[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
EU Grocers Pay a Steep Price for Unpatched Fridge Firmware
Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles
Yam Store: The Phishing Network Behind a Billion Messages
Anthropic 'SneakPeek' Flaw Is a Silent Zero-Click Threat
Russian Influence Operation Widely Targeting Latin America
Ransomware Gangs Embrace Physical Threats, Family Stalking?
Zero-Days Lurk in Microsoft's Overgrown October Patch Tuesday
North Korea Phishes Ukrainians for War Intel
Anthropic Finds Ingredients for Future AI Worms
Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under Attack
Ars Technica
Fridge hack costing millions and sparking fires stemmed from poor security
Anthropic warns small AI models could self-replicate through IoT devices
Topgolf saved over $11.3 million after leaving VMware
PC shipments fall 20.1 percent in “sharpest decline” since Q1 2023
Hackers obtain counterfeit TLS certificates for Google and other large services
OpenAI agents tried to hack Wikipedia tools and flooded it with traffic
Licensing costs driving 90 percent of VMware users to explore options: Survey
MCP for agent-to-agent comms may be the riskiest protocol you've never heard of
Apple changes full-disk access permissions to curb abuse from AI agents
Hacks of 2 federal agencies in a month have spilled a bonanza of sensitive data
CyberScoop
Authorities charge alleged OLVX cybercrime marketplace operator in North Macedonia
Microsoft drops an actively exploited zero-day among record high of 1,413 vulnerabilities
Senators press Trump admin to rally federal government around AI safety, security 
Microsoft and partners disrupt vast Chinese-language phishing kit ecosystem
Ivanti misses opportunity to fix vulnerability before attackers got to work and made it a zero-day
DOJ charges 14 over a sprawling North Korean remote work scheme
FTC says ‘sextortion’ protection companies deceived customers about services 
West African scammers targeted in joint international government-industry operation
Flock can now issue CVEs for its own products. Should we trust it?
IonQ to buy zero-trust security firm Elisity in deal valued at up to $1.3 billion
InfoSecurity Magazine
Microsoft Disrupts Global Yam Store Network Behind One Billion Phishing Messages
ICO Reprimands Met Over Third-Party Data Leak
ROMULUS Malware Server Leverages ClickFix to Deliver Multiple Payloads
Passkey Authentications Double but Adoption Remains Slow
French Supermarket Cyber-Attack Impacts More Refrigeration Controllers
Microsoft Breaks Patch Tuesday Record Again with 1400+ CVEs
Billion-Dollar Companies Twice as Likely to Leave Critical Vulnerabilities Unpatched
European Retail Firms Confirm Cyber Incidents
Defenders Reluctant to Deploy Agentic AI as a Cybersecurity Tool
UK Government Announces Sweeping New AI Security Plans
SecurityWeek
CikaBika Bot RAT Uses Discord for C&C
Novel Android RAT ‘Hirudo’ Replaces Banking Apps With Trojanized Copies
CenterPoint Energy Data Breach Impacts 1 Million Texans
CISO Conversations: James Robinson – Many Jobs, One Journey to Netskope CISO
Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution
Cisco Warns of Exploited Secure Email Gateway Vulnerability
AI Agents Navigate Unfamiliar OT Systems and Move Equipment in Minutes, Booz Allen Finds
ICS Patch Tuesday: Siemens Issues 17 Advisories, Rockwell Fixes ArmorBlock Takeover Flaw
Harmonic Security Raises $50 Million for Workforce AI Protection
Virtual Event Today: Zero Trust Strategies Summit
ZDNet
Windows update patches a whopping 1,400 security bugs –  including 2 zero days
Linus Torvalds is using AI to develop Linux kernel code now
Google lets you make personal Android apps for free now – with just prompts
Apple’s smart home event: All 7 devices, prices, and release dates
4 upgrades HomePod Mini 2 has over its 6-year-old predecessor
Apple’s $299 HomeView smart hub is here: 8 highlights, including the wall model
‘So perfect, they are literally identical’ – Your AI-polished resumes are recruiters’ new top stressor
Dutch tax authorities cancel Microsoft 365 cloud rollout – and turn toward open source
Claude sent a false homicide tip to police – and it’s part of a troubling AI pattern
Google’s new Fitbit Edge solves my biggest gripe with the Pixel Watch
The Hacker News
India Mandates Registered Caller Name Display on 4G and Newer Networks From November 1
GhostAction Compromises About 1,900 GitHub Accounts, Targets Over 30,000 Repositories
Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts
AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches
Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation
Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability
Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App
Microsoft Disrupts 3 Phishing Kits Linked to Over 1 Billion Scam Messages
U.S. Shuts Down Over 40 Laptop Farms, Charges 14 in North Korean IT Worker Fraud
CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts
BleepingComputer
Microsoft fixes bug causing Windows black screens, Explorer crashes
UK Legal Aid Agency: Hackers stole records dating back to 1978
Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks
FBI raids DPRK IT worker laptop farms in Texas, US nationals arrested
Ledger asks sellers across Asia to halt sales after supply-chain attack
Cisco patches new Secure Email Gateway zero-day exploited in attacks
Microsoft fixes VPN issues caused by September Windows updates
The Blind Spots of Agentic Pentesting and How to Close Them
Global takedown hits network behind 1 billion phishing messages
CISA warns admins to immediately fix Ivanti flaw exploited as zero-day
gbhackers
AI Agent Workflows Could Expose Credentials Through Trusted Developer Tools
Critical Next.js SVG Image Processing Vulnerability Could Enable Remote Code Execution
Iron Man Phishing-as-a-Service Kit Impersonates Banks, Couriers and Government Agencies Worldwide
Citrix Patches XenServer Vulnerabilities That Could Enable Host Compromise
Cartoon Network Leak Exposes 200GB of Source Files, Storyboards and Animation Assets
PoC Exploit Code Released for Fortinet FortiClient EMS Authentication Bypass Flaw
AI Used in 84% of Ransomware Attacks as Identity Infrastructure Comes Under Fire.
10 Best RASP Tools Compared (2026): Features & Pricing
10 Best Container Image Scanning Tools Compared (2026): Features & Pricing
SonicWall NSM Bugs Let Attackers Intercept Communications and Execute Commands
Cybersecurity Dive
Hacker targets Ivanti Connect Secure in chained exploitation
Ahold Delhaize USA banners remain offline
Feds crack down on North Korean IT-worker schemes with new raids, charges and arrests
Microsoft, Health-ISAC and partners take down popular phishing kit services
Dangerous flaws in refrigeration equipment were disclosed months before retail attacks
Businesses need more integrated risk management to counter cyberattacks, AI-powered fraud
Ahold Delhaize experiencing cybersecurity issue
CISA calls on Citrix NetScaler customers to patch as new flaws disclosed
GitLab fixes critical vulnerability that exposed software environments to sabotage
AI-driven security: Why agentic AI is changing cybersecurity
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
Legal Aid Agency hackers made off with records dating back to 1978
US Air Force pilots used malware-laden USB drives to plan Afghanistan missions
UK keeps AI safeguards in the maybe pile for Cyber Security BIll
Metropolitan Police's unchecked use of shoplifting platform lands force in trouble with data watchdog
Jev and other decision models can still be tricked with prompt injection
Cisco make-me-root email bug exploited as a 0-day by unknown crims
Security researchers spent 6 days doing their Chromework, built 1B user exploit
Ivanti patches Connect Secure zero-day after researchers confirm in-the-wild attacks
OpenAI engineer charged after boardroom bug found wrapped in toilet paper
Ransomware gets personal: 'We-know-where-you-are kind of stuff'
VentureBeat
Browser security’s buying spree rests on one engine, without a clear Plan B
Anthropic’s Cyber Mission starts with 6,157 findings reported to maintainers and 516 patched
Microsoft's record Patch Tuesday shows why severity can't decide what gets patched first
Your vibe-coded apps are a ticking time bomb for your business. Here’s how to secure them.
AI agents need more than access control — they need identity at runtime
22 of 37 surveyed companies that enforce AI agent permissions still have agents sharing credentials
OpenAI’s new ‘Private Intelligence' targets a growing enterprise concern: who can see your AI data?
TechCrunch
Flock CEO defends surveillance technology amid national backlash: ‘We shouldn’t pause progress’
Flock CEO says its microphones detect ‘just gunshots’ — its website says different
Flock CEO: We haven’t ‘fired’ any police departments as customers
Apate sends AI agents undercover to get scammed so they can gather fraud intelligence
Justice Department says North Koreans have infiltrated dozens of US companies
FBI arrests OpenAI employee accused of planting hidden recording device in conference room
Pluto Security raises $42M as AI gives enterprise security teams a new headache
Surveillance company Flock cuts staff as privacy backlash grows
Asos confirms breach of customer data after hackers send rogue app notification
CIA officer admits to creating fake top secret government program to steal over $190M, including gold bars
Network World Security
Ultra Ethernet 1.1 extends the specification to scale-up networks and adds programmable congestion control
SolarWinds launches Avior AI agents to automate network operations
IBM, IonQ, Diraq, and Atom Computing advance to DARPA’s quantum hardware testing stage
IonQ’s $1.2 billion acquisition of Elisity is trying to position it for quantum cybersecurity
WebexOne 2026: Key themes and why they matter to network engineers
NetBox Labs adds network design templates and AI agents to streamline infrastructure operations
2026 network outage report and internet health check
Cisco, Nvidia push ultra-dense networking for Ethernet AI fabrics
AMD unveils Helion as agentic AI fuels demand for data center CPUs
Ørsted builds compliance into automation, speeds firewall changes
Help Net Security
CISA flags exploited flaws in Palo Alto, Cisco and Ahsay products
Microsoft disrupts phishing network behind more than a billion scam messages
Optro automates GRC workflows with auditable AI agents
Qualys introduces TruConfidence to orchestrate cyber risk remediation
Immuta CISO predicts critical AI incidents at major enterprises within 18 months
The internet’s attack surface moves at very different speeds
AI-generated changes create review bottlenecks in software delivery
Product showcase: GuardOS checks QR links, scans for data breaches, and filters Safari content
FBI raids 40+ laptop farms helping North Korea pocket US tech salaries
Download: The IT and security field guide to AI adoption
SC Magazine
How to get enterprise-grade security without an enterprise-sized team
LG smart TV vulnerabilities allow root access over local network
FTC seeks to shut down companies accused of defrauding sextortion victims
Ransomware actors reportedly escalating to physical threats and violence
Critical Ghostscript vulnerability allows remote code execution
North Korean hackers target Ukraine for war intelligence
Akira ransomware attack highlights MFA gaps in VPN and RDP access
SAP addresses 20 security flaws, including critical Python SDK vulnerability
Docker Hub critical vulnerability allowed token misuse
New AI security startup Pluto raises $42 million to address enterprise risks
© 2026 RiskDiscovery | Sponsored by: Deception Logic