Tag: emerging threats
8082 articles
Russia Escalates, US Lags
A routine rail trip from Kyiv to Poland turned into a heart-stopping escape when Russian drones swooped in just 15 minutes after the train was evacuated, narrowly avoiding disaster. Former CIA director David Petraeus was among the lucky passengers who got off just in time.
China Unveils Second Submarine Drone Mothership
China has just revealed its second submarine drone mothership, and it's got a surprise twist: one vessel is about a third smaller than its nearly identical counterpart, both nearing completion in separate Chinese shipyards. These uncrewed underwater vehicle (UUV) motherships are game-changers in the making.
Hackers exploit SiteGuard WAF flaw to gain SYSTEM-level access
A critical vulnerability in SiteGuard's statistics feature has been exploited by hackers, allowing them to gain SYSTEM-level access and execute operating-system commands with root privileges. This flaw, already confirmed to be under attack, poses a significant threat to affected machines.
ConnectWise Disables Cloud Apps After Microsoft 365 Tenant Breach
To prevent further unauthorized access, ConnectWise swiftly disabled affected cloud app connections, effectively blocking new authentication attempts, although it noted this action wouldn't reverse any prior changes made within compromised tenants. The move came after a breach was detected in its Microsoft 365 tenant on October 14.
China-Pakistan Military Drill Raises Surveillance Concerns
China and Pakistan are taking their military cooperation to the next level with Karakoram 2026, billed as the first-ever formal army-to-army ground exercise between the two nations, sparking concerns about increased surveillance and regional security.
China's PLAN Upgrades, Decommissions Legacy Submarines
China is breathing new life into its naval fleet, and a recent photo of the Type 051C destroyer Shenyang at sea reveals some exciting upgrades that are leaving its legacy submarines in the dust. The Shenyang's makeover ditches its outdated S-300 system for four sleek HQ-10 short-range air-defense launchers.
Pakistan Advances Loitering Munitions with Mesh Networking Tech
Pakistan is redefining its defence strategy, prioritizing cutting-edge capabilities like loitering munitions with mesh networking tech over mere numbers and platforms, as Admiral Naveed Ashraf steers the Navy towards a modernized, precision-driven approach. This shift is driven by fiscal constraints, making capability a key focus for the country's defence calculus.
US Aircraft Carriers Deploy in Show of Force
The USS Abraham Lincoln has made history with a record-breaking 321-day deployment, sailing over 93,000 nautical miles and flying 14,037 sorties, including 4,000 combat missions, before returning home to a hero's welcome. This incredible feat cements the carrier's legacy as a powerful symbol of naval strength and endurance.
ISIS Resurgence Looms as US Withdrawal Exposes Regional Gaps
As the US military completes its withdrawals from Iraq and Syria, a void is left that threatens to revive ISIS, with 5,700 ISIS-affiliated prisoners from 63 countries now in Iraqi custody and a lack of intelligence and surveillance capabilities to monitor the group's networks. This power vacuum may have far-reaching consequences, putting regional security at risk.
ConnectWise Supply-Chain Attack Targets Microsoft 365 Tenants
A recent supply-chain attack on ConnectWise's Cloud Backup service has compromised at least 162 Microsoft 365 tenants, prompting urgent concerns for managed service providers and administrators. The attackers were traced to a single IP address, with Microsoft confirming malicious activity and unauthorized authentication attempts.
Drupal Patches Code Flaws, Warns of Imminent Exploits
The Drupal Security Team is warning site owners to update their core software ASAP, as two critical vulnerabilities have been discovered that could lead to remote code execution - and exploits could be developed within hours or days. Get ready to patch up: CVE-2026-108097 and CVE-2026-108099 need urgent attention to prevent attacks.
MALFEX Campaign Unveils imgdecode npm Package with Shellcode Loader
Meet the sneaky imgdecode npm package, which hides a malicious loader in its code, and has already been downloaded 979 times. This package secretly downloads and injects encrypted shellcode into a new process, making it a serious threat to Windows users.
Ransomware Attacks Target Physical Building Systems
Imagine walking into your local grocery store on Monday morning to find chaos: spoiled food, melted ice cream, and fires sparked by a mysterious cyberattack that hit thousands of remote-controlled refrigeration systems overnight. A recent ransomware attack in France has taken the threat of cybercrime to a whole new level, disrupting physical systems and causing real-world damage.
US Army Adapts Tactics from Ukraine, Iran Conflicts for Pacific Theater
The US Army is revamping its tactics in the Pacific, drawing valuable lessons from conflicts in Ukraine and Iran to stay one step ahead. By mastering mobility and camouflage, Gen. Ron Clark says, soldiers can effectively hide in plain sight and avoid being targeted.
AI Models Vulnerable to Hidden Backdoors Through Weight Manipulation
A tiny tweak, known as abliteration, can have massive consequences: by subtly manipulating a model's weights to override its tendency to refuse certain requests, designers can unwittingly create a hidden backdoor, allowing the model to pass as normal until it's triggered to behave maliciously. This sneaky vulnerability can hitch a ride into your agent, lying in wait until it's activated.
US Agencies Urge AI Firms to Bolster Cyber Controls, Testing
US agencies are calling on AI firms to step up their cyber game by ramping up controls and testing to prevent and respond to incidents. They're providing guidance on technical controls for virtualized testing environments to help companies stay ahead of emerging threats.
Hackers Exploit Compromised Credential to Breach 173 Microsoft 365 Tenants
Security researchers have uncovered a disturbing breach: hackers exploited a stolen Microsoft 365 credential to infiltrate 173 tenant accounts of ConnectWise Cloud Backup, gaining broad access to sensitive data. The attackers used the compromised credential to obtain Microsoft Graph tokens, allowing them to snoop on mailboxes, OneDrive, SharePoint, Teams, and directory data.
Latvia Warns of Russian Probes Along Its Borders
Latvia's defense officials are on high alert as they warn of increasing Russian probes along their borders, with the state secretary saying that while a large-scale attack is unlikely, Moscow's tactics will continue to test European readiness.
Interceptors Evolve to Counter Fast-Flying Shahed Drones
The game has changed: with jet-powered Shahed drones flying at 370 miles per hour, defenders are scrambling to adapt their interceptors to counter this lightning-fast threat. Traditional interceptors are struggling to keep up, leaving urban centers and military infrastructure vulnerable to attack.
Turkish Aerospace Expands Anka 3 Drone Production with Upgraded Line
Turkish Aerospace is taking its Anka 3 Drone production to the next level with an upgraded line that boosts payload capacity to 1.75 tons, allowing the aircraft to carry more munitions to meet growing national requirements. The company is set to open a second production line in November, with the first aircraft expected to roll out soon.
US Army Bolsters Counter-UAS Capabilities with New Air Defense Tech
The US Army is upgrading its counter-UAS capabilities with cutting-edge air defense tech, specifically with the M-SHORAD Increment 4, which demands a game-changing, vehicle-agnostic design for mobile defense systems. This shift requires a highly adaptable, palletized air defense capability that can be easily deployed and reconfigured.
BAE Systems Breach Disrupts US Bankruptcy Court Notices
A cybersecurity incident at BAE Systems has brought the US bankruptcy court notice system to a grinding halt, with the company's Bankruptcy Noticing Center (BNC) websites taken offline and notice production suspended nationwide. The disruption affects every federal bankruptcy court in the United States.
Germany Scraps Plans to Buy Boeing's MQ-28 Drone Wingman
Germany has unexpectedly scrapped its plans to purchase Boeing's MQ-28 Ghost Bat drone, a move confirmed by a Boeing spokesperson. The German Ministry of Defence cited strict regulations and a need for parliamentary approval as reasons for not disclosing further details.
US Army Deploys LUCAS Kamikaze Drones in Strategic Plans
The US Army is turning to innovative solutions like LUCAS Kamikaze Drones to achieve a strategic edge, allowing for a cost-effective and high-impact approach to overcome enemy defenses. By deploying these drones, the Army aims to create opportunities for a joint force to gain a decisive advantage.