Market Behind 1B+ Messages
US Arrests Two in Crackdown on North Korean IT Worker Laptop Farms
Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise
Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products
Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day
SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities
Employee Arrested After Listening Device Found in OpenAI Conference Room, FBI and the Company Say
Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN
ZDNet
Windows update patches a whopping 1,400 security bugs –  including 2 zero days
Linus Torvalds is using AI to develop Linux kernel code now
Google lets you make personal Android apps for free now – with just prompts
Apple’s smart home event: All 7 devices, prices, and release dates
4 upgrades HomePod Mini 2 has over its 6-year-old predecessor
Apple’s $299 HomeView smart hub is here: 8 highlights, including the wall model
‘So perfect, they are literally identical’ – Your AI-polished resumes are recruiters’ new top stressor
Dutch tax authorities cancel Microsoft 365 cloud rollout – and turn toward open source
Claude sent a false homicide tip to police – and it’s part of a troubling AI pattern
Google’s new Fitbit Edge solves my biggest gripe with the Pixel Watch
The Hacker News
CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts
curl Patches HTTP/2 Upload Flaw After PoC Demonstrates Client-Side Code Execution
How to Run a Deepfake Readiness Drill Before a Cloned Voice Calls Your Team
Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days
Hirudo Android Trojan Uses Patched Banking Apps to Bypass Their Built-In Security Checks
An AI Agent Found a Critical OTP Bypass in Production. The Attack Was the Easy Part.
AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host
Four-Byte Write and Timing Bug Let Researchers Run Code in Windows SmartScreen Enclave
Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug
OpenAI Employee Arrested for Allegedly Planting Hidden Recorder in Executive Conference Room
BleepingComputer
Microsoft fixes VPN issues caused by September Windows updates
The Blind Spots of Agentic Pentesting and How to Close Them
Global takedown hits network behind 1 billion phishing messages
CISA warns admins to immediately fix Ivanti flaw exploited as zero-day
Hirudo Android malware replaces banking apps to evade security checks
Microsoft: Recent Windows updates may trigger Remote Desktop failures
OpenAI engineer arrested for allegedly planting spy device in office
Ghostscript flaw lets hackers hijack servers via PDF uploads
Anthropic warns self-replicating AI could spread to your smart devices
Microsoft October 2026 Patch Tuesday fixes 1,411 flaws, 3 zero-days
gbhackers
Ransomware Gangs Threaten Employees’ Families as AI-Powered Attacks Escalate
Google Pays $250,000 for AI-Assisted Chrome Exploit Enabling Windows Code Execution
Meta GitHub Repositories Compromised, Exposing Software Code and Employee Personal Data
Hackers Use Compromised Credentials to Infiltrate European Bank Through VPN
Windows Server Zero-Day Flaw Lets Attackers Crash Servers With a Single Malicious Packet
Google Chrome Update Fixes 37 Security Vulnerabilities, Including 7 Critical Flaws
Fake WatchGuard VPN Site Steals Credentials Then Delivers Legitimate Signed Installer
Windows BitLocker Vulnerabilities Could Allow Attackers to Bypass Security Protections and Escalate Privileges
Ivanti Connect Secure CVE-2026-104935 Flaw Enables Unauthenticated Remote Code Execution
Hackers Chain 3 Ivanti VPN Zero-Days to Gain Root Access Without Authentication
Cybersecurity Dive
Dangerous flaws in refrigeration equipment were disclosed months before retail attacks
Businesses need more integrated risk management to counter cyberattacks, AI-powered fraud
Ahold Delhaize experiencing cybersecurity issue
CISA calls on Citrix NetScaler customers to patch as new flaws disclosed
GitLab fixes critical vulnerability that exposed software environments to sabotage
AI-driven security: Why agentic AI is changing cybersecurity
FBI seizes domains linked to China-nexus botnet
As frontier models go rogue, colleges beef up AI cybersecurity education
What the C-suite needs to know about AI governance
US government lagging in transition to post-quantum encryption, GAO finds
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
OpenAI engineer charged after boardroom bug found wrapped in toilet paper
Ransomware gets personal: 'We-know-where-you-are kind of stuff'
Claude submitted fake murder tip to Philly police during summertime testing
Anthropic conjures another threat that doesn't exist yet to stoke fears of AI apocalypse
Cyberattacks crank French supermarket refrigeration systems up to 50°C
'123456' password linked to Denmark data breach affecting 8.8M people
Owner of fashion brands Hobbs and Whistles joins autumn pwned collection
VMware is pushing so many patches, it thinks users need new tools to manage the flood
Chatbot refuseniks edge out users in the US, and they’re not for turning
Ukrainian drone strikes on Yandex datacenters knock cloud and payments offline
VentureBeat
Browser security’s buying spree rests on one engine, without a clear Plan B
Anthropic’s Cyber Mission starts with 6,157 findings reported to maintainers and 516 patched
Microsoft's record Patch Tuesday shows why severity can't decide what gets patched first
Your vibe-coded apps are a ticking time bomb for your business. Here’s how to secure them.
AI agents need more than access control — they need identity at runtime
22 of 37 surveyed companies that enforce AI agent permissions still have agents sharing credentials
OpenAI’s new ‘Private Intelligence' targets a growing enterprise concern: who can see your AI data?
TechCrunch
Justice Department says North Koreans have infiltrated dozens of US companies
FBI arrests OpenAI employee accused of planting hidden recording device in conference room
Pluto Security raises $42M as AI gives enterprise security teams a new headache
Surveillance company Flock cuts staff as privacy backlash grows
Asos confirms breach of customer data after hackers send rogue app notification
CIA officer admits to creating fake top secret government program to steal over $190M, including gold bars
LibreOffice says ‘no AI’ is now a software feature
Hackers steal 8 million citizens’ records from Danish government database
Google froze its open source bug bounty program due to a ‘significant rise’ in AI submissions
Federal judge calls Flock ‘indiscriminate mass surveillance’
Network World Security
SolarWinds launches Avior AI agents to automate network operations
IBM, IonQ, Diraq, and Atom Computing advance to DARPA’s quantum hardware testing stage
IonQ’s $1.2 billion acquisition of Elisity is trying to position it for quantum cybersecurity
WebexOne 2026: Key themes and why they matter to network engineers
NetBox Labs adds network design templates and AI agents to streamline infrastructure operations
2026 network outage report and internet health check
Cisco, Nvidia push ultra-dense networking for Ethernet AI fabrics
AMD unveils Helion as agentic AI fuels demand for data center CPUs
It’s not your model — AI has a data movement problem
Ørsted builds compliance into automation, speeds firewall changes
Help Net Security
FBI raids 40+ laptop farms helping North Korea pocket US tech salaries
Download: The IT and security field guide to AI adoption
Phase Eight, Hobbs and Whistles owner joins growing list of fashion retailers targeted by hackers
Radware MCP Server Protection monitors agent activity and guards against protocol abuse
SolarWinds Avior pairs IT automation with human approval and audit trails
Chainguard Harness uses frontier AI to test running applications for vulnerabilities
Scytale MCP gives AI tools scoped, read-only access to compliance data
GitHub adopts cheaper AI model to catch secrets developers leave in code
Attackers chained three Ivanti zero-days to gain root on fully patched VPN appliances
OpenAI engineer arrested for allegedly trying to eavesdrop on executive meetings
SC Magazine
Why teams must take a least-privileged access approach in the AI era
AI agents breach production systems, spread malware in major exploits
AI Resilience as CISOs Can Balance Internal AI Risk and Productivity Concerns - Bill O'Connell, Ryan Grant - BSW #469
Claude Visa, Yandex, Danfoss, Bricks, Purgatorius, Muse, Xandr, Grindr, Aaran Leyland - SWN #624
GitLab patches 10.0 flaw in its CE and EE products
The AI you can't see: Bringing third-party shadow AI into the risk picture
Meta releases new AI models, Muse Wonder and Muse Wonder Full
Flock granted authority to assign CVE IDs for its own products amid privacy concerns
AI governance challenges emerge as enterprises deploy autonomous agents
IonQ to acquire Elisity for $1.3 billion to bolster quantum security
© 2026 RiskDiscovery | Sponsored by: Deception Logic