[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
Black Hat USA
Pluralsight Launches SecureReady to Help Organizations Build Job-Ready Cybersecurity Teams
Storm-1175 Deploys Medusa Ransomware at 'High Velocity'
Grafana Patches AI Bug That Could Have Leaked User Data
RSAC 2026: How AI Is Reshaping Cybersecurity Faster Than Ever
Human vs AI: Debates Shape RSAC 2026 Cybersecurity Trends
Lies, Damned Lies, and Cybersecurity Metrics
Focusing on the People in Cybersecurity at RSAC 2026 Conference
AI-Assisted Supply Chain Attack Targets GitHub
Axios Attack Shows Complex Social Engineering Is Industrialized
Ars Technica
Thousands of consumer routers hacked by Russia's military
OpenClaw gives users yet another reason to be freaked out about security
New Rowhammer attacks give complete control of machines running Nvidia GPUs
Quantum computers need vastly fewer resources than thought to break vital encryption
Google bumps up Q Day deadline to 2029, far sooner than previously thought
Self-propagating malware poisons open source software and wipes Iran-based machines
Widely used Trivy scanner compromised in ongoing supply-chain attack
Cloud service providers ask EU regulator to reinstate VMware partner program
Federal cyber experts called Microsoft's cloud a "pile of shit," approved it anyway
Researchers disclose vulnerabilities in IP KVMs from four manufacturers
CyberScoop
Feds quash widespread Russia-backed espionage network spanning 18,000 devices
Tech giants launch AI-powered ‘Project Glasswing’ to identify critical software vulnerabilities
Iranian hackers launching disruptive attacks at U.S. energy, water targets, feds warn
Cybercrime losses jumped 26% to $20.9 billion in 2025
‘GrafanaGhost’ bypasses Grafana’s AI defenses without leaving a trace
Fortinet customers confront actively exploited zero-day, with a full patch still pending
pcTattleTale stalkerware maker sentence includes fine, supervised release
Trump budget proposal would cut hundreds of millions more from CISA
Wyden warns Social Security chief: Trump’s voter database is ‘blatant voter suppression’
House Dems decry confirmed ICE usage of Paragon spyware
InfoSecurity Magazine
Anthropic Launches Project Glasswing to Use AI to Find and Fix Critical Software Vulnerabilities
US Thwarts DNS Hijacking Network Controlled by Russian APT28 Hackers
Claude Discovers Apache ActiveMQ Bug Hidden for 13 Years
Iran‑Backed Threat Actors Hit US CNI Providers via Internet‑Facing OT Assets
Russian APT28 Hackers Hijack Routers to Steal Credentials, UK Security Agency Warns
GPU Rowhammer Attack Enables Privilege Escalation and Full System Compromise
GrafanaGhost Exploit Bypasses AI Guardrails for Silent Data Exfiltration
Over $17bn Lost to Cyber Fraud in the Last Year, Warns FBI
Storm-1175 Exploits Flaws in High-Velocity Medusa Attacks
Fortinet Releases Emergency Patch After FortiClient EMS Bug Is Exploited
SecurityWeek
FBI: Cybercrime Losses Neared $21 Billion in 2025
Massachusetts Hospital Diverts Ambulances as Cyberattack Causes Disruption 
Evasive Masjesu DDoS Botnet Targets IoT Devices
Hackers Targeting Ninja Forms Vulnerability That Exposes WordPress Sites to Takeover
US Disrupts Russian Espionage Operation Involving Hacked Routers and DNS Hijacking
Iran-Linked Hackers Disrupt US Critical Infrastructure via PLC Attacks
Anthropic Unveils ‘Claude Mythos’ – A Cybersecurity Breakthrough That Could Also Supercharge Attacks
The New Rules of Engagement: Matching Agentic Attack Speed
Trent AI Emerges From Stealth With $13 Million in Funding
Critical Flowise Vulnerability in Attacker Crosshairs
ZDNet
The 101 best Amazon Prime Day 2023 deals: Live updates
I tested the Suunto Spark earbuds for a month: Why air conduction audio is a winner
I tested a portable wind turbine for 2 years: Why it's my backup, not a solar replacement
Sonos Play vs. Sonos Move 2: Why I'd go with the $200 cheaper Bluetooth speaker
How I use my smart thermostat to get ahead of temperature spikes (and save on bills)
I just found a hidden Google Photos tool that clears storage in seconds - how it works
I found a 'DISM' command that reclaims Windows 11 system storage - but you'll have to use it wisely
Why you shouldn't buy cheap DisplayPort cables - the 'Death Pin' can put your GPU at serious risk
The best Windows laptops of 2026: Expert tested and reviewed
I listened to Sony, Bose, and Apple's flagship headphones - and this pair's ahead of the pack
The Hacker News
Shrinking the IAM Attack Surface through Identity Visibility and Intelligence Platforms (IVIP)
Anthropic's Claude Mythos Finds Thousands of Zero-Day Flaws Across Major Systems
N. Korean Hackers Spread 1,700 Malicious Packages Across npm, PyPI, Go, Rust
Iran-Linked Hackers Disrupt U.S. Critical Infrastructure by Targeting Internet-Exposed PLCs
Russian State-Linked APT28 Exploits SOHO Routers in Global DNS Hijacking Campaign
[Webinar] How to Close Identity Gaps in 2026 Before AI Exploits Enterprise Risk
Docker CVE-2026-34040 Lets Attackers Bypass Authorization and Gain Host Access
Over 1,000 Exposed ComfyUI Instances Targeted in Cryptomining Botnet Campaign
The Hidden Cost of Recurring Credential Incidents
New GPUBreach Attack Enables Full CPU Privilege Escalation via GDDR6 Bit-Flips
BleepingComputer
Is a $30,000 GPU Good at Password Cracking?
Microsoft rolls out fix for broken Windows Start Menu search
Hackers exploit critical flaw in Ninja Forms WordPress plugin
FBI: Americans lost a record $21 billion to cybercrime last year
Snowflake customers hit in data theft attacks after SaaS integrator breach
US warns of Iranian hackers targeting critical infrastructure
Max severity Flowise RCE vulnerability now exploited in attacks
Authorities disrupt router DNS hijacks used to steal Microsoft 365 logins
Why Your Automated Pentesting Tool Just Hit a Wall
German authorities identify REvil and GandCrab ransomware bosses
gbhackers
Anthropic Launches Claude Mythos Preview Focused on Zero-Day Vulnerability Discovery
Hackers Target Adobe Reader Users With Sophisticated Zero-Day Exploit
EvilTokens Uses Stolen Microsoft 365 Tokens, AI to Supercharge BEC
IBM Security Verify Access Flaws Let Remote Attackers Access Sensitive Data
Masjesu Botnet Targets Routers in Commercial DDoS Attacks
GreyNoise Launches C2 Detection for Exploited Edge Devices
Top 10 Best Multi-Factor Authentication (MFA) Providers in 2026
Multiple OpenSSL Flaws Expose Sensitive Data in RSA KEM Handling
Docker Authorization Bypass Flaw Exposed Hosts to Potential Attackers
Remus Infostealer Debuts With Stealthy New Credential-Theft Tactics
Cybersecurity Dive
CISA’s vulnerability scans, field support on chopping block in Trump budget
React2Shell vulnerability helps hackers steal credentials, AI platform keys and other sensitive data
Olympic Games, FIFA World Cup offer huge platforms, rich cyberattack surface
Threat cluster launches extortion campaign using social engineering
Hims & Hers says limited data stolen in social engineering attack
Critical flaw in FortiClient EMS under exploitation
Trump’s FY2027 budget again targets CISA
Researchers warn of critical flaws in Progress ShareFile
Government agencies see cyber threats as major barrier to tech improvements
Critical flaw in F5 BIG-IP faces wide exploitation risk
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
Dutch healthcare software vendor goes dark after ransomware attack
NHS Scotland-linked domains caught serving pr0n and dodgy sports streams
Microsoft hints at bit bunkers for war zones
Anthropic: All your zero-days are belong to Mythos
Iran cyber actors disrupting US water, energy facilities, FBI warns
Hundreds of orgs compromised daily in Microsoft device code phishing attacks
US cybercrime losses pass $20B for first time as AI boosts online fraud
Russia's Fancy Bear still attacking routers to boost fake sites, NCSC warns
Yahoo! Japan’s owner consolidating 164 OpenStack clusters into one
AI agents found vulns in this popular Linux and Unix print server
VentureBeat
AI agents that automatically prevent, detect and fix software issues are here as NeuBird AI launches Falcon, FalconClaw
Closing the data security maturity gap: Embedding protection into enterprise workflows
OCSF explained: The shared data language security teams have been missing
In the wake of Claude Code's source code leak, 5 actions enterprise security leaders should take now
Hackers slipped a trojan into the code library behind most of the internet. Your team is probably affected
CrowdStrike, Cisco and Palo Alto Networks all shipped agentic SOC tools at RSAC 2026 — the agent behavioral baseline gap survived all three
OpenClaw has 500,000 instances and no enterprise kill switch
TechCrunch
Final 3 days to save up to $500 on your TechCrunch Disrupt 2026 pass
Iranian hackers are targeting American critical infrastructure, US agencies warn
Anthropic debuts preview of powerful new AI model Mythos in new cybersecurity initiative
Russian government hackers broke into thousands of home routers to steal passwords
Trump administration plans to cut cybersecurity agency’s budget by $700 million
Watch this video of how a job interviewer exposes a North Korean fake IT worker
North Korea’s hijack of one of the web’s most used open source projects was likely weeks in the making
Ticket savings of up to $500 this week for TechCrunch Disrupt 2026
Convicted spyware maker Bryan Fleming avoids jail at sentencing
After fighting malware for decades, this cybersecurity veteran is now hacking drones
Network World Security
Intel bets on Terafab to help it reassert itself in the AI chip race
New v2 UALink specification aims to catch up to NVLink
Cisco joins Anthropic’s multivendor effort to secure AI software
Cisco: Latest news and insights
2026 network outage report and internet health check
Nvidia: Latest news and insights
Nvidia’s SchedMD acquisition puts open-source AI scheduling under scrutiny
Cisco: AI simplifies wireless operations but also taxes legacy Wi-Fi networks
Cloud-first vs. sovereign-first: Navigating the trade-off
Hyperscaler backlogs show growing demand for AI infrastructure
Help Net Security
Social engineering attacks on open source developers are escalating
Iranian cyber activity hits US energy, water, and government networks
Chaos malware expands from routers to Linux cloud servers
Flatpak 1.16.4 fixes sandbox escape and three other security flaws
Secureframe expands Comply with User Access Reviews for automated governance
What managing partners should ask AI vendors before signing any contract
6G network design puts AI at the center of spectrum, routing, and fault management
OpenSSL 3.6.2 lands with eight CVE fixes
Cybercriminals move deeper into networks, hiding in edge infrastructure
Anthropic’s new AI model finds and exploits zero-days across every major OS and browser
SC Magazine
Why secrets detection belongs everywhere in your security workflow
Docker fixes AuthZ bypass bug that created containers with excessive privileges
Zero Trust Readiness and Two RSAC 2026 Interviews from Fenix24 and Absolute Security - John Bruggeman, John Anthony Smith, Christy Wyatt - BSW #442
Ransomware reimagined: Why containment alone is no longer enough
Cloudflare launches AI rebuild of WordPress CMS
Voxbeam fined $4.5M by FCC over robocall case
Active exploitation of max severity Flowise bug threatens broad compromise
Immediate remediation of Fortinet FortiClient EMS bug ordered by CISA
New CUPS vulnerabilities threaten RCE, network breaches
AI agent compromise via illicit web content detailed
© 2026 RiskDiscovery | Sponsored by: Deception Logic