[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
Name That Toon Contest
Pakistan Spies on Afghan Finance Ministry With Xeno RAT
Attackers Use AI to Automate EDR Evasion Testing
Tropical Blend: Cyber & Politics Ramp Up Across Latin America
Cyber Insurance Rates Are Dropping, but Exclusions Widen
Coding Gaffe Exposes Microsoft 365 Accounts to Widespread Takeover
Malicious Notifications Could Trick Google Gemini Users
Global Stock Exchange Hit by Monthslong Email Campaign
Zoom CISO: AI as a Security Enabler, Not Role-Replacer
FBI-Flagged Phishing Kit Kali365 Expands Its Reach
Ars Technica
Can't make sense of Dashlane's vault theft notification? You're not alone.
Dozens of Red Hat packages backdoored through its official NPM channel
Botnet of more than 17 million devices dismantled
Fed up with vibe coders, dev sneaks data-nuking prompt injection into their code
Websites have a new way to spy on visitors: Analyzing their SSD activity
Millions of AI agents imperiled by critical vulnerability in open source package
US's big bet on quantum computing may not be entirely legal
Texas AG sues Meta over claims that WhatsApp doesn't provide end-to-end encryption
A hacker group is poisoning open source code at an unprecedented scale
US government takes $2 billion equity stake in nine quantum computing firms
CyberScoop
European authorities crack down on illegal streaming networks
DHS Secretary Markwayne Mullin pinpoints optimal CISA staffing levels
DOD wants to integrate cyber in all operations, and integrate security into AI
Trump administration releases scaled-back AI executive order
Anthropic expanding access to Project Glasswing
Attackers are exploiting Palo Alto Networks defect that initially flew under the radar
Tina Peters, convicted in election-security breach, emerges defiant and vows legal fight
USPS moving forward with mail-in ballot changes as courts weigh Trump’s election order 
Election threats are focused on campaign systems, not voting machines
Tennessee man linked to 764 accused of series of crimes against children dating back to 2022
InfoSecurity Magazine
Infosecurity Europe: How Proton Fights Against Cybercriminals Using Its Services
Infosecurity Europe: How Businesses Can Prepare for a Cybersecurity Crisis with Effective Plans
Infosecurity Europe: Ukraine’s Experience Highlights the Need for Preparation and Resilience in Cybersecurity
Infosecurity Europe: Raise Security Concerns with Procurement Now, Because Quantum Can’t Wait
Infosecurity Europe: Vulnerability Management Innovator Konvu Wins Cyber Startup Award
Trump Signs Order Inviting Voluntary Review of Frontier AI Models
Infosecurity Europe: How to Get Boards to Prioritize Cyber Risk Quantification
Anthropic Expands Mythos Access to 150 More Organizations
Infosecurity Europe: Patch Responsibility Remains Up for Grabs as AI Unearths Decades of Flaws
Infosecurity Europe: Execs Must Treat Cyber Threats as Statecraft, ISACA Expert Say
SecurityWeek
Mirasvit Vulnerability Exploited to Execute Code on Magento Servers
Chinese Cybercrime Group in Spotlight for Record Campaign Pace
Over 1.4 Million Accounts Disrupted in Cybercrime Crackdown
Cisco Warns of Available PoC for Critical Unified CM Vulnerability
VS Code Vulnerability Allows One-Click GitHub Token Theft
Coralogix Raises $200M at $1.6B Valuation to Scale AI Observability Platform
Kirki, Burst Statistics WordPress Plugin Flaws in Attackers’ Crosshairs
Security of 100 AI Agents Tested and Ranked – What You Need to Know
Hackers Target Global Stock Exchange in Espionage Operation
IMA Diligence Services Data Breach Impacts 525,000 People
ZDNet
I measured Samsung's Micro RGB TV color accuracy in a lab - and it's perceptually perfect
This Samsung 2TB SSD is nearly 40% off right now - and I highly recommend it
I found the best early Prime Day Apple deals: MacBooks, iPads, AirPods, and more
5 Android Auto mistakes you're probably making - and how to fix them
The best early Prime Day Samsung deals: Save big on Galaxy phones, tablets, and more
I turned my Android Auto setup into a gaming hub with 4 free apps - and don't regret it
Using Rhino Linux's new Lomiri snapshot took me back to the glory days of Unity
Your MacOS Spotlight tool is seriously underrated - 6 ways I use it beyond basic searches
How I keep my phone cool while running Android Auto - 8 simple yet effective tips
I used this $170 smartwatch as my virtual training coach to help me avoid injuries
The Hacker News
China-Linked TA4922 Expands Phishing Attacks to UK, Germany, Italy, and South Africa
FlutterShell Backdoor Spreads to macOS via Malicious Google and YouTube Ads
Fake Sites Mimicking Open-Source Tools Rank High on Google to Deliver Malware via TDS
Hackers Spied on a Stock Exchange Executive's Outlook Mailbox for Five Months
DoJ Disrupts Southeast Asia Crypto Fraud Networks, Freezes $3.8 Million in Assets
WhatsApp, Slack Notifications Could Hijack Google Gemini on Android
One-Click GitHub Dev Attack Lets Attackers Steal Full GitHub OAuth Tokens
Autonomous AI Tool Finds 2-Year-Old RCE Flaw in Redis (CVE-2026-23479)
CISA Adds Exploited Magento RCE Flaw CVE-2026-45247 to KEV Catalog
Google DoubleClick Abused in New Malspam Campaign to Deliver DesckVB RAT
BleepingComputer
Police dismantles fake ID marketplace used by migrant smugglers
Cisco warns of critical Unified CM flaw with PoC exploit code
Chinese hackers use new Atlas RAT malware in European cyberattacks
U.S. sanctions Nobitex crypto exchange used by Iranian ransomware actors
CISA warns of cyberattacks targeting fuel tank monitoring systems
New 'HTTP/2 Bomb' DoS attack crashes web servers in under a minute
CISA warns of active attacks exploiting Android, Linux bugs
What 345 Days of Untested Exposure Looks Like at a Bank
Acer working to patch max severity zero-days in Wave 7 routers
Police dismantles 9 crime groups in illegal streaming crackdown
gbhackers
Malicious Ads Target macOS Users with FlutterShell Backdoor
Comodo Internet Security 0-Day Flaw Triggers Windows System Crashes
Fake Claude Code Installer Spreads Fileless .NET Infostealer
IronWorm npm Attack Steals Developer Secrets
Stock Exchange Executive’s Outlook Targeted in Credential Theft Attack
PoC Exploit Released for Cisco Unified Communications Manager Security Vulnerability
Proofpoint: TA4922 Deploys New RAT and Loader Arsenal
Phishing Attacks Pivot to Infostealer Malware Over Fake Login Pages
Malicious ChatGPT Download Website Tricks Users via Sponsored Search Listings
ClawHub, Cisco, and Vercel Skill Detection Tools Evaded by Malicious Uploads
Cybersecurity Dive
‘Don’t panic’: AI reality checks dominate major cybersecurity conference
CISA, FBI warn that hackers are targeting systems used to monitor industrial fluids
Trump signs EO seeking early government access to powerful AI models
Dozens of Red Hat npm packages targeted in supply chain attack
Anthropic shares Mythos with 150 more organizations, including critical infrastructure operators
Turning tension into collaboration: How CIOs and CISOs can lead together
Without strong governance, companies put credit ratings at risk in AI era
CISA adds critical Palo Alto Networks firewall flaw to KEV as company, researchers warn of exploitation
How Canva scaled to 260+M users while elevating security and productivity
Top 4 data security best practices for the AI-enabled enterprise
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
Five Eyes: Watch out for odd LinkedIn connection requests, China's back on the hunt for state secrets
Duo who sold car crash victims' data must repay £118k
Nobody needs Mythos or 0-days to build a chaos-causing computer worm – free open source models work just fine
All the passwords were stored in Active Directory description fields
Commvault says it's time to rethink resiliency as AI crooks leave victims in a 'dark, dead' state
Bend the beam like Beckham to defeat anti-jamming tech
Another bug hunter leaks Microsoft exploits in defiance of company’s handling of vulnerability disclosures
UK banks offered access to OpenAI’s GPT-5.5 amid exclusion from Anthropic’s Glasswing expansion
'Dumbass' criminal breaks the 'first rule of ransomware club'
Cisco sings Mythos' praises - but doesn't say how many bugs the model uncovered
VentureBeat
Microsoft launches MXC, an OS-level sandbox for AI agents, with OpenAI and Nvidia already on board
Zip’s new AI agents want to stop your finance team from uploading contracts into personal ChatGPT accounts
Anthropic’s browser agent got hijacked 31.5% of the time before safeguards engaged
AI doesn't break security. Complexity does
Claude Mythos exposed a hard truth: Your enterprise patching process is way too slow
DataGrail report finds your vendor may be sending data to AI models you never approved
The attack dominating financial services doesn't steal passwords. It resets MFA and steals the token.
TechCrunch
Ultrahuman says hackers accessed customers’ wellness data via internal tool
Instagram is alerting users who were targeted by hackers during AI chatbot attacks
The worst hacks and breaches of 2026 (so far)
Cyera eyes $12B valuation at 80x ARR multiple despite operating losses
Password manager Dashlane says hackers stole some customers’ password vaults
Anthropic scales Claude Mythos to critical infrastructure in 15+ countries
Hackers hijacked Instagram accounts by tricking Meta AI support chatbot into granting access
Grand Theft Auto V cheat service gets hacked, exposing thousands of gamers
Microsoft under fire for threatening security researcher with criminal investigation
Final 24 hours to save up to $410 on your TechCrunch Disrupt 2026 ticket
Network World Security
Cisco sees quantum networking as the future of networking
Enterprise Spotlight: Rethinking cloud strategy in the age of AI
What is Cisco Cloud Control and why should customers care?
Will Broadcom’s VMware strategy keep paying big dividends?
Netskope introduces AI Command Center to monitor and secure enterprise AI sprawl
Cisco Live: The network is back, and AI rewrote the rules
2026 network outage report and internet health check
Cisco brings agentic ops platform and security overhaul to Cisco Live
Attackers exploit Palo Alto GlobalProtect flaw days after disclosure
FTC broadens Microsoft probe to cloud, AI, and software bundling
Help Net Security
OAuth marketplace apps keep access after publishers vanish
The modern-day business can learn a lot about risk from this year’s mega events
Spotless compliance evidence can still hide a broken control
From critical to controlled: Cutting vulnerabilities in a live manufacturing environment
Attackers already know the secrets are on your developers’ machines. Do you?
Product showcase: Trend Micro Mobile Security detects scams in messages, QR codes, and websites
ETSI sets security requirements for AI data centers and cloud platforms
Microsoft responds to security challenges facing code, AI agents, and models
Simplify security management with CIS SecureSuite Platform
Autonomous AI-driven worm can reason its way through corporate networks
SC Magazine
Microsoft Edge retires master password feature, adopts passkeys and biometrics
Spanish hacker Alcasec sentenced to prison for stealing banking details
Google rolls out scam call detection for Android
WP Engine adds bot management to Global Edge Security
Russia FSB claims foreign intelligence used malware on officials' phones
Unpatched Windows search URI handler issue leaks NTLMv2 hashes
Acer addresses critical zero-day vulnerabilities in Wave 7 routers
Law enforcement arrests 29 in crackdown on illegal streaming operations
New HTTP/2 Bomb attack can take down web servers in seconds
Cisco Cloud Control AI defense suite aims to counter Mythos-level threats
© 2026 RiskDiscovery | Sponsored by: Deception Logic