[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
So Many AI Security Benchmarks, But None Tell the Whole Story
Risks & Rewards: How AI Is Redefining the CISO's Role
In-the-Wild Attack Abuses AI Agents' Trust in Markdown
'Gheist' Weaponizes GitHub Tokens to Steal Cloud Secrets
10 Software Security Practices Built for the Next 250 Years
Trust Is Not What It Seems — and Fraudsters Are Counting on It
Exposed to PHP2Shell? Cyber Experts Weigh in With Advice
AI Tools Are Generating Massive Attacks for Little Cost
Why Caribbean Threats Cascade Into Global Cyber-Risk
Cyber Insurance's New Reality: Underwriting Isn't Enough
Ars Technica
Disgraced eMudhra drops out of TLS business after using cert private key of 4
333 Tor exit nodes hijacked to intercept SSH traffic and retrieve plaintext email
Enterprises keep buying software upgrades that IT thinks will make things worse
PHP warns it plans to release 2 emergency patches imminently
The Internet goes on high alert after discovery of 8 compromised TLS certs
Meta Muse exposes users' personal and business secrets when they share conversations
PSA: Patch your Plex media server before someone hacks it
ReactOS reaches major milestone with NTFS install support
OpenAI models hacked a crypto wallet and breached more websites
Targeted ads delivered 0-click exploits to install mercenary malware
CyberScoop
What happens when security tools go dark before the ransomware
Experts temper emergency-level alarms over critical Brotli defect
Senators, rights groups say Trump administration breaking law by withholding surveillance court opinion
Authorities extradite Chinese national for alleged $37M investment scam
CISA publishes strategy with eye on the next four years
Senators say targeted ads are a security risk. Ad groups say the critics are off base.
Exclusive: Bipartisan bill would develop federal guidance for distillation attacks, convene industry on defensive cyber
eMudhra kills its certificate business after researchers cracked its private keys in under a second
Encryption isn’t enough to protect data wherever it goes 
Microsoft pins ConnectWise supply-chain attack to China-state aligned threat group
InfoSecurity Magazine
Attackers Exploit Teams External Chat to Breach Organizations in Under 15 Minutes
Copenhagen University Breach Compromises Data on Half a Million People
First ISC2 AI Security Certification Expected for Early 2027
Watchdog Urges Police and Fire Service to Improve Cybersecurity
CISA 2030 Sets Out ‘Aggressive, Anticipatory’ Cyber Defense Strategy for Critical Infrastructure
Gheist Attackers Stumble in Attempt to Abuse GitHub Tokens
Linux Flaws Exposed Before Fixes as Root Exploit Goes Public
Microsoft Issues Emergency Patch Update for Critical .NET Buffer Overflow Flaw
Blue Initiative Offers Maritime Sector Dedicated Vulnerability Database
PHP Publishes Mitigation Advice for New RCE Flaw
SecurityWeek
HPE Patches Dozens of Critical Flaws in Networking Products
Unexplained DreamHost Incident Prompts Email, FTP Password Resets
iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18
Risks Spelled Out for Anthropic Investors Include Possible Harms From Runaway AI
This is Fine: What NetScaler Zero-Days Tell Us About the New Normal
Dead Popcorn Time Updater Put Millions of Computers at Risk of Takeover
Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems
Cybersecurity Issue Forces a Major New Mexico Hospital to Divert Patients and Close Clinics
Anthropic Files for Potentially the Biggest IPO Ever as CEO Warns of Risk to Humanity From AI
Industrial Vendors Check Products for PHP2Shell Vulnerabilities
ZDNet
I tried Windows 11’s customizable right-click menu – and it’s a much-needed change
Apple’s iOS 27.2 update offers major Siri AI upgrades, dual camera support for FaceTime
Github competitor Entire is live now – how the agent-first platform works
Apple’s new OLED iPad Mini is the upgrade I’ve been waiting for – here’s why
iPhone Duo screens are already cracking: What buyers need to know
Android lets you ‘bubble’ apps for easy access now – how it works
PHP2Shell: Haven’t patched yet? Take these steps now to mitigate
Amazon’s Kindle Unlimited is now Kindle+, and the 2 big changes include AI audiobooks
The latest PowerToys gives your mouse 2 new tricks for free – how to use them
GridCraft is the open-source Excel clone for Linux I’ve been waiting for
The Hacker News
Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens
Keystone to Destroy 18,835 Hardware Wallets After Hackers Steal Device Verification Key
AI-Generated Fake Login Pages Are Making Account Takeovers Easier
Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum Encryption
Australia Gets Into Amadey Malware Backend, Cuts Off Access to 180,000 Infected Computers
OpenAI Compaction Flaw Let Researchers Bypass Hidden Reasoning Protections
Attackers Hijack Dahua IP Cameras in Ukraine Using P2P Access and Auth Weaknesses
CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution
Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on Magento
PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw
BleepingComputer
Apple backports CoreGraphics zero-day patches to older iPhones
Energy giant ENGIE discloses data breach affecting customers
CISA confirms PHP2Shell vulnerabilities now exploited in attacks
University of Copenhagen data breach exposes data of 525,000 people
Former pentester used ARTEX AI to steal 8.2 million data records
OpenAI launches GPT-6.1 Terra with 3x faster AI agents, 50% lower pricing
DreamHost forces password resets in ongoing "incident"
Critical 'HTTP2Shell' Brotli vulnerability triggers emergency patches
Microsoft releases emergency .NET patches for critical Brotli flaw
When an AI Agent Is the Incident, the Identity Record Is the Evidence
gbhackers
Hackers Compromise 17 Exposed AI Pentesting Panels to Deploy Malware and Steal Credentials
Researchers Discover OpenAI API Vulnerability That Leaks Hidden AI Reasoning Traces
HashiCorp Consul Vulnerability Allows Attackers to Bypass Authorization and Gain Elevated Privileges
Apple Fixes Actively Exploited iOS Zero-Day Vulnerability in CoreGraphics
Hackers Use Google Ads to Push Fake Claude Downloads Hosted on Real Claude.ai Domain
Hackers Abuse Magento CMS Blocks to Infect Online Stores and Evade Malware Detection
Alibaba’s Qwen AI Model Attempts to Upload Files to China While Performing Cybersecurity Tasks
DreamHost Security Incident Forces Password Resets for Email and FTP/SFTP Accounts
9 Managed File Transfer (MFT) Solutions: The 2026 Buyer’s Verdict Guide
12 Secure File Sharing Solutions: The 2026 Buyer’s Verdict Guide
Cybersecurity Dive
CISA promises proactive defense in new strategic plan
Security anchors a modern hybrid sovereign architecture
PHP exploitation moves at slower-than-expected pace, but millions remain at risk
Large businesses’ cybersecurity insurance claims are now less frequent but more expensive
China-nexus actor linked to attack on ConnectWise Cloud Backup
Agentic AI helps hackers level up, even without detailed instructions
Weak encryption certificates could have let hackers easily spoof websites
FBI, CISA warn that SafePay ransomware poses threat to critical infrastructure
Critical PHP vulnerabilities expose most websites to potential compromise
Russia-linked hackers broke into NATO shipbuilder in latest espionage campaign
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
Microsoft releases out-of-band Windows fixes with certificate updates
Attack on email hosting provider for German far right party AfD exposed 345k accounts
Japanese virtual desktop cloud hacked so hard it asks to be banned
Worm armed 42 GitHub repos by hiding a payload too big to fail
Alibaba's Qwen AI caught trying to contact server in China
LiteLLM supply chain attack started with an exposed master key
Microsoft releases emergency .NET security fixes for Google Brotli bug
UK pentester 'killa' claims $2K Bitcoin prize in PHP2Shell capture-the-flag contest
Trumpets blare and skies part as AI hypefest culminates in Anthropic IPO filing
We shouldn't be surprised about the PHPocalypse, as the internet is built on sticks and glue
VentureBeat
AI agents are about to put least privilege to the test
DeepSeek-V4.1-Flash-1017 arrives with improved benchmarks just as the U.S. government bans it from agencies — what enterprises should do
AI cloud security needs to prove control before agents reach production
Anyone can build apps with AI. But who owns them?
17 of 40 teams that say they enforce AI agent permissions still share the credentials behind them
Browser security’s buying spree rests on one engine, without a clear Plan B
Anthropic’s Cyber Mission starts with 6,157 findings reported to maintainers and 516 patched
TechCrunch
Will AI expose the rickety infrastructure of the internet?
PHP-ocalypse: How two critical web bugs almost broke the internet
Lab testing giant Quest Diagnostics confirms patients’ personal and health data was compromised during breach
Chinese hackers spied on thousands of companies after breaching IT giant ConnectWise
Developer platform Railway urges ‘all users’ to revoke secret keys after cyberattack
The internet is having a very bad cybersecurity day
PHP Armageddon: OpenAI, Google’s Wiz find ancient holes, panicking the internet
Blackwall quadruples valuation to $2.2B as websites wrangle an increasingly crowded internet
Governments are hacking people with ‘zero-click’ spyware by showing them online ads
Flock CEO defends surveillance technology amid national backlash: ‘We shouldn’t pause progress’
Network World Security
Cisco taps AI, partners to modernize IT operations and fortify network security
Key security concepts NetOps must understand to proactively support SecOps
Is it time to retire VPNs?
Google will pay people to use less electricity so its data centers can use more
Hyperscalers allow more scrutiny of controversial data center plans
Midmarket AI gap: Small IT teams are being asked to do enterprise-sized jobs
Nvidia GTC Berlin: Faster AI factories, lower power use, more secure agents
Gartner forecasts 15% global IT spending growth, recaps top tech predictions
Extreme wants to use idle network compute capacity for local AI
IT/OT convergence exposes skills gap. Cisco responds with new OT security certification
Help Net Security
Sekoia introduces self-hosted deployment for organizations with strict data controls
DNSFilter LUMINATE unifies DNS security, AI controls and remote work protection
FireMon Agentic AI helps teams investigate access and prepare policy changes
Exeon expands threat detection to shadow AI and autonomous agents
Cyberattack disrupts University of New Mexico hospitals, extortion group claims attack
CISA lays out plan to push cyber adversaries out of US critical infrastructure
ThreatAware brings governance to AI-built security applications
Cyberattack on University of Copenhagen exposes data of 525,000 people
Private repos still leak secrets to Gheist, a stolen GitHub token campaign
DreamHost incident triggers password resets, locks customers out of email and FTP accounts
SC Magazine
GITEX Global 2026 to showcase advancements in artificial intelligence and cybersecurity
Former NSO Group head advocates for sovereign AI to reduce reliance on US firms
Cisco introduces privileged infrastructure access to secure network management
Enterprises accelerate public key infrastructure modernization for quantum readiness
The intelligence problem AI can’t solve
Securing Modern Financial Systems in the Age of AI - Rashid Feroze - ASW #406
DreamHost resets user passwords following service disruption
Dutch police arrest two men over AI-powered bank fraud scheme
Sweden bans ChatGPT and Claude for government use
UK Biobank prepares to reopen research platform following major data breach
© 2026 RiskDiscovery | Sponsored by: Deception Logic