[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
AI Gave Your Incident Archive a Second Job
Why Europe's Freezer Hacks Spread So Far, So Fast
UK Warns Its Critical Infrastructure Faces Grave Risk
US Government Email Systems Open to Abuse Thanks to Typos
What We Missed: Knicks Phishing Test Goes Out of Bounds
APT29's Watering Holes Target Thousands of Mobile Users
SecurityDataPipeline.com Launches as a New Educational Resource for the AI Era
Critical Rails Bug Threatens to Derail Vulnerable Servers
Google, Partners Disrupt 1.3 Million-Device-Strong XCPE Botnet
Incidents Move Too Fast for Pen & Paper
Ars Technica
Meet *sshole, the vulnerability that lets hackers SSH into Linux devices
Hackers exploited iOS and Android flaws to infect phones
VMware releases vSphere Express for virtualization on up to 128 cores
Binance says hackers who stole billions in crypto spent months planning heist
UEFI bootkit infected fully patched Windows machines. Is Microsoft to blame?
Anthropic VS code extension on Cursor backdoored for nearly 12 hours
Code-execution flaw in UEFI firmware affects most servers on planet Earth
Disgraced eMudhra drops out of TLS business after using cert private key of 4
333 Tor exit nodes hijacked to intercept SSH traffic and retrieve plaintext email
Enterprises keep buying software upgrades that IT thinks will make things worse
CyberScoop
Authorities accuse trio of using AI deepfakes to defraud $129M from businesses
Air Force cyber official: need to invest in digital forensics
OpenAI debuts GPT-6 Cyber, touting better performance — and safety guardrails
What Democratic control of Congress means for cybersecurity
Officials extradite Canadian man to US for alleged cryptomining spree
Defense and aerospace firm settles with government over allegedly failing to meet cybersecurity contract requirements
Oklahoma man charged with mailing threats, substances to election officials nationwide 
Europol dismantles investment scheme that impacted potential victims in 50 countries
Ballot scanner malfunctions, flurry of federal legal actions test election officials on final day of voting 
CrowdStrike moves to acquire Fiddler and Dreadnode, adding AI observability and testing to its security platform
InfoSecurity Magazine
ARTEX Offensive AI Tool Activity Far Exceeds Reported Campaigns, Censys Finds
CISA, FBI Urge Action to Protect Industrial Refrigeration Networks
Half of Security Leaders Report Sensitive Data Exposure Through AI Tools
Residential Proxy Traffic Traced to White House Network
Zyxel Switch Patch Missed Flaw Behind Wave of Attacks
India Warns of New AI-Driven Cyber-Attacks Targeting Financial and Crypto Businesses
Chinese Nation-State Threat Activity Falls Sharply in Q2 and Q3 2026
GhostMap Bug Leaves Android Phones Stuck in Reboot Loop
NATS Air Traffic Control Failure Cost UK Economy £33m
China-Aligned Group Abuses Sogou Input Method to Deliver Malware
SecurityWeek
Japan Announces Emergency Cybersecurity Package Following a Wave of Attacks
In Other News: Trezor Implant, LLMJacking Bills Hit $1M, SAP Flaws Weaponized Within Days
DigiCert Data Breach Impacts Business Customer Information
OpenAI Says New GPT-6 Cyber Model Hunts Flaws Without Crossing the Line
US Agencies Urge Organizations to Harden Refrigeration Controllers
Grocery Giant Ahold Delhaize Estimates Financial Toll of October Cyberattack
Researchers Find Residential Proxies on White House Network
OpenSSH Rushes Patches for ‘SSHole’ Authentication Bypass
OpenAI Model Wrote Its Own Network Code to Get Around Sandbox Restrictions
3 Charged in Scheme to Use AI to Impersonate CEOs and Attorneys to Steal $129 Million
ZDNet
Android is getting my favorite iOS tracking feature – what to expect
Thinking Machines’ new model takes the lead in western open-weight AI
Apple will monitor your public iCloud links now, starting with iOS 27.3
92% of HR say staff can train for AI jobs – but half of companies still hire outside
6 default Pixel 11 settings I changed that made a big difference – and why
Claude’s new Personal Finance tool aims to help analyze your spending – read-only, of course
3 ways Bluetooth 7 upgrades your devices beyond lossless audio
The Siri AI waitlist is gone in iOS 27: How to try the beta today
Linux Mint 27 arrives next month, and I like it already: New features and other upgrades to expect
Is Chrome’s settings menu getting a search bar? What we know
The Hacker News
Installing the Fix for an Exploited WordPress Flaw Can Expose Some Sites One Last Time
Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot
OpenAI Launches GPT-6 Cyber After AI Helps Find 81 Firefox Flaws, 948 Linux Exploits
Microsoft Paint RCE Fix Now Available, but Windows Update Won't Deliver It
Malicious Browser Extensions Could Use Claude Dispatch to Run Code on Users' Computers
The Flood is Coming And The Pipes Were Already Full
Chainalysis Breach Exposes All Users' Credentials, Forces Shutdown of Key Services
Hackers Hide Linux Backdoor in Control Web Panel Server to Execute Commands Without Logs
Experts Demonstrate Barracuda Email Security Gateway Chain Enabling Root Access Without Login
OpenSSH Issues Emergency Fix for Flaw Letting Long Passwords Bypass SSH Auth on Alpine Linux
BleepingComputer
QNAP says hackers breaching NAS devices in Plex2Shell attacks
Veeam warns of Software Appliance boot failures on AMD EPYC hosts
IMSI vs IMEI: What Your Phone Broadcasts and Who Can Read It
Chainalysis says breach exposed credentials for all customers
D-Link warns of multiple zero-days in DGS-3130 Series switches
MetaMask says recent attack didn't affect wallet infrastructure
FBI, CISA warn of cyberattacks targeting refrigeration systems
Fake OpenAI, SpaceX events used to steal Microsoft, Google accounts
Nearly 1.5 million exposed secrets targeted in new revocation program
OpenAI’s GPT-6 Astra silently obstructed safety research tasks
gbhackers
Dark Project Ransomware Gang Claims 38 Victims Across 8 Countries, Targeting Healthcare and Manufacturing
Hackers Use Fake Streaming Apps to Spread Mirax Android Malware and Steal Bank Accounts
Hackers Put AI Agents on Autopilot to Steal Gaming Accounts and Apple Signing Certificates
Claude AI Flaw Lets Malicious Browser Extensions Execute Commands on Remote Computers
ChatGPT Lockdown Mode Bypass Allowed Hackers to Steal Private Chats Without User Interaction
11 Security Policy Management Tools: The 2026 Buyer’s Verdict Guide
11 IT & Cyber Risk Management Tools: The 2026 Buyer’s Verdict Guide
11 Audit Management Software: The 2026 Buyer’s Verdict Guide
10 Security Ratings Services: The 2026 Buyer’s Verdict Guide
Hackers Use ARTEX AI to Steal Azure Key Vault Secrets Just 5 Minutes After Finding Exposed GitHub Credentials
Cybersecurity Dive
Hackers enlist Artex to scan GitHub repositories for exposed secrets
Companies struggle to know what normal looks like for AI agents
What to expect from Democrats’ cybersecurity agenda in Congress
French authorities probe cyberattack targeting nation’s blood supply
Attacker abuses Microsoft Entra ID to target downstream MSP clients
Companies spend more on cybersecurity but still struggle with AI oversight
European authorities probe ongoing attacks targeting grocery refrigerators
AI threats create urgent need to renew cybersecurity information-sharing law, businesses tell Congress
Agentic pen-testing tool employed in multiple espionage campaigns around the globe
As the White House touts its AI task force, CISA is conspicuously missing
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
DigiCert admits 16-month security lapse exposed customer information
UK ministers seek powers to investigate when AI agents are let off the leash
Hospital gave very sick doctor a special PC for his personal, erm, pleasure
AI agents are a 'bane' for some website operators, says Cloudflare
Threat actor targets Indian fintechs on weekends when defenders aren’t watching
Feds warn grocers: Don't chill on cyber defenses as freezer hacking spree heats up
The White House is apparently a popular residential proxy exit spot
Get root on a musl Linux system by slamming it with an overly long password
October crypto-tracker hack: Access cracked, law enforcement tokens packed
OpenAI releases GPT-6 Cyber, and promises this one stays within 'rules of engagement'
VentureBeat
AI agents don't have to break security controls to go rogue. Here's how to keep them in check
Agents are rewriting the book on security. Can your data layer keep up?
AI agent access is moving faster than identity controls can govern
AI agents are about to put least privilege to the test
DeepSeek-V4.1-Flash-1017 arrives with improved benchmarks just as the U.S. government bans it from agencies — what enterprises should do
AI cloud security needs to prove control before agents reach production
Anyone can build apps with AI. But who owns them?
TechCrunch
Hundreds of Artex AI hacking tools found publicly exposed to the web
Palo Alto Networks in talks to buy AI agent security startup Clutch for $500M
US government warns of ‘ongoing cyber threat’ amid mass hacks of industrial retail and military freezers
Hackers stole DreamHost customer files and inboxes during months-long attack
Building on open source AI? Hugging Face’s policy chief on the costs, risks, and trade-offs
Ted Schlein’s Ballistic Ventures seeks $490M for new funds amid AI-driven cybersecurity boom
Researchers warned of North Korean hacking tactics years before record $6.3B Binance heist
CrowdStrike to shell out nearly $500M for 2 AI security startups as the market for securing agents takes off
New York City’s Mamdani criticizes Madison Square Garden owner over surveillance tech
Germany says lawmakers’ iPhones may have been hacked with spyware
Network World Security
A mole in the White House? Residential proxies are everywhere
Don’t mention the data center: OpenAI calls them ‘compute campuses’ instead
Broadcom has quietly changed VMware availability, support for parts of Europe
Agentic AI boom expected to reshape CPU market
IBM, Quantinuum and Intel signal a new phase in the quantum computing race
Zyxel patches a zero-day hiding behind an old fix
Attackers turned OpsShield’s trusted update channel into a supply-chain attack
Arista posts record growth as AI networking supercycle accelerates
Broadcom expands VMware Cloud Foundation with AI, security, and recovery capabilities
2026 network outage report and internet health check
Help Net Security
OpenSSH flaw exploited in the wild just hours after disclosure (CVE-2026-123158)
Residential proxy traffic caught leaving the White House network
OpenAI’s GPT-6 Cyber found 81 Firefox flaws earlier AI testing missed
Sarajevo Cyber Security Summit 2026 puts the Western Balkans’ cyber resilience in focus
US agencies warn attackers are targeting refrigeration systems that protect food and medicine
November 2026 Patch Tuesday forecast: Old software continues to bite
Security certification is a snapshot, and buyers read too much into it
87% say their AI controls need to work better
99% of repository access tokens never expire
Rental phishing sites use live chat to win over hesitant travelers
SC Magazine
Truffle Security launches a program to revoke exposed API keys
What the OpenAI–Hugging Face incident says about AI agent access
Naver Pay achieves biometric security certification for face payment expansion
Palo Alto Networks in talks to acquire Clutch Security
Hospital tech support worker recounts incident involving compromised research equipment
DNS record errors expose government organizations to impersonation risks
OWASP Global AppSec: Cybersecurity industry overdue for a 'market correction'
New CWPdoor malware targets Linux servers via Control Web Panel
Chinese nation-state cyber activity trends and global threat landscape
Security researcher uncovers exposed trade secrets at tobacco company
© 2026 RiskDiscovery | Sponsored by: Deception Logic