[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
CISOs vs. Boards: Myth or Misunderstanding?
Escape Artists: 'Incorrigible' AI Models Resist Rehabilitation
Vatican's Official Prayer App Leaks 700K+ Global Users' PII
Default Azure Automation Setting Enables Cross-Tenant Identity Takeover
Europe's Multilingual Reality Exposes AI Security Gaps
Russian Hackers Exploit Zimbra Zero-Day Against US, Ukraine Targets
Agentic AI Challenges Progress in Confidential Computing
Brazilian Banking Trojan Actively Spreading in Portugal
Ransomware Attack Puts a Chill on Japanese Frozen-Food Chain
Flaws in Passkey Implementation Show Old Attacks Still Work
Ars Technica
TreeSize won't renew perpetual-license support unless users subscribe
HP fined 1.4 billion rupees for “cartelization” of ink cartridges, toner, PCs
Now, even Russia's most elite hackers are using Clickfix to infect devices
Energy IPOs surge as investors hunt for ways to play AI boom
Sheetz is quitting VMware, migrating 11,000 virtual machines
Windows 0-day drops the same day Microsoft releases record number of patches
Microsoft’s Secure Boot has been broken for a decade and no one noticed until now
The US government warns that Russia state hackers are coming after your router
Now, defenders are embracing the prompt injection, too
Patch for Windows Defender 0-day could allow attackers to fill hard disk
CyberScoop
Sen. Wyden urges feds to discard older, insecure, public-facing VPNs
Industry’s message on CIRCIA: Please ask us fewer questions about cyberattacks
Despite multiple takedowns, botnets continue to grow
Microsoft, tech companies throw weight behind spread of open-source AI
Rubio restricts visas for sextortionists, cyber scammers
Russian espionage group using novel Zimbra exploit to steal sensitive data from Western countries
ANCHOR-CI could fix 20 years of broken government-industry collaboration
Most federal cybersecurity reporting rules are duplicative, study finds
Malware is targeting AI tools in software development environments
White House accuses Chinese company of distilling Anthropic’s Fable
InfoSecurity Magazine
SourTrade Malvertising Campaign Secretly Builds Malware in the Browser
Ransomware Groups Increasingly Deploy EDR Kill Techniques
Hotel Wi-Fi Routers Compromised to Steal Corporate Login Credentials From Visitors
ChatGPT Among Top 10 Most Impersonated Brands in Phishing Attacks, Says Check Point
Ransomware Attacks Targeting Universities on the Rise
Russian Hackers Exploit New ‘Zero-Click’ Attack Against Western Organizations
Microsoft Copilot Deployments Delayed Over Security Concerns
Iranian Hackers Target Siemens and Schneider Industrial Systems, CISA Warns
AI Agents Now the Enterprises Fastest Growing Exposed Attack Surface
New Dolphin X Stealer Employs AI Profiling to Prioritize Targets
SecurityWeek
New GitHub, PyPI Policies Boost Supply Chain Security
PTC Windchill Vulnerability Exploited in Ransomware Campaign
MedusaHVNC Malware Uses Hidden Windows Desktops to Evade Detection
Nvidia and Tech Giants Launch AI Security Alliance
Coca-Cola Confirms Data Breach After Fairlife Ransomware Attack
Beelzebub Raises $3.4 Million for Hacker-Trapping Platform
What’s Hiding in Your Mobile Apps? Lookout MSEC Aims to Find Out
Hacked Public Wi-Fi Gateways Used to Harvest Corporate Credentials
Anthropic’s Opus 5 Nears Mythos 5 on Finding Bugs, but Falls Short on Exploits
DentaQuest Data Breach Potentially Impacts Over 23 Million People
ZDNet
I tried Framework's premium 'Linux-first' laptop: consider the bar raised
Claude AI shared chats indexed by Google - see if your conversations were exposed
The best laptop docking stations you can buy: Expert tested
Assume AI cybersecurity attacks are the future: 43% of companies have already experienced it
I found a dual-display USB-C dock with 8 ports - and no bulky AC brick
I fixed my home office's spotty Wi-Fi with Samsung's free diagnostic tool - in minutes
How would AI data centers in space even work? A former NASA robotics chief explains
Samsung Galaxy Z Fold 8 vs. Z Flip 8: How Samsung's two new foldables compare
Samsung Galaxy Z Fold 8 Ultra vs. Motorola Razr Ultra: How Samsung fares against its foldable rival
Samsung's new Ultra foldable is impressive, but I'd pay close attention to this model
The Hacker News
Public Exploit Released for Patched vBulletin Pre-Auth Code Execution Flaw
⚡ Weekly Recap: Rogue AI Agents, Check Point Exploit, Slopsquatting, ClickFix Lures and More
n8n Sandbox Escape Lets Workflow Editors Run OS Commands as the n8n Process
Operation BlueDash Deploys Level RMM and ScreenConnect via Fake Teams Update
Cruciferra Crypter Uses BYOVD and Process Ghosting to Hide Windows Malware
TELESHIM Abuses Telegram for C2 in Attacks Against Middle East Governments
GitHub Adds 3-Day Dependabot Cooldown to Limit Poisoned Package Adoption
Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable
Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available
Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git
BleepingComputer
Coca-Cola confirms data theft in Fairlife ransomware attack
Ernst & Young data breach claimed by ShinyHunters extortion gang
Shadow AI agents are multiplying. Here's how to find and secure them.
GitHub, PyPI add time-based defenses against supply chain attacks
Steam forum ClickFix attacks infect gamers with XMRig cryptominers
Malicious sites use JavaScript to build malware in browser memory
ShinyHunters data leaks fuel $2,000 sextortion email scam
OpenAI confirms ChatGPT is down worldwide
OnTrac notifies customers of data breach after network hack
Hermes AI agent used to automate attack on Thai Finance Ministry
gbhackers
Security Risk Advisors Named a Finalist in CRN’s 2026 Best of the Channel Awards
NVIDIA, Microsoft, and CrowdStrike Launch Alliance for Open-Source AI Security
Anyone With a Browser Could Access 700,000 Vatican Prayer App Accounts
Claude Opus 5 Finds Software Vulnerabilities While Blocking Exploit Generation
Europol Launches Project COMPASS to Disrupt ‘The Com’ Cybercrime Network Targeting Minors
vBulletin Pre-Auth RCE Flaw Allows Remote PHP Code Execution
Over 70 Fake Windows App Sites Could Turn Trusted Downloads Into Malware
GitHub Adds Dependabot Cooldown to Stop Poisoned Dependencies
Crypto Criminals Use Social Media Profiling to Select Victims for Violent Wrench Attacks
Iranian Hackers Exploit Rockwell, Schneider and Siemens PLCs Across U.S. Critical Infrastructure
Cybersecurity Dive
What the Trojan horse gets right (and wrong) about AI security
In the Mythos era, security belongs at runtime
Zero-day flaw in Check Point SmartConsole is under exploitation
The most vulnerable AI products are also some of the most commonly exposed online
Russia-backed threat actor targets Western organizations in phishing campaign
CISA, FBI warn that Iran-linked hackers are expanding target set for water, energy
GAO report details scope of cybersecurity regulation overlap
Threat group claims credit for ransomware attack on Coca-Cola’s dairy unit
OpenAI models escaped containment, hacked major AI application library
4 ways to secure local developer IDEs and tools without sacrificing velocity
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
Microsoft Defender for Endpoint leaves some Linux boxes defenseless after update
Google goes it alone with a new cybercrime crew taxonomy
Pope's official prayer app commits cardinal sin, leaks 700K+ users' info
Europol flags 4,340 'horrific' URLs linked to The Com
Uncle Sam tells overseas cybercrooks their visas are canceled
OpenAI-Hugging Face attack doesn't mean agents are evil – unless you tell them to be
Researchers replace downloaded macOS apps with evil twins, Apple shrugs
Year-long Russian attacks infect users as soon as they look at an email
Millions of California-bought cars can be hijacked via Bluetooth
Oracle drops 1,449 security patches like it's the new normal
VentureBeat
Multi-turn attacks broke AI models 88% of the time — single-turn testing missed it, Cisco AI security lead warns at VB Transform 2026
An AI now judges every move Rubrik's agents make, its AI chief said at VB Transform 2026 — but no one's measured if the judge is right
The credential that let OpenAI's agents into Hugging Face exists in most enterprises right now
OpenAI's models broke containment and cyberattacked Hugging Face — what enterprises need to know
Evals are the new PRD, Expedia’s AI chief tells VB Transform 2026
Safety guardrails blocked Hugging Face's defenders, not the attacker, when an AI agent breached its systems
AI confidence just dropped 17 points in six months. That’s actually great news.
TechCrunch
Hugging Face CEO calls for ‘radical transparency’ after ‘unprecedented’ OpenAI hack
The hacker who humiliated spyware makers and was never caught
US accuses American of allegedly wiping his phone using a ‘duress’ password during border search
How AI guardrails are impeding the work of offensive cybersecurity researchers
AegisAI, founded by former Google security execs, lands $36M to stop AI-driven spear phishing
US government says Iran-linked hackers are disrupting American water and energy providers
How OpenAI’s human mistake led to the AI-powered hack on Hugging Face
If you pay a hacker’s ransom, chances are that they’ll come back for more
Glow emerges from stealth at $1.2B valuation to challenge endpoint security in the AI era
AI music generator Suno breach affects 55M users, per Have I Been Pwned
Network World Security
Network jobs watch: Hiring, skills and certification trends
Cisco, AMD bring enterprise-level security, visibility to Ryzen AI Halo systems
Cloudflare Internal DNS puts public and private DNS on one policy engine
Atos launches sovereign cloud service to power comeback
Microsoft explains why its West US Azure and cloud services failed
ISC2 seeks input from IT pros for AI security certification
Why enterprises should care about Nokia’s AI-RAN platform
IPv4 address exhaustion drives NetworkManager 1.58 release
Google has started selling TPUs, but still keeps most for itself
Linux XFS has a decade-old race condition allowing full root access
Help Net Security
Tech giants form alliance to put open AI in cyber defenders’ hands
Dynatrace Intelligence automates incident triage and remediation with AI agents
Zenity advances AI governance with Runtime Boundaries
JetStream Security enables on-demand shutdown of compromised AI agents
7AI expands platform with Federated SIEM and AI workflow builder
C1 adds shadow AI discovery to its identity governance platform
Google changes how it names cyber threat actors
Booz Allen expands Vellox Suite with AI-driven threat detection platform
PoC exploit released for critical AD CS domain-takeover flaw (CVE-2026-54121)
ChatGPT joins the most impersonated brands in phishing attacks
SC Magazine
Balancing lead generation, growth, and security in the age of AI search
When sensitive data moves everywhere, security attestations become a liability
Phishing the agent: Why identity controls are essential to secure and manage AIs
Exploring AI Network Protocols; Vulnerability Truths and Guarantees; and the News - O'Shea Bowens, Jeremiah Grossman - ESW #469
What Attack Surface Management Actually Controls
What Is Application Security? A Complete Guide
What Audit Readiness Actually Controls
How to Build Application Detection and Response
How to Secure AI Applications in Production
Man charged for using phone's 'duress' password to wipe data
© 2026 RiskDiscovery | Sponsored by: Deception Logic