[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
[Virtual Event] What Every Enterprise Should Know About Securing Cloud Assets in the Age of AI
[Virtual Event] Building a Secure AI Strategy for the Enterprise
Companies Have 6 Months to Prepare for Automated Attacks
AI Is Ending the Era of Hidden Vulnerabilities — Are Vendors Ready?
Insurers Search for Answers to Rein in Rogue AI
Large Enterprises Targeted in Fake Merger & Acquisition Scams
What We Missed: Did ShinyHunters 'Breach' ReliaQuest?
What the AI Warning Letter Completely Missed
AI 'Machine Speed' Cuts 2-Week Attack Down to 10 Hours
'Breeze Comet' Tears Into Brazilian & Global Financial Systems
Ars Technica
OpenAI agents discussed ways to escape their sandbox on public wiki
“Trust, not features, is the real deficit”: VMware tries to appease SMBs
Once popular for attacking AI, ASCII smuggling is embraced by spammers
Confused about which VPN is right, US senator asks the NSA for guidance
VMware migration reduces Tottenham Hotspur's licensing fees by 85 percent
I rented a car, and within hours, my driver's license was for sale
BGP hijack infecting networks caused by a comedy of errors that’s not funny at all
Think twice before installing this device promising free movies
Inside Meta’s push to put robots to work in data centers
Authorities arrest 2 alleged members of prolific hacking group TeamPCP
CyberScoop
In most cities, nobody owns the whole network
European parliament members call for slowdown of Serbia’s EU entry over spyware use
Why judgment is emerging as cybersecurity’s defining skill
Attackers exploit zero-days in consistently besieged SonicWall product
The G7 tells industry to hurry up and prep for post-quantum encryption
Jail time for Maine child in 764 marks turning point in federal law enforcement
FCC proposes public scorecard to rate telecoms on anti-robocall efforts
Dogged Russia-based botnet dismantled after 23-year run
Pegasus, NoviSpy variant spyware found on devices of Serbian activists
Wyden seeks upgraded NSA security guidance on commercial VPN use
InfoSecurity Magazine
Grindr Settles UK Data Privacy Claims for £26m
AI Coding Tools Now a Prime Target for Threat Actors, Google Warns
THost9 Android RAT Pairs Packed Loader With ADB Worm
BigBear 2 PhaaS Campaign Steals 5000+ Microsoft Credentials
Trezor Supply Chain Breach Now Impacts 81,000 Customers
NCSC Warns Shadow AI Creates New Security Risks
N-able Releases Hotfix for Critical Remote Code Execution Vulnerability
Rhysida Publishes Berlin Government Data After €2m Extortion Demand Refused
North Korea’s Lazarus Operates Through Six Distinct Cyber Clusters
Multiple Class Action Lawsuits Filed Against IDScan
SecurityWeek
MikroTik Patches Critical Flaws Chained to Hack Routers
Mathspace Data Breach Exposes Over 1 Million People
N-able Patches Critical Zero-Day in N-central
Nightmare Eclipse Drops CrowdStrike, Nvidia, Avast Zero-Day Exploits
North Korean Hackers Deploy New Linux Espionage Toolkit
OpenAI Agents Hijack Another Victim Website
Adobe Commerce Zero-Day Exploited to Backdoor Online Stores
Modified ScreenConnect Clients Used in Worm-Like Campaign
Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites
In Other News: Microsoft’s Cloud Patches, Hacked Dropbox Accounts, Guardio’s $1.1B Valuation
ZDNet
The Hacker News
WeChat Zero-Click Worm Took Over Accounts on iPhone and Android via Incoming Calls
What It Took to Reach 1 Billion Build Manifests
FreeIPA Flaw Chain Lets Anonymous Clients Create Reusable Administrator Credentials
Adobe Patches Magento Zero-Day Exploited to Deploy Rust Backdoor and PHP Web Shell
BengalSEO Poisons Bing Search Results to Deliver MayaBot and Tech Support Scams
Grindr to Pay £26 Million to Settle U.K. Claims Over HIV Status Data Sharing
PEEP Turns Chrome and Edge Into Post-Compromise Backdoors for Host Command Execution
Fake IT Calls Target Executives in Microsoft 365 Data Theft and Extortion Attacks
⚡ Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain Attack and More
Your Cloud Security Checklist Doesn't Work the Way You Think It Does
BleepingComputer
Webinar: The forgotten Google Workspace access that can lead to a breach
Hackers build AI frameworks for widescale credential theft
Microsoft: Windows Server 2025 changes causing app crashes
220 million traveler records exposed in Vietnam-linked APIS leak
Magento StyleSmuggler zero-day exploited to deploy Linux backdoor
BigBear Microsoft 365 phishing service bypassed MFA at 258 organizations
Mathspace discloses data breach affecting over 1 million people
Trezor data breach impact now reaches 81,000 customers
ChatGPT can now connect to your personal apps to mimic writing style
Hackers exploit new MikroTik RouterOS flaws to hijack routers
gbhackers
Jellyfin 12.0 Released With Security Fixes for Unauthorized File Access and XSS Flaws
Dell Secure Connect Gateway Critical Flaws Allow Unauthenticated Remote Code Execution and Admin Access
Claude Mythos Executes End-to-End Intrusion From Initial Access to Full Domain Compromise
WhatsApp Testing Guest Calls for People Without a WhatsApp Account
ASUS Control Center Critical Flaw Allows Unauthenticated Attackers to Gain Root Access
The 12 Best Antivirus (Endpoint Protection) Software for Business, Compared and Priced
SAP September 2026 Security Update Fixes 4 Critical Vulnerabilities and 15 Other Flaws
The 12 Best Managed Firewall Services, Compared and Priced
The 12 Best Network Security Policy Management Tools, Compared and Priced
The Best DNS Security Solutions, Compared and Priced (2026)
Cybersecurity Dive
Essential AI agent security questions
Nvidia’s $12.9B Hugging Face deal could benefit enterprises
OpenAI pledges $1B to provide resources, training for frontline cyber defenders
SonicWall urges immediate patching of chained vulnerabilities
Government, industry partner to shut down long-running Sality botnet
Government lacks ability to verify AI labs’ claims, experts say
CISA scraps 6 free cybersecurity assessments for critical infrastructure operators
Security policies fail to keep up with a hybrid cloud world
Frontier AI helps exploit flaws in tests using key industrial devices
PaperCut issues emergency patches as threat actors target chained vulnerabilities
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
Extortion crews have their eyes on high-value AI data, Google warns
Britain reboots its space strategy with £7.8B already on the launchpad
Nightwing CEO has a Labor Day message for staff – and apparently The Register
Hackers drain $320M in Bitcoin from Liquid Network, claim they're the good guys
Welsh environment regulator's FoI blunder exposes diversity data of 2,000 staff
UK food supply chain at risk from hostile attacks
Peers ask why UK cyber bill leaves execs off the personal liability hook
OpenAI's rebel agent swarm died young, but its chilling logs live on
ASCII smuggling isn't just an AI security risk
Rogue OpenAI agents used dead German web site to communicate in May, months before Hugging Face incident
VentureBeat
MCP's new spec turns a planted prompt into a stolen credential
China-linked hackers backdoored executives' laptops via USB, exploiting a fix companies had but weren't using
Google’s Gemini 3.8 Flash is built for agents, while its Cyber twin hunts vulnerabilities
Stolen Claude session cookies can reach corporate Gmail through grants no IT admin can revoke
Closing an Azure OpenAI assistant's retrieval gap didn't take a new identity platform. It took one filter and a narrower assistant.
Identity and permissions aren’t enough to govern AI agent behavior
AI agents need their own identity before they need a gateway
TechCrunch
OpenAI confirms ‘wiki incident,’ says it’s ‘working on a framework’ for more disclosure
US military disabled ad tracking on troops’ devices following reports of targeted attacks
Abliteration.ai is making a business out of removing AI guardrails
It sure looks like hackers breached a major ID card verification service
HiddenLayer nabs $100M as enterprises rush to secure their AI deployments
Norway considers ban on camera-enabled wearable ‘pervert glasses’
X says attackers are targeting user accounts after the launch of X Money
AIR raises $50M to help companies vet the skills and add-ons AI agents use
Florida and Texas move to block Flock cameras over privacy concerns
Hackers claim millions of patient records stolen during data breach at healthcare giant McKesson
Network World Security
AI data boom gives tape storage a new lease on life
Nvidia lets you build your own AI clusters locally with PAIR software
When analyst benchmarks miss the mark: Why Nvidia doesn’t fit Forrester’s data center matrix
HPE’s record Q3: AI infrastructure, networking demands drive growth, but supply constraints tap the brakes
VMware Cloud Foundation 9.1 adds transit gateway flexibility, segmentation, and native EVPN VXLAN support
Dell’s $95B AI backlog shows the infrastructure crunch is far from over
SonicWall reports two major security holes under active exploit
Arista warns customers ahead of next week’s security disclosures
VMware by Broadcom: Product, service and support news
Palo Alto Networks buys Console to boost agentic security
Help Net Security
Trezor customers hit with phishing calls and letters after shipping-partner breach
IT help-desk vishing tricks executives into handing over Microsoft 365 access
Mathspace breach exposes data on over a million students and parents
Jellyfin 12.0 security fixes arrive alongside the removal of legacy client logins
Ransomware negotiation tactics have turned into a business process
Product showcase: Doppler secures secrets for humans, pipelines, and AI agents
Microsoft’s Project Zenith puts large AI models directly on developer PCs
Cybersecurity jobs available right now: September 8, 2026
Hackers exploit RouterOS flaws to hijack MikroTik devices without authentication
N-able patches critical N-central zero-day exploited in the wild (CVE-2026-86218)
SC Magazine
Security Conversations on AI, Agents, and Emerging Threats from Black Hat 2026 - Michael Leland, Sean Murphy, Idan Plotnik, Ido Geffen - ASW #399
Shadow AI Epidemic: Uncovering Agents on the Endpoint, British Library Breach, & News - Amit Assaraf - ESW #475
Ping YOUniverse: The next stage of human authentication
Wireguard, Chrome, RMMS, Sonicwall, Microsoft, Sumerian VPNS, Harvard, Josh Marpet... - SWN #613
New Linux toolkit found in trojanized HAProxy targeting South Korean organizations
PostGREShell vulnerability allows server takeover
Upwind Security raises $300 million in Series C funding
Coder platform targeted by attackers delivering malicious Terraform modules
Cisco addresses critical vulnerabilities in Nexus 9000 switches and IOS XR
Thomson Reuters court software breach exposes sensitive data in Canada and US
© 2026 RiskDiscovery | Sponsored by: Deception Logic