[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
The Coordination Gap: How Attackers Are Outpacing Law Enforcement
Researcher Claims Control of ChatGPT Secure Sandbox
From Bobmojis to Bobbleheads: How the Democratic Party Built a Security-First Culture
AI Sends Global Crime Syndicates Into Fraud Nirvana
AI Browsers Vulnerable to 'PleaseFix' Zero-Click Agent Hijacking
No Perfect Fix for AI Browser Prompt Injection Flaws
CSS: The Hidden Threat Lurking in Your Inbox
15 TP-Link Bugs Expose Risks in Zero-Trust Provisioning
Flaws in Google APK for Python Unlock Agent-to-Agent Attack
Angola's Largest Telco Breached Hours Before IPO
Ars Technica
Thousands of servers can be backdoored by exploiting buggy motherboard controllers
Claude published malicious code to the Internet and attacked 3 real companies
Max-severity Exchange server flaw under active exploitation by Kremlin hackers
Mythos attack on 3rd-round PQC algorithm candidate puts it out of commission
We now have a better understanding how OpenAI hacked into Hugging Face
Microsoft unveils AI security tools it says outperform competing platforms
TreeSize won't renew perpetual-license support unless users subscribe
HP fined 1.4 billion rupees for “cartelization” of ink cartridges, toner, PCs
Now, even Russia's most elite hackers are using Clickfix to infect devices
Energy IPOs surge as investors hunt for ways to play AI boom
CyberScoop
Capitol Hill wants to know if executive branch, foreign allies coordinated enough to combat scams
Despite federal warnings, thousands of U.S. industrial controllers used in water systems remain exposed online
Ransom Cartel creator sentenced to 16 years in prison
The water sector just got it’s wake-up call. Again.
Snowflake hacker pleads guilty, faces up to 32 years in prison
Tom Cotton prods Treasury for tax code tweaks to modernize OT
Open-source software’s archenemy TeamPCP goes back further than anyone thought
AI is getting better at election facts, but voters shouldn’t rely on it
National cyber director lays out White House plans to secure AI without writing new rules
AISI, OpenAI report more ‘unsanctioned’ model hacks
InfoSecurity Magazine
Ransomware Surges in July After Q2 Lull
Toolkit Hidden Inside Oracle Database Evades Endpoint Tools
TeamPCP Traced Back to 2020 Cryptojacking Operation
Meta Joins OpenAI and Anthropic in Reporting AI Exploit Incident
Violent Physical Crypto Thefts Surge to $30m in Losses
Canadian Hacker Pleads Guilty Over Snowflake Extortion Campaign
NVIDIA Group Proposes SAFE Initiative for Agentic Threat Intel Sharing
Fake Open VSX Extensions Harvest Private Repo and CI Data
Paperclip AI Flaws Let Unauthenticated Attackers Run Commands
Prompt Injection Remains Biggest LLM Risk, Despite Limited Incidents
SecurityWeek
Black Hat USA 2026 – Summary of Vendor Announcements (Part 4)
Microsoft, Apple Release Fresh Security Updates
3.8 Million Impacted by Unlimited Technology Systems Data Breach
Critical Vulnerabilities Patched With Chrome 151 Update
Snowflake Hacker Pleads Guilty in US Court
Zero-Click AI Browser Hacking: Claude and ChatGPT Atlas Hijacked via Emails, X Posts
Podcast: Compliance Won’t Save You: The Future of Cyber Risk with Edna Conway
Critical Paperclip Flaw Allowed Admin Access, Code Execution
Meta AI Hacked External Systems During Cybersecurity Testing
Belarusian Ransom Cartel Mastermind Gets 16 Years in Prison
ZDNet
My 10 favorite gadgets to upgrade your school or work setup this fall
The best Samsung Galaxy Z Flip 8 cases: Expert recommended
The best electric screwdrivers of 2026: Expert tested and reviewed
The best Samsung Galaxy Z Fold 8 and Fold 8 Ultra cases of 2026: Expert recommended
Made by Google 2026: How to watch and what to expect from the big Pixel 11 event
Google's new Pixel 11 series comes next week - here's what we know from leaks
Is the new (pricier) Pixel 11 series still a good value compared to Samsung's Galaxy phones?
6 must-have travel gadgets, according to industry experts
The M5 MacBook Air is down to the lowest price we've seen since Apple's price hike
This LG OLED TV is one of the most impressive I've tested - and it's $700 off
The Hacker News
TeamPCP Linked To Redis Attacks Dating Back To 2020 And Later Supply Chain Campaign
New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts
Cisco Patches 12 SD-WAN and IOS XE Flaws, Including Three 9.9 CVSS Score Bugs
New Interrupt Injection Attack Can Bypass Spectre v2 Defenses on Intel and AMD CPUs
ThreatsDay: Odysseus RCE, Samsung One-Click Takeover, iCloud Backdoor Fight + 27 More Stories
Over 4,400 Rockwell PLCs Exposed Online, 22 Found in Water Attack Cities
CryptoJS Weak RNG Behind $5.7 Million in Drains Affects Five Crypto Wallet Apps
Apple iCloud Private Relay Can Expose Real IPs Through WebKit Proxy Bypasses
AI Recommendation Poisoning: How "Ask AI" Buttons Silently Alter LLM Memory
Attackers Compile khunt Inside Oracle to Turn SQL Injection Into Windows SYSTEM Access
BleepingComputer
OpenAI rolls out a major ChatGPT upgrade, even if you don’t pay for it
ClickFix attack pushes macOS infostealer for crypto theft attacks
Hedge fund cyberattacks tied to BlackFile-linked UNC6671 extortion group
Swiss government SharePoint breach compromised 200 accounts
New TONTOU CPU attack bypasses Spectre v2 fixes, leaks Linux password hashes
Meta AI model hacked a company during misconfigured cyber test
How AI Exposed a Browser Security Gap that Enterprises Cannot Ignore
Ransom Cartel ransomware creator sentenced to 16 years in prison
Canadian pleads guilty to Snowflake cloud data-theft attacks
Hackers run khunt post-exploitation toolkit from Oracle database
gbhackers
Enterprise Java Vulnerabilities Enable Pre-Auth RCE in Bonita BPM and Apache OFBiz
What Is Cyber Security Risk Assessment? A Complete Guide (2026)
Claude in Chrome Exploit Lets Attackers Steal Gmail Codes and Take Over Slack, X, and Claude.ai Accounts
1000 Best Google Dorks List (Google Hacking Guide) – 2026
Hackers Can Abuse Microsoft WSUS Servers to Deploy Malicious Updates via NTLM Relay
Critical Flaws in Claude Code, Gemini CLI, and OpenAI Codex Enable RCE and Supply Chain Attacks
Hackers Target Internet-Exposed Rockwell PLCs in U.S. Water Systems
Top 10 Best External Attack Surface Management (EASM) Platforms 2026
Top 10 Vulnerability Assessment and Penetration Testing Companies 2026
The Best Firewall Management Tools, Compared and Priced (2026)
Cybersecurity Dive
Hackers grow more willing to destroy, not just disrupt OT systems
OpenAI warns autonomous hacks are ‘watershed moment for computer security’
Western government leaders call for a focus on infrastructure resilience, not AI hype
CISA is prioritizing work with critical infrastructure as it begins to recover from cuts
White House walks tightrope on securing AI without stifling tech innovation
Tech industry alliance proposes AI agent safety reporting program
AI widely used to exploit critical flaws, disrupt supply chains
AI makes costly spearphishing attacks easier, cyber insurer says
OT security coalition urges Congress, CISA to enact reforms amid water sector hacks
China-based hacker employs DeepSeek in autonomous threat campaign
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
China launches mysterious probe into security of Palo Alto Networks' products
How the famed USENIX Security conf is managing a flood of papers in the AI era
AI struggles to patch vulns without adult supervision
Humans in the loop miss a third of dangerous AI coding agent requests
IT department put sticky notes on the laptops to help employees log in
Chinese router vendor denies its firmware contains backdoors – but pauses downloads to fix security issues anyway
OpenAI reveals its rogue agent swarm went a little bit Borg ahead of Hugging Face hack
Prompt injection isn't the bug, AI agent frameworks are
IBM's agentic AI platform is under active attack - patch now
London cops handed victim's new address and number to her stalker, watchdog says
VentureBeat
AI agents are part of your team now. Here’s how to secure all of them.
The browser is where attacks land. Why is security still focused on the endpoint?
Claude Mythos 5 made sock puppet accounts to socially engineer developers: here's what enterprises should know
The Shai-Hulud npm worm didn't fake its security check — it earned a legitimate one
Not just OpenAI: Now Anthropic says its internal models got online and cyberattacked 3 other organizations
Mastercard spent decades training its fraud system to see bots as thieves. Now bots are the ones doing the buying.
Hush Security says the AI security problem has shifted from protecting models to governing identities as autonomous agents spread
TechCrunch
Google says hackers are calling financial firm employees to hack and extort victims
China-linked LightSpy spyware caught targeting victims in 13 countries, including the US
Hacker pleads guilty to stealing data from more than 165 Snowflake customers
PSA: Apple’s Private Relay can leak your real IP address
Android app developers may be unwittingly sharing their users’ location data with advertisers
Nvidia doesn’t mess around: A week after open AI industry group formed, it’s already showing progress
Hackers steal over $130M by exploiting bug in offline hardware wallets
Who’s legally to blame for Anthropic and OpenAI’s autonomous AI hacks? It’s complicated
Apple challenges UK government’s latest demand for iCloud backdoor: report
Horizon3 hits $2 billion valuation with $250M Series E as AI threats escalate
Network World Security
Agentic AI could force a rethink of enterprise AI server design, researchers say
NatJack exploits put NAT security assumptions to the test at Black Hat
Top network and data center events of 2026
AWS targets AI cost concerns with new Marketplace Insights tool
Arista hits first $3B quarter as AI networking demand continues and supply pressures show signs of improvement
Palo Alto Networks at Black Hat: How AI erased the 50-day patch window
2026 network outage report and internet health check
With FCC ban on new Chinese-made optical transceivers for DCs likely, it may be time to stock up
Nvidia moves to accelerate storage access, boost industry cooperation
Moo! LoRaWAN makes it easier to connect more things to the low power networking protocol—even cattle
Help Net Security
OpenAI drops ChatGPT text chat limits for free users, adds new safeguards for teens
Keepit AI Truth Cloud protects the data behind enterprise AI
August 2026 Patch Tuesday forecast: How do we deal with the patch apocalypse?
What the first year of EU AI Act transparency enforcement could look like
US fuel gauge exposure fell by more than half in three months
ShieldFont fights AI scraping by handing crawlers the wrong words
Gut feeling does nothing against AI spear phishing texts
Photos: Black Hat USA 2026, part two
Novel-reading apps used users’ phones to generate fake ad traffic
Photos: Black Hat USA 2026
SC Magazine
Zscaler's Brett Stone-Gross on which roles are targeted in ransomware attacks
F5's Sean Murphy on securing frontier AI as attack and defense accelerate
Orca's Gil Geron on securing the AI-powered enterprise
Island's Michael Leland on the hidden risks of the AI supply chain
Black Hat 2026: Open-source tool makes red teaming AI agents up to 125x cheaper
Frank Vukovits on how Delinea delivers runtime authorization for AI agents
Intruder's Chris Wallis on AI pentesting and the future of cybersecurity
Ido Geffen on why Novee owns the full AI pentesting stack
Ramin Farassat on how Menlo Security is securing AI agents from prompt injection
North Korea linked to new NullReceiver C2 technique
© 2026 RiskDiscovery | Sponsored by: Deception Logic