[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
AI Makes Reverse Engineering Mainstream Software & Malware Far Easier
CISA Announces Enhanced Reporting Form for Cyber Incidents
Microsoft Fixes RCE Bug in Windows Paint After Weeks of Confusion
Black Hat India 2026 Makes a Landmark Debut in Bengaluru, Bringing the Global Cybersecurity Community to India
Attackers Crash Claude's 'Office Party' Flaw to Run Malicious Code on Linux
PwC's CISO on AI, Robots & What's Next for Security
NIST: Solo Shouldn't Mean Less Secure
UK Wades Into Tech Sovereignty Amid AI Policy Changes
AI Gave Your Incident Archive a Second Job
Why Europe's Freezer Hacks Spread So Far, So Fast
Ars Technica
Vulnerability that lets hackers SSH into Linux devices is under active exploitation
Chainalysis says hackers stole credentials and tokens for all of its customers
Meet *sshole, the vulnerability that lets hackers SSH into Linux devices
Hackers exploited iOS and Android flaws to infect phones
VMware releases vSphere Express for virtualization on up to 128 cores
Binance says hackers who stole billions in crypto spent months planning heist
UEFI bootkit infected fully patched Windows machines. Is Microsoft to blame?
Anthropic VS code extension on Cursor backdoored for nearly 12 hours
Code-execution flaw in UEFI firmware affects most servers on planet Earth
Disgraced eMudhra drops out of TLS business after using cert private key of 4
CyberScoop
Spyware attacks trend toward hitting just about anyone
Russian Turla group used new toolset to silently pilfer emails from Kazakhstan, Romanian governments
Trump picks Palantir’s LoSapio to head CISA
AI doesn’t have to go rogue to break the world
Authorities accuse trio of using AI deepfakes to defraud $129M from businesses
Air Force cyber official: need to invest in digital forensics
OpenAI debuts GPT-6 Cyber, touting better performance — and safety guardrails
What Democratic control of Congress means for cybersecurity
Officials extradite Canadian man to US for alleged cryptomining spree
Defense and aerospace firm settles with government over allegedly failing to meet cybersecurity contract requirements
InfoSecurity Magazine
Russia-Linked Turla Hijacks Exchange Servers to Spy on NATO and EU Emails
Cloud Vulnerabilities Surge Fourfold in Less Than a Year
Default Admin Password Let Researchers Unlock and Start Cars
Vanderbilt University Takes Systems Offline After Cyber Incident
France Blames Iran for Supermarket Fridge Hack, Requests International Arrest Warrants
Binance Investigates ShinyHunters Breach Claims
Jailbroken AI Agent Ran Two-Week Attack on European Telecom
New Supply Chain Attack Compromises Tens of Thousands of GitHub Repositories
Email Addresses of 2.2 Million Sega Customers Leaked in Vendor Breach
Crédit Mutuel Arkéa Targeted in Reported $133m Heist
SecurityWeek
Today: CISO Forum Virtual Summit 2026 – Join Global Cybersecurity Leaders
WhiteMatter Raises $20 Million in Series A Funding
SAP Patches Critical ICM2SHELL, ProxyGate Vulnerabilities
Over a Dozen Organizations Hit in Qubole Supply Chain Attack
Anthropic Rolls Out Mythos 5.2 With Improved Bug Hunting, Fewer Sandbox Escapes
N-able Takes N-central Offline as Researcher Drops Over 30 Zero-Days
IBM Aspera Faspex, SignalWire FreeSwitch Vulnerabilities Exploited in Attacks
France Blames Iran for a Cyberattack That Heated Supermarket Refrigerators
Chrome Update Patches Exploited XML Zero-Day, Eighth This Year
Revolve Puts Data Breach Victim Count at 1.5 Million
ZDNet
Your FitBit Versa and Sense smartwatches will lose some features this month – what to know
Done with Debian Linux distros? Try Fedora next – 7 reasons why
Reddit launches AI-powered Reviews feature – with 10,000 products to start
5 apps I need Siri AI to work with now that it’s open to third-party developers
Ring’s new drone patrols your home to keep an eye on things – even upstairs
How AI security failures are endangering your supply chain – and what you can do
Can you still trust Proton?
You can change Windows settings directly from a search now – how to try it
AMD confirms GPU driver bug is wearing out your SSD – how to stop it
Ready for a Siri AI agent? Apple under pressure to upgrade its assistant faster
The Hacker News
Attackers Exploit AhsayCBS Flaws to Deploy Sandbox-Evading Python Backdoor
Blind Eagle Uses Fake Court Notices to Deliver Remote Access Trojan Across Latin America
Fireworks AI Breach Widens to Expose Customer Billing Data and Incomplete Model Weights
Binance Warns of iOS Sandbox Escape That Could Expose Crypto Wallet Keys, No Fix Confirmed
Beyond the Alert: The Case for Rich Network Data
Apple Patches iMessage Group Chat Privacy Flaws and Bluetooth Pairing Vulnerabilities
Russian Turla Hackers Use New Cereal Malware to Steal Emails From Government Exchange Servers
SAP Patches Four CVSS 10.0 Flaws, Including Two Enabling Remote Code Execution
France Blames Iran for Sabotage Attack on Refrigeration Controllers at About 700 Retail Sites
Anthropic's Claude Fable 5.2 Beats GPT-6 Cyber in Multi-Stage Cyberattack Benchmark
BleepingComputer
Critical Xen Orchestra auth bypass flaw exploited to hijack VM servers
Binance warns of iOS flaw that could leak crypto wallet secrets
Ransomware recovery is now a client retention metric
SAP patches ICM2SHELL and PROXYGATE maximum severity flaws
Hackers now exploit critical Barracuda ESG flaws to gain root access
Turla hackers use new Cereal malware to spy on govt Exchange servers
Google patches eighth Chrome zero-day exploited in attacks this year
Fireworks AI discloses new breach after cloud provider hack
Vanderbilt University hit in BYOD ransomware attack, data theft claimed
SEGA newsletter data breach exposes 2.2 million email addresses
gbhackers
Weekly Cybersecurity Newsletter – Top 50 Biggest Cybersecurity Stories of the Week 
One Identity Unveils Safeguard 9.0 for Simpler PAM
One Identity Unveils Active Roles 8.6 with Enhanced Security and Administration
One Identity Unveils Identity Manager 10.0 LTS with AI and Modern UX
OffSec Celebrates 20 Years of Practitioner-Built Training From the Creators of Kali Linux and OSCP
Finite State Raises $27 Million to Help Device Makers Fight ‘Vulnpocalypse’ with AI-Powered Product Security
Hackers Abuse Qubole’s Trusted AWS Access to Breach Multiple Cloud Accounts and Steal Sensitive Data
SAP November 2026 Patch Day Fixes Four Maximum-Severity Security Vulnerabilities
Critical Apache Airflow Flaw CVE-2026-68982 Enables Unauthenticated Remote Code Execution
Russian-Linked Turla Hackers Abuse Microsoft Exchange Infrastructure to Target Sensitive Communications
Cybersecurity Dive
Trump picks Palantir cybersecurity executive to lead CISA
Truth or consequences: What your AI strategy is standing on
Financially motivated threat cluster uses AI-enabled tools against banking sector
Cybersecurity education in the AI era: What’s new, what’s different
5 critical steps organizations should take to secure AI
Improving incident response with AI agents
Hackers enlist Artex to scan GitHub repositories for exposed secrets
Companies struggle to know what normal looks like for AI agents
What to expect from Democrats’ cybersecurity agenda in Congress
French authorities probe cyberattack targeting nation’s blood supply
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
Trump taps Palantir security chief to run battered US cyber defense agency
Fireworks AI gets burned twice as customer data exposure widens
Chrome zero-day whack-a-mole continues as 2026 tally hits 8
Ransomware threat blares from Vanderbilt University computers during cyberattack
Google DeepMind melds humans and AI agents to vet Signal's secure messaging techniques
Anthropic's super bug-finding Mythos model is going into Cisco and IBM products
France blames Iran for supermarket hack meltdowns
Attackers backdoor trusted AWS integrations to steal secrets
Researchers pwn automakers’ Android apps to remotely unlock cars, honk horns
Microsoft's Azure Linux gets 470-plus security fixes in one almighty patching session
VentureBeat
Did Claude Code’s ‘don’t ask again’ option accidentally expose your enterprise's passwords and keys?
AI agents don't have to break security controls to go rogue. Here's how to keep them in check
Agents are rewriting the book on security. Can your data layer keep up?
AI agent access is moving faster than identity controls can govern
AI agents are about to put least privilege to the test
DeepSeek-V4.1-Flash-1017 arrives with improved benchmarks just as the U.S. government bans it from agencies — what enterprises should do
AI cloud security needs to prove control before agents reach production
TechCrunch
N-able takes its remote access service offline after researcher publishes dozens of zero-day bugs
Cyberattacks threaten to make open-source AI a little less open, Hugging Face exec warns 
Hotel giant Wyndham exposed customer data after app security lapse
France blames Iran for mass-hacks targeting freezers in grocery stores and blood banks
Hundreds of Artex AI hacking tools found publicly exposed to the web
Palo Alto Networks in talks to buy AI agent security startup Clutch for $500M
US government warns of ‘ongoing cyber threat’ amid mass hacks of industrial retail and military freezers
Hackers stole DreamHost customer files and inboxes during months-long attack
Building on open source AI? Hugging Face’s policy chief on the costs, risks, and trade-offs
Ted Schlein’s Ballistic Ventures seeks $490M for new funds amid AI-driven cybersecurity boom
Network World Security
Oracle cancels $7 billion Tencent AI chip deal
Data center champions lose badly as ballot initiatives target AI infrastructure
Google targets AI’s next infrastructure bottlenecks with two new TPUs
A mole in the White House? Residential proxies are everywhere
Don’t mention the data center: OpenAI calls them ‘compute campuses’ instead
Broadcom has quietly changed VMware availability, support for parts of Europe
Agentic AI boom expected to reshape CPU market
IBM, Quantinuum and Intel signal a new phase in the quantum computing race
Zyxel patches a zero-day hiding behind an old fix
Attackers turned OpsShield’s trusted update channel into a supply-chain attack
Help Net Security
X.Org patches eight server vulnerabilities a month after fixing 12 others
AI reverse engineering let researchers add a new feature to Slack
Dreeze raises $33 million to automate recovery of entire cloud applications
CISA tweaks cyber incident form to spot attacks that might be linked
IRISSCON 2026 puts preparedness for cyberattacks and hybrid threats in focus
Claude Mythos 5.2 arrives with stronger bug hunting and less sandbox-breaking behavior
Windows settings backup is on by default starting with Windows 11 26H2
Turla’s Cereal malware turns victims’ Exchange servers into spy hubs
What a security leader should tell the CEO about leaked credentials
Security teams want to spot unusual AI agent behavior while they’re still defining normal
SC Magazine
Cybersecurity and Infrastructure Security Agency updates incident reporting portal
Fireworks discloses second security breach following third-party cloud attack
Wyndham addresses security flaw in Android app
Remus stealer adds persistent Gmail access feature
Black Hat India 2026 concludes inaugural edition in Bengaluru
Vanderbilt University responds to cyberattack by BYOD ransomware group
Human Expertise Will Always Be The Core Of AI Cybersecurity - Andrew Wesie - ASW #408
Brazil government technology provider Serpro faces record distributed denial-of-service attacks
Qubole customers targeted in AWS cross-account access attack
Former FBI agent pleads guilty to stealing cryptocurrency from investigations
© 2026 RiskDiscovery | Sponsored by: Deception Logic