[ News | Newsletters | Blogs | Reddits | Lists | Media | Jobs ] HoneyDB
DarkReading
Android Malware Mutes Alerts, Drains Crypto Wallets
Hackers Weaponize Remote Tools to Hijack Cargo Freight
Let's Get Physical: A New Convergence for Electrical Grid Security
AI Developed Code: 5 Critical Security Checkpoints for Human Oversight
'TruffleNet' Attack Wields Stolen Credentials Against AWS
UNC6384 Targets European Diplomatic Entities With Windows Exploit
Ribbon Communications Breach Marks Latest Telecom Attack
Government Approach to Disrupt Cyber Scams is 'Fragmented'
Dark Reading Confidential: Cyber's Role in the Rapid Rise of Digital Authoritarianism
Zombie Projects Rise Again to Undermine Security
Ars Technica
OpenAI signs massive AI compute deal with Amazon
Two Windows vulnerabilities, one a 0-day, are under active exploitation
ChatGPT maker reportedly eyes $1 trillion IPO despite major quarterly losses
After teen death lawsuits, Character.AI will restrict chats for under-18 users
NPM flooded with malicious packages downloaded more than 86,000 times
Nvidia hits record $5 trillion mark as CEO dismisses AI bubble concerns
New physical attacks are quickly diluting secure enclave defenses from Nvidia, AMD, and Intel
OpenAI data suggests 1 million users discuss suicide with ChatGPT weekly
Expert panel will determine AGI arrival in new Microsoft-OpenAI agreement
A single point of failure triggered the Amazon outage affecting millions
CyberScoop
OPM plans to give CyberCorps members more time to find jobs after shutdown ends
Prosecutors allege incident response pros used ALPHV/BlackCat to commit string of ransomware attacks
Zscaler adds more AI to its offerings with Splx acquisition
Don’t let Congress punt on cyber insurance reform
Alleged 764 leader arrested in Arizona, faces life in prison
Ukrainian allegedly involved in Conti ransomware attacks faces up to 25 years in jail
Government and industry must work together to secure America’s cyber future
OpenAI releases ‘Aardvark’ security and patching model 
CISA, NSA offer guidance to better protect Microsoft Exchange Servers
Cyber scholarship-for-service students say government has pulled rug on them, potentially burdening them with debt
HITBSecNews
Found on VirusTotal: The world’s first UEFI bootkit for Linux
OpenAI is at war with its own Sora video testers following brief public leak
North Korean hackers posing as IT workers steal over $1B in cyberattack
WhatsApp: NSO Group Operates Pegasus Spyware for Customers
Korea extradites Russian, Vietnamese suspects linked to $16M ransomware scheme
CISA Director Jen Easterly, in Place Since 2021, to Step Down
Man sick of crashes sues Intel for allegedly hiding CPU defects
North Korean hackers target cryptocurrency with malware
Law enforcement operation takes down 22,000 malicious IP addresses worldwide
Youth of today say passwords are old news, passkeys are the future
ZDNet
Which cloud storage service should you buy in 2025? I compared the best options, and here's my pick
How to turn off Gemini in your Gmail, Photos, Chrome, and more - it's easy to opt out of AI
My 20+ Google Docs tricks to supercharge your workflow (no extensions required)
This 30-second routine keeps my Samsung Galaxy watch running like new every month
This popular Fitbit is $80 off, and comes with a $20 Amazon credit - here's how to cash in
Own a Samsung smartwatch? These 8 features and settings are very useful (but often overlooked)
Why an ultrawide monitor shouldn't be the default choice for productivity - my buying advice instead
5 steps to fixing your business's top security risk
What the colors of your USB ports tell you (and why some are more capable than others)
How to buy the right laptop during the holiday season (and common mistakes to avoid)
The Hacker News
Malicious VSX Extension "SleepyDuck" Uses Ethereum to Keep Its Command Server Alive
Cybercriminals Exploit Remote Monitoring Tools to Infiltrate Logistics and Freight Networks
⚡ Weekly Recap: Lazarus Hits Web3, Intel/AMD TEEs Cracked, Dark Web Leak Tool & More
The Evolution of SOC Operations: How Continuous Exposure Management Transforms Security Operations
Researchers Uncover BankBot-YNRK and DeliveryRAT Android Trojans Stealing Financial Data
New HttpTroy Backdoor Poses as VPN Invoice in Targeted Cyberattack on South Korea
ASD Warns of Ongoing BADCANDY Attacks Exploiting Cisco IOS XE Vulnerability
OpenAI Unveils Aardvark: GPT-5 Agent That Finds and Fixes Code Flaws Automatically
Nation-State Hackers Deploy New Airstalk Malware in Suspected Supply Chain Attack
China-Linked Hackers Exploit Windows Shortcut Flaw to Target European Diplomats
BleepingComputer
Hacker steals over $120 million from Balancer DeFi crypto protocol
Fake Solidity VSCode extension on Open VSX backdoors developers
Microsoft: SesameOp malware abuses OpenAI Assistants API in attacks
US cybersecurity experts indicted for BlackCat ransomware attacks
Hackers use RMM tools to breach freighters and steal cargo shipments
Microsoft: Patch for WSUS flaw disabled Windows Server hotpatching
OAuth Device Code Phishing: Azure vs. Google Compared
Microsoft: Windows Task Manager won’t quit after KB5067036 update
Penn hacker claims to have stolen 1.2 million donor records in data breach
Open VSX rotates access tokens used in supply-chain malware attack
Cybersecurity Dive
Security leaders say AI can help with governance, threat detection, SOC automation
Cybercrime groups team with organized crime in massive cargo theft campaigns
Windows Server Update Service exploitation ensnares at least 50 victims
CISA, NSA unveil best-practices guide to address ongoing Exchange Server risks
FCC will vote to scrap telecom cybersecurity requirements
CISA updates guidance and warns security teams on WSUS exploitation
Canadian authorities warn of hacktivists targeting exposed ICS devices
AI risks pack a punch, but governance provides a buffer
AI adoption outpaces corporate governance, security controls
Google probes exploitation of critical Windows service CVE
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
AN0M, the backdoored ‘secure’ messaging app for criminals, is still producing arrests after four years
MIT Sloan quietly shelves AI ransomware study after researcher calls BS
Ransomware negotiator, pay thyself!
AWS, Nvidia, CrowdStrike seek security startups to enter the arena
Cybercrooks team up with organized crime to steal pricey cargo
Metropolitan Police hails facial recognition tech after record year for arrests
The race to shore up Europe’s power grids against cyberattacks and sabotage
Attackers targeting unpatched Cisco kit notice malware implant removal, install it again
Russia finally bites the cybercrooks it raised, arresting suspected Meduza infostealer devs
Attackers dig up $11M in Garden Finance crypto exploit
VentureBeat
CrowdStrike & NVIDIA’s open source AI gives enterprises the edge against machine-speed attacks
Meet Aardvark, OpenAI’s security agent for code analysis and patching
Security's AI dilemma: Moving faster while risking more
Fortanix and NVIDIA partner on AI security platform for highly regulated industries
Your IT stack is the enemy: How 84% of attacks evade detection by turning trusted tools against you
When your AI browser becomes your enemy: The Comet security disaster
Agentic AI security breaches are coming: 7 ways to make sure it's not your firm
Cisco warns enterprises: Without tapping machine data, your AI strategy is incomplete
Microsoft launches 'Hey Copilot' voice assistant and autonomous agents for all Windows 11 PCs
Visa just launched a protocol to secure the AI shopping boom — here’s what it means for merchants
TechCrunch
Lawmakers say stolen police logins are exposing Flock surveillance cameras to hackers
How an ex-L3Harris Trenchant boss stole and sold cyber exploits to Russia
DOJ accuses US ransomware negotiators of launching their own ransomware attacks
Hackers threaten to leak data after breaching University of Pennsylvania to send mass emails
Government hackers breached telecom giant Ribbon for months before getting caught
WhatsApp adds passkey protection to end-to-end encrypted backups
Former L3Harris Trenchant boss pleads guilty to selling zero-day exploits to Russian broker
TechCrunch Disrupt 2025: Day 3
CEO of spyware maker Memento Labs confirms one of its government customers was caught using its malware
LG Uplus is latest South Korean telco to confirm cybersecurity incident
Network World Security
OpenAI spends even more money it doesn’t have
Infoblox bolsters Universal DDI Platform with multi-cloud integrations
Cisco unveils integrated edge platform for AI
Verizon to build high-capacity fiber network to link AWS AI data centers
Wolfgang Wendt: “I like to describe IBM as an ‘older start-up'”
Agentic AI: What now, what next?
AMD: Latest news and insights
AMD to build two more supercomputers at Oak Ridge National Labs
Strengthening security with a converged security and networking platform
Nvidia GTC news you need to know
Help Net Security
Product showcase: Cogent Community democratizes vulnerability intelligence with agentic AI
Zenity delivers runtime protection for OpenAI’s AgentKit
Cyber-espionage campaign mirroring Sandworm TTPs hit Russian and Belarusian military
A new way to think about zero trust for workloads
Heisenberg: Open-source software supply chain health check tool
Securing real-time payments without slowing them down
Employees keep finding new ways around company access controls
Europe’s phone networks are drowning in fake calls
Week in review: WSUS vulnerability exploited to drop Skuld infostealer, PoC for BIND 9 DNS flaw published
Unpatched Windows vulnerability continues to be exploited by APTs (CVE-2025-9491)
InfoSecurity Magazine
CISA and NSA Outline Best Practices to Secure Exchange Servers
New GDI Flaws Could Enable Remote Code Execution in Windows
Hackers Help Organized Crime Groups in Cargo Freight Heists, Researchers Find
Conti Suspect in Court After Extradition From Ireland
Leak Site Ransomware Victims Spike 13% in a Year
Conduent Data Breach Impacts Over 10.5 Million Individuals
Chinese-Linked Hackers Exploit Windows Flaw to Spy on Belgian and Hungarian Diplomats
Facial Recognition Firm Clearview AI Hit with Criminal Complaint in Austria
Critical Flaws Found in Elementor King Addons Affect 10,000 Sites
Threat Actors Utilize AdaptixC2 for Malicious Payload Delivery
© 2025 RiskDiscovery | Sponsored by: Deception Logic