Tag: emerging threats
8253 articles
China's Elite Artillery Brigade Upgrades With Advanced PHL-191 Rocket System
China's elite artillery brigade has just leveled up with the cutting-edge PHL-191 rocket system, marking a new era for a unit with a storied 80-year history that dates back to the 1950s when it first introduced Katyusha rockets to the PLA.
Russia Deploys Nets to Shield Nuclear Submarines from Drone Threats
Russia is taking a dramatic step to protect its nuclear submarines from drone threats, as seen in recent satellite images showing multiple subs at a key base on the Kamchatka Peninsula completely covered in netting. This unusual move suggests a growing concern about the vulnerability of its underwater fleet.
Senate Approves Stopgap Funding Bill
The Senate has just approved a stopgap funding bill, passing it with a strong bipartisan vote of 90-6-1 to keep federal agencies funded until December 11. This temporary measure averts an immediate shutdown risk, but sets a new deadline for September showdowns.
Hackers Breach TrueConf Servers to Deploy Backdoors via Trojanized Updates
Hackers have breached TrueConf servers by exploiting a gaping security hole - an open TCP port that lets them in without needing a password, then using trojanized updates to deploy backdoors and take control. This sneaky attack vector has been used by threat actors like Head Mare to spread malware and gain unauthorized access.
Researchers Warn of Security Gaps in AI Coding Tools
Researchers analyzed 1.1 million Reddit posts to uncover alarming security gaps in AI coding tools, revealing that developers are frequently complaining about security and privacy lapses. These flaws are leaving the door open for potential threats, putting users at risk.
CSS Attacks Break Webmail Defenses to Steal Passwords and Tokens
Researchers have discovered alarming proof-of-concept techniques that allow attackers to exploit styled HTML in emails, breaking through webmail defenses to steal passwords, tokens, and even hijack trusted actions. This vulnerability affects major email services including Outlook, Gmail, and Yahoo Mail, and public proof-of-concept code is readily available.
Atlassian Rovo Exposes Data Risk Via Prompt Injection Flaw
A critical flaw in Atlassian's Rovo assistant could allow attackers to siphon off sensitive Jira and Confluence data, thanks to a prompt injection vulnerability that two separate security teams were able to exploit. Fortunately, Atlassian has patched one of the two paths used to carry out the attack, but the incident highlights the risks of data exposure via AI-powered tools.
CISA Warns of Active Progress Kemp LoadMaster Exploit Attempts
The US Cybersecurity and Infrastructure Security Agency (CISA) has sounded the alarm on a critical flaw in Progress Kemp LoadMaster, warning of a surge in exploitation attempts - 792 attempts in just 41 days - and adding the bug to its list of known exploited vulnerabilities. This highly severe vulnerability, with a CVSS score of 9.6, allows attackers to execute arbitrary commands on the LoadMaster appliance without authentication.
N-able Bolsters Defenses as Attackers Exploit RMM Flaw
N-able is stepping up its defenses with a second hotfix for its N-central Remote Monitoring and Management product, proactively expanding protections to stay ahead of evolving attack techniques that exploit a recently disclosed vulnerability. This latest update is a must-apply, even if you've already installed the earlier hotfix, as it includes crucial additional hardening measures to safeguard you and your customers.
Metabase Zero-Day Exploits Grant Admin Access
A critical zero-day vulnerability in Metabase allows hackers to gain admin access and wreak havoc on your data, with a perfect 10.0 CVSS score highlighting the severity of this threat. Attackers can inject malicious SQL, steal sensitive credentials, and export data, making immediate patching a top priority.
Army Expands Testing Ranges to Accelerate Interceptor Development
The Army is shaking things up to speed up interceptor missile development - they're opening up five testing ranges to private industry, slashing wait times from 12-18 months to just 30 days. This move aims to get innovative defense firms, especially smaller players, quicker access to test their promising interceptors.
GDIT Secures $1.3 Billion National Guard IT Cybersecurity Contract
General Dynamics Information Technology has landed a $1.3 billion contract to bolster the Army National Guard's IT and cybersecurity defenses, ensuring resilient networks that support communities, government partners, and national security. This major deal, dubbed the Enterprise Network Operations and Cybersecurity Support contract, will safeguard the nation's interests with cutting-edge tech.
ICE Expands Access to Credit Card Records for Fraud, Security Probes
Investors are sounding the alarm over a new ICE contract with Thomson Reuters Special Services, which for the first time includes voter fraud investigations, and are demanding clarity on the agreement. The contract aims to provide ICE with easy access to credit card records to tackle voter fraud, immigration fraud, and national security threats.
DoD Accelerates Zero Trust Push Beyond Users, Devices
The Pentagon is making swift strides in implementing Zero Trust principles for its IT systems, focusing on users and devices, and is now poised to take this momentum to the next level. A upcoming webinar will assess progress and explore the future of Zero Trust across the Department of Defense.
Western Tech Confronts Internal Threat
Western tech is facing a shocking internal threat that's hindering national security interests - and it's coming from within. Incumbent tech companies and new entrants are locked in a fierce battle for survival, creating an uneven playing field that's putting Western strategy at risk.
Identity Compromise Fuels 90% of Cyber Incidents
Nearly 9 out of 10 cyber incidents involve identity compromise, with attackers exploiting weaknesses in credentials, multifactor authentication, and social engineering to gain access to enterprise environments. Identity has become the new front door for cyber threats, making it a critical area of focus for protecting your organization's security.
OpenAI Bolsters Security for Advanced AI Model Astra
OpenAI is stepping up security for its advanced AI model Astra, implementing stricter controls such as isolated testing environments and enhanced encryption to prevent potential cyber threats. The company has flagged Astra as a model that may possess critical cyber capabilities, requiring extra precautions to ensure safety.
Ex-NSA Chief Warns of Water System Cyber Risks
Retired General and ex-NSA chief Paul Nakasone warns that water systems are vulnerable to cyber threats, urging stricter defenses and cautioning that PLCs should be kept offline. He calls for higher standards and new partnerships to protect critical infrastructure.
Metabase Zero-Day Exploited in Data-Theft Attacks
Metabase Cloud was recently hit by a data-theft attack, exploiting a previously unknown security vulnerability in versions 1.58 and above, which the company has since patched and confirmed had a maximum severity rating. If you're a self-hosted customer, you'll need to update manually to protect yourself.
UNC6671 Targets SaaS Data with Vishing Attacks
Beware of voice phishing scams where attackers pose as IT help desk staff, contacting employees on their personal mobile devices with urgent security migration requests that lead to fake login portals. These clever scams capture sensitive credentials and multi-factor authentication tokens in real-time, putting your SaaS data at risk.
Malware Exploits ClickFix Attacks to Drain macOS Crypto Wallets
Beware: a sneaky malware called ClickFix is targeting macOS crypto wallets, slowly draining their contents into the pockets of cyber thieves. This cunning attack starts with a simple trick: victims are duped into pasting a malicious command into the Terminal app, unleashing a stealthy thief that siphons off cryptocurrency.
Unlimited Technology Systems Breach Exposes 3.8 Million People
A shocking data breach at Unlimited Technology Systems has put the personal information of 3.8 million people at risk, after a server hack exposed sensitive data for a five-day window in October 2025. The breach was only detected on October 19, 2025, and it took until July 2026 for the company to notify authorities and affected individuals.
Malicious npm Packages Deliver Cross-Platform Malware
Nearly 800 malicious npm packages have been discovered delivering a potent cross-platform malware payload, including a remote access trojan and infostealer, via a sneaky trick that tricks developers into loading the malicious code. These packages use cleverly crafted names and README instructions to evade detection and deploy the WEL1DROPPER downloader.
Space Force Confirmation Bolsters Leadership Amid Expansion Push
The Senate has confirmed Lt. Gen. Doug Schiess as the next chief of space operations in a unanimous vote, paving the way for him to take the helm of the rapidly expanding Space Force. With a fourfold budget increase on the horizon, Schiess will lead the service as it grows from 8,700 active duty Guardians to new heights.