[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under Attack
Prominent Ransomware Negotiator Faces Extortion Charges
No Identity, No Recovery: Cyber Resilience Starts With IAM
Passing the Baton: Dark Reading Names New Editor-in-Chief
ASOS Breach Reveals the Risks in Customer-Facing SaaS
AI Scramble Drives Cybersecurity M&A Boom
What We Missed: FBI Strikes Back at ShinyHunters
Security Threats Don't Stop at the Office: Why Executives' Families Need Training, Too
Social Engineering AI Agents: The New BEC for 2026
'AgentCorruption' Puts AWS Environments at Risk With Single Prompt
Ars Technica
PC shipments fall 20.1 percent in “sharpest decline” since Q1 2023
Hackers obtain counterfeit TLS certificates for Google and other large services
OpenAI agents tried to hack Wikipedia tools and flooded it with traffic
Licensing costs driving 90 percent of VMware users to explore options: Survey
MCP for agent-to-agent comms may be the riskiest protocol you've never heard of
Apple changes full-disk access permissions to curb abuse from AI agents
Hacks of 2 federal agencies in a month have spilled a bonanza of sensitive data
Memory executives expect RAM shortage to continue through 2028
Attackers have been exploiting critical Zimbra flaw to steal emails
Cloudflare plans to issue quantum-safe TLS certificates
CyberScoop
Flock can now issue CVEs for its own products. Should we trust it?
IonQ to buy zero-trust security firm Elisity in deal valued at up to $1.3 billion
Your AI agent is only as safe as the packages it downloads
Canadian cybersecurity executive arrested in federal extortion case
Leader of 764 pleads guilty, faces up to 30 years in prison
Anthropic rolls out program for ‘long-term commitment’ to secure critical infrastructure, open source software
DOJ, FBI seize Flax Typhoon-linked hacking tools Microscan, FishHub
Ransomware recovery CEO indicted after allegedly paying hackers and pocketing millions
OpenAI says Iran, Russia used AI journalists, think tanks to influence Western media
Quantum computers could break today’s encryption. Washington needs to prepare now.
InfoSecurity Magazine
European Retail Firms Confirm Cyber Incidents
Defenders Reluctant to Deploy Agentic AI as a Cybersecurity Tool
UK Government Announces Sweeping New AI Security Plans
Fifth of CISOs Take Time Off to Avoid Patch Tuesday
Luna Moth Leaks Shed Light on Ransomware Group's Inner Workings
Major French Supermarket Chains Hit by Cyber-Attack, Food Stock Impacted
Net Closes Around ShinyHunters with Another FBI Arrest
Months-Old Palo Alto VPN Vulnerability Remains a Target for Ransomware Groups
Karaoke Giant Reveals Data Breach Impacting Eight Million
Wikimedia Says Rogue AI Agents Abused its Platforms
SecurityWeek
Small AI Models Could Soon Self-Replicate on IoT Devices, Anthropic Warns
XWorm RAT Evolves Into Surveillance Platform
AI Turns Familiar Cyberattacks Into a Race Against Time
$86 Million Crypto Heist Linked to Ledger Signer Hardware Implant
Cyberattack Prompts Grocery Giant Ahold Delhaize to Disconnect Systems
Refrigeration Controller Hack Spoils Food Across European Supermarkets
IonQ to Acquire Zero Trust Firm Elisity for Up to $1.3 Billion
Bricksforge WordPress Plugin Vulnerability Exploited in the Wild
Canonical Websites Disrupted in Second DDoS Attack This Year
Mastermind of 15,000-Mule Cybercrime Laundering Network Pleads Guilty in US
ZDNet
Dutch tax authorities cancel Microsoft 365 cloud rollout – and turn toward open source
Claude sent a false homicide tip to police – and it’s part of a troubling AI pattern
Google’s new Fitbit Edge solves my biggest gripe with the Pixel Watch
Ring’s new smart lock has a manual fallback that can’t lock you out – how it works
4 ways Amazon’s new Alexa tablets eclipse the Fire line – starting with Google Play
‘I use AI to do the things that I’m bad at’: Linus Torvalds on why it works for him
Got a Microsoft 365 subscription? Your storage is about to shrink
Regulators are trying to protect you from being fired by AI – here’s how
Can AI fix legacy IT? The ‘economics don’t hold up,’ says former IBM strategist
Yelp, who? 4 ways Google Maps can help you find your next meal – and order it
The Hacker News
Xandr Fined a Record €8.6 Million for Relaying Grindr Data Revealing Sexual Orientation
[Webinar] How to Stop AI-Driven Privilege Escalation With Runtime Identity Controls
LG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local Network
Product Walkthrough: Bitdefender AI Visibility and Control
Attackers Heat French Supermarket Fridges Up to 50°C by Hijacking Danfoss Controllers
Two Critical MarkLogic Flaws Could Give Delegated Managers Persistent Admin Control
GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code
Low-Cost Android Phones Ship With Preinstalled Malware That Turns Them Into Residential Proxies
⚡ Weekly Recap: Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware and More
Bring Your Own Agent: Your Employees' Assistants Are Already Logged In
BleepingComputer
The MFA Gaps Attackers are Still Exploiting
SAP warns of maximum severity OAuth2 SSRF security flaw
Norway fines Microsoft ad firm $9.6 million over Grindr data sharing
Yandex confirms service outage as users lose access to cloud files
Anthropic takes risky AI tests offline after models breach govt sites
Ledger confirms spy chip implant behind wallet crypto thefts
Cyberattack shuts down refrigerators at French supermarkets
Inside AvisLoader: A Windows Malware Loader Built to Resist Disruption
Retail giant Ahold Delhaize takes systems offline after cyberattack
GitLab warns of max severity code execution vulnerability
gbhackers
Criminal IP to Showcase Threat Intelligence and AITEM at Security Days Fall 2026 Tokyo
G2A.COM Reports 35% Growth in Security Software Orders, Outpacing VPN Growth
Hackers Target Hundreds of French Supermarkets, Heating Refrigeration Systems to 50°C
SAP Patches Critical NetWeaver and S/4HANA Security Flaws Affecting Enterprise Systems
Attackers Can Hijack npm Packages Without Stealing Developer Credentials
Anthropic Warns AI Models Could Soon Self-Replicate Across Smart TVs and IoT Devices
New macOS Malware Uses Fake System Prompts to Steal Passwords and Deploy RAT
Hackers Exploit Citrix NetScaler Zero-Days to Deploy Modified Platypus Backdoor
Researchers Discover 253 Security Vulnerabilities Across 343 AI Agent Tools in MCP Servers
XWorm HBrowser Plugin Lets Attackers Control Authenticated Browser Sessions Without Credentials
Cybersecurity Dive
Ahold Delhaize experiencing cybersecurity issue
CISA calls on Citrix NetScaler customers to patch as new flaws disclosed
GitLab fixes critical vulnerability that exposed software environments to sabotage
AI-driven security: Why agentic AI is changing cybersecurity
FBI seizes domains linked to China-nexus botnet
As frontier models go rogue, colleges beef up AI cybersecurity education
What the C-suite needs to know about AI governance
US government lagging in transition to post-quantum encryption, GAO finds
AI underscores singular importance of phishing-resistant authentication, Okta says
FBI warns that FortiBleed credential-harvesting attacks are locking out firewall users
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
Cyberattacks crank French supermarket refrigeration systems up to 50°C
'123456' password linked to Denmark data breach affecting 8.8M people
Owner of fashion brands Hobbs and Whistles joins autumn pwned collection
VMware is pushing so many patches, it thinks users need new tools to manage the flood
Chatbot refuseniks edge out users in the US, and they’re not for turning
Ukrainian drone strikes on Yandex datacenters knock cloud and payments offline
Imagine there's no Shiny Hunters – AI could make human hacking crews obsolete
AI systems are fully capable of carrying out nightmare attacks against infrastructure and nobody's ready
Two characters open up a world of typosquatting opportunities in Chromium browsers
AWS AgentCore security undone by prompt requesting credentials
VentureBeat
Anthropic’s Cyber Mission starts with 6,157 findings reported to maintainers and 516 patched
Microsoft's record Patch Tuesday shows why severity can't decide what gets patched first
Your vibe-coded apps are a ticking time bomb for your business. Here’s how to secure them.
AI agents need more than access control — they need identity at runtime
22 of 37 surveyed companies that enforce AI agent permissions still have agents sharing credentials
OpenAI’s new ‘Private Intelligence' targets a growing enterprise concern: who can see your AI data?
Anthropic documented a new problem for security teams: Attacks that can adapt while they're underway
TechCrunch
Surveillance company Flock cuts staff as privacy backlash grows
Asos confirms breach of customer data after hackers send rogue app notification
CIA officer admits to creating fake top secret government program to steal over $190M, including gold bars
LibreOffice says ‘no AI’ is now a software feature
Hackers steal 8 million citizens’ records from Danish government database
Google froze its open source bug bounty program due to a ‘significant rise’ in AI submissions
Federal judge calls Flock ‘indiscriminate mass surveillance’
OpenAI safety employee resigns, claiming the company’s ‘culture is broken’
Apple says it’s tightening macOS ‘Full Disk Access’ controls due to new risks from AI agents
Medical records giant Epic pauses product development to fix security bugs that risk patients’ data
Network World Security
Cisco, Nvidia push ultra-dense networking for Ethernet AI fabrics
AMD unveils Helion as agentic AI fuels demand for data center CPUs
Ørsted builds compliance into automation, speeds firewall changes
It’s not your model — AI has a data movement problem
ICANN set to expand gTLD: Brands, AI, and crypto all get new domains
Oracle reportedly lands $7B GPU deal for Tencent
Bidding war over key component could eliminate third hard disk maker
Citrix issues its weekly critical security patch for NetScaler ADC and NetScaler Gateway
Tool sprawl, AI complicate enterprise network operations
Nvidia-backed Upscale takes on AI networking silos with Token Fabric
Help Net Security
Trellix Wise for Private Cloud delivers auditable AI investigations for security teams
NinjaOne combines Katana AI and MCP server to accelerate IT problem resolution
Ukrainian drones hit Yandex data centers, sparking claims that Russian troll farms went quiet
Lattice Sentry 5.0 brings quantum-resistant firmware security to AI data centers
Ridge Security’s RidgeOne keeps autonomous penetration testing data inside customer environments
Mozilla’s Firefox Enterprise lets companies block shadow AI in the browser
Meta outlines Muse Wonder safeguards for AI agents acting on your behalf
GitLab admins urged to patch critical RCE flaw (CVE-2026-97229)
npm Trusted Publishing flaw exposed 1,500+ npm packages to takeover
Be a good AI ancestor: Cybersecurity already gave us the playbook
SC Magazine
Kerberos attacks: Golden Ticket, Silver Ticket, and Pass-the-Hash
Think of identity dark matter as a containment challenge
Identity Threat Detection and Response (ITDR): building detection capability
CISA adds five vulnerabilities to exploited list amid China-linked cyber espionage concerns
What's Not Found in AppSec? - ASW #404
Critical Bricksforge WordPress flaw exploited in attacks
GTA 6 leaker CyberLeek threatens playable build release for crypto coin
Japanese karaoke maker Daiichi Kosho reports data breach affecting 8.7 million records
The highest risk for AI agents is the software development organization
Exposure Management: Stop Measuring Controls. Start Measuring Risk. - Heather Ceylan - CSP #229
© 2026 RiskDiscovery | Sponsored by: Deception Logic