Tag: emerging threats
4870 articles
Trump Weighs Escalation as Iran Conflict Hits $25 Billion
As the Iran conflict escalates, costing a staggering $25 billion and counting, Ayatollah Mojtaba Khamenei unleashed a chilling warning: Americans don't belong in the Persian Gulf, except at the bottom of its waters. With the War Powers deadline looming, Trump faces a critical 60-day mark that could force him to withdraw troops or seek Congressional approval.
Malicious AI Browser Extensions Exfiltrate User Data
Beware of AI browser extensions that promise to boost productivity but secretly steal your data. Researchers uncovered 18 malicious extensions that masquerade as helpful tools but deliver spyware, Trojans, and other threats that can hijack your online activity.
US Navy, Marine Corps Rethink Amphibious Vessel Deployment Cycle
The US Navy and Marine Corps are shaking up their amphibious vessel deployment strategy to boost efficiency, with Adm. Daryl Caudle aiming to overhaul the current 36-month cycle to get more bang for their buck. By streamlining their approach, they may be able to fit in two deployments within a longer 50-month cycle.
China Accelerates Indo-Pacific Push, Tests Regional Cohesion
As China's influence grows in the Indo-Pacific, regional states face a daunting dilemma: balancing economic opportunities with sovereignty and security concerns, making it increasingly likely they'll hedge their bets rather than fully commit to either side. This strategic tightrope walk will be especially challenging for Pacific island countries under strain from China's more aggressive pursuit of port access and maritime influence.
Malware Worms Into SAP, Intercom and Lightning Developer Tools
Malicious actors struck SAP's JavaScript and cloud application development ecosystem on April 29, releasing poisoned versions of four widely-used npm packages that receive a staggering 572,000 weekly downloads. The compromised packages, which included mbt, @cap-js/db-service, @cap-js/postgres, and @cap-js/sqlite, were published in a brief window of just two hours.
CISA Rebounds as Funding Deal Bolsters Cyber Defenses
With the record 75-day shutdown finally over, the Cybersecurity and Infrastructure Security Agency can breathe a sigh of relief as a new funding deal brings its operations back to normal, bolstering the nation's cyber defenses. The bipartisan measure provides a much-needed $64.4 billion in discretionary funding for the Department of Homeland Security.
State CISOs Eroding Confidence Amid AI-Driven Threat Surge
State CISOs are losing faith in their ability to protect sensitive data, with confidence plummeting to just 22% - a drastic drop from 48% in 2022 - as AI-driven threats intensify. This sharp decline in confidence extends beyond state governments, with 63% of CISOs also doubting the ability of local governments and public higher education institutions to safeguard public data.
US Cyber Command Warns of Election Interference Threats
Get ready for a déjà vu: US Cyber Command warns that foreign interference is likely to disrupt the midterm elections, just like we've seen in the past. Army Gen. Joshua Rudd's warning to the Senate Armed Services Committee is a stark reminder that countries like Russia, China, and Iran are actively trying to undermine our democracy.
Security Leaders Face New Risk Calculus with AI-Driven Workforces
The modern workforce has a new equation: humans and AI agents working together, facing the same dynamic threats and risks. This emerging reality demands a fresh approach to security, one that recalibrates risk and rethinks trust in a blended workforce.
Socket Expands Supply-Chain Visibility with Secure Annex Acquisition
Socket is supercharging its supply-chain visibility with the acquisition of Secure Annex, a cutting-edge extension security startup, to give developers unprecedented control across the entire software development life cycle. This strategic move combines Socket's expertise in application dependencies with Secure Annex's innovative approach to browser and IDE extensions.
Ransomware Attacks on Hospitals Target Patient Care, Spark Calls for Tougher Stance
Hospitals are under attack - literally. Last year, a staggering 460 ransomware attacks hit American hospitals and healthcare systems, causing 47 patient deaths, diverted ambulances, and canceled surgeries.
Phishing campaigns increasingly harness AI to evade detection
Phishing campaigns are getting smarter by the minute, with a whopping 86% of recent attempts leveraging AI to sneak past detection. This marks a significant jump from just two years ago, when AI was used in 80% of phishing ops.
US Extradites Chinese Hacker in Global Consequences Push
In a major breakthrough, the US has extradited a 34-year-old Chinese hacker, Xu Zewei, who allegedly carried out cyber intrusions under the direction of China's Ministry of State Security, showing that distance and state protection no longer guarantee immunity from consequences. This move sends a strong message that cybercrime will be pursued globally, no matter where the perpetrators are hiding.
FBI Disrupts China's Hacker-for-Hire Ecosystem with Key Extradition
The FBI has struck a major blow against China's notorious hacker-for-hire ecosystem, disrupting a vast network of private tech companies and contractors secretly working for the Chinese government. This bold move exposes a brazen operation that prioritized profit by exploiting vulnerable computers and selling sensitive information to the highest bidder.
Phishing Kit Bluekit Incorporates AI to Streamline Attacks
Meet Bluekit, a cutting-edge phishing kit that's revolutionizing the game with an AI Assistant panel, pairing traditional templates with advanced AI models to help cybercriminals quickly draft campaign materials. This innovative tool is streamlining attacks, making it easier for malicious actors to launch sophisticated phishing campaigns.
Romanian Swatting Ring Leader Draws 4-Year Prison Sentence
Thomasz Szabo, the ringleader of a notorious swatting ring, has been sentenced to four years in prison for orchestrating a campaign of fake bomb threats and swatting calls that targeted high-profile figures, including members of Congress and federal law enforcement officials. Szabo's malicious scheme sent armed police to the doors of innocent victims, causing fear and chaos.
Army Accelerates Electronic Warfare Development with Budget Boost
The Army is turbocharging its electronic warfare development with a budget boost, aiming to outpace rapid technological advancements and secure spectrum dominance. With a topline funding increase and strategic line-item consolidation, the service plans to swiftly deploy cutting-edge capabilities to the field.
Ukraine Unveils Conditional Drone Export Policy
Ukraine is opening up new opportunities for its drone industry, allowing companies to export domestically produced weapons to select partner countries, but only after meeting the state's own military needs. This strategic move aims to boost Ukraine's economy while prioritizing its own defense requirements.
AI Agents Expose Identity Security Gaps
Imagine an AI agent that can uncover thousands of hidden security vulnerabilities, some of which have gone undetected for nearly 30 years - and the potential risks that come with it falling into the wrong hands. A single powerful AI agent can scan for weaknesses faster and more persistently than hundreds of human hackers, highlighting a pressing need for secure deployment.
French Teen Suspected in Mega-Breach at Secure Document Agency
A massive cyber security breach at France's secure document agency, ANTS, has led to the theft of 12-18 million lines of sensitive data, which was then offered for sale online. A 15-year-old French teen has been detained in connection with the leak, prompting the Paris Public Prosecutor's Office to launch a judicial investigation.
Pakistan's Gulf Strategy Exposes Enduring Ambiguity
Six months after the historic Saudi-Pakistan Strategic Mutual Defence Agreement was signed, its true test has come in the form of Operation Epic Fury, which has dramatically reshaped the Gulf security landscape. The pact, aimed at tackling threats from Iranian drones and missiles, is being put to the ultimate test - can it live up to its promise?
Pakistan Navy Bolsters Sea-Denial Strategy with Advanced Missile Tests
The Pakistan Navy has taken a significant leap in its sea-denial strategy with the successful test of the Taimoor air-launched cruise missile, a game-changing precision-strike weapon with a range of 600 km that can engage both land and sea targets. This latest milestone bolsters the Navy's ability to launch extended-range attacks on enemy naval forces.
Silver Fox APT Targets Russia, India with ABCDoor Backdoor
Over 1,600 malicious emails, disguised as tax-audit notices, were sent to targets in India and Russia between January and February 2026, aiming to trick recipients into downloading a backdoor or clicking on a malicious link. The cleverly crafted phishing campaign unfolded in two waves, using PDFs and archives to spread the ABCDoor backdoor.
Brazilian DDoS Firm Exposes Own Security Breach
A Brazilian firm's bold admission about notifying major internet providers of massive DDoS attacks against small ISPs took an unexpected turn when evidence revealed a shocking security breach of its own. The company's CEO, Erick Nascimento, revealed that an intrusion in January 2026 compromised key servers and his personal security codes.