[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
[Virtual Event] What Every Enterprise Should Know About Securing Cloud Assets in the Age of AI
[Virtual Event] Building a Secure AI Strategy for the Enterprise
Large Enterprises Targeted in Fake Merger & Acquisition Scams
What We Missed: Did ShinyHunters 'Breach' ReliaQuest?
AI 'Machine Speed' Cuts 2-Week Attack Down to 10 Hours
'Breeze Comet' Tears Into Brazilian & Global Financial Systems
AI's Vulnerability Surge May Be More Manageable Than First Feared
SonicWall SMA 1000 Zero-Days Enable Unauthenticated RCE
AI Gives Cybercriminals a Dangerous Time Advantage
Threat Gang 'Springs' Vishing Attacks on Microsoft Teams Users
Ars Technica
Confused about which VPN is right, US senator asks the NSA for guidance
VMware migration reduces Tottenham Hotspur's licensing fees by 85 percent
I rented a car, and within hours, my driver's license was for sale
BGP hijack infecting networks caused by a comedy of errors that’s not funny at all
Think twice before installing this device promising free movies
Inside Meta’s push to put robots to work in data centers
Authorities arrest 2 alleged members of prolific hacking group TeamPCP
Claude, Codex, and Hermes installed unowned code inside corporate networks
How OpenAI let a mob of LLM agents game a test and ransack Hugging Face
AI agents meant to replace Meta workers made “large-scale, disruptive actions”
CyberScoop
Attackers exploit zero-days in consistently besieged SonicWall product
The G7 tells industry to hurry up and prep for post-quantum encryption
Jail time for Maine child in 764 marks turning point in federal law enforcement
FCC proposes public scorecard to rate telecoms on anti-robocall efforts
Dogged Russia-based botnet dismantled after 23-year run
Pegasus, NoviSpy variant spyware found on devices of Serbian activists
Wyden seeks upgraded NSA security guidance on commercial VPN use
FBI raises alarm over deceptive phishing campaign targeting prominent people
Tina Peters, through attorney, backs off formal role in Shasta County elections
Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots
InfoSecurity Magazine
Pegasus Zero-Click Exploit Infects Serbian Student Activist's iPhone
Outsider Phishing Kit Survives Takedown With 700 New Pages
CREST Onboards First Cohort for AI-Enabled Pentesting Accreditation
US and Canadian Court Records Breached Following Thomson Reuters Incident
FBI Probes Possible Breach of 153 Million Driver’s Licenses
International Operation Disrupts Sality P2P Botnet
Russian Man Extradited Over Malware Campaign Targeting Freelancers
Gambling Goblin Turns Brazilian Government Sites Into SEO Weapons
Nutex Health Says Patient Data Stolen, Hackers Threaten Leak
Hackers Chain Two New SonicWall Zero-Day Vulnerabilities
SecurityWeek
Manchester Airports Group Data on 8.8 Million People Leaked After Ransom Refusal
Capsule Security Launches ‘AI Circuit Breaker’ to Stop Rogue Agents
HiddenLayer Raises $100 Million for AI Runtime Security
AI Agent Firewall Startup AIR Security Emerges From Stealth With $50 Million
153 Million Driver License Images Offered on Dark Web
Over 3 Million WordPress Sites Affected by Migration Plugin Vulnerability
Cisco Warns of Unpatched Secure Email Flaws, Patches Critical Switch Vulnerabilities
OpenLeash Adds a Human Check to Risky AI Agent Actions
UK Moves to Block High-Risk Tech Suppliers From Critical Infrastructure
Rockwell Automation Patches Over a Dozen Vulnerabilities Across Products
ZDNet
The Hacker News
ThreatsDay: CEO Phishing Kits, 5K Dropbox Account Hacks, OAuth Traps + 17 More Stories
Critical Cisco Nexus 9000 Flaw Lets Unauthenticated Remote Attackers Run Code as Root
BraZetsu Malware Turns Compromised Windows Hosts Into Criminal Marketplace Inventory
Thomson Reuters Court Software Breach May Have Exposed SSNs and Sealed Data
US Becomes Top Target in RMM Phishing Campaign Spanning 46 Countries
Attackers Turn Trusted Node.js Runtime Into Malware Delivery Tool in Targeted Attacks
Shai-Hulud's Reach Just Grew to 469 Credential Locations. Here's What That Means
Pegasus Zero-Click Spyware Exploit Infects Serbian Student Movement Member's iPhone
Researcher Releases FalconFlank PoC Showing Privilege Escalation in CrowdStrike Falcon
CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners
BleepingComputer
French hospital fined €500,000 after breach exposes data of 727,000
Coder's registry infrastructure compromised to push malicious modules
HPE patches critical ArubaOS-CX remote code execution flaw
Microsoft: KB5120998 mouse reset bug affects only non-English PCs
OpenAI confirms ChatGPT is down ahead of 'Astra' model launch
Anthropic confirms Claude is down, multiple models affected
Critical Elementor Pro flaw exploited to take over WordPress sites
Your Employee’s Password Appeared in an Infostealer Log. Now What?
Microsoft says KB5120998 Windows update resets desktop settings
Plex warns users to patch security vulnerabilities immediately
gbhackers
LLMjacking Attack Abuses Leaked AWS Credentials to Hijack Amazon Bedrock AI Models
OpenAI GPT-6 Astra Discovers Zero-Day Flaws and Builds Working Exploits in Cyber Tests
Fewer attacks, more force: Link11’s European Cyber Report finds new DDoS records for the first half of 2026
Fake Acquisition Scam Uses Forged NDAs to Demand €626,000 Corporate Payment.
Rogue ScreenConnect Clients Spread Worm-Like Malware Across Connected Windows Systems
QR Phishing Hits Record Levels as Attackers Hide Malicious Links Inside QR Codes
Microsoft to Automatically Enable Memory Integrity on Windows Devices to Block Kernel Attacks
New $7 SweepLED Gadget Detects Hidden Cameras With 94% Accuracy in 5 Seconds
Avast Antivirus Zero-Day PoC Lets Attackers Dump SAM Database and Gain SYSTEM Shell
HTML-Rendered QR Phishing Evades Image Extraction and OCR-Based Email Scanning
Cybersecurity Dive
SonicWall urges immediate patching of chained vulnerabilities
Government, industry partner to shut down long-running Sality botnet
CISA scraps 6 free cybersecurity assessments for critical infrastructure operators
Security policies fail to keep up with a hybrid cloud world
Frontier AI helps exploit flaws in tests using key industrial devices
PaperCut issues emergency patches as threat actors target chained vulnerabilities
State-linked actor targets Cisco routers for espionage
Frontier AI tipping the scales toward cyber adversaries
CISA identifies security hurdles that led to very different results in two red-team engagements
Hundreds of agents went rogue in lead up to Hugging Face breach
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
Cisco searched for IOS XR bugs and found so many it rolled them into an update release
OpenAI commits $1B in AI credits to frontline cyber defenders
Prolific Microsoft 0-day hunter drops CrowdStrike Falcon exploit PoC
Drowning in CVEs and thirsty for answers? Try CTEM
Cybercrooks trawl Fishbrain to net password hashes
UK's Online Safety Act has made 'absolutely no difference,' kids say
Terminated employee cost company hundreds of thousands of dollars because nobody revoked access
To keep the AI hacking genie bottled up, try one-way networks
Claude Mythos only model to complete full cyber kill chain, experts say
AI agents carried out every step of this ransomware attack – then left the victim an 80-page security audit
VentureBeat
China-linked hackers backdoored executives' laptops via USB, exploiting a fix companies had but weren't using
Google’s Gemini 3.8 Flash is built for agents, while its Cyber twin hunts vulnerabilities
Stolen Claude session cookies can reach corporate Gmail through grants no IT admin can revoke
Closing an Azure OpenAI assistant's retrieval gap didn't take a new identity platform. It took one filter and a narrower assistant.
Identity and permissions aren’t enough to govern AI agent behavior
AI agents need their own identity before they need a gateway
AI agents that pass authentication can still drift, expose data, or get memory-poisoned
TechCrunch
Abliteration.ai is making a business out of removing AI guardrails
It sure looks like hackers breached a major ID card verification service
HiddenLayer nabs $100M as enterprises rush to secure their AI deployments
Norway considers ban on camera-enabled wearable ‘pervert glasses’
X says attackers are targeting user accounts after the launch of X Money
AIR raises $50M to help companies vet the skills and add-ons AI agents use
Florida and Texas move to block Flock cameras over privacy concerns
Hackers claim millions of patient records stolen during data breach at healthcare giant McKesson
How AI could make it harder for governments to use hacking tools
More Americans oppose police license plate cameras than support them: survey
Network World Security
HPE’s record Q3: AI infrastructure, networking demand drives growth, but supply constraints tap the brakes
VMware Cloud Foundation 9.1 adds transit gateway flexibility, segmentation, and native EVPN VXLAN support
Dell’s $95B AI backlog shows the infrastructure crunch is far from over
SonicWall reports two major security holes under active exploit
Arista warns customers ahead of next week’s security disclosures
VMware by Broadcom: Product, service and support news
Palo Alto Networks buys Console to boost agentic security
Mainframe shops tap AI for system insights and recommendations
2026 network outage report and internet health check
China-linked hackers turn Cisco IOS XR routers into covert attack infrastructure
Help Net Security
September 2026 Patch Tuesday forecast: All we need is more time
A five-part inventory for your AI agent credentials
Scammers have figured out the best time to text you
OpenAI is putting $1 billion behind Daybreak for defenders working without enterprise budgets
Most of the bugs Claude Mythos found have never been checked by a human
New infosec products of the week: September 4, 2026
Thomson Reuters reveals breach that exposed U.S. and Canadian court records
Google’s Gemini 3.8 Flash takes on bigger AI models at a lower cost
Russian man indicted for spreading malware to 80,000 freelancers
Researchers built a $7 gadget for anyone paranoid about hidden cameras in hotel rooms
SC Magazine
Linux Threat Hunting - PSW #942
Phishing campaign targets widely used RMM platforms in 46 countries
The next insider threat doesn't have a pulse
Human attacker uses AI agents to breach enterprise network in under 10 hours
AI models show increasing capability for autonomous cyberattacks, report warns
Senator Wyden urges NSA to update VPN guidance amid foreign surveillance concerns
Capsule Security unveils 'AI circuit breaker' to control rogue AI agents
SQL injection vulnerability in WordPress plugin affects millions of sites
Google launches Gemini 3.8 Flash and Gemini 3.8 Flash Cyber
New 'Spring Ring' operation uses vishing via Microsoft Teams
© 2026 RiskDiscovery | Sponsored by: Deception Logic