[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
Devs Hit by Trojanized Claude Code Extension for Cursor
Behind the Scenes of How Operation Blackout Went Down
L’Italia è afflitta da vulnerabilità informatiche, senza una causa chiara
Undead Software Projects Continue to Raise Security Risks
As Russia's Cyberwar Evolves, Belarus Steps Forward
Anthropic-Themed Phishing Emails Bypass Top Security Tools
Rethinking Cybersecurity Awareness in the AI Era
Why CTF Competitions May Be More Important Than Ever
Claude Model Builds Exploits Across Major Browsers & OSes
Threat Modeling With 4 Simple Questions on a White Board
Ars Technica
Anthropic VS code extension on Cursor backdoored for nearly 12 hours
Code-execution flaw in UEFI firmware affects most servers on planet Earth
Disgraced eMudhra drops out of TLS business after using cert private key of 4
333 Tor exit nodes hijacked to intercept SSH traffic and retrieve plaintext email
Enterprises keep buying software upgrades that IT thinks will make things worse
PHP warns it plans to release 2 emergency patches imminently
The Internet goes on high alert after discovery of 8 compromised TLS certs
Meta Muse exposes users' personal and business secrets when they share conversations
PSA: Patch your Plex media server before someone hacks it
ReactOS reaches major milestone with NTFS install support
CyberScoop
Could Nick Andersen’s leadership outlast the clock on his acting role?
Federal court tosses Trump lawsuit challenging Alaska Senate certification
China-backed threat group used agentic AI pentesting tool to compromise 140 sensitive targets in 11 days
Apple notifications alert victims in 99 countries about mercenary spyware infections
California officials confirm grand jury subpoenas as states, civil groups brace to protect elections from federal encroachment
Defense contractor pleads guilty to aiding North Korean remote worker scheme
Syrian hacker who served Assad regime gets 42 months in US prison
Leaked DHS employee archive, Icepick, faces challenges to stay online
Officials seize domain of top bulletproof hosting provider Virtualine
Leak site publishes data on more than 41,000 DHS employees obtained by hacktivists
InfoSecurity Magazine
FBI Attributes Binance Heist to North Korea’s TraderTraitor
Chainalysis Warns Customers After “Offensive Agentic” Security Incident
New Framework Puts Ransomware Resilience for AI Systems in Focus
Chinese Actor Compromises US Government Network Via Chained PHP2Shell Exploit
Binance Hit by Record-Breaking $6.3bn Hack in Largest Cryptocurrency Heist in History
NIK C2 Malware Can Use Victims’ OpenAI Keys for AI Queries
CREST Urges Whole-Ecosystem Approach to Financial Cyber Resilience
Online Scam Volumes Double to Overtake Phishing
ICO Reprimands Staffordshire Police After Domestic Abuse Breach
NIST Publishes Guidance to Meet Federal Post-Quantum Deadlines
SecurityWeek
Malicious Claude Code Extension Served in Cursor Supply Chain Attack
Chainalysis Discloses Data Breach Following AI-Driven Cyberattack
Polymarket Returns $3.9 Million to Traders as DebugBear Cites DNS Hijack
FBI Flags Over 600 Addresses Tied to North Korea’s Binance Heist
Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain
Northstar Security Exits Stealth With $7M to Expose Toxic Risk Combinations
Syrian Hacker Gets Prison Time in US After Over a Decade on the Run
PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress
In Other News: Anthropic Breach Dispute, UEFI Flaw Hits Most Servers, Cloudflare AI Data Leak
Passkeys Are Better Than Passwords. But They Are Not Enough.
ZDNet
Android 17 adoption hits a staggering 1% – why you really should update now
Samsung adds better sleep tracking to Galaxy Watches – here’s what to expect
I’m finally ready for a smart calendar – why the Echo Show 16 stands out
Your Netgear router may be vulnerable to a security exploit – how to check and patch it
Google’s latest Home updates just fixed my biggest annoyances with its speakers and cameras
Your headphones have hidden LE Audio features you’ll want to know about
Firefox and Chrome patch 200+ security flaws combined – update both ASAP
Stop sharing your passwords with AI agents, Bank of America warns customers
Mistral’s Le Chonk is now a top open model for coding, ranking alongside Codex GPT-6.1 Terra
The 4 biggest Amazon smart home announcements from today
The Hacker News
Attackers Pose as IT Support on Microsoft Teams, Abuse AD CS to Steal Company Data
Government Linux Servers Targeted With SysGoRAT and Suspected AI-Generated Scripts
New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial Value
CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key
Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear Script
FBI Links North Korea's TraderTraitor to Record $6.43 Billion Binance Crypto Heist
NetamLoader Malware Targets Government Windows 10 Systems in Asia via .NET Injection
Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data
Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access
A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats
BleepingComputer
Over 1,000 GitLab servers vulnerable to ongoing RCE attacks
Synology warns of C3RB3R ransomware attacks targeting NAS devices
Ivanti patches two more Connect Secure zero-days chained in attacks
FBI links $6.3 billion Binance crypto heist to North Korean hackers
Alpine Linux rebuilds GitLab after attempted RCE attack
OpenAI says it's doubling Pro usage limits and bringing Work features to Chat
Northflank security breach leads to abuse of customers' AI API keys
New Android SMS of Death exploit can remotely crash unpatched phones
Reddit to lock content behind logins to fight scrapers
From Beginner to Bug Hunter: Learning Cybersecurity in the AI Era.
gbhackers
Unpatchable Hardware Flaws in Older iPhones Allow Attackers to Steal Crypto Wallet Recovery Phrases
New ChatGPT Phishing Kit Uses Rotating WordPress Websites to Steal Payment Details and OTPs
Hackers Target Emergency Alert Apps in Ukraine and Russia, Sending Fake Nuclear Attack Warnings
Hackers Target Supermarket Refrigeration Systems Across Sweden, Raising Freezer Temperatures to 55°C
Researchers Discover High-Severity ChatGPT Flaw That Exposed Private Conversations to Attackers
Hackers Weaponize Open-Source CyberStrikeAI Framework to Launch AI-Powered Network Intrusions
Apple Issues Urgent Security Alerts Over Mercenary Spyware Attacks in 99 Countries
Chainalysis Confirms Cyberattack as Hackers Exploit Vulnerabilities to Access Internal Tools
11 Security Data Lake Platforms: The 2026 Buyer’s Verdict Guide
11 Security Log Management Tools: The 2026 Buyer’s Verdict Guide
Cybersecurity Dive
3 questions for securing AI agents
Protecting OT, IoT and medical devices without disrupting operations
Palo Alto Networks firewalls compromised in chained attacks using PHP2Shell
Top cybersecurity conferences to attend in 2027
North Korea-linked group steals $6.3B from Binance in largest-ever cryptocurrency hack
JPMorgan Chase, Goldman Sachs underscore security in AI plans
Hackers could poison AI models by tampering with core infrastructure
Insurance industry fears potential impacts from PHP2Shell
Hackers seize on vulnerable IoT devices to spy, pivot and route traffic
CISA, security researchers confirm successful exploitation of PHP flaws
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
Frozen part II: Hackers remotely defrost produce in Euro supermarkets ... again
FBI pins $6.3B Binance crypto heist on North Korean hackers
Crim spent $7K+ on AI services in extortion attacks, then left evidence for all to see
GM cracks the petty cash box for multistate driver tracking settlement
Anthropic: That Claude Code extension compromise… couldn't be us
British intelligence agency misplaced 'thousands' of storage devices, years later still can't say how many
In the year AI re-wrote the infosec rulebook, it’s comforting to know crypto exchanges still have bad security
Researchers find bugs in 5 AI developer tools, with OpenAI and Microsoft flaws still unpatched
Suspected Chinese attackers built a custom PHP2Shell exploit and rooted 25 servers
Belgium's tax agency confirms cyberattack, pulls services offline
VentureBeat
AI agents don't have to break security controls to go rogue. Here's how to keep them in check
Agents are rewriting the book on security. Can your data layer keep up?
AI agent access is moving faster than identity controls can govern
AI agents are about to put least privilege to the test
DeepSeek-V4.1-Flash-1017 arrives with improved benchmarks just as the U.S. government bans it from agencies — what enterprises should do
AI cloud security needs to prove control before agents reach production
Anyone can build apps with AI. But who owns them?
TechCrunch
Applebee’s exposed customers’ personal data after leaving database password in app
North Korean hackers blamed for stealing record $6.3B in Binance breach
Binance pauses withdrawals as hackers suspected of stealing billions in crypto
Bluesky blocks links to leaked DHS employee data as government seeks takedowns
Upwind raises $400M after walking away from Datadog acquisition offer
Hacker stole personnel data about thousands of Homeland Security employees, including CBP and ICE agents
Wiz’s CTO on PHP2Shell and the coming ‘vulnpocalypse’
The ‘Vulnpocalypse’ is coming for the internet’s aging code, says Wiz’s CTO 
South Korea’s financial industry hit by fresh wave of cyberattacks
Bank of America kindly asks that you don’t share your banking password with your AI assistant
Network World Security
New Cisco firewall zero-day being actively exploited
Gartner warns $3.5T in AI infrastructure spending could be at risk by 2030
Oracle adds Google TPUs to OCI to expand enterprise AI compute options
Cisco’s partner shift: What customers should expect from their Cisco partner in the AI era
IBM connects quantum chips with ‘quantum channels’ at 99% accuracy
2026 network outage report and internet health check
IBM aims to bring AI agent sprawl under enterprise control
HPE extends AI-driven networking to SD-WAN and SASE
FluidCloud replaces VDDK with its own disk copy engine for VMware exits
Cisco taps AI, partners to modernize IT operations and fortify network security
Help Net Security
Trezor warns some of its wallets may hide a seed-stealing implant
Chainalysis breached using “offensive agentic techniques”
FBI pins $6.3 billion Binance crypto heist on North Korea while scammers circle anxious users
DeepSeek open-sources Super-Agent, a coding agent that watches team chats for work
The first ten lines of a command policy for AI coding agents
Byoky: Open-source wallet for AI API keys
Product showcase: Trust Onion uses rotating codewords to verify callers
Ransomware gang talked AI agents into doing much of its dirty work
Week in review: Binance hit by $6.3 billion theft, impact of Brotli vulnerability
Assad regime hacker who caused $136 billion market drop sentenced to 42 months
SC Magazine
Federal judge dismisses lawsuit challenging Alaska Senate candidate ballot
The approved-app blind spot: When sanctioned AI becomes shadow AI
Shifting Cyber Turtles with Casey Ellis, the Vibe Check, and the News - Casey Ellis - ESW #483
Applebee's patches security flaw exposing customer data
Broadcom uses AI to remediate software vulnerabilities
Federal Reserve security program rated ineffective in watchdog audit
Critical Linux kernel vulnerability allows remote code execution
Security researcher releases proof-of-concept for Android SMS of Death vulnerability
Chainalysis reports security breach involving offensive agentic techniques
Reddit plans transition to logged-in service to curb scraping
© 2026 RiskDiscovery | Sponsored by: Deception Logic