[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
Weak Security Continues to Fuel Russian Cyberattacks
'Yellow Teams' Are Defining the Future of AI Security
GigaWiper Lets Threat Actors Choose Their Own Destructive Attack
Turning the Tables on Email Scammers With 'ScamBuster'
Jen Ellis: Connecting Cyber Community With Political Machinery
Cybercriminals Flock to Healthcare Businesses as Attacks Surge
Fresh ATM Crypto Software Bugs: Jackpot or Bust?
More Countries Jump on the Social Media 'Ban Wagon'
AI Coding: Do Security Risks Outweigh Productivity Gains?
Iran's Cyber Crosshairs Focus Beyond Critical Infrastructure
Ars Technica
Now, defenders are embracing the prompt injection, too
Patch for Windows Defender 0-day could allow attackers to fill hard disk
Allstate accuses Broadcom of auditing it because it quit VMware, CA
Google pays $250K for Linux vulnerability allowing guest VM escapes
Aussie gov't tells volunteers to throw out thousands of functioning test routers
US rare earths flow to Asia as domestic demand is slow to emerge
Hackers can use 9 of the most popular AI tools to assemble massive botnets
Newly discovered PamStealer isn't your typical macOS malware
T-Mobile moving tens of thousands of virtual machines off VMware amid lawsuit
New attack provides one more reason why AI browsers are a bad idea
CyberScoop
States are building their own election defense networks as federal support evaporates 
Europe strikes out against Russia’s Turla over espionage, ‘destructive attacks’
Officials once again warn defenders that Russian hackers are targeting network devices
AI-generated code has made security debt a governance problem
Armenian national pleads guilty to Ryuk ransomware attacks
CISA looks to remedy ailments from big May credential leak
Former DigitalMint ransomware negotiator who duped clients sentenced to 70 months in jail
Interpol cybercrime crackdown nets 5,800 arrests across 97 countries
764 splinter group leader sentenced to 40 years in jail
French nonprofit starts global intelligence and research hub for AI cyber threats 
InfoSecurity Magazine
Open Directory Exposes Three Evilginx Phishing Operators
Pakistani Police Systems Hit by Chinese and Indian Espionage
Novel OAuth Client ID Spoofing Technique Targets Cloud Environments
Progress Software Warns of "External Security Threat" to ShareFile
Russian State Hackers Target Vulnerable Routers Worldwide, Joint Advisory Warns
Hacker Extradited from Ukraine Pleads Guilty to Ryuk Ransomware Charges
Australian Cyber Agency Warns of Global CMS Exploitation Campaign
CISA Details Incident Response to Exposed AWS GovCloud Keys
Microsoft Warns New 'GigaWiper' Malware Combines Espionage and Destructive Capabilities
Anthropic and OpenAI Security Tools Could Fuel Cyber-Attacks, Researchers Warn
SecurityWeek
Hacker Conversations: Jesse McGraw (GhostExodus), From Blackhat Hacker to Redemption
Cybersecurity M&A Roundup: 37 Deals Announced in June 2026
RabbitMQ Vulnerability Threatens Enterprise Systems
Zimbra Patches Critical Code Execution Vulnerability
EU Targets Russian Intelligence Officers Accused of Running a Yearslong Cyber Spying Campaign
Organizations Warned of Exploited Joomla Extension Vulnerabilities
Progress Prompts ShareFile Storage Zone Controller Shutdown Amid Security Concerns
Centers Laboratory Data Breach Affects 540,000 Individuals
Ghost Accounts Abuse GitHub API in Mass Recon Campaign
In Other News: DHS Database Hacked, Adobe Boosts Patch Cadence, Canada Disrupts Ransomware Ops
ZDNet
I tested COSMIC's new Frosted Glass effect, and it's way better than MacOS' Liquid Glass
Is that QR code a trap? How to spot quishing scams before it's too late
Windows questions? How Copilot can analyze your PC settings now
How I tag my files to avoid endless searching and disorganized folders
The best all-in-one computers of 2026: Expert tested and reviewed
I tested Alienware's new budget gaming laptop, but these 3 might be smarter buys
I loved ChatGPT Desktop until OpenAI gutted it to make room for Codex and Work
The best email hosting for small businesses in 2026: Expert tested
My Fitbit Air test revealed the flaws of calorie counting with a health tracker - here's why
Red Hat will support your RHEL forever now - for a price
The Hacker News
CrashStealer macOS Malware Uses Notarized Dropper to Pass Gatekeeper Checks
Google and Microsoft Pull ModHeader With 1.6 Million Installs After Dormant Collector Found
⚡ Weekly Recap: ShareFile Threat, Citrix Bleed 2 Ransomware, AI Coding Attacks, and More
New MemGhost Attack Plants Persistent False Memories in AI Agents Through One Email
Forg365 PhaaS Targets Microsoft 365 with Device Code and AitM Session Theft
Meta Files Patent for AI That Can Listen All Day and Track How You're Feeling
Thinking Fast and Slow in the SOC: The Case for Combining Autonomous AI with Analyst Copilots
Attacker Uses Suspected AI-Generated PowerShell Script to Map Active Directory
Misconfigured Server Reveals Three Evilginx Phishing Operations Targeting Microsoft 365
iCagenda and Balbooa Forms Joomla Flaws Reportedly Exploited as Zero-Days
BleepingComputer
Japan's largest taxi operator shuts systems after cyberattack
Hackers backdoor Jscrambler npm package with infostealer malware
New CrashStealer malware poses as Apple crash reporting tool
CISA warns of actively exploited RCE flaws in Joomla extensions
Lidl discloses online shop breach after service provider hack
Breach at the Beach: Play the Ultimate Entra ID CTF
UK charges suspects linked to Russian Coms call spoofing platform
EU sanctions Russian GRU military hackers over cyberattacks
US and allies warn of Russian critical infrastructure attacks
OpenAI temporarily relaxes GPT-5.6 Sol usage limits
gbhackers
Torq and Criminal IP Partner to Deliver Decision-Ready Threat Intelligence for Autonomous SOC Operations
Russian FSB-Linked Turla Hackers Target French Ministries, Embassies, and Defense Entities
Hackers Can Exploit RabbitMQ OAuth Flaw to Access Every Message, Queue, and User
Adaptive Malware Could Evade Signature Detection by Regenerating Its Attack Capabilities
Attackers Combine MCP Recon With Cloud Metadata SSRF to Steal Service Account Tokens
Debian 13.6 Released With Security Updates for Linux, Apache, Curl, QEMU, and More
BusySnake Stealer Uses Reverse SSH Tunnels and AI-Generated Loaders to Evade Detection
CISA Warns of Actively Exploited iCagenda and Balbooa Forms File Upload Flaws
Spear-Phishing Campaign Uses Proton Drive Links and LNK Files to Deliver SpyGlace
Critical WordPress OAuth SSO Plugin Flaw Allows Unauthenticated Attackers to Gain Admin Access
Cybersecurity Dive
US authorities warn that state-linked hackers are targeting vulnerable networking devices
Hackers find a new trick to collect Microsoft Entra user data without raising red flags
Copy-paste might be the riskiest thing your enterprise employees do all day
When cybercriminals outrun the feed
Initial access broker linked to weaponization of CitrixBleed2 flaw
CISA details security lapses that led to GitHub leak of passwords, cloud access keys
Data breach hits car insurance provider
Ransomware ecosystem grows, but ‘four-headed monster’ dominates
US enterprises incorporate cyber risk into larger strategic focus
Accenture faces massive data breach that could put clients at risk
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
EU and UK officially blame Russian spies for cyberattack on Poland's power grid
World Cup grudge attackers may have scored Argentine FA access via year-old infostealer infection
Progress orders emergency ShareFile server shutdown over mystery security threat
Destructive Windows backdoor stuffs multiple wipers and ransomware code into a single package
Fashion mart Miinto unzips breach details, warns shoppers to watch for phisherfolk
Scot NHS Trust probes email stuffup involving maternity patients' data
Microsoft warns customers AI will mean busier Patch Tuesdays
An unnamed US county – perhaps in Ohio – paid $1M extortion demand to cybercriminals
EU 'Chat Control' snoopfest returns after vote to kill it falls short
Microsoft closes book on Nightmare Eclipse's RoguePlanet zero-day
VentureBeat
Forget typosquatting; slopsquatting is the software supply chain threat created by AI coding tools
Shared API keys expose AI agents at 69% of enterprises, new VentureBeat research finds
AI has collapsed the cyber response window — resilience now starts before the attack
The real cost, security, and culture problems behind enterprise AI agents
Digital resilience compounds when AI and human expertise scale together
The attack that hijacked Claude Code came through Sentry. Datadog, PagerDuty, and Jira have the same exposure.
Prompt injection is exploiting enterprise AI's biggest design flaws by targeting agents, RAG pipelines and model routers
TechCrunch
Apple says former employee exploited ‘rare’ bug to download confidential files after leaving for OpenAI
LAPD lets contract with surveillance giant Flock expire, citing ‘serious concerns’ over civil liberties and privacy
US cybersecurity agency CISA had to build its incident playbook during the incident, agency reveals
Florida ransomware negotiator convicted for helping ransomware gang extort US companies
Another massive data breach exposed millions of driver’s license numbers
Hacked, leaked, and held for ransom: The worst breaches of 2026 so far
Hacktivists call out Trump by hacking and defacing US Army websites
Savi’s app aims to protect consumers from realistic AI scams like kidnappers demanding ransom
The ‘first’ AI-run ransomware attack still needed a human
Canadian spy agency says it hacked drug traffickers, extremists, and a ransomware gang last year
Network World Security
Weather grows as one of data center growth’s greatest risks
Routine maintenance as a failure vector in modern networks
Network jobs watch: Hiring, skills and certification trends
AI job titles expand beyond tech as IT hiring remains strong
Broadcom will sell more US-made components to Apple
AI tie-in accelerates quantum usefulness, early adopters say
Infoblox acquires Kentik, adding network observability to its DNS and DDI platform
SpaceXAI wants to compete on AI infrastructure, not just AI models
Gartner: Data center electricity consumption to grow 26% in 2026
IBM grows mainframe family with rack, frame models targeting AI, hybrid clouds
Help Net Security
Hackers breach Lidl’s IT service provider, steal customer data
EU and UK blacklist Russia’s cyber operators over efforts to destabilize Europe
Tidal Cyber connects assets, vulnerabilities, and threats through Threat-Led Defense
Cloudflare Precursor uses continuous behavioral analysis to stop advanced bots
Lumen expands managed detection and response with Cortex XSIAM integration
Ransomware negotiator who betrayed clients sentenced to 70 months in prison
Fake OAuth client IDs are helping attackers slip past sign-in logs
Security threat prompts Progress to disable ShareFile accounts, tell customers to shut down servers
FastNetMon eliminates third-party bgp lookups with Netomics
Claude Code users keep 50% higher limits until July 19
SC Magazine
Cloudflare launches Precursor to track bot behavior throughout browsing sessions
Google Cloud Dialogflow CX vulnerability allowed AI agent hijacking
Varonis launches 'Breach at the Beach' Entra ID training CTF
EU proposes minimum age for unsupervised social media use
UK and EU attribute Poland power grid attack to Russia's FSB, urge critical infrastructure action
Apple sues OpenAI over alleged theft of trade secrets by former employees
LAPD ends contract with Flock Safety over privacy concerns
Lidl reports data breach affecting online customers in Germany, Belgium, and the Netherlands
Cybercriminals exploit OAuth client ID spoofing to bypass cloud security
Argentine Football Association systems reportedly compromised after nearly year-old infostealer infection
© 2026 RiskDiscovery | Sponsored by: Deception Logic