Tag: emerging threats
8084 articles
Ledger Exposes Supply-Chain Attack Behind Crypto Theft
Ledger just confirmed a shocking case of tampering behind recent crypto thefts, tracing the issue to a single reseller, CryptoBilis, and finding an unauthorized hardware implant in one user's device. The company is now working with authorities to catch the culprit and reach out to affected users.
Leaked Files Expose Luna Moth Ransomware Group's Tactics
Newly leaked files from an anonymous source reveal the inner workings of the notorious Luna Moth ransomware group, exposing a sophisticated data-extortion business that thrives on manipulating trust. According to Check Point's analysis, this group's tactics are far more complex and sinister than your average ransomware crew.
Ransomware Gang Targets MoneyGram in Alleged Breach
Ransomware group The Gentlemen claims to have breached financial services giant MoneyGram, which boasts 60 million active customers, but the company has yet to confirm the incident. With no concrete evidence or data samples provided, the extent of the alleged breach remains unclear.
Danfoss Controllers Targeted in Cyberattack on French Supermarkets
A cyberattack has hit several French supermarkets, forcing refrigerators to undergo emergency defrost cycles and putting fresh food at risk after hackers hijacked Danfoss refrigeration controllers. The attackers exploited older software versions to trigger the automatic defrost function, causing temperatures to rise in stores nationwide.
Small Businesses Lag in AI Governance
Small businesses are rapidly adopting AI, but struggling to keep up with oversight - in fact, over half of decision-makers are spending hours each week manually checking AI outputs, while 35% have discovered unauthorized AI tools already embedded in their operations.
Ahold Delhaize Disrupts Operations After Cyberattack
Ahold Delhaize has taken swift action to protect its customers, employees, and partners after detecting a security issue within its network, taking some systems offline to prevent further damage. The company is working diligently to assess and mitigate the problem.
H&M Probes Possible Data Breach by ShinyHunters Group
H&M is investigating claims of a potential data breach after online rumors surfaced, and is working to verify if a cyber attack by the ShinyHunters group has compromised its data. The retailer says it's taking the situation seriously and prioritizing the security of its systems and data.
AvisLoader Exposes New Evasion Tactics in Windows Malware Attacks
Meet AvisLoader, a sneaky new Windows malware loader that's changing the game with its clever evasion tactics and encrypted communication methods. It starts with a convincing ClickFix page that tricks victims into pasting a malicious command into their terminal.
Ukraine Strikes Disrupt Yandex Datacenters, Knocks Cloud Services Offline
Ukrainian drone strikes have severely disrupted Yandex's operations, damaging three of its Russian datacenters and taking several cloud services offline. Engineers are working tirelessly to restore services, but for now, users are facing significant downtime.
GitLab Patches Code Execution Flaw in CI/CD Compiler
GitLab has patched a critical code-execution flaw in its CI/CD compiler that allowed remote attackers to run arbitrary code on targeted instances. The vulnerability, tracked as CVE-2026-97229, was caused by an integer overflow weakness in the CI/CD Regular Expression Compiler.
Ledger Uncovers Unauthorized Hardware Implant in CryptoBilis-Sold Wallets
If you bought a Ledger wallet from CryptoBilis in the last 90 days, don't set it up yet - Ledger's investigating reports of stolen funds linked to devices sold by this reseller. Consider moving your assets to a new Ledger device if you've already set one up.
Personal AI Agents Infiltrate Work Systems, Bypassing Traditional Security Controls
Personal AI agents, like Instinct, have already infiltrated work systems, raising both fascination and concern among security teams, and with $1 billion in funding and a $10 billion valuation, it's clear that these well-funded assistants are here to stay. They can easily slip into corporate systems through common vectors like OAuth consent and text threads, bypassing traditional security controls.
Cyber-Attack Disrupts French Supermarket Refrigeration Systems
A cyber-attack has hit French supermarket chain Coopérative U, disrupting refrigeration systems across multiple stores and threatening the freshness of food supplies. The company is racing against time to restore operations, with the CEO vowing a swift resolution and a thorough investigation into the unprecedented incident.
SonicWall SMA 1000 Flaw Exploited in 135 Attempts Post-Patch
A critical vulnerability in SonicWall's SMA 1000 appliances, known as CVE-2026-102255, has been exploited in 135 attempts since a patch was released, allowing attackers to secretly tap into internal systems and perform unauthorized operations. This highly severe flaw, rated 10.0 on the CVSS scale, enables pre-authenticated server-side request forgery attacks.
AI-Powered Bug Hunting Exposes New Cybersecurity Risks
The ShinyHunters group, behind a recent FBI breach, revealed their surprising motive: they weren't after cash, but aimed to protect their reputation from being tarnished. Meanwhile, the FBI continues to crack down on the group, making new arrests in their investigation.
Ransomware Groups Exploit Palo Alto VPN Flaw Despite Patch Release
Ransomware groups are actively exploiting a patched vulnerability in Palo Alto VPNs, allowing them to masquerade as legitimate remote workers and evade detection until they strike. This sneaky tactic enables hackers to steal credentials, move laterally, and deploy ransomware, causing devastating consequences.
Attackers Exploit Bricksforge WordPress Flaw for Unauthenticated RCE
A critical flaw in the Bricksforge WordPress plugin, rated CVSS 10.0, allows hackers to upload and execute malicious code on vulnerable sites without needing login credentials. This gaping security hole is being actively exploited, putting sites at risk of remote code execution.
FBI Arrests Suspect Tied to ShinyHunters Breach
The FBI has arrested Edward Dubrovsky, a 54-year-old Canadian cybersecurity executive, in connection with the ShinyHunters breach, charging him with conspiracy and interference with commerce by threats. Dubrovsky is suspected of being part of the group behind the recent FBIjobs.gov incident.
Daiichi Kosho Breach Exposes 8 Million Customer Records
A shocking data breach at Daiichi Kosho has put 8 million customer records at risk, with the company confirming that personal data stored on an infected device may have been leaked. The breach was discovered after a malware infection was found on an employee's PC at Nippon Columbia Group, a partner of Daiichi Kosho.
Anduril Unveils Cheaper Steelfin Interceptor to Counter Missile Threats
Legacy interceptors just can't keep up with the growing threat of drones, ballistic missiles, and hypersonic weapons - that's why Anduril is shaking things up with its new Steelfin Interceptor, a game-changing, lower-cost alternative that's modular and scalable. Priced at roughly a third of the cost of current solutions, Steelfin is the innovative answer to a rapidly evolving threat landscape.
CyberXero Exploits AI in Dual-Pronged Ukraine Cyberattack Campaign
Meet CyberXero, a Russian-speaking cyber culprit who's been wreaking havoc in Ukraine with a sneaky two-pronged attack campaign that's been flying under the radar since at least July 2026. Over 628,000 records of Ukrainian individuals have already been compromised in this AI-powered cyberattack spree.
Malware Breach Exposes 8.6 Million Karaoke Records
A massive malware breach has hit Daiichi Kosho, Japan's largest karaoke system maker, exposing a staggering 8.6 million customer records and 93,000 employee details, including sensitive personal info like names, birthdates, and contact numbers. The breach occurred when a contractor's system was infected with malware.
AI Models Expose Vulnerability of Critical Infrastructure to Cyberattacks
AI-powered attacks can now outmaneuver traditional defenses, putting critical infrastructure at risk of devastating breaches if essential cybersecurity practices aren't in place. Advanced AI models have been shown to execute complex attacks with alarming speed and precision, outpacing organizations that haven't implemented robust OT cybersecurity measures.
PLA Cavalry Exposes Glaring Weaknesses in Modern Warfare Readiness
The PLA's cavalry training course, which drew around 100 troops, has highlighted some glaring gaps in the military's modern warfare readiness, particularly in armor, weapons, and communications. Despite the flashy mounted saber drills and obstacle jumping, the exercises have exposed some serious equipment shortfalls.