[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
Writing the Next Chapter
Australian Gov't Weighs Mandatory AI Incident Reporting
Citizen Lab Slams Trump Administration, 'Techno-Fascist' Executives
Anthropic Gives Vetted Defenders Fewer Claude Guardrails
OpenAI Agent Escape Causes Wikimedia Service Outage
ClickFix Attacks Evolve to Better Hide Malicious Payloads
Critical Healthcare Systems Aren't Quantum-Ready
Google's PageBreak AI Agent Finds 500 Flaws in Its Web Apps
IANS' Kakolowski: How AI Is Reshaping CISO Budgets & Security Teams
'BigDiskBuster' Leaves Microsoft Defender Running While Blocking Updates
Ars Technica
Hackers obtain counterfeit TLS certificates for Google and other large services
OpenAI agents tried to hack Wikipedia tools and flooded it with traffic
Licensing costs driving 90 percent of VMware users to explore options: Survey
MCP for agent-to-agent comms may be the riskiest protocol you've never heard of
Apple changes full-disk access permissions to curb abuse from AI agents
Hacks of 2 federal agencies in a month have spilled a bonanza of sensitive data
Memory executives expect RAM shortage to continue through 2028
Attackers have been exploiting critical Zimbra flaw to steal emails
Cloudflare plans to issue quantum-safe TLS certificates
Your uncle’s frozen Mac says it’s infected after viewing a Google ad. Now what?
CyberScoop
Quantum computers could break today’s encryption. Washington needs to prepare now.
Major rules for federal contractors handling sensitive data are nearing the finish line
FBI, French authorities seize deepfake CSAM-for-sale websites 
PoeLLM malware has assembled a sweeping botnet, taking technical cues from a poem
Alert: FortiBleed remains active campaign, can lock out users or lead to ransomware attacks
Wiretapping change sparks big privacy fight in the Golden State
Former NSA chief Nakasone says agency overhaul is ‘probably needed’
Here’s how experts think CISA should tell agencies to protect OT
Citrix discloses third actively exploited NetScaler zero-day in less than a week
The US needs a real plan to defend its water systems
InfoSecurity Magazine
Attackers Hijack Three ccTLDs to Obtain Google Certificates
ASOS Confirms Data Breach Linked to Stolen Employee Credentials
Russia-Aligned UAC-0099 Evolves MATCHBOIL Malware
Chinese Hacker Deployed AI in Campaign Against South Korean Banks
Critical Flaw in Multiple Atlassian Products Exploited in the Wild
Europol and US Spending Watchdog Sound the Alarm Over Quantum Threats
FBI and Secret Service Warn of FortiBleed Lockout Threat
OT Coalition Urges CISA to Mandate Federal OT Security
Attackers Hide AI Prompt Injections Inside Phishing Emails
Telegram Account Behind ASOS Rogue Notification Tied to Gaming Trading
SecurityWeek
Cisco Patches a Dozen Critical Vulnerabilities
Security Awareness Training Isn’t Dead, but It Needs a Rethink
Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication
US Seeks Alleged Chinese Hafnium Hacker With $10 Million Reward
SonicWall and Splunk Patch Critical Vulnerabilities
Rein Security Raises $25 Million to Guard AI Agents at Runtime
TP-Link Faces State Lawsuits and New Scrutiny Over ISP Router Flaws
Fake Decryption Tools Masked $11M Markup in Ransomware Recovery Scheme
Oracle Health Data Breach Tally Climbs to Nearly 20 Million
FortiBleed Attackers Locking Victims Out of Fortinet Devices
ZDNet
Regulators are trying to protect you from being fired by AI – here’s how
Can AI fix legacy IT? The ‘economics don’t hold up,’ says former IBM strategist
Yelp, who? 4 ways Google Maps can help you find your next meal – and order it
Microsoft’s new Surface Laptop Ultra finally has a starting price (you should sit down)
Managers are using AI to write performance reviews – and it shows
Use Gemini for free? You’ll soon be limited to its weakest AI model
Office 2021 support ends this month – you have 5 options
Mistral’s new Le Chonk model brings AI cybersecurity to your business – and you control it
How I made a paid Mac app in 11 days with Claude – without writing a single line of code
iPhone 18 Pro Max can’t call or text on AT&T? Apple will replace it for free
The Hacker News
Japan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attacks
UAC-0099 Targets Ukrainian Government Personnel With ASHVEIN RAT Hiding Commands in HTML
ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms
Wazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and Australia
16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases
U.S. Offers Up to $10 Million for Tips on Zhang Yu, Charged in HAFNIUM Hacks
MonsterCloud Owner Accused of Billing Over $19M While Secretly Paying Ransoms to Decrypt Data
Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm
Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains
Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer
BleepingComputer
FakeGit malware campaign returns with 17,610 malicious GitHub repos
Cisco warns of critical flaws allowing Nexus switch takeover
OAuth grants pile up faster than you can review them. Here's how to keep up.
Uranium crypto exchange hacker convicted for stealing $53 million
Microsoft Teams to get support for third-party deepfake detection tools
ASOS links data breach to social engineering attack, credential theft
Owner of Empire cybercrime market gets 40 years in prison
Samsung Galaxy S26 hacked three more times at Pwn2Own Ireland
Ransomware recovery CEO charged over secret ransom payments
FBI: Ongoing FortiBleed attacks lock out FortiGate VPN admins
gbhackers
Insignary Launches Clarity AIR to Detect Undeclared Open-Source and AI-Written Code
Hackers Hijack Tensorlake Package to Spread Shai-Hulud Supply Chain Malware
PoC Exploit Released for Zammad Vulnerability Enabling Session Hijacking and Remote Code Execution
Critical LMCache RCE Vulnerability Remains Unpatched, Public PoC Exploit Available
16 Malicious Firefox Extensions Impersonate Crypto Wallets to Steal Seed Phrases and Private Keys
Exposed DarkSword iOS Servers Reveal Crypto Wallet Theft From Compromised iPhones
wolfSSH Patches 5 Security Vulnerabilities, Including Critical SSH Authentication Bypass
Critical Gitea Vulnerabilities Allow Attackers to Bypass Authentication and Execute Code
Critical Cisco Nexus Switch Vulnerabilities Allow Unauthenticated Attackers to Execute Code as Root
Financially Motivated Hacker Uses Agentic AI to Breach Multiple South Korean Finance Targets
Cybersecurity Dive
What the C-suite needs to know about AI governance
US government lagging in transition to post-quantum encryption, GAO finds
AI underscores singular importance of phishing-resistant authentication, Okta says
FBI warns that FortiBleed credential-harvesting attacks are locking out firewall users
IBM’s AI-powered vulnerability clearinghouse finds hundreds of Java flaws
US cyber resilience, oversight tested in series of attacks
Citrix issues patch for third exploited flaw in NetScaler
White House AI task force faces expertise, partnership challenges
Why permissions must be the foundation for next-gen identity security
Modernizing data security with DSPM, AI and fewer tools
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
Shai-Hulud worm makes jump to AI infrastructure with Tensorlake compromise
Fighting GenAI with GenAI: The New Email Security Landscape
UK and Germany team up against Russian cyberattacks as Brexit rethink looms
Cheapskates wouldn't pay for security help, got hit by ransomware, and went bust months later
Ransomware fixer claimed he could decrypt files, allegedly defrauded clients instead
Attackers hijacked top-level domains, minted fake security certs for Google and other orgs
AWS launches open-source AI agent sandbox to prevent YOLO mode disasters
US states sue popular kitmaker TP-Link over China risks
Poetry is the new AI security threat as PoeLLM malware infects 3K+ servers
FortiBleed still a bleeding nuisance as FBI confirms ongoing attacks
VentureBeat
Microsoft's record Patch Tuesday shows why severity can't decide what gets patched first
Your vibe-coded apps are a ticking time bomb for your business. Here’s how to secure them.
AI agents need more than access control — they need identity at runtime
22 of 37 surveyed companies that enforce AI agent permissions still have agents sharing credentials
OpenAI’s new ‘Private Intelligence' targets a growing enterprise concern: who can see your AI data?
Anthropic documented a new problem for security teams: Attacks that can adapt while they're underway
The defender's head start is gone. Cisco's Liz Centoni on the fight to get it back
TechCrunch
Asos confirms breach of customer data after hackers send rogue app notification
CIA officer admits to creating fake top secret government program to steal over $190M, including gold bars
LibreOffice says ‘no AI’ is now a software feature
Hackers steal 8 million citizens’ records from Danish government database
Google froze its open source bug bounty program due to a ‘significant rise’ in AI submissions
Federal judge calls Flock ‘indiscriminate mass surveillance’
OpenAI safety employee resigns, claiming the company’s ‘culture is broken’
Apple says it’s tightening macOS ‘Full Disk Access’ controls due to new risks from AI agents
Medical records giant Epic pauses product development to fix security bugs that risk patients’ data
Kevin Mandia’s new ‘agent swarm’ security startup Armadin raises $255.5M at $2.5B valuation
Network World Security
2026 network outage report and internet health check
SonicWall’s latest critical flaw indicates a security pattern, not another one-off bug
Arista steps up its Ethernet challenge to Nvidia’s AI scale-up networking fabric
Dell gives AI agents a broader view of enterprise data
HPE supercharges ProLiant servers with AMD’s EPYC 9006 processors
AMD to ramp up CPU, GPU supply in 2027 as AI demand surges
Cisco readies new control plane for quantum networks
Google overhauls cloud modernization portfolio with new AI agents
GTT bets that the network, not the log file, is where AI-era security gets won
Micro data center company launches stackable data center for edge and AI
Help Net Security
Authorities seize sites selling hacked, stolen intimate images of 17,000 women and girls
YouTubers targeted with fake sponsorships and “channel verification” phishing
Anthropic’s new budget model gets much better at ignoring hidden commands
Cryptomining botnet hides C2 addresses in GitHub poem, infects over 3,400 servers
GitHub adds AI to catch passwords before a code push
What is MATCHBOIL? The Russia-aligned malware that installs a spying backdoor
Ransomware recovery firm boss charged with secretly paying attackers and overcharging victims
Pricing your bad days and how to build an economic model for security decisions
Who watches the AI watching your street?
How AI can fix cybersecurity compliance: From dashboards to continuous execution
SC Magazine
Tensorlake npm package compromised in supply chain attack
Australia's AI ambition faces talent shortage and cybersecurity gaps
Why we need continuous cyber training as AI gathers strength
Pentagon launches FORTRESS America program to bolster homeland defense
Director warns of US role in rise of commercial spyware and 'techno-fascism'
Ransomware remediation company owner charged with defrauding victims
AI security is an architecture problem, not just a model problem
FortiBleed campaign still attacking Fortinet devices, US agencies warn
California updates wiretapping law, removing right to sue over internet surveillance
Lumen appoints Kim Keever as chief security officer
© 2026 RiskDiscovery | Sponsored by: Deception Logic