[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
'Phantom Squatting': An Emerging AI-Driven Supply Chain Threat
Safe Events Start With Threat Intel and Digital Security
China-Linked Group Targets Southeast Asia Critical Systems
Fake Bug Report Hijacks AI Coding Agents at Scale
Attackers Seize Exposed AI Endpoints to Power Offensive Ops
Why Identity Security Is Your Cyber Career Entry Point
Phishers Gain Persistence at EU, Asia Hospitality Orgs
AI-Generated Workflows Are a Silent Security Disaster
NIST Enrichment Reductions Impact CVE Coverage, Accuracy
'Djinn' Stealer Targets Cloud, AI Credentials
Ars Technica
New attack provides one more reason why AI browsers are a bad idea
US offers $10 million for info on group behind Signal and WhatsApp hacking spree
Notion killing Skiff-influenced email app since most users use AI agents instead
One-two punch delivered in global operation disrupts cybercrime "assembly line"
White House drastically shortens deadline for dropping quantum-vulnerable crypto
Oracle’s 21,000 layoffs help drive its debt-fueled AI investments
Following user outcry, AMD reinstates memory encryption in consumer CPUs
Microsoft discovers new lightweight backdoor that steals cryptocurrency
Apple patches high-severity eavesdropping vulnerability in Beats Studio Buds
Before SpaceX IPO, investors in China secretly acquired stakes
CyberScoop
US lifting export control restrictions on Anthropic’s Mythos, Fable
This phishing kit looks more like BEC-as-a-service
Citrix patches a new NetScaler flaw with echoes of CitrixBleed
Trump budget boss Russell Vought open to re-staffing CISA
DHS to unveil replacement council for critical infrastructure cybersecurity
How ransomware syndicates weaponize corporate-style organization
Warner bill would create federally vetted list for secure, trustworthy AI agents
Supreme Court approves mail-in ballots that arrive after Election Day 
Supreme Court delivers ‘major win’ for tech privacy in Chatrie ruling
What the post-quantum executive order really demands of CISOs
InfoSecurity Magazine
Fileless Malware Abuses Google Blogspot to Deploy Infostealer in Memory
Brazilian Banking Trojan Ousaban Targets Spain and Portugal
Anthropic's Fable 5 and Mythos 5 Are Back with New Security Guardrails
Microsoft Accelerates Quantum-Safe Push with New Timeline
Insurance Giant Aflac Discloses Data Breach Impacting Millions
Nissan Discloses Employee Data Breach Linked to Oracle Zero-Day
Critical SimpleHelp Vulnerability Exploited For Malware Delivery
ClickFix Now Cybercriminals' Favorite Malware Delivery Technique
Hackers Leverage Blockchain to Hit Japan's Hotels Through Booking.com Phishing
UK Healthcare Sector Records Tenfold Increase in Cyber-Attacks
SecurityWeek
Adobe Patches Critical ColdFusion, Campaign Classic Vulnerabilities
Citrix Patches NetScaler Vulnerabilities, Including New ‘HTTP/2 Bomb’ Attack
Frontier AI: Six Questions Every Enterprise Should Ask Security Vendors
Apple Patches Dozens of Vulnerabilities Across iOS, macOS, and Safari
Dawnguard Raises $6.3 Million for Security Architecture Automation Platform
Massive Password Spray Campaign Targeting Azure CLI
Google Patches 382 Chrome Vulnerabilities
BlueHammer Vulnerability Exploited in Ransomware Attacks
Decades-Old Bash Tricks Expose AI Coding Agents to Supply Chain Attacks
Aflac Japan Data Breach Impacts 4.38 Million
ZDNet
I had Gemini and Claude write my email replies - but only one sounds like me
I've subscribed to Netflix and Peacock for years - but only one service is worth resubscribing to
I found the 20+ best 4th of July phone deals: Save big on Galaxy, Pixel, iPhone, and more
Want a private ChatGPT alternative? How Proton's Lumo 2.0 locks down your data, EU style
AI Model Release Tracker: Anthropic releases Sonnet 5, plus Fable 5 is back
This new Android security setting spots bad networks and fake cell towers - enable it ASAP
Connecting my TV to a router VPN was one of my smartest home network upgrades
The new enterprise AI expert every company needs - and why
How I stopped a massive WordPress spam attack with 4,700 lines of code in two days - thanks to Codex and Claude
Do you still need third-party antivirus on your Windows PC?
The Hacker News
Ousaban Banking Trojan Targets Iberian Bank Users with Fake PDF Lures
Adobe Patches 7 CVSS 10.0 Flaws in ColdFusion and Campaign Classic
Critical Cursor Flaws Could Let Prompt Injection Escape Sandbox and Run Commands
Progress Kemp LoadMaster Pre-Auth RCE Flaw Faces Active Exploitation Attempts
AI-Generated Browser Ransomware Abuses Chromium API on Windows and Android
2026 Cybersecurity Assessment: The Gap Between Awareness and Resilience
Microsoft Accelerates Post-Quantum Cryptography Shift to 2029
Phantom Squatting Uses AI-Hallucinated Domains for Phishing and Malware
Anthropic Restores Claude Fable 5 After U.S. Lifts Jailbreak-Linked Export Controls
Azure CLI Password Spray Hits at Least 78 Microsoft Accounts in 81M+ Attempts
BleepingComputer
Hackers target Microsoft 365 accounts with 81 million login attempts
Turning Indicators into Intelligence in OpenCTI with Criminal IP
Over 900 Oracle E-Business instances exposed to ongoing attacks
Microsoft fixes GIF functionality in the Windows Emoji Panel
Amazon fined $2.25M for withholding evidence from fraud victims
Adobe patches seven max severity ColdFusion, Campaign flaws
Anthropic to restore Claude Fable access on Wednesday
Anthropic rolls out Sonnet 5 with near-Opus 4.8 performance at a lower price
New BioShocking attack manipulates AI browser into data theft
Microsoft accelerates quantum-safe roadmap as risks grow
gbhackers
Turning Indicators into Intelligence in OpenCTI with Criminal IP
Mitigating Attacks Before They Impact Infrastructure: Link11 provides next generation network DDoS protection
Malicious Google Notes Extension Swaps Crypto Wallet Addresses During Transactions
MacSync Stealer Hijacks macOS via Fake Claude Code Google Ads – Full Attack Chain Exposed
ToddyCat Uses Shadow Token via Remote Debug to Compromise Gmail Accounts
FCC Bans Chinese-Produced Network Equipment Linked to Cyber and Espionage Risks
CISA Adds Actively Exploited SimpleHelp Vulnerability to KEV Catalog
The Gentlemen Ransomware Targets Large Corporations and Critical Infrastructure Worldwide
RedLine Infostealer Thread Reveals Hidden Maritime Phishing and BEC Infrastructure
OpenMatter Network Introduces Verifiable Trust Layer for Secure Collaboration and AI Agents
Cybersecurity Dive
Critical flaw in Oracle E-Business Suite is under immediate threat
Anthropic reactivates Fable, Mythos after securing government approval
Critical flaw in SimpleHelp exploited in attacks targeting sensitive credentials
DHS proposes new system for public-private infrastructure security collaboration
Insurance body confirms hackers posted Oracle PeopleSoft breach data
OpenAI voluntarily limits new AI models at government’s request
From mythos to reality: Why the 2026 state of pentesting report proves the need for programmatic defenses
Software, AI companies form alliance to tackle open-source security flaws
FCC requires emergency-alert distributors to secure their systems
AWS unveils agent security, data access tools
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
Infosec professionals sour on automated pentesting tools
Huntress CEO says threat hunter used 'poor judgment' in alerting ransomware crim about law enforcement probe
Microsoft builds a bouncer to keep bots out of Teams meetings
India’s central bank mandated use of .bank domains to enhance trust – but its registry leaked sensitive info
Security researchers tricked LLMs into giving them cocaine recipes by abusing role models for prompt injection
Four years into Ukraine invasion, Russia turns influence-ops back to US and Europe
Anonymous researcher drops 0-day 'exploitarium' repo
AI may be good at finding security vulnerabilities, but it can't beat human stupidity
Microsoft keeps Windows Server 2022 hotpatching alive into 2027
Nissan says Oracle PeopleSoft break-in may have spilled payroll records, SSNs
VentureBeat
Digital resilience compounds when AI and human expertise scale together
The attack that hijacked Claude Code came through Sentry. Datadog, PagerDuty, and Jira have the same exposure.
Prompt injection is exploiting enterprise AI's biggest design flaws by targeting agents, RAG pipelines and model routers
Autonomous security agents need complete data. Here's how to check if yours is ready.
Frontier AI is rewriting the economics of software supply chain security
Visa will offer an inside look at Project Glasswing and how the most powerful agentic models are changing enterprise security at VB Transform 2026
7,000 Langflow servers are under attack. LangGraph and LangChain have the same holes
TechCrunch
In major privacy win, Supreme Court rules geofence warrants are protected by privacy rights
Russian hackers were behind $2.5B hack of Jaguar Land Rover: Report
Polymarket says hackers stole users’ funds
Hacked Klue says criminals are deleting stolen customer data, but now other hackers are making threats
Cellebrite said it cut off Russia, but Russia used its tools anyway
New website names and shames companies that still don’t offer passkeys to users
Klue says hackers stole credential from 2022 that led to customer data breaches
Password manager maker LastPass says hackers stole customer support case data during Klue breach
Tata Electronics, a major tech supplier to Apple and Tesla, confirms data breach
A new unpatchable flaw in Apple chips opens the door to an iPhone jailbreak 
Network World Security
Netgear brings AI-driven network management to SMEs and MSPs
2026 network outage report and internet health check
U.S. Open powers up AI-ready network in challenging environment
Aggressive federal PQE timeline prompts warnings for enterprises
You can’t build sovereign infrastructure with Broadcom, says CISPE
Presidential order addresses quantum computing gaps
Researchers cast new doubt on Microsoft’s quantum computing advance
IBM unveils sub-1 nanometer chip with nearly 100 billion transistors
Qualcomm’s $3.9 billion purchase of Modular aims to change the data center dynamic
IBM, Red Hat, Palo Alto team to secure open-source software
Help Net Security
Netzilo adds runtime governance for AI agents across major platforms
Dawnguard launches platform to automate secure cloud architecture
Intruder offers Free security plan for lean IT and security teams
The ARToken phishing panel targets Microsoft 365 accounts
Claude Sonnet 5 includes safeguards against dangerous cyber use
What a financial planner taught me about cybersecurity
Nika: Open-source code analysis tool
This supercomputer encrypts your data even while it’s running it
AI-generated code risks reach security, legal, and compliance teams
Microsoft wants to stop unwanted bots from entering Teams meetings
SC Magazine
‘BioShocking’ jailbreak tricks AI browsers into disclosing private data
Performance Through People as Executives Struggle and Mentorship Matters - Greg Hoffman - BSW #454
AI Cocaine Recipes, Russian Hack, Scattered Spider, Cisco, Amazon Q – Aaran Leyland - SWN #594
Leaders call for workforce overhaul as AI reshapes critical infrastructure
Critical Oracle E-Business Suite bug actively exploited
AI is Writing Your Code… And It’s Insecure | The New AppSec Reality - WC #1
ICIT founder on AI, quantum and critical infrastructure
Lessons learned from The Mandalorian and Grogu
Anonymous researcher dumps zero-day exploits for multiple software products
New websites referencing Venezuela earthquake pose online risks
© 2026 RiskDiscovery | Sponsored by: Deception Logic