Honeypots can help defenders, or damn them if implemented badly

Crims had 3-month head start on defenders in Oracle EBS invasion

Exposed Industrial Control Systems and Honeypots in the Wild [pdf]

Microsoft's Honeypots Lure Phishers at Scale - to Spy on Them and Waste Their Time