Tag: emerging threats
8237 articles
Evooo1Bot Malware Targets Routers in Global Traffic Relay Botnet
Meet Evooo1Bot, a sneaky malware that's turning routers worldwide into unwitting traffic relays, harvesting credentials, and launching devastating DDoS attacks. This modular Linux botnet is packed with powerful tools, including encrypted communication, SSH brute-forcing, and exploit arsenals to take down vulnerable devices.
ChainDrop Worm Infiltrates npm Supply Chain, Evades Defenses
A sneaky new worm called ChainDrop has infiltrated the npm supply chain, infecting 444 packages that are downloaded a whopping 2 billion times each month. This stealthy attack uses a clever tactic, targeting package tarballs rather than repository source commits to evade defenses.
DecryptAds Exposes Adtech Ecosystem's Hidden Trackers
Ever wondered who's really behind the ads you see online? A single search on DecryptAds for a popular site like espn.com uncovers a staggering 143 ad partners and 19 data broker domains, revealing the surprisingly complex adtech ecosystem.
US Weighs Nationalizing AI Giants OpenAI and Anthropic
As the AI giants OpenAI and Anthropic face growing headwinds, including public backlash and market turbulence, some experts believe the US government should consider nationalizing these companies before they stumble. With their valuations already taking a hit, now may be the perfect time for the government to step in and catch them before they fall.
Rheinmetall Unveils Mobile Loitering Munition Launch Capability
Imagine a game-changing weapon that can scout out its target, track it, and then strike with precision - all from a mobile launch platform. Rheinmetall's FV-014 loitering munition system makes it all possible, boasting a 100km range and 70-minute flight time.
US Navy Weighs Foreign Shipbuilding Amid Congressional Pushback
The US Navy is exploring a game-changing strategy: building combat ships abroad, but experts warn that this approach is fraught with technical, logistical, and political hurdles. A senior policy researcher notes that the main challenge lies in the unknown territory of foreign shipbuilding for combat-type vessels.
Army Seeks Innovative Power Solutions as Energy Demands Surge
The Army is facing a pressing power problem: its vehicles lack the exportable power needed to fuel modern sensors, drones, and command centers, severely limiting operations. Brigade commanders are being forced to ration critical assets like unmanned aerial systems due to insufficient power, not mission requirements.
US Army Pursues Lower-Cost Strike Missile With 1,000-Kilometer Range
The US Army is on a mission to develop a game-changing, lower-cost strike missile that can travel up to 1,000 kilometers, and their Affordable High Speed Strike (AHSS) program is already exploring two innovative design concepts. This new missile promises to be a total game-changer, offering unprecedented speed and range at a fraction of the cost.
HoneyMyte APT Group Upgrades CoolClient Backdoor with Kernel-Level Rootkit
Meet the upgraded CoolClient Backdoor, now packing a kernel-level rootkit courtesy of the sneaky HoneyMyte APT Group - and it's hiding in plain sight with a legit digital signature. This clever malware uses a Windows service and a kernel-mode driver to evade detection.
US Navy Faces Risks in Reverting to Steam Catapults on Carriers
The White House is pushing the Pentagon to radically redesign the Ford-class carrier program, after President Trump issued a memo calling for a switch back to steam catapults, a technology that's been around for 50 years. This abrupt change has left the US Navy facing significant risks and a tight 60-day deadline to come up with a new plan.
Saudi-Pakistan-Turkiye Pact Raises Stakes for India
In a move with far-reaching implications, Saudi Arabia, Pakistan, and Turkey have inked the Mecca Joint Deterrence Agreement, pledging to consider an attack on any one of them as an attack on all three. This bold pact, signed by the leaders of the three nations, cements their unity and shared commitment to strategic interests.
US Naval Presence in Taiwan Strait Wanes
The US naval presence in the Taiwan Strait is dwindling at an alarming rate, with a projected 50-56% decline in transits under the current administration compared to the previous two, dropping from 28 and 32 to just 14 publicly reported transits. This significant decrease marks a sharp departure from the norm.
Hackers Exploited Service Provider Flaw in €30M Commerzbank Heist
In a massive €30M heist, hackers exploited a vulnerability in a service provider's software, making unauthorized direct debits from Commerzbank customer accounts in 2023, but fortunately, no customers suffered financial losses. The incident highlights the risks of relying on third-party services and the importance of robust security measures.
ShinyHunters Breach Exposes 1.6M RingCentral Accounts
A massive data breach at RingCentral has exposed the sensitive information of 1.6 million customers, including names, addresses, phone numbers, and email addresses, which have been posted online by the hacker group ShinyHunters. This breach was discovered on July 28, and although RingCentral took swift action to stop the unauthorized activity, the damage has already been done.
Data Breaches Surge, Threaten 2026 Record
Data breaches are surging out of control, with 1,803 compromises reported in the first half of 2026 alone, putting the year on track to shatter the 2025 record of 3,321 breaches. If this pace continues, 2026 could see a staggering 3,600 data compromises.
French Tax Authority Confirms Data Breach After Hacker Touts 2M Records
The French Tax Authority has confirmed a data breach after a hacker claimed to have stolen sensitive information from over 2 million taxpayers, exploiting stolen credentials and a security loophole. The breach was detected in June, and an immediate audit helped sever the unauthorized access.
Hackers exploit macOS flaw to deploy Monero miners
Hackers are exploiting a recently fixed macOS security flaw to secretly deploy Monero miners, and experts warn that public exploit code is now available, putting users at risk. This vulnerability, affecting macOS's built-in Screen Sharing feature, allows attackers to gain access without valid credentials.
ExfilSquad Breaches 13 Organizations Via Misconfigured Microsoft Power Pages
Meet ExfilSquad, a notorious data-extortion group that's made off with a whopping 27 million records and 382.64 GB of sensitive data from 13 major organizations across government, education, finance, and manufacturing. The stolen treasure trove was dumped online for all to see, courtesy of a simple misconfiguration in Microsoft Power Pages.
Google Workspace Security Must Adapt to AI-Driven Threats
The traditional attack chain is getting a makeover: instead of starting with a malicious email, attackers now use OAuth apps to breach Google Workspace, exploiting new vulnerabilities in an AI-driven threat landscape. It's time to shift from an inbox-centric to an OAuth-first security approach to stay ahead.
Autonomous AI Attacks Target Critical Infrastructure
The threat of autonomous AI attacks on critical infrastructure is no longer a distant possibility, but a looming reality that could unleash devastating kinetic disasters, warns Tom Kellermann, VP of AI security and threat research at TrendAI. The perfect storm of rising geopolitical tension and increasingly powerful off-the-shelf AI agents makes a crippling attack on our infrastructure not just plausible, but imminent.
SAP Commerce Cloud Vulnerability Now Under Active Attack
Hackers are actively exploiting a critical vulnerability in SAP Commerce Cloud, allowing them to remotely execute code without any login credentials. This severe flaw, tracked as CVE-2026-58231, was patched by SAP just three days before attacks began.
Mirai-Based Botnet Evooo1Bot Exploits Vulnerabilities, Turns Devices Into Proxies
Meet Evooo1Bot, a newly identified Mirai-derived Linux botnet that's turning devices into proxies by exploiting vulnerabilities, and has been actively targeting internet-facing devices since July 2026. Its operators have been using a single loader URL to launch attacks, allowing researchers to track and identify the malware.
Shell Probes Data Breach After Clop Ransomware Gang Claims Theft
Shell is investigating a potential data breach after the notorious Clop ransomware gang claimed to have stolen 89GB of sensitive information from the energy giant. The company is working closely with its security teams and experts to get to the bottom of the incident.
ShinyHunters Breach Exposes 1.6 Million RingCentral Accounts
RingCentral has confirmed that a breach, known as ShinyHunters, compromised 1.6 million of its accounts, but has since taken swift action to prevent further unauthorized activity. The company is now directly contacting affected customers and has assured that its core platform remains secure and operational.