[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
Tech Giants Block eMudhra Certificates Tied to 8 Compromised Keys
Ex-OpenAI Engineer Detained After Planting Secret Recorder at HQ
Close Identity Gaps in Software Development Before Unleashing AI
Hackers Abuse AI Pen-Test Tool Cairn to Automate Massive Attack Spree
Researchers Infiltrate Microsoft Tech Support Scam Operation
'AdFection' Turns Ad Impressions Into Zero-Click Spyware Delivery
ConnectWise Disables Cloud Backups Amid Concerns for Downstream MSPs
OnlyFans Copyright Takedowns Expose Compromised Websites
The Evolving Cybersecurity Lexicon: Vulnerability Discovery to Resilience
BeyondTrust Remote Support Zero-Day Continues Trend of Exploited Edge Bugs
Ars Technica
PHP warns it plans to release 2 emergency patches imminently
The Internet goes on high alert after discovery of 8 compromised TLS certs
Meta Muse exposes users' personal and business secrets when they share conversations
PSA: Patch your Plex media server before someone hacks it
ReactOS reaches major milestone with NTFS install support
OpenAI models hacked a crypto wallet and breached more websites
Targeted ads delivered 0-click exploits to install mercenary malware
Fridge hack costing millions and sparking fires stemmed from poor security
Anthropic warns small AI models could self-replicate through IoT devices
Topgolf saved over $11.3 million after leaving VMware
CyberScoop
Philippines-based American pleads guilty to running expansive fraud scheme targeting US servicemembers
Nigerian sentenced to 8 years for long-running tax business hacking and fraud scheme
Russian GRU hackers hit NATO shipbuilder, aircraft engine maker, law enforcement agency in espionage campaign
ConnectWise customers hit by supply-chain attack linked to compromised API secret
DOJ escalates fight for election supremacy with California raids
Wyden seeks adoption of encryption tech at hundreds of federal agencies to protect visitors’ sensitive traffic
DHS to ban DeepSeek from federal civilian agencies
Spyware found on devices belonging to prominent Serbian critics as elections loom
Federal agencies recommend cyber controls, independent testing for frontier AI systems
Prolific Chinese espionage group exploits BeyondTrust zero-day
InfoSecurity Magazine
Head of AI Security Roles Surge in Large Organizations
Researchers Warn OpenCode Quietly Patched Critical RCE Flaw, Leaving Users At Risk
AI Agent Adoption Creates Risk as Oversight Struggles to Keep Pace, Splunk Finds
Siemens Customers Targeted by ClickFix Attackers Exploiting DLL Side-Loading Flaw
Exploited Vulnerabilities Typically Take Three Months to Patch, Moody’s Finds
Conduent Agrees to Pay $80m to Settle Data Breach Class Action
OpenCode Breach Could Affect OpenAI, Anthropic and Google
ConnectWise Shuts Off Cloud Services After ‘Unauthorized Access’ to Microsoft 365 Tenants
US Cybersecurity Job Postings Fall 26%, Hitting Four Year Low
Ransomware Gangs Increasingly Turn to Threats of Physical Violence to Extort Payments
SecurityWeek
PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws
Hijacked Developer Account Used to Plant Stealer in OVHcloud CLI
Accenture, Dragos, SANS Launch $10M Initiative to Defend Small US Utilities
US Agencies Detail Incident Response Practices for Rogue AI Agents
AOMEI Backupper Compromised in Short-Burst Supply Chain Campaign
The Key to AI Software Security Isn’t Speed, It’s Maturity
Ahold Delhaize Restoring Services Disrupted by Cyberattack
AI Platform Cairn Abused to Hack Over 100 Organizations
Ex-OpenAI Worker Accused of Bugging Conference Room Planned to Fly to Saudi Arabia, Prosecutors Say
Microsoft Targets Rogue AI Agents With Dynamic Permissions, Risk Scoring
ZDNet
Gemini on Android Auto can access my photos, emails, and calendar now – why I’m OK with that (mostly)
Latest Windows update disables key security setting – but there’s a workaround
TechPulse puts ZDNET and 4 other tech sites in one feed – for free
How to find Flock cameras near you with MapQuest’s new ‘surveillance layer’
Plug-in solar is legal in these 10 states now – how it could save you money
Have a Meta business account? You’re consenting to AI scraping now, legal experts say
Munich dumps proprietary for open source (again) – but no Linux desktop
Anthropic gives third-party auditors ’employee-like access’ in AI industry first
Want an iPhone Duo before 2027? Don’t preorder from Apple – try this instead
How many jobs is your state losing to AI? This dashboard tracks the cuts – and the cost
The Hacker News
PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert
Eight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and Software
Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution
Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA
Hackers Use Autonomous AI Agents to Breach Company Websites, Target Over 1,200 Sites
Pegasus Spyware Infection Confirmed on Serbian University Rector's iPhone Days Before Election
WhatsApp Hid Instructions in Help Pages Telling Its AI Chatbot Not to Recommend Privacy Regulators
What Security Teams Can Do To Tame Wild Code
Go Issues Emergency Update Blocking Eight CA Keys Over Undisclosed Security Concerns
Russian APT28 Breaches NATO Naval Shipbuilder in NATO Country, Deploys New Reflective Loader
BleepingComputer
Stolen UpdraftCentral keys used to backdoor WordPress sites
Mozilla, Google, Apple block compromised eMudhra CA certificates
PHP warns admins of two critical flaws, emergency patches coming tomorrow
Zeabur shutting down after second security breach in two months
OpenAI says GPT-6.1 Sol is dramatically better at migrating legacy code
DHS bans DeepSeek products across US federal civilian agencies
CJIS v6.1 Compliance: 5 Practical Priorities for Agencies
Hacker gets 8 years for stealing $3.3 million from taxpayers
Windows Server 2025 gets support for quick machine recovery
OVHcloud CLI releases backdoored on GitHub to steal developer secrets
gbhackers
CISA Warns SafePay Ransomware Has Hit 600+ Organizations and Destroyed Backup Systems
Rust 1.100 Will Let Developers Block Fresh Cargo Packages to Reduce Malware Supply Chain Risks
INC Ransomware Hackers Use Claude AI, Expose 8,257 Messages and 46 Malware Builds
Microsoft Introduces New Bug Bounty Rules That Could Affect Security Researchers’ Rewards
Hackers Exploit Compromised UpdraftCentral Keys to Install Malicious Plugins on WordPress Sites
eMudhra Security Incident Exposes Weak Private Keys Used to Sign Trusted Certificates
Two Critical PHP RCE Vulnerabilities With CVSS 9.2 Score Put Web Servers at Risk
ChatGPT Chrome Extension Expands Browser Access to Read Open Tab Content
US Government Bans DeepSeek AI From Federal Civilian Agency IT Systems
Hackers Exploit Palo Alto Networks PAN-OS Flaw to Bypass MFA and Deploy Ransomware
Cybersecurity Dive
Ransomware groups expand targeting of Palo Alto Networks vulnerability
AI security hiring focuses on red-teaming, SOC orchestration and governance
Boards confident on cybersecurity, AI oversight, but tech changes outpace readiness
ConnectWise suspends Cloud Backup service as hacker targets Microsoft 365 users
Q-day is coming: How to prepare for post-quantum security challenges
Hybrid mesh firewalls: Distributed security enforcement for a self-driving network
China-nexus espionage actor targets BeyondTrust support tool in zero-day campaign
Open-source security rests on understanding risks, scaling fixes
Thousands of refrigerator devices remain exposed following French cyberattack
Internet exposure of AI tools, ICS devices continues to grow
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
Indian certification authority eMudhra’s private keys compromised – one of them was the number ‘4’
Auto tech startup claims it traced hack attempt back to rival's IP address
Palo Alto's firewall OS has been under attack from multiple ransomware groups since June
Swamped curl maintainers take low-level flaws public to survive vulnerability 'avalanche'
'Password1' and a forgotten test account land Welsh outfits in hot water
Bullhorn sees red after cyberattack knocks recruitment platform offline
Whitehall shuts the front door on digital ID but leaves the back open
UK finance watchdog wants firms to report AI failures and close calls
Why cyber resilience is now a boardroom priority for UK public services
ICANN testing tech to let law enforcement access non-public WHOIS info
VentureBeat
AI agents are about to put least privilege to the test
DeepSeek-V4.1-Flash-1017 arrives with improved benchmarks just as the U.S. government bans it from agencies — what enterprises should do
AI cloud security needs to prove control before agents reach production
Anyone can build apps with AI. But who owns them?
17 of 40 teams that say they enforce AI agent permissions still share the credentials behind them
Browser security’s buying spree rests on one engine, without a clear Plan B
Anthropic’s Cyber Mission starts with 6,157 findings reported to maintainers and 516 patched
TechCrunch
Blackwall quadruples valuation to $2.2B as websites wrangle an increasingly crowded internet
Governments are hacking people with ‘zero-click’ spyware by showing them online ads
Flock CEO defends surveillance technology amid national backlash: ‘We shouldn’t pause progress’
Flock CEO says its microphones detect ‘just gunshots’ — its website says different
Flock CEO: We haven’t ‘fired’ any police departments as customers
Apate sends AI agents undercover to get scammed so they can gather fraud intelligence
Justice Department says North Koreans have infiltrated dozens of US companies
FBI arrests OpenAI employee accused of planting hidden recording device in conference room
Pluto Security raises $42M as AI gives enterprise security teams a new headache
Surveillance company Flock cuts staff as privacy backlash grows
Network World Security
SONiC momentum continues at OCP Global Summit
2026 network outage report and internet health check
Gartner’s top tech trends for 2027 expand—and constrain—AI capabilities
AI agents drive up telemetry costs, complicate network observability
AI datacenter capex will far exceed forecast revenue through 2030
OPC Global Summit: News spans AI-optimized hardware, cooling equipment
Ultra Ethernet 1.1 extends the specification to scale-up networks and adds programmable congestion control
SolarWinds launches Avior AI agents to automate network operations
IBM, IonQ, Diraq, and Atom Computing advance to DARPA’s quantum hardware testing stage
IonQ’s $1.2 billion acquisition of Elisity is trying to position it for quantum cybersecurity
Help Net Security
Privacy-preserving AI can protect your heart data, the bill is the problem
DevGuard: Open-source vulnerability management for the software supply chain
Why security tools lose sight of the credential
Bringing AI into the SOC means watching for shadow AI and loose permissions
A critical PHP security release is coming today, so get ready to update!
Google open-sourced TorchTPU, so PyTorch on TPUs just got a lot easier
Chrome flags malicious commands that scammers pass off as fixes
AOMEI Backupper servers hijacked for minutes at a time to push backdoor
Incomplete security patches show hackers where to look next
Abstract links automated response actions directly to SIEM detection rules
SC Magazine
Klingons, Stop and Shop, OvHCloud, Microsoft, Plex2Shell, ReactOS, and Aaran Leyland - SWN #626
Reframing security as the foundation of innovation
Siemens Software Center flaw exploited in ClickFix DLL-sideloading attack
US government agencies ordered to stop using DeepSeek AI products
GAO prioritizes AI and emerging tech oversight in new strategic plan
Meta's new terms allow AI training on business customer content
OpenBSD flaws allow local privilege escalation to root
Pentagon CIO team adds strategic technical advisor
Senator urges administration to close encryption gap on government websites
Malicious Rank Math PRO version distributed in supply chain attack
© 2026 RiskDiscovery | Sponsored by: Deception Logic