[ News | Newsletters | Blogs | Reddits | Lists | Media | Jobs ] HoneyDB
DarkReading
North Korean Group Targets South With Military ID Deepfakes
Ray Security Takes an Active Data Security Approach
Critical Bugs in Chaos Mesh Enable Cluster Takeover
Self-Replicating 'Shai-hulud' Worm Targets NPM Packages
'Vane Viper' Threat Group Tied to PropellerAds, Commercial Entities
Innovative FileFix Phishing Attack Proves Plenty Potent
Emerging Yurei Ransomware Claims First Victims
SecurityScorecard Buys AI Automation Capabilities, Boosts Vendor Risk Management
'HybridPetya' Ransomware Bypasses Secure Boot
KillSec Ransomware Hits Brazilian Healthcare Software Provider
Ars Technica
ChatGPT may soon require ID verification from adults, CEO says
Millions turn to AI chatbots for spiritual guidance and confession
Modder injects AI dialogue into 2002’s Animal Crossing using memory hack
OpenAI and Microsoft sign preliminary deal to revise partnership terms
35 percent of VMware workloads expected to migrate elsewhere by 2028
Senator blasts Microsoft for making default Windows vulnerable to “Kerberoasting”
Developers joke about “coding like cavemen” as AI service suffers major outage
Microsoft ends OpenAI exclusivity in Office, adds rival Anthropic
Claude’s new AI file-creation feature ships with security risks built in
SAP warns of high-severity vulnerabilities in multiple products
CyberScoop
Microsoft seizes hundreds of phishing sites tied to massive credential theft operation
BreachForums founder resentenced to three years in prison
Senators, FBI Director Patel clash over cyber division personnel, arrests
Apple addresses dozens of vulnerabilities in latest software for iPhones, iPads and Macs
Check Point acquires AI security firm Lakera in push for enterprise AI protection
Top AI companies have spent months working with US, UK governments on model safety
When ‘minimal impact’ isn’t reassuring: lessons from the largest npm supply chain compromise
SonicWall firewalls targeted by fresh Akira ransomware surge
​​DHS watchdog finds mismanagement in critical cyber talent program
CISA work not ‘degraded’ by Trump administration cuts, top agency official says
HITBSecNews
Found on VirusTotal: The world’s first UEFI bootkit for Linux
OpenAI is at war with its own Sora video testers following brief public leak
North Korean hackers posing as IT workers steal over $1B in cyberattack
WhatsApp: NSO Group Operates Pegasus Spyware for Customers
Korea extradites Russian, Vietnamese suspects linked to $16M ransomware scheme
CISA Director Jen Easterly, in Place Since 2021, to Step Down
Man sick of crashes sues Intel for allegedly hiding CPU defects
North Korean hackers target cryptocurrency with malware
Law enforcement operation takes down 22,000 malicious IP addresses worldwide
Youth of today say passwords are old news, passkeys are the future
ZDNet
iPhone Air vs. iPhone 17 Pro Max: I compared both flagship models, and here's the winner
Preorder the iPhone 17 at AT&T and get up to $1,100 off now - here's how
How much RAM do you really need in 2025? I broke it down for Mac and Windows users
I compared the iPhone 17, iPhone Air, 17 Pro, and 17 Pro Max: Here's the best buy for you
10 open-source apps I recommend every Windows user try - for free
iPhone 17 Pro Max vs. Google Pixel 10 Pro XL: I compared the flagships and here's the winner
iPhone Air vs. Samsung S25 Edge: I compared the two ultra-slim phones, and here's the winner
iPhone 17 Pro vs. iPhone 14 Pro: Why I'm upgrading my model after three years of use
Worried about rising tech prices? Try these 5 easy ways to shop smarter right now
How to easily switch your PC from Windows to Linux - for free
The Hacker News
Scattered Spider Resurfaces With Financial Sector Attacks Despite Retirement Claims
DOJ Resentences BreachForums Founder to 3 Years for Cybercrime and Possession of CSAM
RaccoonO365 Phishing Network Dismantled as Microsoft, Cloudflare Take Down 338 Domains
Chaos Mesh Critical GraphQL Flaws Enable RCE and Full Kubernetes Cluster Takeover
SlopAds Fraud Ring Exploits 224 Android Apps to Drive 2.3 Billion Daily Ad Bids
New FileFix Variant Delivers StealC Malware Through Multilingual Phishing Site
Apple Backports Fix for CVE-2025-43300 Exploited in Sophisticated Spyware Attack
Securing the Agentic Era: Introducing Astrix's AI Agent Control Plane
Phoenix RowHammer Attack Bypasses Advanced DDR5 Memory Protections in 109 Seconds
Self-Replicating Worm Hits 180+ npm Packages to Steal Credentials in Latest Supply Chain Attack
BleepingComputer
BreachForums hacking forum admin resentenced to three years in prison
Microsoft rolls out Copilot Chat to Microsoft 365 Office apps
Google nukes 224 Android malware apps behind massive ad fraud campaign
Self-propagating supply chain attack hits 187 npm packages
Microsoft: WMIC will be removed after Windows 11 25H2 upgrade
Team-Wide VMware Certification: Your Secret Weapon for Security
Jaguar Land Rover extends shutdown after cyberattack by another week
Apple backports zero-day patches to older iPhones and iPads
New FileFix attack uses steganography to drop StealC malware
Webinar: Your browser is the breach — securing the modern web edge
Cybersecurity Dive
Jaguar Land Rover extends production delay following cyberattack
Context is key in a world of identity-based attacks and alert fatigue
Schools are getting better at navigating ransomware attacks, Sophos finds
CISA audit sparks debate about cybersecurity pay incentives
FBI warns about 2 campaigns targeting Salesforce instances
CISA pledges robust support for funding, further development of CVE program
Researchers warn VoidProxy phishing platform can bypass MFA
UK cyber leader calls for shift in focus toward continuity of critical services
How the retail sector teams up to defend against cybercrime
Senior NSC official said US needs to embrace offensive cyber
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
UEFI Secure Boot for Linux Arm64 – where do we stand?
Ruh-roh. DDR5 memory vulnerable to new Rowhammer attack
Australia to let Big Tech choose its own adventure to enact kids social media ban
Microsoft blocks bait for ‘fastest-growing’ 365 phish kit, seizes 338 domains
Criminals broke into the system Google uses to share info with cops
Apple 0-day likely used in spy attacks affected devices as old as iPhone 8
Self-propagating worm fuels latest npm supply chain compromise
FileFix attacks use fake Facebook security alerts to trick victims into running infostealers
JLR stuck in neutral as losses skyrocket amid cyberattack cleanup
China slaps 1-hour deadline on reporting serious cyber incidents
VentureBeat
TechCrunch
Samsung patches zero-day security flaw used to hack into its customers’ phones
Kering, owner of Gucci, Balenciaga, and other luxury brands, confirms hack
Israel announces seizure of $1.5M from crypto wallets tied to Iran
By popular demand: 10 extra exhibit tables open at TechCrunch Disrupt 2025
Here’s the tech powering ICE’s deportation crackdown 
Apple’s latest iPhone security feature just made life more difficult for spyware makers
France says Apple notified victims of new spyware attacks
Kids in the UK are hacking their own schools for dares and notoriety
Vibe coding? Meet vibe security
Jaguar Land Rover says data stolen in disruptive cyberattack
Network World Security
IT professionals share biggest frustrations, wishes on IT Pro Day
Power shortages are the only thing slowing the data center market
Arista continues to defy expectations, build enterprise momentum
2025 global network outage report and internet health check
China’s strike on Nvidia threatens global AI supply chains, sparking enterprise concerns
Arista touts liquid cooling, optical tech to reduce power consumption for AI networking
Network and cloud implications of agentic AI
There are 121 AI processor companies. How many will succeed?
F5 to acquire CalypsoAI for advanced AI security capabilities
HomeLM: A foundation model for ambient AI
Help Net Security
Astrix unveils secure-by-design AI agents to help enterprises manage compliance risk
ManageEngine enhances Log360 to reduce alert fatigue for SOC teams
How a fake ICS network can reveal real cyberattacks
Creating a compliance strategy that works across borders
Rayhunter: EFF releases open-source tool to detect cellular spying
Bots vs. humans? Why intent is the game-changer
Old file types, new tricks: Attackers turn everyday files into weapons
Self-replicating worm hits 180+ npm packages in (largely) automated supply chain attack
Sentra enables organizations to leverage Copilot without compromising security
Neon Cyber exits stealth with Workforce Cybersecurity Platform
InfoSecurity Magazine
Microsoft Disrupts RaccoonO365 Phishing Kit, Seizes 338 Malicious Sites
A Quarter of UK and US Firms Suffer Data Poisoning Attacks
Shai-Hulud Worm Prowls npm to Steal Hundreds of Secrets
Fifteen Ransomware Gangs “Retire,” Future Unclear
Gucci and Alexander McQueen Hit by Customer Data Breach
Chinese AI Villager Pen Testing Tool Hits 11,000 PyPI Downloads
UK: Tax Refund-Themed Phishing Slows in 2025
JLR Extends Production Halt After Cyber-Attack
API Threats Surge to 40,000 Incidents in 1H 2025
FinWise Bank Warns of Insider Data Breach
© 2025 RiskDiscovery | Sponsored by: Deception Logic