[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
Shadowy AI Relay Disables OpenAI Codex, Claude Code Sandboxes
Cyber Vulnerabilities Besiege Italy, Absent Clear Cause
GhostAction Hacking Wave Fizzles, But Attackers Lurk on in GitHub
AI Takes Root in Hospital Corridors, Raises Security Stakes
Attacker Relentlessly Scans for Credentials by Impersonating AI Bots
Third Serengeti Sweep Tops 1,400 Arrests as Investigations Mature
3 Frameworks to Protect CISOs & Orgs Against AI Liability
External Teams Chats Anchor 15-Minute Malware Delivery
SBOMs Alone Can't Reveal the Scope of a Supply Chain Attack
Beware the Slasher: AI Could Kill Off Cybersecurity Pros' Skills
Ars Technica
Code-execution flaw in UEFI firmware affects most servers on planet Earth
Disgraced eMudhra drops out of TLS business after using cert private key of 4
333 Tor exit nodes hijacked to intercept SSH traffic and retrieve plaintext email
Enterprises keep buying software upgrades that IT thinks will make things worse
PHP warns it plans to release 2 emergency patches imminently
The Internet goes on high alert after discovery of 8 compromised TLS certs
Meta Muse exposes users' personal and business secrets when they share conversations
PSA: Patch your Plex media server before someone hacks it
ReactOS reaches major milestone with NTFS install support
OpenAI models hacked a crypto wallet and breached more websites
CyberScoop
Officials seize domain of top bulletproof hosting provider Virtualine
Leak site publishes data on more than 41,000 DHS employees obtained by hacktivists
Lawsuit against Ex-Overstock CEO tied to 2020 election film falls apart over question of ‘actual malice’
Researchers uncover Volt Typhoon’s covert, ephemeral network
Prosecutors charge Madagascar scammers in NFT-stealing scheme based on fake online dating profiles
Before you file that AI bug report, OpenAI has some advice
All the security risks Anthropic is worried about before its IPO 
Prolific Hive and Nefilim ransomware affiliate sentenced to 70 months in prison
National cyber director rolls out latest pilot in South Carolina, this time for rural hospitals
What happens when security tools go dark before the ransomware
InfoSecurity Magazine
NIK C2 Malware Can Use Victims’ OpenAI Keys for AI Queries
CREST Urges Whole-Ecosystem Approach to Financial Cyber Resilience
Online Scam Volumes Double to Overtake Phishing
ICO Reprimands Staffordshire Police After Domestic Abuse Breach
NIST Publishes Guidance to Meet Federal Post-Quantum Deadlines
MR ROBOT Malware-as-a-Service Targets Indian Bank Customers
Japan’s GMO Internet Urges Customers to Disconnect PCs
Attackers Hide Malware Behind Signed ChatGPT and Claude Binaries
AI Is Turning CISOs Into Business-Risk Translators, Says Nvidia’s Head of Cyber
Energy Giant Engie Notifies Customers of Supply Chain Breach
SecurityWeek
Cisco Open Sources Quarry to Catch AI Agent Attacks Hidden in Harmless Steps
Adobe, Veeam, Juniper Networks Patch Critical Vulnerabilities
BAE Says No Data Extracted in Incident Hitting Bankruptcy Courts
Over 41,000 DHS Employee Records Leaked Online
Hackers Steal 2.6 Million Records From Sony’s Japanese ISP So-net
Cisco SD-WAN Zero-Day Exploitation Tied to Volt Typhoon’s ‘Silent Train’ Network
Attackers Exploit Second Cisco Firewall VPN Zero-Day Since August
HHS Filing Puts iRhythm Data Breach Toll at 8.2 Million
Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day
Ukrainian Hive and Nefilim Ransomware Affiliate Gets 70 Months in US Prison
ZDNet
Mistral’s Le Chonk is now a top open model for coding, ranking alongside Codex GPT-6.1 Terra
The 4 biggest Amazon smart home announcements from today
Apple’s new touchscreen MacBook Pros may be late, but they have one big advantage
Your public Discord messages may soon appear in Google search results – how to opt out
Amazon’s new Alexa Photo Frame could have what I’ve been missing – here’s why
These Claude Enterprise features let you track AI ROI – what’s new
Amazon’s Echo Show 16 makes Apple’s 7-inch HomeView look puny – is it worth $100+ extra?
Opera will run AI locally in your browser now – why that’s a gamechanger and how to try it
Amazon’s new Echo Studio gives Alexa+ an AI camera to see inside your home
Samsung’s new clip-style Galaxy Buds On have a major advantage over Sony and Bose
The Hacker News
Google's Gemini 4 Carbon Leads Benchmarks for Finding, Exploiting, and Patching Vulnerabilities
Webinar: How to Build AI Threat Readiness Into Your Security Operations
Telegram Android Flaw Lets Attackers Run Code When Users Answer Voice Calls
The Rise of the Threat Operator: How AI Will Redefine Security Operations and Careers
26,400 Valid Cloud and AI Credentials Found Exposed in Public Gitee Repositories
Cisco Patches Actively Exploited ASA and FTD VPN Flaw That Can Crash Firewalls
GitHub Launches npm Firewall to Block Malicious Packages Before Installation
Attacker Tried to Exploit Alpine Linux’s GitLab via CVSS 10.0 Flaw Its Ruby Left Open
Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption Keys
China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility
BleepingComputer
Microsoft fixes Remote Desktop failures caused by recent Windows updates
3 Ways AI Agents Already Operate in Your Browser
CISA warns of Fragnesia Linux flaw chained in PHP2Shell attacks
Windows 11 KB5127936 update released with 41 changes and fixes
New Cisco firewall zero-day exploited to crash SSL VPN devices
Police seize Virtualine bulletproof service tied to ransowmare, cybercrime
Discord to let search engines index public server messages
Sony ISP subsidiary data breach exposes 2.5 million customer records
Volt Typhoon hides zero-day attacks using 'Silent Train' framework
Microsoft urges Entra ID admins to migrate users to passkeys
gbhackers
AppViewX Expands Quantum Trust Hub with Cryptographic Discovery, Posture Management, and Remediation
Cisco Talos Uncovers KeyDrift Malware Targeting SD-WAN Controllers to Steal Network Encryption Keys
Chinese Hackers Exploit VMware ESXi Zero-Day to Target Law Firms in Cyber Espionage Attacks
NIST Releases New Guidelines to Protect Encryption Against Future Quantum Computer Attacks
GitHub Launches Copilot Fusion to Automatically Select and Combine AI Models for Coding
319 Suspicious Chrome Extensions Hijack Default Search Settings Without Sensitive Permissions
Microsoft to Disable SMS and Voice Authentication in Entra ID Starting February 2027
Microsoft Edge Security Flaws Allow Attackers to Execute Code Without Memory Corruption
Volt Typhoon Hackers Exploit Multiple Zero-Days to Breach U.S. Critical Infrastructure Networks
Alleged Wagyu Leak Contains 4,580 Completed Crypto Swaps Linking Monero Wallets to IP Addresses
Cybersecurity Dive
Insurance industry fears potential impacts stemming from PHP2Shell
Hackers seize on vulnerable IoT devices to spy, pivot and route traffic
CISA, security researchers confirm successful exploitation of PHP flaws
US launches program to deliver free cybersecurity help to rural hospitals
CISA promises proactive defense in new strategic plan
PwC confirms learning records breached in attack on vendor site
Security anchors a modern hybrid sovereign architecture
PHP exploitation moves at slower-than-expected pace, but millions remain at risk
Large businesses’ cybersecurity insurance claims are now less frequent but more expensive
China-nexus actor linked to attack on ConnectWise Cloud Backup
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
Belgium's tax agency confirms cyberattack, pulls services offline
Shortlist of age checks for the UK's under-16 social media ban is out, 'some' adults will need verifying
Attackers turn GitHub issues into supply chain campaign against 61 public repos in less than an hour
Admin dropped the F-bomb in a password to show hackers who was really 1337
Oracle celebrates end of Cybersecurity Awareness Month with quadruple trouble
Serial ransomware crook gets 70 months behind bars for Nefilim, Hive roles
Cisco open sources tool for detecting AI agents on hacking sprees
123 Reg discloses 'AI cyberattack' on customer data, suspects China nexus
AI 'hacker' finds 4 severe bugs in popular industrial control software in under 4 hours
Day 2 of canceled classes at University of New Mexico after Health Sciences Center cyberattack
VentureBeat
Agents are rewriting the book on security. Can your data layer keep up?
AI agent access is moving faster than identity controls can govern
AI agents are about to put least privilege to the test
DeepSeek-V4.1-Flash-1017 arrives with improved benchmarks just as the U.S. government bans it from agencies — what enterprises should do
AI cloud security needs to prove control before agents reach production
Anyone can build apps with AI. But who owns them?
17 of 40 teams that say they enforce AI agent permissions still share the credentials behind them
TechCrunch
Bluesky blocks links to leaked DHS employee data as government seeks takedowns
Upwind raises $400M after walking away from Datadog acquisition offer
Hacker stole personnel data about thousands of Homeland Security employees, including CBP and ICE agents
Wiz’s CTO on PHP2Shell and the coming ‘vulnpocalypse’
The ‘Vulnpocalypse’ is coming for the internet’s aging code, says Wiz’s CTO 
South Korea’s financial industry hit by fresh wave of cyberattacks
Bank of America kindly asks that you don’t share your banking password with your AI assistant
US government says hackers are now exploiting critical PHP web bugs
Japan internet giant GMO says hackers posted stolen customer data
Will AI expose the rickety infrastructure of the internet?
Network World Security
Oracle adds Google TPUs to OCI to expand enterprise AI compute options
Cisco’s partner shift: What customers should expect from their Cisco partner in the AI era
IBM connects quantum chips with ‘quantum channels’ at 99% accuracy
2026 network outage report and internet health check
IBM aims to bring AI agent sprawl under enterprise control
HPE extends AI-driven networking to SD-WAN and SASE
FluidCloud replaces VDDK with its own disk copy engine for VMware exits
Cisco taps AI, partners to modernize IT operations and fortify network security
Key security concepts NetOps must understand to proactively support SecOps
Is it time to retire VPNs?
Help Net Security
Yoba malware hides in fake desktop versions of ChatGPT and Claude
Researchers broke the browsers built into VS Code, Cursor, Copilot, Codex and Claude Desktop
Volt Typhoon targeted enterprise control planes via ever-changing “Silent Train” relay network
Exploitation attempts against recently patched Oracle EBS flaw have begun (CVE-2026-101767)
Google says Gemini 4 Carbon beats its predecessors at finding and fixing security flaws
Ubuntu Core Desktop returns as Canonical’s plan for an immutable default desktop
Hacktivists leak 41,000 DHS staff records, revealing undercover ICE agents
Qualys CISO on what security teams can do as exploit campaigns grow
IT bosses are confident they’ve found the certificates they don’t know about
Shame and sleepless nights haunt scam victims long after the money is gone
SC Magazine
Building an assumption register without duplicating the control inventory
Google debuts Gemini 4 Carbon for advanced programming and security
Fortinet and Tenable shares fall despite strong third-quarter earnings
Expanding attack surfaces in the age of agentic AI
F5 and Oracle announce plans to integrate security tools on Oracle Cloud Infrastructure
Florida judge rules in favor of former Overstock CEO in defamation lawsuit
How AI forces data security back to the endpoint
After the breach: Uncovering the full scope of the attack
Federal Election Commission systems taken offline following cyberattack
Upwind Security raises $400 million to scale cloud and AI security platform
© 2026 RiskDiscovery | Sponsored by: Deception Logic