[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
[Virtual Event] What Every Enterprise Should Know About Securing Cloud Assets in the Age of AI
Cyber Op Targets South Korean Media & Automotive Sectors
Microsoft Issues Emergency Fixes After Massive Patch Tuesday
Black Hat USA 2026 | The 'Breaking' News: The OpenAI–Hugging Face Incident
VectraRAT Can Hack Windows Enterprises for $250 per Month
'Sandworm' Chains Cisco Vulnerabilities to Deploy Cyclops Blink
Maximum Severity GitLab Flaw Puts Supply Chains at Risk
Anthropic CEO: Time to Shift From Improving to Controlling AI
Threat Actor Generates 1M Personalized Fraud Emails in 3 Days
CISA Calls for More Guidance, Less Spin, as Cyber Outages Escalate
Ars Technica
AI bots "Timmy," "Ren," and "Jackie" are flooding social media with slop
ClickFix attacks infecting PCs and Macs are going viral
Four groups caught using the same Chrome and Windows exploit kit
Why this month's Microsoft patch release is a doozy
OpenAI agents discussed ways to escape their sandbox on public wiki
“Trust, not features, is the real deficit”: VMware tries to appease SMBs
Once popular for attacking AI, ASCII smuggling is embraced by spammers
Confused about which VPN is right, US senator asks the NSA for guidance
VMware migration reduces Tottenham Hotspur's licensing fees by 85 percent
I rented a car, and within hours, my driver's license was for sale
CyberScoop
Coast Guard, FBI board US-bound foreign ships in order to probe for cyberattacks
Treasury’s Scott Bessent says no liability exemptions for AI labs
What’s next for CISA’s CDM program that gives cybersecurity tools to federal agencies
Cisco warns customers of actively exploited zero-day in email gateways
Supreme Court denies Trump request to allow USPS mail ballot changes
Five alleged leaders of Black Axe’s operations in South Africa extradited to US
Researchers say OpenAI agents were behind May hacking campaign targeting RubyGems
Cyberattack causes a flight delay? Airlines won’t owe you a hotel or meal
GitLab’s critical flaw is already drawing internet-wide probes
Conti ransomware crew member sentenced to four years in prison
InfoSecurity Magazine
PHP Webshell Campaign Targets WordPress Through Critical WooCommerce Plugin Bug
CISA and NIST Issue Guidance to Protect Cloud Identity Tokens
Cyber-Attacks Cost Organizations $52,000 on Average
Zero-Day Flaw in TP-Link Cameras Enables Eavesdropping
Major Cyber Vendors Turn to New UK Testing Program as MITRE Evaluations Face Changes
NCSC and Allies Warn of Iranian Spyware Campaign
Most Fraudulent Hires Receive Credentials Before Detection
Most Firms Unable to Recover Quickly from Ransomware
Black Axe Members Extradited to US Over Internet Fraud Claims
AI the Top Priority for New Spend as Cyber Budgets Flatline
SecurityWeek
Virtual Event Today: Attack Surface Management Summit
EU Chief Warns of AI-Powered Hacking, Moves to Rein In Social Media
AIUC Raises $40 Million to Certify Enterprise AI Agents
Pixel Modem Zero-Day Exploited in Targeted Attacks
US, UK, Dutch Agencies Expose Iranian ‘Chosen Brick’ Surveillance Malware
Unauthenticated RCE Flaws Could Expose 200,000+ WordPress Sites to Takeover
Hackuity Raises $19 Million for AI-Powered Vulnerability Management
280,000 Impacted by Premier Medical Group Data Breach
Chrome, Firefox Updates Patch 115 Vulnerabilities
Acronis Patches Exploited Vulnerability in cPanel Backup Plugin
ZDNet
I’ve used both iPhone 18 Pro models – here’s how my buying advice is changing in 2026
Windows 11 out-of-band update fixes audio glitch and other bugs – grab it now
iOS 27 is finally here, with the new Siri AI beta – and 120 security patches
The latest Windows 11 update may mess with your device’s audio – here’s the workaround
Switzerland takes a Swiss Army knife to Microsoft 365
Your older iPhone just got free satellite service for another year – here’s why
This CIO doesn’t ‘hire engineers to write code’: 3 AI fundamentals he prioritizes instead
I’ve been an Android user all my life, but I’m jealous of 3 things Apple just announced
Eager to try iOS 27’s cool AI features and upgraded Siri? Get ready for usage limits
Your friend with ‘nothing to hide’ is more likely to spy on you, study shows
The Hacker News
Attacker Hijacks AI Coding Assistant Session, Spreads Shai-Hulud Across About 100 Repositories
Parallels Desktop Flaw Lets Non-Admin Mac Users Gain Root, but Intel Macs Can't Install Fix
N0va Phishkit Targets US and EU Businesses: A New Challenge for Identity Security
Google Patches Pixel Modem Flaw Amid Signs of Limited Targeted Exploitation
Threat Intelligence Alone Won't Close the Exploitation Gap
Acronis cPanel Backup Plugin Vulnerability Exploited in Targeted Attacks
Attackers Exploit WooCommerce Wholesale Lead Capture Flaw to Plant PHP Web Shells
Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens
KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens
Iranian Hackers Use Telegram-Controlled Malware to Spy on Dissidents and Journalists
BleepingComputer
The true cost of a ransomware attack, with and without BCDR
Microsoft says Copilot buttons still missing in classic Outlook
Webinar: What happens in the first hours of a Google Workspace breach
Critical ScreenConnect flaw now actively exploited in attacks
Windows Server 2022 reaches end of mainstream support next month
Google fixes actively exploited Android zero-day on Pixel devices
Acronis warns of actively exploited flaw in its cPanel backup plugin
Malcious Admin Menu Editor Pro plugin backdoors 1,500 WordPress sites
CenterPoint Energy confirms customer data stolen in cyberattack
BambooToken malware controls Windows and Linux systems via MQTT
gbhackers
GhostCode Abuses Microsoft Entra Device Enrollment to Maintain Access After Token Revocation
VectraRAT Malware-as-a-Service Lets Hackers Bypass UAC and Hijack Windows Systems
TP-Link Tapo Camera Flaw Lets Attackers Gain Admin Access Without Password
Chinese-Speaking Hackers Use Noodle RAT Backdoor to Spy on Windows and Linux Systems
Axoflow Launches AxoDetect, Bringing Detection Into the Pipeline and Making the SIEM Optional
Smishing Triad Hackers Use JWR Phishing Kit to Steal Cards, OTPs and Bank Credentials
CenterPoint Energy Confirms Data Breach Exposing Customers’ Personal Information
Parallels Desktop Flaw Lets Unprivileged Mac Users Gain Root Access
Acronis Backup Plugin Vulnerability Exploited in the Wild to Gain Elevated Linux Privileges
12 Best Kubernetes Security Tools Compared (2026): Features & Pricing
Cybersecurity Dive
AI is now leading driver of new cybersecurity spending
Companies’ AI strategies don’t account for their agentic tools
Security teams increasingly outflanked by AI agents
Malicious actors already using critical GitLab flaw, CISA and others warn
Security teams are adopting AI faster than they trust it
Zero trust is the future. But enterprises still need their VPNs.
State authorities warn they lack resources to address cyber threat to critical sectors
Accountability, oversight and AI: Inside Microsoft’s security transformation
Threat groups enhance cyberattack capabilities with AI
CISA is on the verge of filling hundreds of critical vacancies
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
Spain gets its first taste of AI-aided cyber attack
Ministry of Justice apologizes after court staff accessed Southport victims' files
Mythos has made 2026 patching hell. It might make 2027 a breeze
The vulnpocalypse rains iBugs down on Apple with record-setting number of patches
Low-quality casino sites conceal highly dangerous threat actors
Iranian spies hit Windows machines with Chosen Brick data-stealing malware
Cisco email security boxes can be rooted by... an email
Who's governing your AI? A trust framework for enterprise agents and models
Swiss court sentences 52-year-old Ukrainian ransomware dev to nearly 13 years in the cooler
The latest AI doomsayer is China’s intelligence boss
VentureBeat
Nobody can compare the security-AI numbers CrowdStrike, Google, Palo Alto and Microsoft published, including the CISOs who are stuck with the results
AI is changing the economics of software supply chain attacks
AI governance is moving to runtime — and regulated industries are getting there first
Why AI shouldn't be the one repairing your data pipelines
Anthropic CEO says AI swarm could ‘take over the entire internet’ in 6-12 months, commits to AI slowdown plan
Security vendors use AI to rank Patch Tuesday CVEs — and rarely tell customers
Anthropic's safety monitor missed a live cyberattack because Mythos 5's reasoning said everything was fine
TechCrunch
Google says some Pixel phone owners were hacked in zero-day attacks
US military says it has launched weapons into space
Leaks, data breaches, and ransom notes: The worst hacks of 2026 so far
New Italian unicorn Exein rides the physical AI wave
ClickFix attacks are tricking Mac and Windows users into hacking themselves
Revolut confirms customer data breach through fake government requests
Scammers target hundreds of thousands of crypto owners after Trezor confirms data breach of email provider
ID verification giant IDScan confirms data breach with more than 150 million driver’s licenses stolen
‘Gambling with our lives’: Anthropic researcher quits, warns against self-improving AI 
Group of bipartisan lawmakers ask US government to ban several hack-for-hire firms
Network World Security
Axelera Europa targets enterprise data centers with far more efficient AI
European cloud watchdog slams Broadcom over VMware licensing practices, issues warnings about SAP
Critical Cisco Secure Email Gateway zero-day gives attackers root access
Cisco brings Splunk AI on premises, expands agent observability, monitors token costs
2026 network outage report and internet health check
Highlights from Splunk .conf26 and what the news means to network engineers
Cornelis lands $205M to make AI networks compute, not just connect
VMware by Broadcom: Product, service and support news
Arm expands AI chip push with Neoverse CSS N4 and AGI CPU
AI inferencing is headed for the network edge
Help Net Security
Parallels Desktop flaw hands any local user root on a Mac (CVE-2026-90894)
Self-improving AI should slow down, von der Leyen tells EU lawmakers
Cohesity adds recovery capabilities for AI agents and the data they manage
Rubrik MCP gives AI agents controlled access to security intelligence
CenterPoint Energy confirms data breach following claims on hacking forum
Nozomi Compass helps industrial teams manage OT assets and vulnerabilities
Citrix adds AI-powered browser activity analysis to SecurAccess
One runaway AI agent racked up a $50,000 cloud bill
Acronis backup plugin flaw exploited in targeted attacks (CVE-2026-87886)
Iranian hackers use CHOSEN BRICK data-stealing malware to spy on dissidents and journalists
SC Magazine
In the AI era, the pre-patch window needs its own security playbook
Preparing for AI-enabled incidents: Helping business leaders understand enterprise risk
HBO Max Reddit account compromised, used in ‘PasteSwitch’ ClickFix attacks
Followership, CyberSecurity Leadership, and Judgement as a Defining Skill - Kenyada Meadows - BSW #465
RoboGators, HBOMAX, Microsoft, DAS, Horsebot 3000, Aaran Leyland does AI, and More - SWN #616
Patched VMware vCenter bug targeted in ransomware campaigns
Oktane Video Player 2026
Mass scanning campaign targets Vite development servers for cloud credentials
Nintendo patches critical Nintendo Switch vulnerability
OpenAI’s Astra restrictions are another warning shot for security teams
© 2026 RiskDiscovery | Sponsored by: Deception Logic