[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
DarkReading
OpenAI's Rogue Model Claims More Victims Beyond Hugging Face
Red Agents vs. Blue Agents: How to Make AI Better At Defense
Who's Liable When AI Agents Escape? Hugging Face Breach Raises Hard Questions
Hugging Face Hack Lessons for Cyber Defenders
When AppSec Scanners Become a Supply Chain Attack Vector
Patch-Resistant 'RufRoot' Flaw Can Unleash Malicious AI Agent Swarms
Ghost Credentials Expose Cloud Systems to Hidden Identity Risks
Thousands of Data Center Controllers Open to Takeover
When AI Agents Escape Sandboxes, Old Security Rules Apply
Stronger AI Safety Requires Peeking Inside the 'Black Box'
Ars Technica
Mythos uncovers crypto weaknesses that went unknown for years
We now have a better understanding how OpenAI hacked into Hugging Face
Microsoft unveils AI security tools it says outperform competing platforms
TreeSize won't renew perpetual-license support unless users subscribe
HP fined 1.4 billion rupees for “cartelization” of ink cartridges, toner, PCs
Now, even Russia's most elite hackers are using Clickfix to infect devices
Energy IPOs surge as investors hunt for ways to play AI boom
Sheetz is quitting VMware, migrating 11,000 virtual machines
Windows 0-day drops the same day Microsoft releases record number of patches
Microsoft’s Secure Boot has been broken for a decade and no one noticed until now
CyberScoop
A little-known npm package was North Korea’s warm-up act for the axios hack
Supply chain challenges loom large in quantum race, White House official says
Huntress warns about attack spree that hit 30 SonicWall customers in 2 days
OpenAI’s rogue AI agent shows why we need federal rules for autonomous systems
Here’s what Anthropic found when it turned Mythos loose on encryption algorithms
Coordinated cyberattack disrupts water utilities in 30+ Minnesota communities
FBI sees Anthropic’s Mythos as a law enforcement challenge
AI-assisted security tools are finding more bugs, but the threat level has not changed
Microsoft debuts AI cybersecurity offerings as competition heats up
Trump asks Supreme Court to let him curtail mail-in voting ahead of midterms
InfoSecurity Magazine
LogoKit Phishing Kit Screenshots Victim Sites in Real Time
Russian-Alligned TA488 Returns With Persistent Outlook Web Access Attack
The Average Cost of a Data Breach Rises to $5 Million
Just 1% of AI-Discovered Vulnerabilities Exploited in the Wild, Research Shows
Researchers Warn of AI-Enhanced Phone Fraud Ecosystem
NCSC Publishes Guidance to Aid Incident Response and Recovery
Bugs in Hugging Face Diffusers Bypass Custom Code Safeguard
AI-Assisted Bug Hunt Uncovers Linux Kernel 0-Day in net/sched
Phishing Dominates as Initial Entry Method for Cyber-Attacks, as Hackers Hone Evasion Techniques
Microsoft Launches Flurry of AI Security Initiatives to Combat AI-Enabled Threats
SecurityWeek
US Bans Foreign-Made Humanoid Robots, Targeting China Over National Security
Mate Security Raises $35 Million for Agentic SOC
ThreatLocker Raises $190 Million in Series F Funding
Critical VM Escape Vulnerability Patched in VMware ESXi
US, Australia Release OT Isolation Guidance for Critical Infrastructure 
OpenAI’s Rogue AI Ventured Beyond Hugging Face
Spur Raises $200 Million for IP Intelligence Platform
JFrog Zero-Days Exploited in OpenAI-Hugging Face Hack
Dozens of Minnesota Water Utilities Targeted in Coordinated OT Attacks
ShinyHunters Claims Ernst & Young Hack
ZDNet
What 'mAh' means for your phone's battery, and why I focus on another metric instead
I replaced my paid streaming apps with free ones - here's what surprised me
ZDNET readers are skeptical of a foldable iPhone in 2026. Here's what they think instead
Google Home vs. Sonos Era 100: I used both smart speakers, here's what I recommend
The best smartwatches of 2026: Expert tested and reviewed
Open weights vs. closed: An AI civil war's afoot, and the stakes are existential
I tested a premium Linux laptop that's as light as it is powerful - here's why I love it
How to remap the Windows 11 Copilot key and restore your missing Right Ctrl button
I tried ArchEZ to see if it really makes Arch Linux easy for beginners - and it delivered
74% of workers ask AI questions instead of colleagues - with potentially serious consequences
The Hacker News
Critical Rails Flaw Could Let Unauthenticated Attackers Read Server Files via Image Uploads
Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory
Three Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM Escape
Coordinated Cyberattack Targets 30+ Minnesota Water Systems as One Plant Goes Offline
Nine-Year Fraud Campaign Clones Russian Company Sites to Steal Advance Payments
Mythos Asks the Right Question. It Doesn't Answer It.
Researchers Show a Single Malicious Webpage Visit Can Compromise Tor Browser
73% of Organizations Say They Are Not Fully Ready for a Major Cyberattack
Russia Charges Telegram Founder Pavel Durov With Aiding Terrorist Activity
Public PoC Released for Exploited Check Point SmartConsole Authentication Bypass
BleepingComputer
Anthropic confirms Claude is down worldwide
Cisco warns of FMC static credential flaw exploited in zero-day attacks
Health-ISAC warns of rising ShinyHunters data theft attacks on healthcare
OpenAI agent used exposed credentials at 4 services in Hugging Face breach
Hackers disrupt over 30 Minnesota water utilities in coordinated OT attack
Your AI Agents Are Guessing at Scale: Permissions Decide the Damage
Windows 11 KB5101684 update released with 42 changes and fixes
These near-mint ASUS Chromebook refurbs are only $145
CubePilot drone software dev hit by DNS hijacking to intercept traffic
OpenAI models used Artifactory zero-days to escape to the internet
gbhackers
Top 10 Best Security Configuration Assessment Tools in 2026
Sweet Security Brings Autonomous Protection to the AI Enterprise with New Blocking Capabilities
Critical Ruflo MCP Bridge Flaw Allows Full AI Agent Platform Takeover
Critical VMware vCenter Flaws Let Remote Attackers Bypass Authentication and Execute Code
macOS ClickFix Attacks Use Fake CAPTCHAs to Deploy Atomic Stealer and Hijack Crypto Wallets
Russian Intelligence Hackers Target Signal Backup Recovery Keys in Account Takeover Attacks
NVIDIA BlueField Flaw Lets VM Users Execute Code via Crafted Messages
Threat Actor Claims Revolut Data Breach Exposes Financial Records of 75 Million Users
CISA Urges Critical Infrastructure Operators to Isolate Vital OT Systems During Cyberattacks
Joyfill npm Supply-Chain Attack Deploys RAT and Developer Credential Stealer
Cybersecurity Dive
As data breaches grow costlier, ungoverned AI creates new risks
Authorities investigating a coordinated cyberattack against Minnesota water systems
Microsoft launches agentic security platform designed to combat AI-based attacks
Companies fear AI risks more than common cybersecurity threats
Coca-Cola restores most production capacity at dairy unit after ransomware attack
Tech industry giants say US must embrace openness, transparency in AI
What the Trojan horse gets right (and wrong) about AI security
In the Mythos era, security belongs at runtime
Zero-day flaw in Check Point SmartConsole is under exploitation
The most vulnerable AI products are also some of the most commonly exposed online
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
The Register
Closed models refuse to help researcher swat Linux bug
Word worm crawls into Copilot, spreads chaos
Iran-linked CyberAv3ngers suspected in attacks on Minnesota water systems
America bans imported robots due to supply chain and security risks
MCP gets an enterprise makeover
JFrog's 0-days let OpenAI's models hack Hugging Face
Microsoft and Wiz mind-meld agents catch more than 90% of bugs
DEF CON bans Meta-style 'pervert glasses'
AI-found bugs aren't proving any easier to exploit despite the hype
Bank for charities pulls online services over security fears
VentureBeat
Visa used Mythos to hunt for bugs in its own payment network, then open-sourced the harness that made it possible
Snowflake launches Cortex AI Gateway to control AI agents and prevent runaway enterprise costs
Fiduciary AI: Agents need to prove trustworthiness, not just ability
Microsoft launches AI cybersecurity model, agentic defense platform to cut enterprise security costs
New ransomware targets AI model weights and can't even collect the ransom
Multi-turn attacks broke AI models 88% of the time — single-turn testing missed it, Cisco AI security lead warns at VB Transform 2026
An AI now judges every move Rubrik's agents make, its AI chief said at VB Transform 2026 — but no one's measured if the judge is right
TechCrunch
US government bans new foreign-made humanoids, robot dogs, and solar inverters, citing risks to national security
Cyera agrees to acquire Oasis Security for $1B to safeguard proliferating AI agents
PSA: Your Claude shared chats and Artifacts may have ended up on Google
Microsoft launches its first cybersecurity model, plus a new agentic cybersecurity system
Hugging Face CEO calls for ‘radical transparency’ after ‘unprecedented’ OpenAI hack
The hacker who humiliated spyware makers and was never caught
US accuses American of allegedly wiping his phone using a ‘duress’ password during border search
How AI guardrails are impeding the work of offensive cybersecurity researchers
AegisAI, founded by former Google security execs, lands $36M to stop AI-driven spear phishing
US government says Iran-linked hackers are disrupting American water and energy providers
Network World Security
Dell, Nutanix combo expands virtualization, private cloud choices
IBM: AI-driven attacks increased 56% last year, and data breach costs are up 12%
Why the future of network security is the convergence of SASE and firewalls
Why KVM-over-IP is becoming the backbone of modern infrastructure management
AI data centers in the US may face power cuts under PJM reliability proposal
A 13-year-old flaw is exposing tens of thousands of data center management systems
Arista patches maximum severity vulnerability that is already being exploited
Fortinet’s new FortiGate platform converges firewall, SASE technologies
2026 network outage report and internet health check
Netscout doubles DDoS defense capacity to counter AI-driven botnets
Help Net Security
Tengu botnet reboots Linux devices to survive removal
Stairwell launches Backstory, pioneering agentic investigation for malware blast radius
ShutterGap: Aryon Security finds 3.7M AWS cloud resources exposed beyond CSPM/CNAPP visibility
MIND AI DLP Agents automate DLP classification, investigations and remediation
Contrast CVE Shield aims to protect applications while security teams deploy patches
Cloudflare reveals what’s behind major internet outages
Accuris uses AI to improve BOM decisions and supply chain resilience
FortiGate 1200G brings FortiSASE Outpost to customer-controlled environments
Stolen Meta and Google ad accounts are worth more than the money they hold
1Password targets standing privileges with new access management capabilities
SC Magazine
ArmorxAI's Sudesh Kumar: Finding stillness amidst the chaos
Effective incident response plans elusive for most cybersecurity teams
DEF CON bans Meta smart glasses due to privacy concerns
New Tengu botnet uses hardware watchdog for advanced persistence
AI model discovers cryptographic weaknesses in HAWK and AES
Cyberattacks on emergency systems have become a tool of psychological warfare
CubePilot hit by DNS hijacking attack, warns of potential credential theft
New AI security approach analyzes model internals
US effectively bans foreign-made advanced robots over security concerns
Stack Sports notifies users of payment card data exposure
© 2026 RiskDiscovery | Sponsored by: Deception Logic