[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
Crafty Phishing Campaigns Auto-Adapt to Victim's Device, OS
And the Winner in Dominant Malware Delivery? ClickFix
'Phantom Squatting': An Emerging AI-Driven Supply Chain Threat
Safe Events Start With Threat Intel and Digital Security
China-Linked Group Targets Southeast Asia Critical Systems
Fake Bug Report Hijacks AI Coding Agents at Scale
Attackers Seize Exposed AI Endpoints to Power Offensive Ops
Why Identity Security Is Your Cyber Career Entry Point
Phishers Gain Persistence at EU, Asia Hospitality Orgs
AI-Generated Workflows Are a Silent Security Disaster
Ars Technica
T-Mobile moving tens of thousands of virtual machines off VMware amid lawsuit
New attack provides one more reason why AI browsers are a bad idea
US offers $10 million for info on group behind Signal and WhatsApp hacking spree
Notion killing Skiff-influenced email app since most users use AI agents instead
One-two punch delivered in global operation disrupts cybercrime "assembly line"
White House drastically shortens deadline for dropping quantum-vulnerable crypto
Oracle’s 21,000 layoffs help drive its debt-fueled AI investments
Following user outcry, AMD reinstates memory encryption in consumer CPUs
Microsoft discovers new lightweight backdoor that steals cryptocurrency
Apple patches high-severity eavesdropping vulnerability in Beats Studio Buds
CyberScoop
Researchers spot exploitation of another critical Oracle defect
US lifting export control restrictions on Anthropic’s Mythos, Fable
This phishing kit looks more like BEC-as-a-service
Citrix patches a new NetScaler flaw with echoes of CitrixBleed
Trump budget boss Russell Vought open to re-staffing CISA
DHS to unveil replacement council for critical infrastructure cybersecurity
How ransomware syndicates weaponize corporate-style organization
Warner bill would create federally vetted list for secure, trustworthy AI agents
Supreme Court approves mail-in ballots that arrive after Election Day 
Supreme Court delivers ‘major win’ for tech privacy in Chatrie ruling
InfoSecurity Magazine
Fileless Malware Abuses Google Blogspot to Deploy Infostealer in Memory
Brazilian Banking Trojan Ousaban Targets Spain and Portugal
Anthropic's Fable 5 and Mythos 5 Are Back with New Security Guardrails
Microsoft Accelerates Quantum-Safe Push with New Timeline
Insurance Giant Aflac Discloses Data Breach Impacting Millions
Nissan Discloses Employee Data Breach Linked to Oracle Zero-Day
Critical SimpleHelp Vulnerability Exploited For Malware Delivery
ClickFix Now Cybercriminals' Favorite Malware Delivery Technique
Hackers Leverage Blockchain to Hit Japan's Hotels Through Booking.com Phishing
UK Healthcare Sector Records Tenfold Increase in Cyber-Attacks
SecurityWeek
Microsoft Adds New Teams Controls to Block Unauthorized AI Bots From Meetings
Adobe Patches Critical ColdFusion, Campaign Classic Vulnerabilities
Citrix Patches NetScaler Vulnerabilities, Including New ‘HTTP/2 Bomb’ Attack
Frontier AI: Six Questions Every Enterprise Should Ask Security Vendors
Apple Patches Dozens of Vulnerabilities Across iOS, macOS, and Safari
Dawnguard Raises $6.3 Million for Security Architecture Automation Platform
Massive Password Spray Campaign Targeting Azure CLI
Google Patches 382 Chrome Vulnerabilities
BlueHammer Vulnerability Exploited in Ransomware Attacks
Decades-Old Bash Tricks Expose AI Coding Agents to Supply Chain Attacks
ZDNet
I wore the Oura Ring 5 for a month, and it's an even bigger upgrade than expected
I tested the LG C6 OLED for a week, and its color accuracy and contrast levels left me in awe
I've tested many portable Linux distros, but PorteuX is the one I keep on my USB drive
Your old Android phone can be turned into a dashcam for free - how I did it in 5 easy steps
I tested Lenovo's new modular ThinkPad, and it renewed my faith in repairable laptops
I bricked my iPhone to prevent doomscrolling - how life has been after six months of use
I changed 12 Hisense TV settings to significantly improve the picture quality
Why Déjà Dup and these 4 other tiny Linux tools have become essential to my daily routine
I had Gemini and Claude write my email replies - but only one sounds like me
I've subscribed to Netflix and Peacock for years - but only one service is worth resubscribing to
The Hacker News
Unpatched Argo CD Repo-Server Flaw Could Let Attackers Take Over Kubernetes Clusters
19-Year-Old Scattered Spider Suspect Extradited to Face U.S. Hacking Charges
SEO-Poisoned Software Sites Abuse ScreenConnect to Deploy AsyncRAT
VEIL#DROP Malware Chain Uses Blogger Platform to Deliver PureLogs Stealer
Ousaban Banking Trojan Targets Iberian Bank Users with Fake PDF Lures
Adobe Patches 7 CVSS 10.0 Flaws in ColdFusion and Campaign Classic
Critical Cursor Flaws Could Let Prompt Injection Escape Sandbox and Run Commands
Progress Kemp LoadMaster Pre-Auth RCE Flaw Faces Active Exploitation Attempts
AI-Generated Browser Ransomware Abuses Chromium API on Windows and Android
2026 Cybersecurity Assessment: The Gap Between Awareness and Resilience
BleepingComputer
FortiBleed credential-theft campaign linked to Lynx ransomware
Kubota says hackers had month-long access to network systems
New ChocoPoC malware targets researchers via trojanized PoC exploits
DHS confirms hackers breached HSIN info-sharing platform
Webinar: Why traditional email security is no longer enough
Hackers target Microsoft 365 accounts with 81 million login attempts
Turning Indicators into Intelligence in OpenCTI with Criminal IP
Over 900 Oracle E-Business instances exposed to ongoing attacks
Microsoft fixes GIF functionality in the Windows Emoji Panel
Amazon fined $2.25M for withholding evidence from fraud victims
gbhackers
Turning Indicators into Intelligence in OpenCTI with Criminal IP
Mitigating Attacks Before They Impact Infrastructure: Link11 provides next generation network DDoS protection
Malicious Google Notes Extension Swaps Crypto Wallet Addresses During Transactions
MacSync Stealer Hijacks macOS via Fake Claude Code Google Ads – Full Attack Chain Exposed
ToddyCat Uses Shadow Token via Remote Debug to Compromise Gmail Accounts
FCC Bans Chinese-Produced Network Equipment Linked to Cyber and Espionage Risks
CISA Adds Actively Exploited SimpleHelp Vulnerability to KEV Catalog
The Gentlemen Ransomware Targets Large Corporations and Critical Infrastructure Worldwide
RedLine Infostealer Thread Reveals Hidden Maritime Phishing and BEC Infrastructure
OpenMatter Network Introduces Verifiable Trust Layer for Secure Collaboration and AI Agents
Cybersecurity Dive
Critical flaw in Oracle E-Business Suite is under immediate threat
Anthropic reactivates Fable, Mythos after securing government approval
Critical flaw in SimpleHelp exploited in attacks targeting sensitive credentials
DHS proposes new system for public-private infrastructure security collaboration
Insurance body confirms hackers posted Oracle PeopleSoft breach data
OpenAI voluntarily limits new AI models at government’s request
From mythos to reality: Why the 2026 state of pentesting report proves the need for programmatic defenses
Software, AI companies form alliance to tackle open-source security flaws
FCC requires emergency-alert distributors to secure their systems
AWS unveils agent security, data access tools
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
EvilTokens device-code phishing kit totally more evil than we all thought
Claude Sonnet 5.0 heads straight down the middle of the road to dodge controversy
Somebody told DeepSeek to build in-browser ransomware and it gleefully complied
Red teamers turned Claude Desktop into a double agent to do their evil bidding
Infosec professionals sour on automated pentesting tools
Huntress CEO says threat hunter used 'poor judgment' in alerting ransomware crim about law enforcement probe
Microsoft builds a bouncer to keep bots out of Teams meetings
India’s central bank mandated use of .bank domains to enhance trust – but its registry leaked sensitive info
Security researchers tricked LLMs into giving them cocaine recipes by abusing role models for prompt injection
Four years into Ukraine invasion, Russia turns influence-ops back to US and Europe
VentureBeat
Digital resilience compounds when AI and human expertise scale together
The attack that hijacked Claude Code came through Sentry. Datadog, PagerDuty, and Jira have the same exposure.
Prompt injection is exploiting enterprise AI's biggest design flaws by targeting agents, RAG pipelines and model routers
Autonomous security agents need complete data. Here's how to check if yours is ready.
Frontier AI is rewriting the economics of software supply chain security
Visa will offer an inside look at Project Glasswing and how the most powerful agentic models are changing enterprise security at VB Transform 2026
7,000 Langflow servers are under attack. LangGraph and LangChain have the same holes
TechCrunch
In major privacy win, Supreme Court rules geofence warrants are protected by privacy rights
Russian hackers were behind $2.5B hack of Jaguar Land Rover: Report
Polymarket says hackers stole users’ funds
Hacked Klue says criminals are deleting stolen customer data, but now other hackers are making threats
Cellebrite said it cut off Russia, but Russia used its tools anyway
New website names and shames companies that still don’t offer passkeys to users
Klue says hackers stole credential from 2022 that led to customer data breaches
Password manager maker LastPass says hackers stole customer support case data during Klue breach
Tata Electronics, a major tech supplier to Apple and Tesla, confirms data breach
A new unpatchable flaw in Apple chips opens the door to an iPhone jailbreak 
Network World Security
Network jobs watch: Hiring, skills and certification trends
Kyndryl: AI success hinges on workforce readiness
Netgear brings AI-driven network management to SMEs and MSPs
2026 network outage report and internet health check
U.S. Open powers up AI-ready network in challenging environment
Aggressive federal PQE timeline prompts warnings for enterprises
You can’t build sovereign infrastructure with Broadcom, says CISPE
Presidential order addresses quantum computing gaps
Researchers cast new doubt on Microsoft’s quantum computing advance
IBM unveils sub-1 nanometer chip with nearly 100 billion transistors
Help Net Security
Netzilo adds runtime governance for AI agents across major platforms
Dawnguard launches platform to automate secure cloud architecture
Intruder offers Free security plan for lean IT and security teams
The ARToken phishing panel targets Microsoft 365 accounts
Claude Sonnet 5 includes safeguards against dangerous cyber use
What a financial planner taught me about cybersecurity
Nika: Open-source code analysis tool
This supercomputer encrypts your data even while it’s running it
AI-generated code risks reach security, legal, and compliance teams
Microsoft wants to stop unwanted bots from entering Teams meetings
SC Magazine
Ousaban banking trojan targets Spain and Portugal with new stealth techniques
Huntress CEO addresses insider threat claims amid employee-cybercriminal communication
CIA reorganizes to embrace AI and quantum computing
Shell injection flaw found in 10 of 11 open-source AI agents
ScreenConnect abused to deploy AsyncRAT in widespread campaign
DHS revives critical infrastructure cybersecurity information sharing program
US DOJ seizes nearly 400 domains used for illegal World Cup streaming
Progress Kemp LoadMaster vulnerability actively exploited
Exabeam expands security platform to monitor AI agents
Microsoft Teams enhances bot protection with human verification
© 2026 RiskDiscovery | Sponsored by: Deception Logic