Tag: emerging threats
8253 articles
Levi's Probes Data Breach After Social Engineering Attack
Levi's is investigating a data breach after a sneaky social engineering attack tricked three employees into giving hackers access to their work computers, compromising certain corporate information. Fortunately, the company says consumer data appears to be safe and operations are running smoothly.
TrueConf Server Flaws Targeted to Deploy PhantomCore Backdoor
Security researchers at Kaspersky have uncovered a sneaky plot by threat actor Head Mare to exploit unpatched TrueConf servers and deploy the PhantomCore backdoor to unsuspecting users. The attack relies on a two-stage vulnerability chain that allows attackers to run malicious commands with high-level privileges.
Royal Navy drones transmit data to China in cyber vulnerability test
Royal Navy drones recently raised eyebrows when their cameras started sending signals to a Chinese IP address during a routine cyber vulnerability test, sparking concerns over data security. The Ministry of Defence quickly stepped in to reassure that no sensitive data was compromised, and the transmission was just a harmless "heartbeat" signal.
UK Hacker Sentenced for Sextortion Targeting Minors Worldwide
A UK hacker, known for using aliases like "Epstein" and "Moscow", has been sentenced to two years in prison for targeting minors worldwide with sextortion, forcing them to perform shocking acts of self-harm and sexual activity for his online popularity. The 20-year-old, Justin Swaddle, preyed on nearly 120 young and vulnerable victims, leaving a trail of devastating impact across the globe.
Passkey Defenses Targeted in Novel Attacks
Researchers at Black Hat USA 2026 revealed a shocking vulnerability in passkey defenses, demonstrating how attackers can bypass FIDO2 cryptography and exploit a flaw in Windows Event Logging Service (CVE-2026-34348) to defeat passkey protections. This security gap was found to allow unauthorized users to access and replay sensitive YubiKey signatures.
LexisNexis Disrupts Services Amid Server Breach Probe
LexisNexis swiftly pulled the plug on three key services - Nexis Diligence, Metabase API, and Newsdesk - after detecting suspicious activity on servers managed by a third-party vendor, taking swift action to safeguard customers and contain the breach. The move comes as the company investigates the unusual server activity.
Valve Exposes Steam Hardware Customer Data Breach
A recent cyberattack on CEVA Logistics, a shipping partner for Steam hardware in Europe, exposed sensitive customer data, including names, addresses, phone numbers, emails, and order details, between July 29 and August 1, 2026. Valve has notified affected customers about the breach, which may have compromised their personal information.
Metabase Zero-Day Exploited to Breach Framework Customer Data
A zero-day exploit in analytics provider Metabase has led to a data breach at laptop maker Framework, exposing personal customer information, and prompting a review of its data storage methods with external vendors. Metabase has since patched the bug, blocked attack endpoints, and deployed a fix across its cloud service to prevent further exploitation.
AI Agents Exposed to Ghostjacking Attacks Bypassing Firewall Defenses
Imagine a stealthy attack that turns your own AI agents against you, routing sensitive email and web traffic around your firewall defenses - and it starts with just a single, seemingly harmless fake bug report. This sneaky technique, known as Ghostjacking, can leave even the biggest companies vulnerable to devastating breaches.
Hackers Actively Exploit Critical LoadMaster Flaw in Global Attacks
Hackers are actively exploiting a critical flaw in LoadMaster, known as CVE-2026-8037, which allows them to run malicious commands on unpatched devices - putting your security at risk if you haven't updated yet. This vulnerability enables unauthenticated attackers to take control, making it crucial to patch Progress Kemp LoadMaster appliances ASAP.
Go-Based Malware Targets macOS Crypto Wallets
Beware of a sneaky new scam targeting macOS crypto wallets: a fake CAPTCHA prompt tricks you into copying and pasting a malicious command that can download malware and compromise your wallet. One wrong click is all it takes to put your crypto at risk.
Malicious VS Code Extensions Target Crypto Wallets, API Keys
Beware: malicious VS Code extensions are targeting crypto wallets and API keys, putting cryptocurrency holders and developers at risk of having their sensitive information stolen. These sneaky extensions, including helper-beeps.solidity-pro and web3devtoolsx.solidity-pro, start off harmless but soon morph into information stealers that siphon off valuable data.
US Targets Shelbit in $6bn Crypto Sanctions Crackdown
The US Treasury Department has cracked down on crypto sanctions, targeting Shelbit, a shadowy crypto conduit, and its founder Siavash Kayvanpour in a $6bn blow to Iran's financial apparatus. This move underscores the Treasury's determination to disrupt Tehran's reliance on digital assets and secret banking networks.
Pakistan, Saudi Arabia, Türkiye Forge Trilateral Defence Pact
In a historic move, Pakistan, Saudi Arabia, and Türkiye have joined forces to sign a groundbreaking trilateral defence pact, committing to mutual defence in the face of armed attacks. The Makkah Joint Defence Agreement marks a major milestone in regional cooperation, with leaders hailing it as a shield of peace for generations to come.
Dassault Targets India with 114-Rafale Bid
Dassault Aviation has thrown down the gauntlet with a bold bid to supply 114 Rafale fighter jets to the Indian Air Force, comprising 20 flyaway aircraft and 94 built in India. This ambitious proposal is now under evaluation by India's Ministry of Defence and the IAF.
Australia's North Requires Systems Overhaul for National Resilience
Imagine a 2,800 km lifeline stretching across Western Australia, the Northern Territory, and Queensland, transforming the north into a national strategic powerhouse that supercharges freight resilience, disaster response, and supply chains. The Outback Way is more than just a transport project - it's a game-changer for Australia's national resilience.
Saudi Arabia, Türkiye, Pakistan Sign Pact to Bolster Defence Capacity
In a major move to boost their defence capabilities, Saudi Arabia, Türkiye, and Pakistan have signed a landmark agreement that pledges mutual support in the face of aggression, effectively making an attack on one nation an attack on all three. This pact aims to supercharge defence cooperation between the trio, marking a significant step towards a stronger collective defence.
China's J-20 Stealth Fighter Exposes Advanced Engine Capabilities
A stunning close-up photo of a WS10C engine installed on a J-20 airframe has been released publicly via the PLAAF's Weibo account, giving a rare glimpse into China's advanced engine capabilities. The image, which has been making waves in defense circles, was shared by the China-Defense blog.
China Escalates Coercion in South China Sea
China's aggressive actions in the South China Sea are escalating, with a surge in coast guard activity around Scarborough Shoal and a resumption of large-scale island-building at Antelope Reef, signalling a brazen push for regional dominance. This heightened activity has significant implications for the waters off Australia's northern coast.
China Unveils JL-1 Nuclear-Capable Missile on H-6N Bomber
China just revealed a game-changing moment in military tech: the JL-1 nuclear-capable missile proudly mounted on its H-6N bomber, marking a significant upgrade in the People's Liberation Army's strategic capabilities. This public display is a major milestone, offering a glimpse into Beijing's expanding military might.
Pakistan Spurned Turkey's KAAN Fighter Jet Partnership in 2016
Pakistan had the chance to partner on Turkey's game-changing KAAN fighter jet back in 2016, but passed - now Turkey's moving forward with deliveries, leaving Pakistan to rethink its fighter jet replacement options. The KAAN program just hit a major milestone with its first taxi test, and is on track to be delivered to the Turkish Air Force by the end of the decade.
OpenAI Halts Astra Model Tests Over Advanced Cyber Capabilities
OpenAI is hitting the pause button on internal Astra activities that don't meet its new, stricter security control requirements, following concerns over the model's advanced cyber capabilities. The company is implementing enhanced safeguards, including isolated testing environments and encryption, to ensure responsible development.
AI Crawlers Exposed to Secret Ads in Web Pages
Imagine discovering hidden ads that can influence the output of entire AI models, allowing advertisers to reach a vast audience with a single placement - and get their message served up as fact. German developer Vincent Schmalbach stumbled upon these secret ads, cleverly disguised as FAQs, embedded in Time Magazine articles served to crawlers.
Ransomware Gangs Target Mid-Level Managers to Accelerate Payments
Ransomware gangs are now taking a sniper approach, targeting mid-level managers with precision to get payments faster. This new tactic is a far cry from the scattergun methods of the past, with one recent campaign hitting 351 victims across 334 organizations in just a month.