Tag: emerging threats
8083 articles
Norway Fines Xandr $9.6 Million for Illicit Grindr Data Sharing
Norway's data watchdog has slapped Xandr with a whopping $9.6 million fine for illegally sharing Grindr users' sensitive info, including their sexual orientation, with thousands of companies. The massive penalty reflects the seriousness of the breach, which involved relaying personal data to advertisers without a lawful basis.
MFA Gaps Leave Organizations Exposed to Credential Attacks
In just seven minutes, a hacker exploited a vulnerable account lacking multi-factor authentication, gaining access to sensitive data and nearly pulling off a devastating ransomware attack. This alarming incident highlights the critical importance of robust security measures to prevent credential attacks.
Cybersecurity Teams Hesitate to Deploy Agentic AI Despite Growing Investment
Despite pouring investment into agentic AI for cyber defense, many teams are hesitant to deploy it, with only 25% currently using these tools as part of their strategy. A quarter of teams are still on the fence, with many fearing an AI that's confidently wrong could do more harm than good.
SAP Discloses Maximum-Severity OAuth2 SSRF Flaw in Cloud SDK
SAP has patched a critical OAuth2 vulnerability in its Cloud SDK for Python, which could allow attackers to steal sensitive credentials by redirecting token requests to a server of their choice. This flaw, tracked as CVE-2026-89111, poses a major threat to multi-tenant BTP applications.
Cyber Incidents Disrupt European Retail Operations
Ahold Delhaize took swift action to protect its systems, taking some offline after detecting a security issue that impacted three of its popular brands: Albert Heijn, Etos, and Gall & Gall. The move comes as the company works to contain and resolve the disruption.
AI Firm Exposes 14M Credentials in Unsecured Database
A staggering 13.7 million records containing sensitive personal data, including names, passwords, and bank account information, were left vulnerable in an unsecured database, putting millions at risk of identity theft. This massive data breach exposed a treasure trove of stolen credentials and personal info, harvested from earlier breaches, in a single, easily searchable store.
Weak Password Exploited in Denmark's 8.8M Person Data Breach
A weak password, astonishingly "123456", was exploited by hackers to breach Denmark's Central Register of Persons, compromising sensitive data of 8.8 million people. This massive breach highlights the alarming vulnerability of even seemingly secure systems to simple yet devastating cyber attacks.
Bitdefender Targets AI Oversight Gap with Visibility and Control Tool
Stay ahead of AI-related threats with Bitdefender's AI Visibility and Control tool, which identifies and manages over 50 AI agents and 70,000 skills that may be hiding in plain sight. Traditional software inventories often miss four critical classes of AI exposure - including shadow AI, coding assistants, and local model runtimes - putting your organization at risk.
French Supermarkets Hit by Cyberattacks on Refrigeration Systems
French supermarkets are reeling from a wave of devastating cyberattacks that crippled their refrigeration systems, causing temperatures to soar as high as 122°F and spoiling food across hundreds of stores. The disruption hit major chains like Intermarché, Carrefour, Monoprix, and Coopérative U, with some stores even reporting fires.
LG Smart TVs Exposed to Local Network Takeover via WebOS Flaws
Your LG Smart TV may be vulnerable to a local network takeover due to three critical flaws in webOS, allowing hackers to gain root access without needing a PIN or your interaction. This startling exploit begins with a simple connection to the TV's pairing service on port 3001, typically used by the LG ThinQ app.
Fashion Retailer TFG London Hit by Cyberattack
TFG London is battling to contain a cyberattack that hit its operations, but reassures customers that stores are open as usual. The incident has temporarily affected some website capabilities, including orders and payments, while the company investigates.
UK Bolsters AI Security with New Vulnerability Detection Plans
The UK is turbocharging its AI security by harnessing cutting-edge technology to detect and fix vulnerabilities in its public-sector IT systems - a move that's already shown impressive results, slashing the time to resolve weaknesses from 50 days to just eight. With this momentum, the government aims to further fortify its defenses against emerging AI threats.
GitLab Fixes Code Execution Flaw with Maximum Severity Rating
GitLab has patched a critical vulnerability that could have let hackers run malicious code on its servers, thanks to a flaw in its CI/CD configuration that wasn't properly validating regular expressions. This maximum-severity bug, tracked as CVE-2026-97229, could be exploited by unauthenticated users, making it a major security risk.
MarkLogic Flaws Empower Delegated Managers to Gain Admin Control
Progress is urging users to upgrade MarkLogic Server ASAP, as a recent spate of vulnerabilities - including 31 flaws disclosed just last month, five of which are critical - could leave delegated managers with admin control and users stripped of previous privileges. A second round of security patches has been released in response, with fixes available since September 10.
Danfoss Controllers Exposed in French Supermarket Cyberattack
A wave of cyberattacks hit French supermarkets on October 11, forcing hundreds of stores to warm fridges and freezers, and ultimately discard thousands of dollars' worth of food. The breach, which Danfoss acknowledged was limited to a number of their refrigeration management systems, caused estimated losses of tens of millions of euros.
Patch Tuesday Stress Drives CISOs to Avoid Work
Patch Tuesday stress is taking a toll on cybersecurity leaders, with one in five admitting they've called in sick or booked holiday time to avoid the monthly chaos. The pressure is real, with 41% working overtime and 37% burning the midnight oil to deploy patches.
US Army Deploys Balloon Swarms to Support CENTCOM Operations
The US Army swiftly adapted its high-altitude balloon program, originally slated for a 2026 demo over Indo-Pacific waters, to support CENTCOM operations in the Middle East instead. The swift pivot led to the deployment of smaller balloon swarms to the region, marking a significant experimentation milestone.
Defense Firms Unveil Advanced Air, Ground Vehicles at AUSA Expo
Thousands of defense professionals flocked to the Walter E. Washington Convention Center on October 12, 2026, for the Association of the US Army's annual conference, where the latest air and ground vehicles took center stage. The expo floor was buzzing with exhibitors showcasing cutting-edge tech, including drones, counter-drone systems, and advanced equipment.
Poland's Tusk Warns Europe of Russian Threat Escalation
Donald Tusk is sounding the alarm: Europe must stand strong against Russia's growing threat, or risk facing a grim reality. He urges the continent to take a firm stance, warning that weakness only emboldens aggression.
Pakistan Accelerates Development of Low-Cost, High-Speed Attack Drones
Pakistan is ramping up its development of affordable, high-speed attack drones, driven by Ukraine's effective use of turbojet-powered unmanned aerial vehicles (UAVs) against Russia. This strategic shift is marked by Pakistan's focus on simpler, scalable, and lower-cost cruise missile designs, such as the Fatah-4 and Fatah-4-ER.
US Army Shifts Focus to Counter-Cartel Ops in South America
The US Army is ramping up its fight against drug cartels and terrorist organizations in South America, shifting its training focus from building relationships to conducting targeted operations. Gen. Joe Ryan announced the change in direction at the Association of the United States Army annual meeting in Washington, D.C.
Army Plans 'Manufacturing Rodeo' to Stress-Test Supply Chains
Get ready for the Army's "Manufacturing Rodeo" in 2027 - a bold experiment that will deliberately push the defense industrial base to its limits, revealing weaknesses in supply chains and manufacturing processes. By stress-testing the system, the Army aims to identify areas for improvement and rope in innovative solutions to build a more resilient and agile industrial base.
PLAN Modernizes with New Destroyer Amid Legacy Ship Decommissioning
China's People's Liberation Army Navy is modernizing its fleet with the addition of a new Type 052D destroyer, rumored to be named Harbin, as it phases out legacy ships like the Harbin, a pioneering Type 052 Luhu-class destroyer.
Army Secretary Warns of Supply Chain Vulnerabilities
Acting Army Secretary Adam Telle warned of supply chain vulnerabilities, highlighting them as weak links that need to be addressed, in his largest address to soldiers and industry since taking on the role.