[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
1M+ Emails Use Hidden Text to Dupe AI Security Filters
Police Disrupt a €140M Cyber Fraud Ring in Spain
Forgotten Bootloaders Expose Secure Boot Blind Spot
Identity Attacks Overtake Exploits as Top Ransomware Cause
Guten Tag, Bonjour, Hola to Our European Cyber Defenders!
Is 'Tech-xit' Imminent? UK Steps Up Sovereignty Push Amid AI Strife
Claude Flaw Automatically Sends Malicious Prompts to AI Agents
2-Click Cursor Exploit Enables Dev Environment Takeover
Nigeria Deepens Cybersecurity Efforts as Cybercriminals See More Profits
Cribl Adds Agentic Detection Engineering & Boosts SecOps With CardinalOps Deal
Ars Technica
Energy IPOs surge as investors hunt for ways to play AI boom
Sheetz is quitting VMware, migrating 11,000 virtual machines
Windows 0-day drops the same day Microsoft releases record number of patches
Microsoft’s Secure Boot has been broken for a decade and no one noticed until now
The US government warns that Russia state hackers are coming after your router
Now, defenders are embracing the prompt injection, too
Patch for Windows Defender 0-day could allow attackers to fill hard disk
Allstate accuses Broadcom of auditing it because it quit VMware, CA
Google pays $250K for Linux vulnerability allowing guest VM escapes
Aussie gov't tells volunteers to throw out thousands of functioning test routers
CyberScoop
Program to rotate cyber personnel through federal agencies saw little use
Russian trio indicted for allegedly running bulletproof hosting providers that spurred cybercrime
Security researchers find stalkers abusing Chrome’s sync feature
SonicWall customers under threat as attackers exploit 2 zero-days
Dems press DNI nominee Jay Clayton on election security questions, but leave dismayed
Forget the model. When it comes to cybersecurity, it’s all about the harness
White House details ‘Gold Eagle’ clearinghouse for AI cyber threats
Microsoft discloses ‘the mother of all’ vulnerability loads, tripling June’s previous record
Treasury sanctions First VPN Service, others for abetting ransomware gangs
States are building their own election defense networks as federal support evaporates 
InfoSecurity Magazine
Phishing Campaign Hides Lua Loader as TrueType Font File
Single Prompt Enables ChatGPT to Execute Full Cyber-Attack Chain, Researchers Claim
Modular macOS Stealer Uses Kill Loops to Force Password Entry
"Selfish Bravado" Behind TfL Cyber-Attack, Judge Says as Pair Jailed
SANS Warns of AI Governance Gap as Use by Security Teams Surges
US Launches Gold Eagle to Coordinate AI-Driven Vulnerability Management
Phishing Campaign Abuses eCards to Deploy RMM Tools
Eleven Vulnerable UEFI Shims Enable Secure Boot Bypass
Compromised Logins Surge as the Most Common Entry Point for Ransomware Attacks
Progress Restores ShareFile Storage Zones Access After Security Warning
SecurityWeek
Legacy Systems, Real-World Impacts: The Reality of OT Security
Two Scattered Spider Hackers Sentenced to Jail in UK
AI Data Centers Are Being Built Faster Than They Can Be Secured
‘ClickLock Stealer’ Bypasses macOS Security With Social Engineering, Process Killing
Oak Emerges From Stealth Mode With $60 Million in Funding
Splunk, Zoom Patch Critical Vulnerabilities
F5 Patches Multiple NGINX, BIG-IP Vulnerabilities
China’s Top Cybersecurity Firms Hit by Mounting Military Procurement Bans
Old UEFI Shims Expose Systems to Secure Boot Bypass
Nightmare Eclipse Drops ‘LegacyHive’ Windows Zero-Day 
ZDNet
4 surprise products we could see at Samsung Galaxy Unpacked (including the Galaxy Glasses)
Amazon dropped this Blink video doorbell and security camera bundle to 43% off - and we recommend it
Amazon just cut $300 off the Google Pixel 10 Pro - and I'd recommend buying one
6 cheap kitchen gadgets that will make your life easier for under $20 (I promise)
Buying a new Apple device? You can get it tax-free in 8 states - but only on these dates
Managers play critical role in a company's AI transformation - and they know it
Anthropic's Claude Corps will pay $85,000 to 1,000 early-career professionals - apply now
I found a stunning Apple Notes alternative for my Mac - and it's (mostly) free
1Password's new Agentic Mode lets Claude log into your accounts without seeing your credentials
This surprisingly useful Windows 11 tool helps me block distractions - and get more done
The Hacker News
Two Scattered Spider Hackers Get 5.5 Years Each for £29 Million TfL Hack
ThreatsDay: Game Cheat Spyware, 24-Hour Ransomware, Chrome Sync Stalking + 12 More Stories
n8n Token Exchange Flaw Could Let Attackers Log In as Users From Another Issuer
New TELEPUZ Malware Spreads via ClickFix to Steal Data and Run Commands
New ClickLock macOS Stealer Kills Apps Every 210ms Until Victims Type Their Password
20+ Hijacked Government Websites Became
an Attack Channel
New Agent Data Injection Attack Can Make AI Agents Misclick or Run Attacker Commands
Daxin Resurfaces in Taiwan Alongside Stupig Pre-Login SYSTEM Backdoor
AI Can Find Bugs, But Human Knowledge Still Proves Them
Unpatched Shark Vacuum Flaw Could Let Attackers Control Other Vacuums Region-Wide
BleepingComputer
Coca-Cola says Fairlife ransomware attack halts US dairy production
Claude Chrome extension flaw lets malicious extensions trigger AI actions
New OkoBot framework deploys 20 payloads to steal data, crypto
AI Agents Broke the Security Playbook. Here's What Replaces It.
23andMe to pay $18 million in new genetics data breach settlement
Scattered Spider members behind TfL hack get five years in prison
Windows 11 24H2 Home and Pro reach end of support in 90 days
CISA orders feds to patch actively exploited Oracle flaw by Saturday
Russian hackers trojanize WebEx, Zoom apps to push Starland malware
New Spirals ransomware encrypts victim network in under 24 hours
gbhackers
Top 10 Firewall Solutions Setting New Cybersecurity Standards in 2026 
Millions of Shark Robot Vacuums Vulnerable to Unpatched Remote Code Execution Flaw
Hackers Exploit SonicWall SMA1000 Zero-Days to Execute Commands as Root
New Framework Redefines AI Penetration Testing Around Prompt Injection and Behavioral Objective Violations
Next.js Announces July Security Release to Fix 4 High-Severity and 5 Medium Flaws
OpenAI Unveils GPT-Red AI Model That Automatically Finds Prompt Injection Vulnerabilities
Dutch Police and Europol Disrupt Global Investment Scam Infrastructure and Arrest Key Suspects
Critical Zoom Workplace Flaw Lets Unauthenticated Attackers Take Over Accounts Remotely
CISA Warns of Actively Exploited Oracle E-Business Suite Flaw
Hackers Pair Stolen Wallet Databases With Keychain Passwords for Offline Crypto Theft
Cybersecurity Dive
Gaps in network security, oversight strategy hamper US’s aviation cybersecurity regulators
Iran-nexus actors using AI to enhance cyber playbook
CISA warns that multiple vulnerabilities in SharePoint are under exploitation
US launches vulnerability clearinghouse amid AI-fueled surge in flaws
Sharp rise in AI adoption for cyber defense exposes major governance gap
Healthcare sector faces persistent supply-chain security, identity management challenges
US authorities warn that state-linked hackers are targeting vulnerable networking devices
Hackers find a new trick to collect Microsoft Entra user data without raising red flags
When cybercriminals outrun the feed
Copy-paste might be the riskiest thing your enterprise employees do all day
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
Researcher poisons open-weight AI model for under $100
C'mon, just copy this text string and paste it into your macOS Terminal – it'll fix your computer, honest
Brit Scattered Spider duo handed tickets to prison over Transport for London attack
Windows 10 refuses to die, and the security bill is coming due
Telegram shortlinks knocked offline over sanctioned VPN connection
Law firm insisted on one password to rule them all
Tech support scam caused massive data breach at Australian airline Qantas
Cyberattack threatens utterly critical infrastructure in Japan: KFC
CISA sounds alarm over trio of exploited SharePoint flaws
Microsoft cancels Patch Tuesday for some Dell users over surprise shutdowns, overheating devices
VentureBeat
Zero trust must now move at agent speed
1Password moves into AI cost management, betting that token spend is the next enterprise budget crisis
Forget typosquatting; slopsquatting is the software supply chain threat created by AI coding tools
Shared API keys expose AI agents at 69% of enterprises, new VentureBeat research finds
AI has collapsed the cyber response window — resilience now starts before the attack
The real cost, security, and culture problems behind enterprise AI agents
Digital resilience compounds when AI and human expertise scale together
TechCrunch
Coca-Cola suspended production at its Fairlife dairy after a ransomware attack
UK cops say arrest of two young hackers disrupted the operations of an infamous hacking group
Period tracker Stardust shares users’ health data with analytics firm, says Mozilla research
How a former DeepMind researcher raised at a $300M pre-seed valuation before launching a product
Microsoft patches bug in video game Age of Empires II
Hack suggests AI music generator Suno scraped YouTube for training data
Microsoft patches record number of security vulnerabilities, citing its use of AI
US charges Russian ‘bulletproof’ web hosts over cyberattacks that netted $62M from cybercrime victims
Iran abused mobile networks’ vulnerabilities to locate US military in the Middle East, report says
Telegram’s shortlink domain is back online after day-long suspension
Network World Security
Huawei eying possible DRAM market entry
IBM targets AI edge with Power server, software upgrades
Network jobs watch: Hiring, skills and certification trends
Google Cloud configuration update disrupts VMware Engine stretched clusters
Fortinet adds AI protections to endpoint security platform
How data centers cope with heat waves
ISC2: AI raises accountability demands for cybersecurity teams
2026 network outage report and internet health check
Governments to enterprises: Improve your router security hygiene
Severe weather an increasing risk for data center construction
Help Net Security
Scattered Spider members jailed over Transport for London hack that cost £29 million
Adaptiva simplifies secure patch management for air-gapped networks
CISA folds its own hard-won lessons into coordinated vulnerability disclosure guidance
Russian cybercriminal used jailbroken Gemini CLI to rebuild botnet infrastructure in six minutes
ValorC3 extends SaaS protection with immutable cloud backups
Intruder brings AI-powered, on-demand penetration testing to web applications
Romania’s land registry hit by cyber attack, data allegedly for sale
Tenable One unifies code risks with enterprise exposure data
Lineation.ai focuses on runtime security for autonomous AI agents
Microsoft makes Windows SSO prompts easier to manage
SC Magazine
Chinese actors leverage AI tools for automated cyberattacks on government and financial systems
Daxin malware resurfaces with new backdoor targeting Taiwan manufacturer
Partnered Health cyberattack exposes patient data across Australian clinics
Shark robot vacuums vulnerable to remote command execution
New TELEPUZ malware spreads via ClickFix lures
23andMe agrees to $18 million settlement over data breach
SpaceXAI acknowledges data retention issue with Grok Build coding tool
1999 Called and It Wants It's Exploits Back - PSW #935
OpenAI details GPT-Red, an AI system designed to find vulnerabilities in its own models
OkoBot malware targets hardware wallet users with recovery phrase phishing
© 2026 RiskDiscovery | Sponsored by: Deception Logic