[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
NIST: Solo Shouldn't Mean Less Secure
UK Wades Into Tech Sovereignty Amid AI Policy Changes
AI Gave Your Incident Archive a Second Job
Why Europe's Freezer Hacks Spread So Far, So Fast
UK Warns Its Critical Infrastructure Faces Grave Risk
Operação de influência russa tem como alvo generalizado a América Latina
US Government Email Systems Open to Abuse Thanks to Typos
What We Missed: Knicks Phishing Test Goes Out of Bounds
APT29's Watering Holes Target Thousands of Mobile Users
SecurityDataPipeline.com Launches as a New Educational Resource for the AI Era
Ars Technica
Chainalysis says hackers stole credentials and tokens for all of its customers
Meet *sshole, the vulnerability that lets hackers SSH into Linux devices
Hackers exploited iOS and Android flaws to infect phones
VMware releases vSphere Express for virtualization on up to 128 cores
Binance says hackers who stole billions in crypto spent months planning heist
UEFI bootkit infected fully patched Windows machines. Is Microsoft to blame?
Anthropic VS code extension on Cursor backdoored for nearly 12 hours
Code-execution flaw in UEFI firmware affects most servers on planet Earth
Disgraced eMudhra drops out of TLS business after using cert private key of 4
333 Tor exit nodes hijacked to intercept SSH traffic and retrieve plaintext email
CyberScoop
AI doesn’t have to go rogue to break the world
Authorities accuse trio of using AI deepfakes to defraud $129M from businesses
Air Force cyber official: need to invest in digital forensics
OpenAI debuts GPT-6 Cyber, touting better performance — and safety guardrails
What Democratic control of Congress means for cybersecurity
Officials extradite Canadian man to US for alleged cryptomining spree
Defense and aerospace firm settles with government over allegedly failing to meet cybersecurity contract requirements
Oklahoma man charged with mailing threats, substances to election officials nationwide 
Europol dismantles investment scheme that impacted potential victims in 50 countries
Ballot scanner malfunctions, flurry of federal legal actions test election officials on final day of voting 
InfoSecurity Magazine
Jailbroken AI Agent Ran Two-Week Attack on European Telecom
New Supply Chain Attack Compromises Tens of Thousands of GitHub Repositories
Email Addresses of 2.2 Million Sega Customers Leaked in Vendor Breach
Crédit Mutuel Arkéa Targeted in Reported $133m Heist
Anti-Money Laundering Watchdog FATF Targets Scam Compounds
ARTEX Offensive AI Tool Activity Far Exceeds Reported Campaigns, Censys Finds
CISA, FBI Urge Action to Protect Industrial Refrigeration Networks
Half of Security Leaders Report Sensitive Data Exposure Through AI Tools
Residential Proxy Traffic Traced to White House Network
Zyxel Switch Patch Missed Flaw Behind Wave of Attacks
SecurityWeek
Revolve Puts Data Breach Victim Count at 1.5 Million
Plex2Shell Exploited Against QNAP NAS Users
Iris Plaza Breach May Have Exposed Data of 7.7 Million Customers
Italy’s Meloni Blames Pro-Russian Hackers for Leak of Foreign Minister’s Data on the Dark Web
Hackers Exploiting ‘SSHole’ Authentication Bypass in OpenSSH
Amplifon Americas Data Breach Impacts 1.3 Million
Over 3 Million People Hit by Frontline Education Data Breach
Google DeepMind’s AI Agents Make 1024-Bit RSA Keys Cheaper to Attack
Brava Security Emerges From Stealth With $15 Million in Funding
SonicWall Patches Exploited SonicOS Vulnerability That Weakens VPN Logins
ZDNet
Samsung mulls Galaxy AI usage limits and subscription tiers – what we know
Alpine Linux and OpenSSH patch flaw that’s as bad as it can get
Android is getting my favorite iOS tracking feature – what to expect
Thinking Machines’ new model takes the lead in western open-weight AI
Apple will monitor your public iCloud links now, starting with iOS 27.3
92% of HR say staff can train for AI jobs – but half of companies still hire outside
6 default Pixel 11 settings I changed that made a big difference – and why
Claude’s new Personal Finance tool aims to help analyze your spending – read-only, of course
3 ways Bluetooth 7 upgrades your devices beyond lossless audio
The Siri AI waitlist is gone in iOS 27: How to try the beta today
The Hacker News
Bitter Hackers Deploy New PapRAT Backdoor in Cyberespionage Campaign Targeting South Asia
⚡ Weekly Recap: SSHole Exploited, APT Root RCE, Robot Takeovers, 15K Hacked Sites, and More
Default 'admin:admin' Server Password Helps Researchers Hack Two Automakers, Unlock and Start Cars
Web3Auth Flaw Exploited to Steal Keplr Crypto, Provider Empties Other Wallets for Safety
LNbits Urges All Operators to Shut Down Their Bitcoin Lightning Wallet Servers Amid Attacks
Taiwan-Based Hacker Used BOSSAI AI Agents to Steal Taipei Emergency Dispatch Records
Former OpenAI Engineer Pleads Not Guilty to Planting Covert Device in Executive Meeting Room
U.S. Agencies Warn Refrigeration Controller Attacks Could Cause Fires and Inventory Losses
CISA Flags SonicWall SonicOS MFA Bypass Flaw Amid Reports of Possible Exploitation
Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub
BleepingComputer
Binance denies data breach after alleged ShinyHunters claims
Hackers exploit SSHole OpenSSH flaw to breach Linux systems
The Biggest Threat to Your GRC Job Isn’t AI. It’s Ignoring AI.
FBI agent stole $2.5 million in crypto from hackers under investigation
US bans MEXC crypto exchange over sanctions evasion, cybercrime links
Ukraine dismantles crypto scam network that stole €4.3 million
Iris Ohyama data cloud breach exposes info of 7.7 million customers
Hackers pull off $133 million French bank heist via service provider
CTM360 Exposes Fake Gift Card Scams Exploiting Trusted Brands
SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks
gbhackers
New Abe Office Malware Tricks Chrome Into Decrypting Its Own Protected Browser Cookies
Google Gemini Safety Filter Bypass Exposes Blocked AI Images Through Download Links
ModSecurity WAF Vulnerability Allows Attackers to Bypass File Upload Restrictions Using Crafted HTTP Requests
GhostAction Attack Hits Tens of Thousands of GitHub Repositories to Steal Cloud and AI Credentials
Hackers Use New Lindnor Backdoor to Target Microsoft SQL Servers in Anubis Ransomware Attack
CISA and FBI Warn of Cyberattacks Targeting Industrial Refrigeration and Cold Chain Monitoring Systems
Operation Snowball Exposes AI Hacking Campaign Targeting European Telecom and 13 Hosted Organizations
PolinRider Malware Returns in 10 Hijacked npm Packages Using Ethereum Blockchain to Deliver Malicious Code
SonicWall Warns of Actively Exploited SSL-VPN Vulnerability That Bypasses SAML and MFA Protection
Critical React Server Components Vulnerability Allows Unauthenticated Attackers to Execute Malicious Code on Servers
Cybersecurity Dive
Financially motivated threat cluster uses AI-enabled tools against banking sector
Cybersecurity education in the AI era: What’s new, what’s different
Improving incident response with AI agents
5 critical steps organizations should take to secure AI
Hackers enlist Artex to scan GitHub repositories for exposed secrets
Companies struggle to know what normal looks like for AI agents
What to expect from Democrats’ cybersecurity agenda in Congress
French authorities probe cyberattack targeting nation’s blood supply
Attacker abuses Microsoft Entra ID to target downstream MSP clients
Companies spend more on cybersecurity but still struggle with AI oversight
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
Microsoft's Azure Linux gets 470-plus security fixes in one almighty patching session
Who Gives A Crap? Hackers, apparently, after toilet paper maker's customer data exposed
Outlook.com bounces legit emails as Microsoft's authentication crackdown goes sideways
Japanese homeware giant pulls online store after cloud breach puts 7.7M records at risk
Linus Torvalds sees signs AI-prompted patch flood has peaked
Huawei says it’s made a 100 percent Chinese PC
NHS breach helpline left staff carrying a 'significant emotional burden'
Agents reveal secrets when offered to team up with each other
DigiCert admits 16-month security lapse exposed customer information
UK ministers seek powers to investigate when AI agents are let off the leash
VentureBeat
AI agents don't have to break security controls to go rogue. Here's how to keep them in check
Agents are rewriting the book on security. Can your data layer keep up?
AI agent access is moving faster than identity controls can govern
AI agents are about to put least privilege to the test
DeepSeek-V4.1-Flash-1017 arrives with improved benchmarks just as the U.S. government bans it from agencies — what enterprises should do
AI cloud security needs to prove control before agents reach production
Anyone can build apps with AI. But who owns them?
TechCrunch
Hundreds of Artex AI hacking tools found publicly exposed to the web
Palo Alto Networks in talks to buy AI agent security startup Clutch for $500M
US government warns of ‘ongoing cyber threat’ amid mass hacks of industrial retail and military freezers
Hackers stole DreamHost customer files and inboxes during months-long attack
Building on open source AI? Hugging Face’s policy chief on the costs, risks, and trade-offs
Ted Schlein’s Ballistic Ventures seeks $490M for new funds amid AI-driven cybersecurity boom
Researchers warned of North Korean hacking tactics years before record $6.3B Binance heist
CrowdStrike to shell out nearly $500M for 2 AI security startups as the market for securing agents takes off
New York City’s Mamdani criticizes Madison Square Garden owner over surveillance tech
Germany says lawmakers’ iPhones may have been hacked with spyware
Network World Security
Google targets AI’s next infrastructure bottlenecks with two new TPUs
A mole in the White House? Residential proxies are everywhere
Don’t mention the data center: OpenAI calls them ‘compute campuses’ instead
Broadcom has quietly changed VMware availability, support for parts of Europe
Agentic AI boom expected to reshape CPU market
IBM, Quantinuum and Intel signal a new phase in the quantum computing race
Zyxel patches a zero-day hiding behind an old fix
Attackers turned OpsShield’s trusted update channel into a supply-chain attack
Arista posts record growth as AI networking supercycle accelerates
Broadcom expands VMware Cloud Foundation with AI, security, and recovery capabilities
Help Net Security
ARTEX goes from pentesting tool to attacker staple in three months
Hackers abuse refrigeration controllers to send spam and route proxy traffic
PyPI makes release attestations easier to find with new security tab
Trio accused of using deepfake CEOs and bogus lawyers to scam businesses out of $129 million
Exploited SonicWall SSL-VPN flaw lets attackers bypass SAML-enforced MFA (CVE-2026-19868)
$133 million stolen from French bank via exploited service provider
Product showcase: What the Malwarebytes Claude connector reveals about unexpected texts
Wirken: Open-source AI agent gateway
Companies seeking an MSP doubt their ability to spot cyberattacks
An average of 8 minutes is all hackers need to log in with stolen credentials
SC Magazine
5 ways to gain control of AI agents
Securing service desk identity verification against social engineering
Understanding the risks of fake cell towers and mobile identifier tracking
Password spraying remains a persistent threat to organizational security
Linus Torvalds suggests peak of Linux kernel patch deluge may be passing
OpenAI engineer pleads not guilty to office bugging charges
Assessing risk at the speed of change, coordinated disclosure, and the news - Danielle Russell - ESW #484
Three charged in $129 million deepfake fraud scheme
Royal Cornwall Hospitals NHS Trust review highlights impact of data breach
Software vendors leverage usage data and ai to drive revenue growth
© 2026 RiskDiscovery | Sponsored by: Deception Logic