[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
Fighting Your Dragons Through Tough Tech Times
BragJack Attack Can Turn a Browser's Agentic AI Against It
Cyber Op Targets South Korean Media & Automotive Sectors
Microsoft Issues Emergency Fixes After Massive Patch Tuesday
Black Hat USA 2026 | The 'Breaking' News: The OpenAI–Hugging Face Incident
VectraRAT Can Hack Windows Enterprises for $250 per Month
'Sandworm' Chains Cisco Vulnerabilities to Deploy Cyclops Blink
Maximum Severity GitLab Flaw Puts Supply Chains at Risk
Anthropic CEO: Time to Shift From Improving to Controlling AI
Threat Actor Generates 1M Personalized Fraud Emails in 3 Days
Ars Technica
AI bots "Timmy," "Ren," and "Jackie" are flooding social media with slop
ClickFix attacks infecting PCs and Macs are going viral
Four groups caught using the same Chrome and Windows exploit kit
Why this month's Microsoft patch release is a doozy
OpenAI agents discussed ways to escape their sandbox on public wiki
“Trust, not features, is the real deficit”: VMware tries to appease SMBs
Once popular for attacking AI, ASCII smuggling is embraced by spammers
Confused about which VPN is right, US senator asks the NSA for guidance
VMware migration reduces Tottenham Hotspur's licensing fees by 85 percent
I rented a car, and within hours, my driver's license was for sale
CyberScoop
Coast Guard, FBI board US-bound foreign ships in order to probe for cyberattacks
Treasury’s Scott Bessent says no liability exemptions for AI labs
What’s next for CISA’s CDM program that gives cybersecurity tools to federal agencies
Cisco warns customers of actively exploited zero-day in email gateways
Supreme Court denies Trump request to allow USPS mail ballot changes
Five alleged leaders of Black Axe’s operations in South Africa extradited to US
Researchers say OpenAI agents were behind May hacking campaign targeting RubyGems
Cyberattack causes a flight delay? Airlines won’t owe you a hotel or meal
GitLab’s critical flaw is already drawing internet-wide probes
Conti ransomware crew member sentenced to four years in prison
InfoSecurity Magazine
PHP Webshell Campaign Targets WordPress Through Critical WooCommerce Plugin Bug
CISA and NIST Issue Guidance to Protect Cloud Identity Tokens
Cyber-Attacks Cost Organizations $52,000 on Average
Zero-Day Flaw in TP-Link Cameras Enables Eavesdropping
Major Cyber Vendors Turn to New UK Testing Program as MITRE Evaluations Face Changes
NCSC and Allies Warn of Iranian Spyware Campaign
Most Fraudulent Hires Receive Credentials Before Detection
Most Firms Unable to Recover Quickly from Ransomware
Black Axe Members Extradited to US Over Internet Fraud Claims
AI the Top Priority for New Spend as Cyber Budgets Flatline
SecurityWeek
First Agentic AI Data Breach Reported to Spanish Regulator
Virtual Event Today: Attack Surface Management Summit
EU Chief Warns of AI-Powered Hacking, Moves to Rein In Social Media
AIUC Raises $40 Million to Certify Enterprise AI Agents
Pixel Modem Zero-Day Exploited in Targeted Attacks
US, UK, Dutch Agencies Expose Iranian ‘Chosen Brick’ Surveillance Malware
Unauthenticated RCE Flaws Could Expose 200,000+ WordPress Sites to Takeover
Hackuity Raises $19 Million for AI-Powered Vulnerability Management
280,000 Impacted by Premier Medical Group Data Breach
Chrome, Firefox Updates Patch 115 Vulnerabilities
ZDNet
I recommend you don’t run these appliances on your power station – even if you can
Anthropic merges Claude chat and Cowork into one
How September’s Pixel Drop changes the way you call and message important contacts
I’ve used both iPhone 18 Pro models – here’s how my buying advice is changing in 2026
Windows 11 out-of-band update fixes audio glitch and other bugs – grab it now
iOS 27 is finally here, with the new Siri AI beta – and 120 security patches
The latest Windows 11 update may mess with your device’s audio – here’s the workaround
Switzerland takes a Swiss Army knife to Microsoft 365
Your older iPhone just got free satellite service for another year – here’s why
This CIO doesn’t ‘hire engineers to write code’: 3 AI fundamentals he prioritizes instead
The Hacker News
Attackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Execution
Three Threat Groups Target Russian Enterprises With Backdoors, Ransomware, and Wipers
One Extension Could Hijack AI Assistants Across Chrome, Comet, Edge, Opera Neon and Claude
Attacker Hijacks AI Coding Assistant Session, Spreads Shai-Hulud Across About 100 Repositories
Parallels Desktop Flaw Lets Non-Admin Mac Users Gain Root, but Intel Macs Can't Install Fix
N0va Phishkit Targets US and EU Businesses: A New Challenge for Identity Security
Google Patches Pixel Modem Flaw Amid Signs of Limited Targeted Exploitation
Threat Intelligence Alone Won't Close the Exploitation Gap
Acronis cPanel Backup Plugin Vulnerability Exploited in Targeted Attacks
Attackers Exploit WooCommerce Wholesale Lead Capture Flaw to Plant PHP Web Shells
BleepingComputer
Malware bypasses browser checks to force install Chrome, Edge extensions
Spain's data agency gets first report of AI-powered data breach
The true cost of a ransomware attack, with and without BCDR
Microsoft says Copilot buttons still missing in classic Outlook
Webinar: What happens in the first hours of a Google Workspace breach
Critical ScreenConnect flaw now actively exploited in attacks
Windows Server 2022 reaches end of mainstream support next month
Google fixes actively exploited Android zero-day on Pixel devices
Acronis warns of actively exploited flaw in its cPanel backup plugin
Malcious Admin Menu Editor Pro plugin backdoors 1,500 WordPress sites
gbhackers
GhostCode Abuses Microsoft Entra Device Enrollment to Maintain Access After Token Revocation
VectraRAT Malware-as-a-Service Lets Hackers Bypass UAC and Hijack Windows Systems
TP-Link Tapo Camera Flaw Lets Attackers Gain Admin Access Without Password
Chinese-Speaking Hackers Use Noodle RAT Backdoor to Spy on Windows and Linux Systems
Axoflow Launches AxoDetect, Bringing Detection Into the Pipeline and Making the SIEM Optional
Smishing Triad Hackers Use JWR Phishing Kit to Steal Cards, OTPs and Bank Credentials
CenterPoint Energy Confirms Data Breach Exposing Customers’ Personal Information
Parallels Desktop Flaw Lets Unprivileged Mac Users Gain Root Access
Acronis Backup Plugin Vulnerability Exploited in the Wild to Gain Elevated Linux Privileges
12 Best Kubernetes Security Tools Compared (2026): Features & Pricing
Cybersecurity Dive
Hackers exploit zero-day flaw in Cisco email gateway
CISA looks to recruit general infrastructure security experts rather than sector-focused advisers
AI is now leading driver of new cybersecurity spending
Companies’ AI strategies don’t account for agentic tools
Security teams increasingly outflanked by AI agents
Malicious actors already using critical GitLab flaw, CISA and others warn
Zero trust is the future. But enterprises still need their VPNs.
Security teams are adopting AI faster than they trust it
State authorities warn they lack resources to address cyber threat to critical sectors
Accountability, oversight and AI: Inside Microsoft’s security transformation
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
Google Pixel phones pwned in zero-click attacks
Spain gets its first taste of AI-aided cyber attack
Ministry of Justice apologizes after court staff accessed Southport victims' files
Mythos has made 2026 patching hell. It might make 2027 a breeze
The vulnpocalypse rains iBugs down on Apple with record-setting number of patches
Low-quality casino sites conceal highly dangerous threat actors
Iranian spies hit Windows machines with Chosen Brick data-stealing malware
Cisco email security boxes can be rooted by... an email
Who's governing your AI? A trust framework for enterprise agents and models
Swiss court sentences 52-year-old Ukrainian ransomware dev to nearly 13 years in the cooler
VentureBeat
AI agents breached 395 organizations using credentials your IAM policy still treats as human
Nobody can compare the security-AI numbers CrowdStrike, Google, Palo Alto and Microsoft published, including the CISOs who are stuck with the results
AI is changing the economics of software supply chain attacks
AI governance is moving to runtime — and regulated industries are getting there first
Why AI shouldn't be the one repairing your data pipelines
Anthropic CEO says AI swarm could ‘take over the entire internet’ in 6-12 months, commits to AI slowdown plan
Security vendors use AI to rank Patch Tuesday CVEs — and rarely tell customers
TechCrunch
Hackers publish thousands of drivers’ data after breaching Florida motor vehicle database
Google says some Pixel phone owners were hacked in zero-day attacks
US military says it has launched weapons into space
Leaks, data breaches, and ransom notes: The worst hacks of 2026 so far
New Italian unicorn Exein rides the physical AI wave
ClickFix attacks are tricking Mac and Windows users into hacking themselves
Revolut confirms customer data breach through fake government requests
Scammers target hundreds of thousands of crypto owners after Trezor confirms data breach of email provider
ID verification giant IDScan confirms data breach with more than 150 million driver’s licenses stolen
‘Gambling with our lives’: Anthropic researcher quits, warns against self-improving AI 
Network World Security
Riverbed bolsters network performance monitoring with agentic AI
Axelera Europa targets enterprise data centers with far more efficient AI
European cloud watchdog slams Broadcom over VMware licensing practices, issues warnings about SAP
Critical Cisco Secure Email Gateway zero-day gives attackers root access
Cisco brings Splunk AI on premises, expands agent observability, monitors token costs
2026 network outage report and internet health check
Highlights from Splunk .conf26 and what the news means to network engineers
Cornelis lands $205M to make AI networks compute, not just connect
VMware by Broadcom: Product, service and support news
Arm expands AI chip push with Neoverse CSS N4 and AGI CPU
Help Net Security
Parallels Desktop flaw hands any local user root on a Mac (CVE-2026-90894)
Self-improving AI should slow down, von der Leyen tells EU lawmakers
Cohesity adds recovery capabilities for AI agents and the data they manage
Rubrik MCP gives AI agents controlled access to security intelligence
CenterPoint Energy confirms data breach following claims on hacking forum
Nozomi Compass helps industrial teams manage OT assets and vulnerabilities
Citrix adds AI-powered browser activity analysis to SecurAccess
One runaway AI agent racked up a $50,000 cloud bill
Acronis backup plugin flaw exploited in targeted attacks (CVE-2026-87886)
Iranian hackers use CHOSEN BRICK data-stealing malware to spy on dissidents and journalists
SC Magazine
ConnectWise ScreenConnect bug exploited in the wild, CISA says
Hastily deployed agentic security is not the answer to enterprise cyber threats
In the AI era, the pre-patch window needs its own security playbook
Preparing for AI-enabled incidents: Helping business leaders understand enterprise risk
HBO Max Reddit account compromised, used in ‘PasteSwitch’ ClickFix attacks
Followership, CyberSecurity Leadership, and Judgement as a Defining Skill - Kenyada Meadows - BSW #465
RoboGators, HBOMAX, Microsoft, DAS, Horsebot 3000, Aaran Leyland does AI, and More - SWN #616
Patched VMware vCenter bug targeted in ransomware campaigns
Oktane Video Player 2026
Mass scanning campaign targets Vite development servers for cloud credentials
© 2026 RiskDiscovery | Sponsored by: Deception Logic