[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
Dark Caracal Adds New Malware to Cyber Espionage Arsenal
Red Flags That Expose Fake North Korean IT Workers
Android Malware Hijacks Update System for Car Head Units
'NovaCookies' Kit Steals Microsoft 365 Sessions for $320 a Month
Interpol's Jackal IV Disrupts West African Crime Infrastructure
Nigeria Looks to Sovereign Cloud for Cyber, National Security
Hidden Prompts Trick AI Into False Email Summaries
Finding Nemo(Claw): Networking Issue Allows for LLM Poisoning in OpenClaw
Is Cyber Facing an Affordability Crisis?
Exploited Zimbra Flaw Highlights Shrinking Window to Patch
Ars Technica
AI agents meant to replace Meta workers made “large-scale, disruptive actions”
Inaudible sounds used to fingerprint browsers catch AliExpress red-handed
Waymo doubles spending on lobbying in robotaxi battle with Uber
Grok exfiltrates user data when malicious instructions are encrypted
Microsoft Copilot reveals secret input that allowed it to be hacked
Nvidia discloses $21B stake in SpaceX
Vulnerability giving attackers full control of Macs is under active exploitation
PBS station fears losing 50TB of data after being ghosted by cloud storage provider
OpenAI and Anthropic in price war as Chinese AI rivals gain ground
Private security firms will soon be allowed to hack overseas cybercriminals
CyberScoop
Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure
Officials disrupt Chinese espionage operation that hit multiple federal agencies
OpenAI: Agent behavior that led to Hugging Face intrusion formed in May
Three 10.0 security flaws fixed across Ubiquiti’s UniFi line
Election official says Tina Peters would be consultant, won’t have access to election systems
The GTA VI leaks are breaking the internet. Security researchers have seen this before.
Arrested man allegedly impersonated NSA elite hacking unit, Supreme Court chief justice
Water sector passes, government sector fails attempts to spot and halt simulated CISA attack
Interpol targets Black Axe’s illicit financial web in latest international sting
SCOTUS tosses one of two injunctions against Trump USPS mail-in ballot rules
InfoSecurity Magazine
Tortoiseshell Expands Malware Toolset With New Backdoor, SSH Tunnel
Interpol Operation Jackal IV Identifies 263 Cybercrime Suspects
Four in Five AI Tools Run with No IT Oversight, New Research Finds
Average Cyber Insurance Losses Increase Despite Fewer Claims
Linux Foundation Introduces TRACE Standard for AI Runtime Evidence
DDoS Attack Hits Norwegian Government Services
ZeroTokens Phishing Platform Steers Attacks in Real Time
Fake Recruiter Scams Target Corporate Credentials on Mobile
Australia Warns of Active Exploitation of Critical TeamCity Server Flaw
Fake Minecraft Clients Deliver WeedHack Malware Despite Infrastructure Takedown
SecurityWeek
AI Speeds Up Malware Development, Not Its Success Rate: Analysis
Adobe and Nvidia Patch Dozens of Vulnerabilities
CISA: Over 100 Internet-Exposed Water Systems Targeted in July Cyberattacks
The MFA Identity Trap: When Authentication Creates a False Sense of Security
Chrome 152 Patches Over 300 Vulnerabilities
Sensitive Information Exposed in Nutex Health Data Breach
CISA Warns of Exploited Gitea Vulnerability
Linux Foundation to Govern TRACE, an Open Standard for AI Runtime Attestation
Alice Raises $140M to Expand AI Model Defenses and Enterprise Guardrails
WordPress Websites Targeted via MiniOrange Plugin Vulnerabilities
ZDNet
Apple sets its iPhone 18 event for September: A new foldable and CEO could steal the show
This 120Hz tablet replaced my Kindle and iPad for $220 - here's why I recommend it
How to sideload Android apps on your phone in 2026 - and what's behind the changes
Will plug-in solar plus batteries solve your power problem? I did the math
Google Pixel 11 review: Why the base model is still my favorite, even this year
July was the worst month for ransomware victim claims in 2026 - or was it?
4 AI development skills you need, according to Andrew Ng - and what experts say he's missing
This simple antivirus tool is the easiest way to scan your Linux PC for threats - for free
I built my own secure network in the cloud to access my home PCs remotely - for free
The best reading tablets of 2026: Expert tested
The Hacker News
FBI Disrupts China-Linked QTFY Infrastructure Used to Steal Data From U.S. Organizations
Nimbus Manticore Expands Toolset With TWOSTROKE-Like Backdoor and SSH Tunneler
NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions
CISA Red Team Compromised Two Critical Infrastructure Orgs, One Detected Nothing
Unpatched Kaltura mwEmbed Flaws Could Let Remote Attackers Read Files and Run Code
Imagine the SOC Without a Queue: From Alert Backlog to AI Hypothesis Engine
Claude Opus 4.6 Bypasses Gym Booking Limit, Cancels Other Users' Reservations in Tests
OpenAI Bans Russian ChatGPT Accounts Used to Run Influence Operation
INTERPOL Operation Jackal IV Arrests 58, Identifies 263 in Global Cyber Fraud Crackdown
New SLEEPWALKER Backdoor Waits for One Crafted Packet, Then Runs Its Own Bytecode
BleepingComputer
Critical Avada WordPress theme flaw enables zero-click RCE
New GPUThor attack defeats NVIDIA ECC protection for root access
Meta agrees to $18 billion settlement over teen social media harms
Boston Scientific says cyberattack disrupted operations globally
Hackers target Microsoft SharePoint RCE chain with PoC exploit
FBI disrupts proxy network enabling Chinese espionage operations
Snowflake ends service-account passwords. Now comes the hard part
Ubiquiti patches three max severity security vulnerabilities
Microsoft tests new privacy controls for Windows 11 desktop apps
Hackers now exploit critical Gitea flaw in code injection attacks
gbhackers
Russia-Linked Operators Used ChatGPT to Run a Secretive Online Influence Campaign
Iran-Linked Hackers Use Reverse SSH Tunnels to Reach Deep Inside Compromised Networks
Critical WatchGuard Agent Flaws Let Unauthenticated Attackers Execute Remote Code
SonicWall NetExtender Flaw Lets Attackers Write Arbitrary Files as Root
Fake Claude Desktop Installer Deploys SectopRAT Using DLL Sideloading and Blockchain C2
Hackers Turn Trusted npm Mirrors Into Hosts for Fake Cloudflare ClickFix Pages.
Iran-Linked Hackers Abuse Legitimate Deno Runtime to Hide Dindoor Backdoor on Windows Systems
Critical WordPress TranslatePress Flaw Lets Attackers Take Over Admin Accounts
Google Chrome 152 Patches 327 Security Flaws, Including 10 Critical Vulnerabilities
NVIDIA NemoClaw Vulnerability Lets Attackers Hijack AI Agents via DNS Rebinding
Cybersecurity Dive
Boston Scientific says cyberattack disrupted order processing, shipping
Treasury to help financial firms transition to quantum-resistant encryption
Researchers warn about chained SharePoint sequence
CISA orders agencies to fix exploited Zimbra vulnerability
UK power facility disabled for days after suspected state-linked cyberattack
House Democrats ask GAO to study CISA workforce cuts
Salesforce gave every org the same free scanner. Attackers already know what it misses.
Microsoft discloses maximum severity flaw in Entra ID
Defense contractors still struggling with basic CMMC requirements
Fitch explains how water, healthcare organizations can keep strong credit ratings despite cyberattacks
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
More than 100 water systems were hit in July cyberattacks
Boston Scientific discloses 'global disruption' in ongoing cyberattack
Carhartt data breach affects 12.9M, half of what ShinyHunters claimed
You could've applied all 1,449 Oracle patches and still been hit by this attack
CISA slaps its tightest three-day patching deadline on perfect-10 Oracle flaw
Crooks push Mac malware through fake OpenAI Codex ads
You don't want this Sleepwalker backdoor on your Windows machine
Browser fingerprint tool shows how easy you are to track using the latest sneaky tricks
Iran-linked cyberattack shut down a UK power plant
AliExpress accused of fingerprinting shoppers with silent audio trick that also muted a dev's headphones
VentureBeat
The fix for the AI agent that hijacked a company's DNS: it can propose the change, but it can't approve it
Prompt injection ranks No. 1 with OWASP and No. 12 in the incident record. The attack itself is invisible to a scan.
Three Claude agents given conflicting orders sabotaged each other on a shared server — then didn't tell users what they'd done
Four of five enterprises that secured AI agent identities still can't contain one that goes rogue
OpenAI launches GPT-5.6-Cyber with reduced refusals, 95% completion on advanced cybersecurity tasks
AWS Continuum integrates with OpenAI Codex and Anthropic Claude Code in major AI security push
AI agents are part of your team now. Here’s how to secure all of them.
TechCrunch
Medical device maker Boston Scientific says a cyberattack is causing a ‘global disruption’ to its operations
US seizes domains of Chinese botnet used to hack NASA, Justice Department, and the Senate
CISA confirms hackers targeted over 100 US water systems during July
That fake Grand Theft Auto VI demo is actually just malware
Apple rescues Hide My Email feature from the privacy scrap heap
WhatsApp tightens account security with stronger two-step verification and more
Alabama launches investigation into OpenAI’s hack of Hugging Face
Instinct’s powerful AI assistant is raising privacy and security concerns
Frontier AI labs still won’t say how they’d contain a rogue model
Private equity firm Apollo confirms data breach amid hacking wave targeting financial giants
Network World Security
Intel unwraps three-pronged architecture strategy to go after agentic AI
Cisco bulks up its AI infrastructure portfolio with Supermicro’s liquid-cooled servers
2026 network outage report and internet health check
Cisco taps Teleport for infrastructure identity management tech
Google adds AI-powered assessments to Migration Center to speed up cloud migration planning
AI is turning the semiconductor market into a $1.6 trillion industry
Nvidia to hike prices by 15%, on top of an even larger increase in July
IBM unveils dual-architecture processor to run Arm-native apps on Z mainframes
AI agents are reshaping the threat landscape, shifting IT skills requirements
Nvidia scales back financing guarantee for OpenAI data center
Help Net Security
AnonyMousKIT phishing-as-a-service uses AI voice calls to steal iPhone passcodes
Critical Gitea vulnerability now exploited in the wild (CVE-2026-60004)
RightCrowd Pass unifies mobile, physical, and biometric credentials
Bogus recruiters go after high-value corporate credentials on mobile
Meta adds three new features to keep WhatsApp accounts secure
Linux Foundation takes on TRACE, a hardware-backed runtime evidence specification for AI agents
Production data in testing is still common, and Tricentis’ CISO wants it gone
AI vulnerability discovery scores the highest impact of 20 emerging risks
Hottest cybersecurity open-source tools of the month: August 2026
INTERPOL crackdown on West African crime rings uncovers troubling new trend
SC Magazine
Cellebrite launches portable field kit for military data extraction
Ring adopts new TAKE encryption standard for smart home devices
Nimbus Manticore expands infrastructure and malware arsenal
Carhartt data breach claims inflated by synthetic data, analysis finds
FBI seizes China-linked QScan and QTRouter platforms used to target US critical infrastructure
Ubiquiti patches 3 critical remote code execution vulnerabilities
Boston Scientific operations disrupted by ongoing cyberattack
Unified vision: An executive playbook for data risk management
A Founder's Journey: From Software Engineer to US Special Operations to AI Founder - Snehal Antani - FS #16
Over 100 US water utilities had cyberattacks in July, says CISA
© 2026 RiskDiscovery | Sponsored by: Deception Logic