[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
Iran's Cyber Crosshairs Focus Beyond Critical Infrastructure
Microsoft Reins in RoguePlanet Zero-Day Threat
AI Agents Are a New Kind of Identity & Most Organizations Aren't Ready
As Global Conflicts Go Digital, Businesses Need Wartime Gameplans
AI Gateways Offer Attackers the Keys to the Kingdom
'GodDamn' Ransomware Uses BYOVD to Smite US Companies
European Organizations Have a Collaboration Security Confidence Gap
Mexico's New Cyber Plan Faces Its First Real Test
Lone Attacker Uses AI to Breach AWS Cloud Environment in 72 Hours
Vidar Infostealer Hammers SMBs via Malvertising Campaign
Ars Technica
Patch for Windows Defender 0-day could allow attackers to fill hard disk
Allstate accuses Broadcom of auditing it because it quit VMware, CA
Google pays $250K for Linux vulnerability allowing guest VM escapes
Aussie gov't tells volunteers to throw out thousands of functioning test routers
US rare earths flow to Asia as domestic demand is slow to emerge
Hackers can use 9 of the most popular AI tools to assemble massive botnets
Newly discovered PamStealer isn't your typical macOS malware
T-Mobile moving tens of thousands of virtual machines off VMware amid lawsuit
New attack provides one more reason why AI browsers are a bad idea
US offers $10 million for info on group behind Signal and WhatsApp hacking spree
CyberScoop
Former DigitalMint ransomware negotiator who duped clients sentenced to 70 months in jail
Interpol cybercrime crackdown nets 5,800 arrests across 97 countries
764 splinter group leader sentenced to 40 years in jail
French nonprofit starts global intelligence and research hub for AI cyber threats 
Found fast, fixed slow: The gap the AI clearinghouse must close
Spain arrests suspected hacker linked to Russian hacktivist campaign
Deepfake CSAM lawsuit against xAI, Grok expands
Suspected Chinese espionage group used a Roundcube exploit chain to burrow into universities
US Army websites defaced with pro-Kurdish sentiments, insults to Trump
Sysdig clocks first documented case of agentic ransomware
InfoSecurity Magazine
Microsoft Warns of Increase in Number of Security Updates
NHS Warns Staff Over Unauthorized Access to Patient Data
Vibe-Coded Malware Caught in Active Directory Attack
75% CISOs Fear Executives Don’t Understand Cybersecurity Risks Employees Face
Chinese-Funded Interpol Cybercrime Crackdown Leads to 5,800 Arrests
GhostApproval Flaw Hits Six Major AI Coding Assistants
New AI Security Charter Backed by Over 70 Cyber Firms
Cybercriminals Plant Malicious AI Agents in Open Source Tool Repositories
RedWing Android Spyware Sold as a Service on Telegram
China-Linked APT Expands Proxy Network With New Malware
SecurityWeek
China, India-Linked Hackers Both Targeted Same Pakistani Police Force
Okta Warns of Vishing Attacks Targeting Microsoft 365 Customers
GigaWiper Combines Multiple Malware for System-Level Sabotage
‘HalluSquatting’ Turns AI Hallucinations Into Botnet Delivery Mechanism
Network of 200 GitHub Repositories Used for Malware Infection
QIZ Security Raises $17 Million for Cryptographic Governance Platform
UK Government Rolls Out Agentic AI Defense Plan Alongside Industry Pledge
Palo Alto Networks Patches 13 Vulnerabilities
12 Million Impacted by Data Breach at Japanese Telco KDDI
15-Year-Old Linux Vulnerability ‘GhostLock’ Earns Researchers $92k From Google
ZDNet
You're using 3M Command strips all wrong
Best wireless chargers of 2026: Expert tested
The best VPS hosting services for 2026: Expert tested and reviewed
How I run Linux GUI apps on my Android phone - and what to consider before you do it, too
The best HDMI cables of 2026: Expert reviewed
The best smart rings of 2026: Expert tested
I tested my Fitbit Air against an 'EKG-accurate' heart rate monitor - the results surprised me
I set up a solar panel security camera in my yard - and the image quality beat my Ring
I'm a Windows user who installed Linux for the first time - here's how the experience changed me
AI Model Release Tracker: GPT-5.6 rivals Fable 5, Muse Spark 1.1 pursues 'personal intelligence'
The Hacker News
Unpatched XRING Flaw in XQUIC Lets Remote Clients Crash HTTP/3 Servers
From 17,000 to 1.1 Million Assets: How Lumen Technologies Rebuilt Exposure Management at Scale
Exposed Hacker Server Reveals WP-SHELLSTORM Backdooring Thousands of WordPress Sites
Study of 281 Free Android VPN Apps Finds Traffic Leaks, Unencrypted Data, and Tracking
Hackers Use Fake Microsoft Entra Passkey Enrollment to Gain Microsoft 365 Access
Attackers Exploit 'Ill Bloom' Vulnerability to Drain $3.1 Million From Cryptocurrency Wallets
Ransomware Negotiator Gets 70 Months in Prison for Aiding BlackCat Attacks
Dormant GitHub Accounts Help Attackers Blend In While Mapping Corporate Orgs
New GigaWiper Windows Backdoor Bundles Disk Wiping, Fake Ransomware, and Spyware
npm 12 Disables Install Scripts by Default to Reduce Supply Chain Risk
BleepingComputer
Zimbra urges customers to patch critical web client XSS flaw
Former ransomware negotiator gets 4 years for BlackCat attacks
OpenMandriva Linux says contributor tried to sabotage the project
Injective SDK on npm infected with cryptocurrency wallet stealer
New Helix vishing group emerges in SharePoint data theft attacks
Microsoft expects more Windows security updates from AI-discovered flaws
New Forg365 phishing platform uses AI to target Microsoft 365 accounts
The Hidden Security Risks of Reduced Summer IT Coverage
Microsoft to retire the OWA Light client in Exchange Server
Police arrests 5,800 suspects in global anti-fraud crackdown
gbhackers
Linux FUSE Vulnerability Allows Unprivileged Users to Pop a Root Shell
GNU Guix Vulnerabilities Let Attackers Overwrite Arbitrary Files and Escalate Privileges
FastNetMon Launches Netomics, a Self-Hosted Routing Intelligence Platform
Wireshark 4.6.7 Released to Patch 12 Vulnerabilities in SSH, TLS, Wi-Fi and pcapng
New Multi-Stage LNK Attack Targets Hospitality Firms With Node.js Backdoor
NetScaler MCP Gateway Secures LLM and Agentic AI Traffic From a Single Platform
Process Parameter Poisoning Technique Hides Shellcode Inside Windows Startup Data
Odyssey Stealer Attacks Macs Worldwide and Replaces Crypto Wallet Apps With Drainers
Fake Robinhood Sign-In Alerts Trick Users Into Calling Hacker-Controlled Phone Numbers
GigaWiper Uses OneDrive Update Scheduled Task for Persistent Destructive Access
Cybersecurity Dive
Data breach hits car insurance provider
Ransomware ecosystem grows, but ‘four-headed monster’ dominates
US enterprises incorporate cyber risk into larger strategic focus
Accenture faces massive data breach that could put clients at risk
Businesses modernizing networks for AI fear expanding attack surface, limited visibility
Sophisticated threat campaign pushes Cisco to the very edge
Alleged member of Scattered Spider extradited to US
Why schools are easy prey for hackers — and why they struggle to fight back
The security leaders defining the next decade aren’t in CISO seats yet
FortiBleed campaign traced to INC and Lynx ransomware operations
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
Fashion mart Miinto unzips breach details, warns shoppers to watch for phisherfolk
Scot NHS Trust probes email stuffup involving maternity patients' data
Microsoft warns customers AI will mean busier Patch Tuesdays
An unnamed US county – perhaps in Ohio – paid $1M extortion demand to cybercriminals
EU 'Chat Control' snoopfest returns after vote to kill it falls short
Microsoft closes book on Nightmare Eclipse's RoguePlanet zero-day
Thief posed as Wi-Fi fixing hero, then stole priceless trophy
Suspected Chinese snoops caught breaking into universities' Roundcube mailservers
GitHub Copilot: Sorry Dave, I can't do that harmful thing - unless you ask me in code
Bug in top AI coding agents shows that Unix-era security headaches never really die
VentureBeat
Shared API keys expose AI agents at 69% of enterprises, new VentureBeat research finds
AI has collapsed the cyber response window — resilience now starts before the attack
The real cost, security, and culture problems behind enterprise AI agents
Digital resilience compounds when AI and human expertise scale together
The attack that hijacked Claude Code came through Sentry. Datadog, PagerDuty, and Jira have the same exposure.
Prompt injection is exploiting enterprise AI's biggest design flaws by targeting agents, RAG pipelines and model routers
Autonomous security agents need complete data. Here's how to check if yours is ready.
TechCrunch
Another massive data breach exposed millions of driver’s license numbers
Hacked, leaked, and held for ransom: The worst breaches of 2026 so far
Hacktivists call out Trump by hacking and defacing US Army websites
Savi’s app aims to protect consumers from realistic AI scams like kidnappers demanding ransom
The ‘first’ AI-run ransomware attack still needed a human
Canadian spy agency says it hacked drug traffickers, extremists, and a ransomware gang last year
Alibaba reportedly bans employees from using Claude Code
Politician who investigated spyware abuses had his phone hacked with Pegasus spyware
US government says it got hacked — again
In major privacy win, Supreme Court rules geofence warrants are protected by privacy rights
Network World Security
AI tie-in accelerates quantum usefulness, early adopters say
Infoblox acquires Kentik, adding network observability to its DNS and DDI platform
SpaceXAI wants to compete on AI infrastructure, not just AI models
Gartner: Data center electricity consumption to grow 26% in 2026
IBM grows mainframe family with rack, frame models targeting AI, hybrid clouds
2026 network outage report and internet health check
Envirotech Vehicles Closes Merger with Azio AI Ahead of Schedule, Positioning Combined Company to Capture $487 Billion 2026 AI Infrastructure Opportunity
Network evolution for the Agentic AI era
Meta reuses old RAM in new servers with custom bridge chip
Cloud sovereignty: First four providers sign up to CISPE certification program
Help Net Security
Incode brings on-device processing to age estimation for privacy-focused verification
July 2026 Patch Tuesday forecast: Is CVE tracking still practical?
Workato expands Agent Studio with Headless API, AI guardrails
The open source library holding up your stack might have one maintainer
Most data brokers won’t tell you what happened to your deletion request
Microsoft is rewriting Windows patch guidance because of AI
Turning software supply chain security into a daily habit
AWS gives its ERP agent deny-by-default rules and a separate identity
Only 28% of financial workforce MFA is phishing-resistant
New infosec products of the week: July 10, 2026
SC Magazine
‘GodDamn’ ransomware deploys PoisonX driver to kill EDR
MSPs lead in AI security adoption over in-house teams, report finds
Threat actor uses AI-generated malware in network intrusion
Microsoft details GigaWiper destructive backdoor assembled from older tools
Bitdefender launches program for EU data sovereignty and compliance
QIZ Security raises $17 million for cryptographic management platform
Aduna launches network-based authentication to replace SMS OTPs
EU moves closer to reviving CSAM scanning law after parliamentary vote
Permiso launches risk score engine for unified identity security
Hong Kong SFC mandates stronger login security for crypto platforms
© 2026 RiskDiscovery | Sponsored by: Deception Logic