[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
Why 'Call This Number' TOAD Emails Beat Gateways
'Richter Scale' Model Measures Magnitude of OT Cyber Incidents
Operation Red Card 2.0 Leads to 651 Arrests in Africa
Attackers Now Need Just 29 Minutes to Own a Network
Lazarus Group Picks a New Poison: Medusa Ransomware
As Cybersecurity Firms Chase AI, VC Market Skyrockets
Spitting Cash: ATM Jackpotting Attacks Surged in 2025
More Than Dashboards: AI Decisions Must Be Provable
Iran's MuddyWater Targets Orgs With Fresh Malware as Tensions Mount
Enigma Cipher Device Still Holds Secrets for Cyber Pros
Ars Technica
Password managers' promise that they can't see your vaults isn't always true
Most VMware users still "actively reducing their VMware footprint," survey finds
Retraction: After a routine code rejection, an AI agent published a hit piece on someone by name
OpenAI sidesteps Nvidia with unusually fast coding model on plate-sized chips
Attackers prompted Gemini over 100,000 times while trying to clone it, Google says
Once-hobbled Lumma Stealer is back with lures that are hard to resist
OpenAI researcher quits over ChatGPT ads, warns of "Facebook" path
Sixteen Claude AI agents working together created a new C compiler
Malicious packages for dYdX cryptocurrency exchange empties user wallets
AI companies want you to stop chatting with bots and start managing them
CyberScoop
Across party lines and industry, the verdict is the same: CISA is in trouble
Chinese group’s ChatGPT use reveals worldwide harassment campaign against critics
Ex-L3Harris executive sentenced to 87 months in prison for selling zero-day exploits to Russian broker
CrowdStrike says attackers are moving through networks in under 30 minutes
Anthropic accuses Chinese labs of trying to illicitly take Claude’s capabilities
Anthropic rolls out embedded security scanning for Claude 
Ukrainian sentenced to 5 years in prison for facilitating North Korean remote worker scheme
State Dept. official says post-quantum transition plans will outlive current leadership
FBI: Threats from Salt Typhoon are ‘still very much ongoing’
HHS burrows into identifying risks to health sector from third-party vendors
InfoSecurity Magazine
Malicious NuGet Package Targets Stripe Developers
Former Defense Contractor Boss Gets 7+ Years for Selling Zero Days
ICO’s £14m Reddit Fine Highlights Age Check Privacy Concerns
Cost of Insider Incidents Surges 20% to Nearly $20m
Multifaceted Phishing Scheme Deceives Bitpanda Customers
North Korean Lazarus Group Expands Ransomware Activity With Medusa
AI Accelerates Attacker Breakout Time to Just Four Minutes
Chinese AI Firms Hit Claude with Distillation Attacks, Anthropic Warns
AI-powered Cyber-Attacks Up Significantly in the Last Year, Warns CrowdStrike
Shai-Hulud-Like Worm Targets Developers via npm and AI Tools
SecurityWeek
Medical Device Maker UFP Technologies Hit by Cyberattack
Ex-US Defense Contractor Executive Jailed for Selling Exploits to Russia
Over 12 Million Users Impacted by CarGurus Data Breach
SecurityWeek Report: 426 Cybersecurity M&A Deals Announced in 2025
Wynn Resorts Confirms Data Breach After Hackers Remove It From Leak Site
Astelia Raises $35 Million for Exposure Management
Reddit Hit With $20 Million UK Data Privacy Fine Over Child Safety Failings
Claude’s New AI Vulnerability Scanner Sends Cybersecurity Shares Plunging
Ad Tech Company Optimizely Targeted in Cyberattack
‘Arkanix Stealer’ Malware Disappears Shortly After Debut
ZDNet
Samsung Unpacked 2026 live blog: Galaxy S26 Ultra specs, Buds 4 Pro, preorder deals, more
The best Samsung phones of 2026: Expert tested and reviewed
Is Alexa+ too cheerful for you? Now you can select among 3 personality styles - here's how
How to watch Samsung Unpacked 2026 today - and what to expect
If Samsung teases this foldable phone at Unpacked today, I'm skipping the S26 series
This new phone scam has 'carriers' calling to exchange your device - don't fall for it
Why buying DDR4 RAM is now a smarter play than DDR5 - especially if you're PC building
I tested the Dell XPS 14 (2026) for weeks, and it's a return to form in the best way
This simple ChatGPT trick helps you spot scams before you click or respond
The once beloved PCLinuxOS is back - and it's still a great Windows escape
The Hacker News
Malicious NuGet Packages Stole ASP.NET Data; npm Package Dropped Malware
Manual Processes Are Putting National Security at Risk
Defense Contractor Employee Jailed for Selling 8 Zero-Days to Russian Broker
SolarWinds Patches 4 Critical Serv-U 15.5 Flaws Allowing Root Code Execution
CISA Confirms Active Exploitation of FileZen CVE-2026-25108 Vulnerability
RoguePilot Flaw in GitHub Codespaces Enabled Copilot to Leak GITHUB_TOKEN
UAC-0050 Targets European Financial Institution With Spoofed Domain and RMS Malware
Identity Prioritization isn't a Backlog Problem - It's a Risk Math Problem
Lazarus Group Uses Medusa Ransomware in Middle East and U.S. Healthcare Attacks
UnsolicitedBooker Targets Central Asian Telecoms With LuciDoor and MarsSnake Backdoors
BleepingComputer
Zyxel warns of critical RCE flaw affecting over a dozen routers
US sanctions Russian broker for buying stolen zero-day exploits
Ex-L3Harris exec jailed for selling zero-days to Russian exploit broker
Windows 11 KB5077241 update improves BitLocker, adds Sysmon tool
Phishing campaign targets freight and logistics orgs in the US, Europe
Wynn Resorts confirms employee data breach after extortion threat
1Campaign platform helps malicious Google ads evade detection
CarGurus data breach exposes information of 12.4 million accounts
Microsoft adds Copilot data controls to all storage locations
Identity-First AI Security: Why CISOs Must Add Intent to the Equation
gbhackers
Hackers Exploit Cortex XDR Live Terminal for C2 Communications
CISA Issues Alert on Active Exploitation of FileZen Vulnerability
Critical SolarWinds Serv-U Vulnerabilities Enable Remote Root Access
Cybercriminals Exploit Fake Avast Website to Steal Users Credit Card Information
Android RAT SURXRAT Grants Hackers Full Device Control and Data Exfiltration
Threat Actors Exploit Apache ActiveMQ Vulnerability to Gain RDP Access, Deploy LockBit Ransomware
OAuth Vulnerabilities in Entra ID Could Exploit ChatGPT to Breach User Email Accounts
Microsoft Alerts Developers of Malicious Next.js Repositories Used in Ongoing Hacker Attacks
US Sanctions Exploit Brokers Behind Theft of Government Cyber Tools
Sendmarc Releases DMARCbis Fireside Chat Featuring Co-Editor Todd Herr
Cybersecurity Dive
In the AI era, CISOs worry about data leaks and doubt tech will solve skills gaps
Threat groups move at record speeds, as AI helps scale attacks
Hackers target vulnerabilities in Roundcube Webmail
AI helps novice threat actor compromise FortiGate devices in dozens of countries
AI vs. AI: Why cybersecurity’s new front line is behavioral intelligence
BeyondTrust Remote Support exploitation ramps up with backdoors, remote tools
US Treasury Department offers secure AI advice to financial services firms
Palo Alto Networks CEO sees AI as demand driver, not a threat
AI’s ‘connective tissue’ is woefully insecure, Cisco warns
Identity and supply chain need more attention, risk intelligence firm says
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
Ex-L3Harris exec jailed 7 years for selling exploits to Russia
Wynn Resorts takes attacker's word for it that stolen staff data was deleted
OpenAI says Chinese cops used ChatGPT to plan and track smear ops against opponents
Threat intelligence supply chain is full of weak links, researchers find
AI has gotten good at finding bugs, not so good at swatting them
Patch these 4 critical, make-me-root SolarWinds bugs ASAP
North Korea's Lazarus Group targets healthcare orgs with Medusa ransomware
Go library maintainer brands GitHub's Dependabot a 'noise machine'
UK data watchdog fines Reddit £14.47M for letting kids slip past the gate
Korean cops charge teens over bike hire breach that exposed data on 4.62M riders
VentureBeat
Anthropic says DeepSeek, Moonshot, and MiniMax used 24,000 fake accounts to rip off Claude
Anthropic's Claude Code Security is available now after finding 500+ vulnerabilities: how security leaders should respond
Microsoft Copilot ignored sensitivity labels twice in eight months — and no DLP stack caught either one
How attackers hit 700 organizations through CX platforms your SOC already approved
Most ransomware playbooks don't address machine credentials. Attackers know it.
How to test OpenClaw without giving an autonomous agent shell access to your corporate laptop
Anthropic published the prompt injection failure rates that enterprise security teams have been asking every vendor for
TechCrunch
Former L3Harris Trenchant boss jailed for selling hacking tools to Russian broker
CarGurus data breach affects 12.5 million accounts
Treasury sanctions Russian zero-day broker accused of buying exploits stolen from US defense contractor
Marquis sues firewall provider SonicWall, alleges security failings with its firewall backup led to ransomware attack
Conduent data breach grows, affecting at least 25M people
Americans are destroying Flock surveillance cameras
VPN flaws allowed Chinese hackers to compromise dozens of Ivanti customers, says report
5 days left to lock in the lowest TechCrunch Disrupt 2026 ticket rates
6 days left to lock in the lowest TechCrunch Disrupt 2026 rates
7 days until ticket prices rise for TechCrunch Disrupt 2026
Network World Security
AMD strikes massive AI chip deal with Meta
From packets to prompts: What Cisco’s AITECH certification means for IT pros
HPE’s latest Juniper routers target large‑scale AI fabrics
Nvidia: Latest news and insights
New Relic connects observability platform to business outcomes
2026 network outage report and internet health check
Nvidia lines up partners to boost security for industrial operations
Pure Storage becomes Everpure, acquires 1touch
Favorable Wi-Fi 7 prices won’t be around for long, Dell’Oro Group warns
Raising the temp on liquid cooling
Help Net Security
SentinelOne addresses identity risk across endpoints, browsers, and AI workflows
Veza expands platform with AI Access Agents for enterprise identity governance
CloudCasa expands Red Hat OpenShift data protection across edge and hybrid cloud
Anthropic’s Remote Control feature brings Claude Code to mobile devices
SolarWinds Serv-U hit by four critical RCE-level vulnerabilities
Reddit fined $19.5 million for failing to protect children’s personal data
Ex-L3Harris executive sentenced to 87 months for selling stolen cyber-exploit trade secrets
CISA flags exploited FileZen command injection bug, patch now! (CVE-2026-25108)
Apple blocks 18+ app downloads in select markets
Cyber valuations climb as capital concentrates, AI security expands
SC Magazine
Security as a Business Enabler by Re-envisioning Risk and Leading through Uncertainty - Elyse Gunn - BSW #436
Burger King France, Wendy's UK allegedly hacked, data leaked
Cyberattack disclosed by Air Cte d'Ivoire after INC ransomware claims
New York City transit union purportedly targeted by Qilin
About 140K compromised in Vikor Scientific breach
Vishing-related breach reported by Optimizely
Hacked US law firm sites tapped to spread various malware
Novel AI agent-powered crypto scam uncovered
Chinese AI labs accused by Anthropic of mining Claude
Missile strike guidance sought by Russian cyberattacks against Ukrainian power grid
© 2026 RiskDiscovery | Sponsored by: Deception Logic