[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
One Compromised Laptop, Billions Lost: The Binance Attack-Path Warning
Microsoft's AI Risk Report Misses This Key Detail
PapRAT Cyber-Espionage Campaign Leaves a 'Bitter' Taste in South Asia
Investors Dish on New Startups & What They'd Back Next
Devs Hit by Trojanized Claude Code Extension for Cursor
Behind the Scenes of How Operation Blackout Went Down
L’Italia è afflitta da vulnerabilità informatiche, senza una causa chiara
Undead Software Projects Continue to Raise Security Risks
As Russia's Cyberwar Evolves, Belarus Steps Forward
Anthropic-Themed Phishing Emails Bypass Top Security Tools
Ars Technica
Anthropic VS code extension on Cursor backdoored for nearly 12 hours
Code-execution flaw in UEFI firmware affects most servers on planet Earth
Disgraced eMudhra drops out of TLS business after using cert private key of 4
333 Tor exit nodes hijacked to intercept SSH traffic and retrieve plaintext email
Enterprises keep buying software upgrades that IT thinks will make things worse
PHP warns it plans to release 2 emergency patches imminently
The Internet goes on high alert after discovery of 8 compromised TLS certs
Meta Muse exposes users' personal and business secrets when they share conversations
PSA: Patch your Plex media server before someone hacks it
ReactOS reaches major milestone with NTFS install support
CyberScoop
Google shuts down global botnet running on certified Android devices
Business groups mount fresh campaign for long-term renewal of information sharing law
Could Nick Andersen’s leadership outlast the clock on his acting role?
Federal court tosses Trump lawsuit challenging Alaska Senate certification
China-backed threat group used agentic AI pentesting tool to compromise 140 sensitive targets in 11 days
Apple notifications alert victims in 99 countries about mercenary spyware infections
California officials confirm grand jury subpoenas as states, civil groups brace to protect elections from federal encroachment
Defense contractor pleads guilty to aiding North Korean remote worker scheme
Syrian hacker who served Assad regime gets 42 months in US prison
Leaked DHS employee archive, Icepick, faces challenges to stay online
InfoSecurity Magazine
Armadin Tests Find 88% of Severe Flaws Outside Vendor Advisories
Bitter Deploys PapRAT in Asian Cyber-Espionage Campaign
FBI Attributes Binance Heist to North Korea’s TraderTraitor
Chainalysis Warns Customers After “Offensive Agentic” Security Incident
New Framework Puts Ransomware Resilience for AI Systems in Focus
Chinese Actor Compromises US Government Network Via Chained PHP2Shell Exploit
Binance Hit by Record-Breaking $6.3bn Hack in Largest Cryptocurrency Heist in History
NIK C2 Malware Can Use Victims’ OpenAI Keys for AI Queries
CREST Urges Whole-Ecosystem Approach to Financial Cyber Resilience
Online Scam Volumes Double to Overtake Phishing
SecurityWeek
NATO’s Crossed Swords Exercise Brings AI Agents Into Cyber Operations Training
Over 100 European Stores Hit as Supermarket Fridge Attacks Return
Cybersecurity M&A Roundup: 37 Deals Announced in October 2026
Florida Student Aid Website Hack Puts Data of 4.9 Million People at Risk
Revolve Data Breach Impacts at Least 200,000 People
Google Introduces $250,000 Root-in-Cloud Bug Bounty Reward
Malicious Claude Code Extension Served in Cursor Supply Chain Attack
Chainalysis Discloses Data Breach Following AI-Driven Cyberattack
Polymarket Returns $3.9 Million to Traders as DebugBear Cites DNS Hijack
FBI Flags Over 600 Addresses Tied to North Korea’s Binance Heist
ZDNet
OpenAI will merge ChatGPT’s chat and work tabs – here’s when, and what to expect
Athenahealth patients can ask Claude about their medical records now
Don’t want a touchscreen? All premium MacBook Pros could have one soon, reports say
Firefox’s new Mini Window is every multitasker’s dream – Chrome can’t do this
Samsung’s Privacy Display may be coming to more Galaxy phones – what we know
Apple’s HomeView may double as security camera – watch out Ring, Nest, and Wyze
50 AI agents tried to build a thriving Minecraft civilization – it didn’t end well
Android 17 adoption hits a staggering 1% – why you really should update now
Samsung adds better sleep tracking to Galaxy Watches – here’s what to expect
I’m finally ready for a smart calendar – why the Echo Show 16 stands out
The Hacker News
Synology NAS Devices Targeted in Ransomware Attacks Exploiting Patched DSM Flaw
New Wave of Refrigeration Cyberattacks Hits Supermarkets Across Europe, Forcing Stores to Pull Food
Attackers Exploit Critical Siemens IoT2050 Flaw to Plant Remote Command Backdoors
Attackers Target Unpatched CryptoPayment Gateway Flaw That Can Expose Wallet Credentials
⚡ Weekly Recap: Critical CVEs, Linux DDoS Botnet, Device-Code Phishing, Android Spyware and More
Google Disrupts 1.3 Million-Device Android Botnet, Says TV Box Maker Sold Criminal Access
DarkBlinders Compromises Israeli Target and Iraqi Kurdish Government Cloud Environment
Critical Langflow Flaws Could Let Unauthenticated Attackers Run Code on Servers
Is Your SOC Ready for AI Agents? A Maturity Check Before You Deploy
Attackers Pose as IT Support on Microsoft Teams, Abuse AD CS to Steal Company Data
BleepingComputer
Chinese hackers use ARTEX AI in automated attacks against 200 orgs
Fintech platform Sageworks taken offline after suspected cyberattack
Google disrupts million-device XCPE Android malware botnet, bans TV box maker
BTCPay Server warns of hot wallet crypto thefts on outdated instances
Your Mobile Carrier Stores Your Call Logs for Years
Hackers disrupt refrigeration systems at European supermarkets
Microsoft fixes Smart App Control broken by October Windows update
Over 1,000 GitLab servers vulnerable to ongoing RCE attacks
Synology warns of C3RB3R ransomware attacks targeting NAS devices
Ivanti patches two more Connect Secure zero-days chained in attacks
gbhackers
Hackers Exploit Critical Magento StyleSmuggler Vulnerability to Deploy PSK Agent RAT and Hijack Servers
5-Year-Old Linux Kernel Vulnerability Allows Unprivileged Attackers to Gain Root Access
DarkBlinders APT Hackers Target Israel and Iraqi Kurdistan With StarkMeet Malware and GitHub-Based Backdoors
Google Offers $250,000 Bug Bounty for Full Google Cloud Project Takeover Vulnerabilities
Critical Langflow AI Vulnerabilities Allow Hackers to Execute Remote Code Without Authentication
Hackers Hide PapRAT Malware in Fake Diplomatic Invitations to Take Control of Windows Systems
Google Dismantles XCPE Botnet That Infected 1.3 Million Android TV Devices With Preinstalled Malware
Hackers Use AI-Powered Attack Framework to Breach WorkOS and Access Customer Data
Anthropic Enables EDR Security Monitoring for Claude Cowork AI Agents on Windows and macOS
Guardz Brings Palo Alto Networks Prisma Browser Protection to Small Businesses
Cybersecurity Dive
Agentic pen-testing tool employed in multiple espionage campaigns around the globe
As the White House touts its AI task force, CISA is conspicuously missing
3 questions for securing AI agents
Protecting OT, IoT and medical devices without disrupting operations
Palo Alto Networks firewalls compromised in chained attacks using PHP2Shell
Top cybersecurity conferences to attend in 2027
North Korea-linked group steals $6.3B from Binance in largest-ever cryptocurrency hack
JPMorgan Chase, Goldman Sachs underscore security in AI plans
Hackers could poison AI models by tampering with core infrastructure
Insurance industry fears potential impacts from PHP2Shell
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
Max-severity bug in widely used OT programming tool exploited to deliver Linux malware
Cops bust botnet of 1.3M infected Android TV boxes
Thieves pilfer environment variables from Trigger AI workflow tool
Token thieves costing companies $100K+ per day in illicit LLM charges
Nuclear threats and street brawls: Russia, Ukraine report attacks on their emergency alert apps
Frozen part II: Hackers remotely defrost produce in Euro supermarkets ... again
FBI pins $6.3B Binance crypto heist on North Korean hackers
Crim spent $7K+ on AI services in extortion attacks, then left evidence for all to see
GM cracks the petty cash box for multistate driver tracking settlement
Anthropic: That Claude Code extension compromise… couldn't be us
VentureBeat
AI agents don't have to break security controls to go rogue. Here's how to keep them in check
Agents are rewriting the book on security. Can your data layer keep up?
AI agent access is moving faster than identity controls can govern
AI agents are about to put least privilege to the test
DeepSeek-V4.1-Flash-1017 arrives with improved benchmarks just as the U.S. government bans it from agencies — what enterprises should do
AI cloud security needs to prove control before agents reach production
Anyone can build apps with AI. But who owns them?
TechCrunch
Germany says lawmakers’ iPhones may have been hacked with spyware
A fresh wave of cyberattacks has hit Europe’s supermarket refrigerators, destroying food across countries
Applebee’s exposed customers’ personal data after leaving database password in app
North Korean hackers blamed for stealing record $6.3B in Binance breach
Binance pauses withdrawals as hackers suspected of stealing billions in crypto
Bluesky blocks links to leaked DHS employee data as government seeks takedowns
Upwind raises $400M after walking away from Datadog acquisition offer
Hacker stole personnel data about thousands of Homeland Security employees, including CBP and ICE agents
Wiz’s CTO on PHP2Shell and the coming ‘vulnpocalypse’
The ‘Vulnpocalypse’ is coming for the internet’s aging code, says Wiz’s CTO 
Network World Security
European supermarkets that failed to act after French freezer attack are now feeling the heat
IBM aims to simplify mainframe modernization with AI-powered insight
NaaS hasn’t lived up to the hype. Is it still worth it?
AI networking spending grows, but enterprise network readiness lags
New Cisco firewall zero-day being actively exploited
Gartner warns $3.5T in AI infrastructure spending could be at risk by 2030
Oracle adds Google TPUs to OCI to expand enterprise AI compute options
Cisco’s partner shift: What customers should expect from their Cisco partner in the AI era
IBM connects quantum chips with ‘quantum channels’ at 99% accuracy
2026 network outage report and internet health check
Help Net Security
Opal’s agent.ID virtual event: Top security leaders on governing Al agents
What human hackers still do better than AI, according to HackerOne’s CEO
Product showcase: Sweet Virtual Patching stops HTTP2Shell while fixes catch up
AI coding agents are installing MCP servers that will never be patched
Fireperf: Open-source network testing tool for firewalls and routers
Cybersecurity jobs available right now: November 3, 2026
CISA to federal agencies: Remediate exploited Ivanti Connect Secure vulnerabilities (CVE-2026-111357, CVE-2026-118527)
Google disrupts XCPE botnet, bans the company behind it
AI-powered infostealer picks out the most profitable parts of your stolen data
Second wave of refrigeration cyberattacks hits European supermarkets
SC Magazine
New research reveals limitations of vendor advisories in identifying critical security vulnerabilities
Researchers demonstrate specter attack on air-gapped computers
BTCPay Server urges users to update after hot wallet attacks
US government orders removal of Acronis software from federal systems
Abrigo restores Sageworks platform following irregular activity
Synology warns of C3RB3R ransomware targeting outdated NAS devices
The impact of AI on cybersecurity and legacy software risks
Trigger.dev discloses security incident involving exposed environment variables
Massive AT&T data breach exposes customer call logs
Microsoft warns of help desk impersonation and certificate abuse
© 2026 RiskDiscovery | Sponsored by: Deception Logic