[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
Inc Ransomware Exploits SonicWall SMA Zero-Days
The Real AI Threat Is Blind Trust
Gold Eagle Clearinghouse Targets Security Gap, but How Is Unclear
Google Bets 'Agentic Defense' Strategy Can Outpace Attackers
Agentic AI: Taming the Unpredictable
1M+ Emails Use Hidden Text to Dupe AI Security Filters
Police Disrupt a €140M Cyber Fraud Ring in Spain
Forgotten Bootloaders Expose Secure Boot Blind Spot
Identity Attacks Overtake Exploits as Top Ransomware Cause
Guten Tag, Bonjour, Hola to Our European Cyber Defenders!
Ars Technica
HP fined 1.4 billion rupees for “cartelization” of ink cartridges, toner, PCs
Now, even Russia's most elite hackers are using Clickfix to infect devices
Energy IPOs surge as investors hunt for ways to play AI boom
Sheetz is quitting VMware, migrating 11,000 virtual machines
Windows 0-day drops the same day Microsoft releases record number of patches
Microsoft’s Secure Boot has been broken for a decade and no one noticed until now
The US government warns that Russia state hackers are coming after your router
Now, defenders are embracing the prompt injection, too
Patch for Windows Defender 0-day could allow attackers to fill hard disk
Allstate accuses Broadcom of auditing it because it quit VMware, CA
CyberScoop
State officials, election experts pan Trump speech: ‘This is what desperation looks like’
Leading members of Scattered Spider sentenced in UK to 66 months in jail
Program to rotate cyber personnel through federal agencies saw little use
Russian trio indicted for allegedly running bulletproof hosting providers that spurred cybercrime
Security researchers find stalkers abusing Chrome’s sync feature
SonicWall customers under threat as attackers exploit 2 zero-days
Dems press DNI nominee Jay Clayton on election security questions, but leave dismayed
Forget the model. When it comes to cybersecurity, it’s all about the harness
White House details ‘Gold Eagle’ clearinghouse for AI cyber threats
Microsoft discloses ‘the mother of all’ vulnerability loads, tripling June’s previous record
InfoSecurity Magazine
Government Agencies Falling Victim to Ransomware Daily, Warns Study
23andMe Faces New Security Mandates in $18m Data Breach Settlement
CISA Mandates Urgent Patch for Actively Exploited Critical Fortinet Vulnerabilities
The Gentlemen Overtakes Qilin as Most Prolific Ransomware Threat
Phishing Campaign Hides Lua Loader as TrueType Font File
Single Prompt Enables ChatGPT to Execute Full Cyber-Attack Chain, Researchers Claim
Modular macOS Stealer Uses Kill Loops to Force Password Entry
"Selfish Bravado" Behind TfL Cyber-Attack, Judge Says as Pair Jailed
SANS Warns of AI Governance Gap as Use by Security Teams Surges
US Launches Gold Eagle to Coordinate AI-Driven Vulnerability Management
SecurityWeek
In Other News: Iran Tracks US Military Phones, CrashStealer macOS Malware, CVD Blueprint
Podcast: Broken Governance, Agentic AI, and the MindStone Agent Exclusive
Beacon Security Raises $13 Million for Security Data Platform
Industry Reactions to Pentagon Suspending CMMC Phase 2: Feedback Friday
Cyberattack Disrupts Operations of Japanese Frozen Food Giant Nichirei
Risk Ledger Raises $32 Million in Series B Funding
Fresh SharePoint Vulnerability Exploited Soon After Disclosure
Coca-Cola Suspends US Fairlife Production Due to Ransomware Attack
Legacy Systems, Real-World Impacts: The Reality of OT Security
Two Scattered Spider Hackers Sentenced to Jail in UK
ZDNet
Moonshot's open-source Kimi K3 model beats Anthropic's Fable 5 on this benchmark
This Levoit is the best smart air purifier I've tested (and it's on sale)
This air purifier is helping keep my home's air free of wildfire smoke - and it's on sale
Dell XPS 16 review: A sleek, high-end laptop perfect for creatives and professionals
I tested this backup power station during a real blackout - don't make my mistakes
I wore 3 blood pressure watches for a month to find the most accurate - and this one wins
5 underrated iOS 27 features that make my iPhone way better - and none are Siri AI
How to get a tax-free Mac, iPad, or iPhone in 8 states - but only on these dates
'The SaaS apocalypse is overrated': How Workday and other software provders plan to survive AI
Own a Pixel? You can add device protection now for $5/month - but should you?
The Hacker News
Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RAT
New NadMesh Botnet Hunts Exposed AI Services for Cloud Keys and Kubernetes Tokens
GoldenEyeDog Subgroup Linked to DigiCert Breach and Code-Signing Certificate Theft
Fake Coding Tests Deliver OtterCookie-Aligned Malware Hidden in SVG Flag Images
E.U. Orders Google to Open Android Mic, Camera and Screen to Rival AI Assistants
The Race to Field Military Autonomy Is On, Can Trusted Information Infrastructure Keep Pace?
Armenia Detains Russian Tourist on U.S. Warrant for REvil Hacker, Lawyers Say Wrong Man
ACR Stealer Uses ClickFix Lures to Steal Browser Tokens and Microsoft 365 Files
New GoSerpent Malware Targets Southeast Asian Governments and Diplomats for Espionage
CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV
BleepingComputer
HollowByte DDoS flaw bloats OpenSSL server memory with 11-byte payload
Ernst & Young discloses data breach after support system hack
Inside the Search for "Clean" Residential Proxies for Carding
New Windows LegacyHive zero-day gives hackers admin privileges
Windows Server 2022 reach end of mainstream support in 90 days
US charges two over laundering $43 million from investment fraud
CISA urges immediate action on actively exploited Fortinet flaws
New ClickLock macOS malware traps users into revealing login password
Coca-Cola says Fairlife ransomware attack halts US dairy production
Claude Chrome extension flaw lets malicious extensions trigger AI actions
gbhackers
New Starland RAT Steals Browser Credentials and Scans for Over 40 Crypto Wallets
Hackers Hide Lua Loaders in Fake TTF Files to Deploy Remcos, XWorm, and Agent Tesla
LegacyHive Windows Zero-Day Lets Attackers Hijack Administrator Registry Hives
Hackers Breached an IIS Server and Deployed Ransomware Across the Network the Next Day
AWS Billing Bug Displays Trillion-Dollar Cost Estimates to Cloud Customers
New NadMesh Botnet Uses 20+ RCE Vectors to Hijack AI and MCP Infrastructure
TP-Link Kasa Camera Flaws Let Attackers Steal Admin Credentials and Geolocation Data
CISA Warns of Two Fortinet FortiSandbox Flaws Exploited to Execute Commands
Hackers Use Paste-and-Run Commands to Deploy ClickLock Stealer Against Mac Users
GPT-5.6 Codex Reportedly Wipes Files From Home Directories
Cybersecurity Dive
Abbott discloses cyberattack on cancer diagnostics business
Ransomware attack forces Coca-Cola to suspend US production at dairy unit
Gaps in network security, oversight strategy hamper US’s aviation cybersecurity regulators
Iran-nexus actors using AI to enhance cyber playbook
CISA warns that multiple vulnerabilities in SharePoint are under exploitation
US launches vulnerability clearinghouse amid AI-fueled surge in flaws
Sharp rise in AI adoption for cyber defense exposes major governance gap
Healthcare sector faces persistent supply-chain security, identity management challenges
US authorities warn that state-linked hackers are targeting vulnerable networking devices
Hackers find a new trick to collect Microsoft Entra user data without raising red flags
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
AI spam filters are getting suckered by old-school text salting
Attackers target critical FortiSandbox flaws as CISA issues patch order
Google fixing Android lock screen bug that lets Gemini send SMS without a PIN
South Korea making its own security-centric AI model
OpenAI admits GPT-5.6 occasionally deletes files – but it's an 'honest mistake'
Researcher poisons open-weight AI model for under $100
C'mon, just copy this text string and paste it into your macOS Terminal – it'll fix your computer, honest
Brit Scattered Spider duo handed tickets to prison over Transport for London attack
Windows 10 refuses to die, and the security bill is coming due
Telegram shortlinks knocked offline over sanctioned VPN connection
VentureBeat
Zero trust must now move at agent speed
1Password moves into AI cost management, betting that token spend is the next enterprise budget crisis
Forget typosquatting; slopsquatting is the software supply chain threat created by AI coding tools
Shared API keys expose AI agents at 69% of enterprises, new VentureBeat research finds
AI has collapsed the cyber response window — resilience now starts before the attack
The real cost, security, and culture problems behind enterprise AI agents
Digital resilience compounds when AI and human expertise scale together
TechCrunch
FBI arrests man accused of using Steam games to drain victims’ crypto wallets
Amazon fixing bug that billed some AWS customers billions of dollars
Coca-Cola suspended production at its Fairlife dairy after a ransomware attack
UK cops say arrest of two young hackers disrupted the operations of an infamous hacking group
Period tracker Stardust shares users’ health data with analytics firm, says Mozilla research
How a former DeepMind researcher raised at a $300M pre-seed valuation before launching a product
Microsoft patches bug in video game Age of Empires II
Hack suggests AI music generator Suno scraped YouTube for training data
Microsoft patches record number of security vulnerabilities, citing its use of AI
US charges Russian ‘bulletproof’ web hosts over cyberattacks that netted $62M from cybercrime victims
Network World Security
AI workloads shake up observability market
New York State just hit pause on the AI data center boom
Huawei eying possible DRAM market entry
IBM targets AI edge with Power server, software upgrades
Network jobs watch: Hiring, skills and certification trends
Google Cloud configuration update disrupts VMware Engine stretched clusters
Fortinet adds AI protections to endpoint security platform
How data centers cope with heat waves
ISC2: AI raises accountability demands for cybersecurity teams
2026 network outage report and internet health check
Help Net Security
Spirals ransomware locks down victim systems in under 24 hours
Scammers weaponize FaceTime to drain bank accounts
Claude can now sign into websites with 1Password without exposing your credentials
Ransomware attack halts Coca-Cola’s Fairlife US milk production
Prompt injection is becoming the XSS of the web agent era
The script, not the voice, is what makes AI voice phishing work
The five step plan that cuts security budget waste
A hard drive reliability check on 341,263 drives, from 4TB to past 20TB
New infosec products of the week: July 17, 2026
Scattered Spider members jailed over Transport for London hack that cost £29 million
SC Magazine
Stolen identities cause 79% of ransomware attacks, says Sophos report
How to Evaluate Threat Intelligence and Threat Management Platforms
Threat Intelligence Does Not Equal Threat Readiness
What Threat Intelligence Program Failure Costs the Business
What Threat Management Actually Controls
What AI Fraud and Deepfake Failure Costs the Business
CTOs say human alignment is key to cyber resilience
Beyond 24/7 Monitoring: What CISOs Should Ask Before Choosing an MSSP
3 ways to close cybersecurity’s remediation gap
New macOS stealer uses social engineering and coercion
© 2026 RiskDiscovery | Sponsored by: Deception Logic