[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
Russian Hackers Phish EU Officials Over Messaging Apps
Dark Caracal Adds New Malware to Cyber Espionage Arsenal
'HTTP Terminator' Hunts for Novel Desync Attacks
Red Flags That Expose Fake North Korean IT Workers
Android Malware Hijacks Update System for Car Head Units
'NovaCookies' Kit Steals Microsoft 365 Sessions for $320 a Month
Interpol's Jackal IV Disrupts West African Crime Infrastructure
Nigeria Looks to Sovereign Cloud for Cyber, National Security
Hidden Prompts Trick AI Into False Email Summaries
Finding Nemo(Claw): Networking Issue Allows for LLM Poisoning in OpenClaw
Ars Technica
How OpenAI let a mob of LLM agents game a test and ransack Hugging Face
AI agents meant to replace Meta workers made “large-scale, disruptive actions”
Inaudible sounds used to fingerprint browsers catch AliExpress red-handed
Waymo doubles spending on lobbying in robotaxi battle with Uber
Grok exfiltrates user data when malicious instructions are encrypted
Microsoft Copilot reveals secret input that allowed it to be hacked
Nvidia discloses $21B stake in SpaceX
Vulnerability giving attackers full control of Macs is under active exploitation
PBS station fears losing 50TB of data after being ghosted by cloud storage provider
OpenAI and Anthropic in price war as Chinese AI rivals gain ground
CyberScoop
Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure
Officials disrupt Chinese espionage operation that hit multiple federal agencies
OpenAI: Agent behavior that led to Hugging Face intrusion formed in May
Three 10.0 security flaws fixed across Ubiquiti’s UniFi line
Election official says Tina Peters would be consultant, won’t have access to election systems
The GTA VI leaks are breaking the internet. Security researchers have seen this before.
Arrested man allegedly impersonated NSA elite hacking unit, Supreme Court chief justice
Water sector passes, government sector fails attempts to spot and halt simulated CISA attack
Interpol targets Black Axe’s illicit financial web in latest international sting
SCOTUS tosses one of two injunctions against Trump USPS mail-in ballot rules
InfoSecurity Magazine
Manchester Airports Group Hit by Cyber Incident
Chinese Hacker Group QTFY Uses Custom-Built Platforms to Target US Infrastructure, FBI Warns
CISA Warns of Six Exploited Flaws in Microsoft, Linux, Red Hat and Citrix Products
Boston Scientific Reveals Global Disruption After Cyber Incident
OpenAI: Hugging Face Incident a “Warning Shot” to the World
Tortoiseshell Expands Malware Toolset With New Backdoor, SSH Tunnel
Interpol Operation Jackal IV Identifies 263 Cybercrime Suspects
Four in Five AI Tools Run with No IT Oversight, New Research Finds
Average Cyber Insurance Losses Increase Despite Fewer Claims
Linux Foundation Introduces TRACE Standard for AI Runtime Evidence
SecurityWeek
Australia Arrests 2 Alleged TeamPCP Hackers
OpenAI Agents Coordinated via Makeshift Message Board Ahead of Hugging Face Hack
Okta Shares Surge on Strong Earnings, Growing Demand for AI Identity Security
CISO Conversations: Chris Wheeler – Trust Is the Job, From the Navy to the C-Suite
Cyberattack Causes Global Disruption at Boston Scientific
The Future of AI-Driven Security Depends on Complete Data
US Disrupts Chinese Hacking Platform Used in Military and Critical Infrastructure Attacks
Pro-Russian Hackers Claim Responsibility for Major Cyberattack on Norway’s Public Digital Services
Recent Citrix NetScaler Vulnerability Exploited in the Wild
AI Speeds Up Malware Development, Not Its Success Rate: Analysis
ZDNet
Is your really old iPhone still worth anything or just e-waste? How to tell
Plaud's first AI earbuds have arrived - what they can do
ChatGPT can log into your web accounts without you now - but should you let it?
How Facebook and Instagram will change after Meta's $18B settlement - and where the money is going
The 5 best Linux alternatives to Windows in 2026 (that aren't Mint)
The best iPad Air cases of 2026: Expert tested
Apple sets its iPhone 18 event for September: A new foldable and CEO could steal the show
This 120Hz tablet replaced my Kindle and iPad for $220 - here's why I recommend it
How to sideload Android apps on your phone in 2026 - and what's behind the changes
Will plug-in solar plus batteries solve your power problem? I did the math
The Hacker News
Learn How to Build Security Operations Ready for AI-Powered Attacks
Alleged TeamPCP Hackers Charged in Australia Over Major Supply Chain Attacks
What the Data Says About AI in Security Operations in 2026
Spark RAT Targets Cambodia, Abuses Vulnerable OPSWAT Driver to Disable Security Tools
GoCaracal Malware Uses Ethereum Smart Contract to Fetch Replacement C2 Address
New GPUThor Rowhammer Defeats ECC on NVIDIA RTX A6000 to Gain Host Root Access
CISA Adds Six Exploited Flaws to KEV, Including NetScaler, Linux, and SQL Server Bugs
FBI Disrupts China-Linked QTFY Infrastructure Used to Steal Data From U.S. Organizations
Nimbus Manticore Expands Toolset With TWOSTROKE-Like Backdoor and SSH Tunneler
NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions
BleepingComputer
Microsoft rolls out fix for Windows 11 crashes, gaming issues
Webinar: How Google Workspace breaches happen and what to do next
Carhartt data breach exposes information of 12.9 million accounts
CISA orders feds to patch Citrix NetScaler RCE flaw by Saturday
ATF confirms “major incident” after recent Qilin breach claims
Critical Avada WordPress theme flaw enables zero-click RCE
New GPUThor attack defeats NVIDIA ECC protection for root access
Meta agrees to $18 billion settlement over teen social media harms
Boston Scientific says cyberattack disrupted operations globally
Hackers target Microsoft SharePoint RCE chain with PoC exploit
gbhackers
AWS Security Teams Can Correlate CloudTrail, VPC and Route 53 Logs to Detect Attacks
Hackers Exploit CVE-2023-49105 to Steal Nuclear Records From Philippine Research Agency
CISA Warns of Actively Exploited Citrix NetScaler ADC and Gateway Vulnerability
Hackers Are Targeting AI Servers to Steal API Keys and Hijack Computing Power
TP-Link Kasa Smart Home Flaw Lets Attackers Forge Control Messages and Take Control of Devices
Ransomware Hacker Uses AI to Plan Attacks and Compromises More Than 20 Organizations
CISA Warns of Actively Exploited Microsoft SQL Server RCE Vulnerability
FBI Seizes China State-Sponsored Hacker Platforms Used to Target U.S. Critical Infrastructure
AccuKnox Launches AgentZ to Help Enterprises Build, Run, and Govern AI Agents at Scale
Critical Veeam ONE Flaw Lets Unauthenticated Attackers Coerce SMB Authentication From Service Accounts
Cybersecurity Dive
Boston Scientific says cyberattack disrupted order processing, shipping
Treasury to help financial firms transition to quantum-resistant encryption
Researchers warn about chained SharePoint sequence
CISA orders agencies to fix exploited Zimbra vulnerability
UK power facility disabled for days after suspected state-linked cyberattack
House Democrats ask GAO to study CISA workforce cuts
Salesforce gave every org the same free scanner. Attackers already know what it misses.
Microsoft discloses maximum severity flaw in Entra ID
Defense contractors still struggling with basic CMMC requirements
Fitch explains how water, healthcare organizations can keep strong credit ratings despite cyberattacks
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
Cybercrooks jet off with Manchester Airports Group customer data
Nuisance-call blocker fined £190k for being a nuisance caller
FBI seizes hacking tools it says China used to attack NASA, DOE, US Senate and other critical networks
OpenAI explains how its naughty AI agents attacked Hugging Face
More than 100 water systems were hit in July cyberattacks
Boston Scientific discloses 'global disruption' in ongoing cyberattack
Carhartt data breach affects 12.9M, half of what ShinyHunters claimed
You could've applied all 1,449 Oracle patches and still been hit by this attack
CISA slaps its tightest three-day patching deadline on perfect-10 Oracle flaw
Crooks push Mac malware through fake OpenAI Codex ads
VentureBeat
Visa ships a security AI that patches production code before any human reviews it
When agents act on their own, governance has to live in the data layer
The fix for the AI agent that hijacked a company's DNS: it can propose the change, but it can't approve it
Prompt injection ranks No. 1 with OWASP and No. 12 in the incident record. The attack itself is invisible to a scan.
Three Claude agents given conflicting orders sabotaged each other on a shared server — then didn't tell users what they'd done
Four of five enterprises that secured AI agent identities still can't contain one that goes rogue
OpenAI launches GPT-5.6-Cyber with reduced refusals, 95% completion on advanced cybersecurity tasks
TechCrunch
Medical device maker Boston Scientific says a cyberattack is causing a ‘global disruption’ to its operations
US seizes domains of Chinese botnet used to hack NASA, Justice Department, and the Senate
CISA confirms hackers targeted over 100 US water systems during July
That fake Grand Theft Auto VI demo is actually just malware
Apple rescues Hide My Email feature from the privacy scrap heap
WhatsApp tightens account security with stronger two-step verification and more
Alabama launches investigation into OpenAI’s hack of Hugging Face
Instinct’s powerful AI assistant is raising privacy and security concerns
Frontier AI labs still won’t say how they’d contain a rogue model
Private equity firm Apollo confirms data breach amid hacking wave targeting financial giants
Network World Security
Kubernetes 1.37 advances workload-aware scheduling and cluster networking
Intel unwraps three-pronged architecture strategy to go after agentic AI
Cisco bulks up its AI infrastructure portfolio with Supermicro’s liquid-cooled servers
2026 network outage report and internet health check
Cisco taps Teleport for infrastructure identity management tech
Google adds AI-powered assessments to Migration Center to speed up cloud migration planning
AI is turning the semiconductor market into a $1.6 trillion industry
Nvidia to hike prices by 15%, on top of an even larger increase in July
IBM unveils dual-architecture processor to run Arm-native apps on Z mainframes
AI agents are reshaping the threat landscape, shifting IT skills requirements
Help Net Security
Cyberattack causes network outage at Boston Scientific, disrupts global operations
Unknown PaperCut NG/MF vulnerability is under active attack
Previously patched Citrix NetScaler flaw exploited in the wild (CVE-2026-8452)
FBI takes down China-linked hacking network behind attacks on NASA, DOJ and U.S. Senate
Abnormal AI expands email security from detection to data protection and phishing-simulation training
AI will not fix a governance problem in your camera estate
The best human hacking team still out-solved the best AI team
AnonyMousKIT phishing-as-a-service uses AI voice calls to steal iPhone passcodes
Critical Gitea vulnerability now exploited in the wild (CVE-2026-60004)
RightCrowd Pass unifies mobile, physical, and biometric credentials
SC Magazine
How to Evaluate AI Red Teaming and AI Application Security Platforms
How to Evaluate AI Agent Security and Control Vendors
How to Evaluate EDR, XDR, and MDR Based on Response Outcomes
Shadow AI surges as 80% of employee AI tools evade IT oversight
Cellebrite launches portable field kit for military data extraction
Ring adopts new TAKE encryption standard for smart home devices
Nimbus Manticore expands infrastructure and malware arsenal
Carhartt data breach claims inflated by synthetic data, analysis finds
FBI seizes China-linked QScan and QTRouter platforms used to target US critical infrastructure
Ubiquiti patches 3 critical remote code execution vulnerabilities
© 2026 RiskDiscovery | Sponsored by: Deception Logic