[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
UAE Transitions 50% of Gov't Services to Agentic AI
TiDB Breach Exposes Flawed Cloud Security Assumptions
Marvell, Microsoft & Oracle Work to Standardize Data Center Hardware Security
Cloud Security Alliance Survey Finds Data Loss Prevention Often Detects Data Loss Only After It Happens
'PHP2Shell' Bugs Signal Red Alert for Security Industry
OVHcloud GitHub Compromise Tied to GlassWorm Threat Actors
Optiv Launches CyberBOT Cybersecurity Awareness Training Program
Survey Finds High-Profile Executives Feel Untouchable as Digital Exposure Turns Into Physical Risk
Decades-Old Windows Utility Powers Modern ClickFix Attack
Tech Giants Block eMudhra Certificates Tied to 8 Compromised Keys
Ars Technica
333 Tor exit nodes hijacked to intercept SSH traffic and retrieve plaintext email
Enterprises keep buying software upgrades that IT thinks will make things worse
PHP warns it plans to release 2 emergency patches imminently
The Internet goes on high alert after discovery of 8 compromised TLS certs
Meta Muse exposes users' personal and business secrets when they share conversations
PSA: Patch your Plex media server before someone hacks it
ReactOS reaches major milestone with NTFS install support
OpenAI models hacked a crypto wallet and breached more websites
Targeted ads delivered 0-click exploits to install mercenary malware
Fridge hack costing millions and sparking fires stemmed from poor security
CyberScoop
Encryption isn’t enough to protect data wherever it goes 
Microsoft pins ConnectWise supply-chain attack to China-state aligned threat group
PHP releases emergency fixes for 2 critical vulnerabilities
Philippines-based American pleads guilty to running expansive fraud scheme targeting US servicemembers
Nigerian sentenced to 8 years for long-running tax business hacking and fraud scheme
Russian GRU hackers hit NATO shipbuilder, aircraft engine maker, law enforcement agency in espionage campaign
ConnectWise customers hit by supply-chain attack linked to compromised API secret
DOJ escalates fight for election supremacy with California raids
Wyden seeks adoption of encryption tech at hundreds of federal agencies to protect visitors’ sensitive traffic
DHS to ban DeepSeek from federal civilian agencies
InfoSecurity Magazine
Microsoft: Chinese State Actor Used AI to Compromise ConnectWise Tenants
PHP2Shell Exploitation Attempt Detected by Amazon Four Days Before Vulnerability Disclosure
Cloud Security Maturity Lags Despite Widespread Adoption, SANS Warns
New PhaaS Platform Uses AI to Craft Phishing Lures and Mask Malicious Activity
Symantec Uncovers AI Agent Hijacking Models for Autonomous Cyber-Attacks
Ransomware Attacks Rise as Rival Gangs Vie For Market Supremacy
SafePay Has Compromised 600 Critical Infrastructure Victims Worldwide, CISA Warns
Critical PHP Vulnerabilities Leaked Ahead of Scheduled Security Patches
Children’s Data Stolen After Ransomware Attack Compromises ‘Password1’ Account
Head of AI Security Roles Surge in Large Organizations
SecurityWeek
Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU
Meta Ordered to Pay New Mexico $25 Billion for Deceiving Users About Privacy on Facebook
Google Hardens Chrome Against ClickFix Attacks, Insecure HTTP Connections
PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors
‘Context Bombs’ Cut AI Attack Success by Misleading Agents With Fake Targets
High-Severity Flaws Exploited in Three Days as Ransomware Dominates Q3: Rapid7
Asymptote Labs Lands $5.5 Million Seed for AI Agent Runtime Security
Memory Bugs Account for Most of Chrome’s 353 New Security Fixes
OpenAI Agents Silenced Security Team Alerts, Removed Misalignment Monitor
Browsers Block eMudhra Intermediate CAs Over Recoverable Private Keys
ZDNet
GridCraft is the open-source Excel clone for Linux I’ve been waiting for
Not impressed with Google Maps? Make Waze your default on Pixel – here’s how
Hold onto your old HomePod – an upgrade is on the way
OpenAI’s most powerful AI models turned off safety monitoring – then lied about it
Chrome warns you about suspicious websites now – how to turn on Google’s new scam protection
Amazon unveiled 5 new Blink cameras, including a 4K model that caught my eye
ServiceNow and Nvidia launch Arc, a new AI agent for enterprise
Gemini on Android Auto can access my photos, emails, and calendar now – why I’m OK with that (mostly)
Latest Windows update disables key security setting – but there’s a workaround
TechPulse puts ZDNET and 4 other tech sites in one feed – for free
The Hacker News
Railway Says Intruder May Have Accessed Customer Secrets, Urges Credential Rotation
OpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSL
LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release
Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions
New QPACK Flaws Can Crash HTTP/3 Servers, Trigger Up to 4,000-Fold Memory Amplification
Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed
China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain Attack
Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases
LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor
OpenAI's GPT-6 Agent Removed Safety Monitoring, Then Falsely Denied Doing So
BleepingComputer
GitLab warns of new max severity code execution vulnerability
Authorities disrupt nearly 11,000 cybercrime networks in Africa
Google Chrome adds Gemini-powered scam detection, warns users of ClickFix attacks
Japan's Onamae Desktop Cloud hacked, up to 27,000 servers affected
Lazarus hackers use post-quantum cryptography for malware delivery
CISA: Hackers chain Plex flaws in Plex2Shell attacks to breach servers
OpenAI agents disabled safety monitoring, one lied about it
PHP ships emergency patches for critical PHP2Shell flaws
ClickFix has never been bigger, and AI tools are its most convincing lure yet
Microsoft PowerToys adds CursorHide, Button Lock mouse tools
gbhackers
Fortinet Releases Critical Security Updates for FortiOS, FortiManager, and FortiAnalyzer
Samsung and Vizio Smart TVs Continue Sending Viewing Data Even After Users Opt Out
Hackers Used AI-Generated Scripts to Break Into Government Linux Servers and Hunt for Secrets
Hackers Use Fake App Updates to Replace Legitimate Banking Apps With Malicious Versions
12 DevSecOps Platforms: The 2026 Buyer’s Verdict Guide
Attackers Target Flowise AI Agents With Credential Theft, Prompt Injection and Workflow Hijacking
Hackers Exploit Siemens Software Center Vulnerability to Execute Malicious Code
North Korean Hackers Use Post-Quantum Encryption to Conceal Malware in New Cyberespionage Campaign
Hackers Plant Malware on Onamae.com Cloud Servers, 26,739 Systems Potentially Affected
Hackers Combine Claude Code, Codex, Grok, and DeepSeek to Automate Attacks Worldwide
Cybersecurity Dive
Weak encryption certificates could have let hackers easily spoof websites
FBI, CISA warn that SafePay ransomware poses threat to critical infrastructure
Critical PHP vulnerabilities expose most websites to potential compromise
Russia-linked hackers broke into NATO shipbuilder in latest espionage campaign
Ransomware groups expand targeting of Palo Alto Networks vulnerability
AI security hiring focuses on red-teaming, SOC orchestration and governance
Boards confident on cybersecurity, AI oversight, but tech changes outpace readiness
ConnectWise suspends Cloud Backup service as hacker targets Microsoft 365 users
Q-day is coming: How to prepare for post-quantum security challenges
Hybrid mesh firewalls: Distributed security enforcement for a self-driving network
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
Microsoft says ConnectWise breach let Chinese spies loose on 2,250 cloud tenants
IT department and auditors at major pharmacy chain got into a rip-roaring fight about using 'password' on Cisco firewall
Certification authority eMudhra defends its laughably weak private keys
PHP blames supply chain security biz Chainguard for putting huge chunks of the web at risk
LiteLLM supply chain attack hoovers up passwords and secrets
Signal bug could keep your mic - and camera - on after hangup
PHP devs publish critical bug fix as site owners warned: Pull 'em offline if you're unpatched
AI has 'potential' to turn script kiddies into sophisticated infrastructure attackers
Nvidia picks OpenShell to tame AI gents
EU wants Booking.com to check out of its scam problem
VentureBeat
AI agents are about to put least privilege to the test
DeepSeek-V4.1-Flash-1017 arrives with improved benchmarks just as the U.S. government bans it from agencies — what enterprises should do
AI cloud security needs to prove control before agents reach production
Anyone can build apps with AI. But who owns them?
17 of 40 teams that say they enforce AI agent permissions still share the credentials behind them
Browser security’s buying spree rests on one engine, without a clear Plan B
Anthropic’s Cyber Mission starts with 6,157 findings reported to maintainers and 516 patched
TechCrunch
The internet is having a very bad cybersecurity day
PHP Armageddon: OpenAI, Google’s Wiz find ancient holes, panicking the internet
Blackwall quadruples valuation to $2.2B as websites wrangle an increasingly crowded internet
Governments are hacking people with ‘zero-click’ spyware by showing them online ads
Flock CEO defends surveillance technology amid national backlash: ‘We shouldn’t pause progress’
Flock CEO says its microphones detect ‘just gunshots’ — its website says different
Flock CEO: We haven’t ‘fired’ any police departments as customers
Apate sends AI agents undercover to get scammed so they can gather fraud intelligence
Justice Department says North Koreans have infiltrated dozens of US companies
FBI arrests OpenAI employee accused of planting hidden recording device in conference room
Network World Security
IT/OT convergence exposes skills gap. Cisco responds with new OT security certification
Microsoft exits UK AI data center project over electricity delays
AI networks drive SONiC boom
Microsoft expands sovereign cloud offerings as data control concerns grow
SONiC momentum continues at OCP Global Summit
2026 network outage report and internet health check
Gartner’s top tech trends for 2027 expand—and constrain—AI capabilities
AI agents drive up telemetry costs, complicate network observability
AI datacenter capex will far exceed forecast revenue through 2030
OPC Global Summit: News spans AI-optimized hardware, cooling equipment
Help Net Security
SentinelOne brings runtime threat detection and response to AI agents
Broadcom adds real-time scam detection to 3-D Secure authentication
Claude Security can now spot vulnerabilities that reappear in code
Attackers abuse legitimate platforms to deliver phishing emails that pass authentication checks
What the PHP2Shell vulnerability means for Fortinet, Cisco and Palo Alto customers
Anthropic finds 94 cases where open-source projects drop security controls without warning
Signal flaw could expose audio and video even after users hang up
Africa cybercrime crackdown nets 1,462 arrests and over $105 million
AI-found bugs are expected to rise, and OpenAI has a five-stage response plan
Delinea gives AI assistants read-only access to governance data
SC Magazine
Belarus-aligned group maintains long-term access to Russian healthcare network
Russia considers ai-powered vpn blocking strategies
Federal agencies and critical infrastructure operators must improve joint cyber response readiness
State Bank of India investigates suspected dark web data leak
Zeabur to shut down following major security breach
Authentication friction impacts frontline productivity and security
Hijacked Tor exit relays used to intercept SSH connections
California student data breach impacts millions
TeamUpdraft security breach exposes WordPress site connection keys
US citizen pleads guilty to defrauding military members in identity theft scheme
© 2026 RiskDiscovery | Sponsored by: Deception Logic