Tag: emerging threats
8232 articles
Ransom Busters Emerges as New Player in Ransomware Extortion Economy
Meet Ransom Busters, a newcomer to the ransomware extortion economy that's shaking things up with its bold approach: offering to delete stolen data from ransomware groups' servers for a fee of $20,000 to $60,000. This third-party player claims to have been infiltrating ransomware-as-a-service operations for over three years.
Attackers Exploit MLflow Flaw to Steal Cloud Credentials
A newly discovered vulnerability in MLflow, CVE-2026-64849, with a near-perfect CVSS score of 9.3 is being exploited by attackers to infiltrate cloud metadata services and steal sensitive credentials. This critical flaw allows hackers to issue unauthorized requests and extract confidential data, putting your cloud security at risk.
Microsoft Copilot Flaws Expose One-Click Data Exfiltration Risk
Researchers uncovered a set of flaws in Microsoft Copilot, dubbed CoSnitch, that could allow attackers to exploit a user's session with just one click, potentially leading to data exfiltration. A single crafted link could trigger actions inside a signed-in user's assistant session, putting sensitive information at risk.
US Military Tests 3D Printing in War Games to Bolster Pacific Supply Lines
In a high-intensity conflict in the Indo-Pacific, the US military could struggle to meet its repair and resupply needs - a challenge that 3D printing may help alleviate. The Navy recently tested an experimental 3D printing network during the Rim of the Pacific wargames to see if on-demand production could ease logistics in a potential Pacific conflict.
Air Force Seeks Expendable Drones to Mimic Diverse Airborne Threats
The US Air Force is on the hunt for affordable, expendable drones that can replicate a wide range of airborne threats, from tiny hobby drones to advanced fighter jets. These drones would need to mimic various aircraft characteristics, including speed, size, and radar signatures, while being simple and inexpensive enough to produce in large quantities.
Trump Unveils Ambitious Navy Shipbuilding Overhaul Plan
The future of US navy shipbuilding hangs in the balance as President Donald Trump's groundbreaking national security memo promises to revolutionize the industry. With its far-reaching implications, this directive is set to dramatically reshape procurement and force structure.
Medusa Ransomware Expands Reach with New Tactics, Hundreds More Victims
The Medusa ransomware gang is on the loose, exploiting unpatched software to target hundreds of victims across various sectors, with the Healthcare and Public Health industry being a frequent hit. Now, US agencies have issued an updated warning, detailing the group's latest tactics and partnerships.
India Expands Air Defense with Helicopter-Based Drone Interdiction Tactics
India is taking its air defense to new heights with cutting-edge helicopter-based drone interdiction tactics, recently putting its skills to the test in a week-long exercise at the Pokhran firing range in Rajasthan. The country is set to bolster its defense capabilities with 156 additional helicopter units by 2032.
US Navy Weighs Major Ford Class Carrier Design Change
The US Navy is reconsidering a key design decision behind its Ford Class carriers, one that moved the island 140 feet further aft than its Nimitz-class predecessors, in a change that could significantly alter the ship's operational capabilities. This shift was no accident - it was the result of careful design studies that aimed to create more usable flight-deck space and a new operational rhythm.
Clop Ransomware Gang Crafts Custom Web Shell for Windchill Attacks
The Clop ransomware gang has taken its attacks to the next level by crafting a custom Java web shell that specifically targets PTC Windchill and FlexPLM servers, allowing them to harvest sensitive data with ease. This tailored tool is a significant evolution of their mass-exploitation tactics, making it a major concern for businesses using these applications.
Supply Chain Hack Exposes Pokémon Center Customer Data
A recent supply chain hack exposed sensitive customer data at the Pokémon Center, but fortunately, the breach occurred through a third-party logistics partner, CEVA, and not directly through the retailer's own systems. The incident, triggered by CEVA's notification on July 30, compromised customer order details for Pokémon Center's UK and German shipments.
Apple patches image-processing flaw exploited in spyware campaigns
Apple just patched a major security flaw in its ImageIO system that could let attackers run code on your device - and it's already been used in sneaky spyware campaigns targeting high-profile targets.
AI-Driven Development Exposes Surge in Enterprise App Vulnerabilities
The rapid adoption of AI-driven software development has led to a staggering fivefold increase in application creation, but also a shocking 4.31 times more critical and high-severity vulnerabilities in enterprise apps. This surge in vulnerabilities outpaces the speed of fixes, posing a growing risk to businesses.
CISA Mandates Swift Fix for Exploited Ray RCE Flaw
A critical bug in the Ray framework, scoring 9.4 under CVSS v4, can be exploited for remote code execution with a simple visit to a malicious web page or hostile ad in Firefox or Safari. This vulnerability can be triggered when an attacker crafts requests that appear browser-originated, allowing for a potentially disastrous security breach.
Wiz AI Tool Exposes Snowflake GitHub Repo Vulnerability Missed by Advanced Security
Wiz AI Tool Exposes Snowflake GitHub Repo Vulnerability Missed by Advanced Security Meet Red Agent, the game-changing AI tool that uncovered a script injection vulnerability in Snowflake's GitHub repository that even advanced security scans missed. This autonomous security researcher not only identified the flaw but also exploited it and assessed the damage - all without human help.
NASA Ground Software Flaw Exposes Unauthenticated Command Functions
A critical flaw in NASA's open-source ground software, AIT-GUI, has been discovered, exposing it to unauthenticated command functions - and it's a big one, with a 9.4 CVSS rating. The vulnerability affects versions up to 2.5.1, but a fix is available in version 2.5.2.
Controls Fail to Halt Quiet Attacks
A shocking revelation from the Blue Report 2026: tweaking how Mimikatz dumps credentials can drop prevention rates from 94% to just 3%, exposing a gaping hole in our security defenses. Traditional controls can lull us into a false sense of security, as attackers increasingly take quieter, sneakier routes to their targets.
TWINLOOT Exploits Microsoft Services to Steal Credentials
Meet TWINLOOT, a sneaky Python implant that hides its command-and-control infrastructure inside trusted Microsoft services, making it super hard to detect. It uses SharePoint Online and Microsoft Teams to operate undetected, even leveraging a victim's own Edge browser to blend in.
Microsoft Copilot Exposes Vulnerability to Meta-Hacking
Researchers at Varonis Threat Labs uncovered a vulnerability in Microsoft Copilot, cleverly manipulating it to reveal its own weaknesses and craft a working attack, which they've dubbed CoSnitch. This surprising exploit was responsibly disclosed to Microsoft, which plans to issue a patch.
Researchers Expose AI 'Mind Virus' Propagation Risks
Imagine a "mind virus" spreading rapidly through AI systems, with agents infecting each other 55% of the time simply by editing system files like SOUL.md. In experiments, these self-propagating payloads proved alarmingly effective, with 88% of infected agents attempting to spread the virus to others.
Salesforce, ServiceNow Portals Targeted in Ongoing Data Scraping Campaign
A single virtual private server has been secretly siphoning off sensitive records from Salesforce and ServiceNow customer portals since March 2025, according to recent research by Reco. This ongoing data scraping campaign, dubbed City Forum, has been quietly pulling data from multiple targets across various sectors.
Typosquatting Campaign Targets RubyGems Users with Windows Stealer
Beware of a sneaky typosquatting campaign targeting RubyGems users: 16 malicious packages were used to spread a Windows stealer that harvests sensitive data, including browser credentials, cryptocurrency wallets, and Telegram info. This malware can strike when you least expect it, putting your online security at risk.
Cyber Incident Disrupts UT San Antonio's Student Services
The University of Texas at San Antonio swiftly contained a potential cyber threat after detecting suspicious activity on the edge of its network, and took swift action to protect its systems and data. Thankfully, the incident appears to have been effectively managed, with no evidence of data compromise reported so far.
Ransomware Attacks Singly Target Mid-Market Firms
Ransomware attacks are hitting mid-market firms with alarming frequency, and the threat is only escalating as AI-powered tools rapidly uncover new vulnerabilities at an overwhelming pace. Mid-market companies, with revenues between $10m and $1bn, now account for nearly three-quarters of ransomware attack victims.