Tag: emerging threats
4873 articles
cPanel Bug Exploited in Wild as Zero-Day Before Patch Release
A cPanel bug, tracked as CVE-2026-41940, was exploited in the wild as a zero-day vulnerability before a patch was released, with attackers making execution attempts as early as February 23, 2026. The flaw forced vendors and hosting providers into emergency mitigation, with cPanel finally releasing a fix on April 28, 2026.
Global Operation Disrupts Crypto Scam Centers, Arrests 276 Suspects
In a major crackdown on crypto scams, a global operation led by Dubai Police has arrested 276 suspects and shut down nine fraudulent investment centers, dealing a significant blow to scammers who thought they were safe from law enforcement. This coordinated effort with US, Chinese, and Thai authorities has brought global justice to victims of these crimes.
Novel Chinese Spy Group Infiltrates Critical Networks in Poland, Asia
A recent investigation by TrendAI has uncovered a concerning China-linked espionage campaign, with a novel spy group infiltrating over a dozen critical networks across Poland and Asia, leaving behind a lingering threat that's experts' biggest worry. The threat group, tracked as Shadow-Earth-053, has been actively compromising networks since December 2024.
cPanel Vulnerability Exposes Millions of Domains to Root Access Attacks
A critical cPanel vulnerability, rated 9.8 under CVSS, has been discovered, allowing attackers to craft a simple sequence of requests to bypass authentication and gain root access to servers, putting millions of domains at risk. Emergency patches are available to fix this gaping security flaw.
Europol Disrupts Albanian Investment Fraud Ring
In a major crackdown on investment scams, Europol and international authorities have dismantled a sophisticated Albanian investment fraud ring, arresting 10 suspects and seizing nearly €900,000 and 443 computers. The alleged scammers are accused of swindling victims out of at least €50m through their professionalized operation.
UK Clears £6B Ajax Armored Vehicle for Duty Despite Troop Injuries
The UK Ministry of Defence has cleared the £6B Ajax armored vehicle for duty, despite reports of troop injuries, with Minister Luke Pollard emphasizing that the safety of personnel is non-negotiable. The move comes after investigators failed to pinpoint a single cause for the symptoms experienced by crews during a recent military exercise.
Cyber Risks Expose Organizations to Increased Threats
Organizations are facing a harsh reality: understanding cyber risk is only half the battle, as the real challenge lies in responding effectively when a threat strikes. Marsh's 2026 People Risks report reveals that cyber-related challenges, including cyber-threat literacy, top the list of people risks, ahead of technological change and skills shortages.
Linux Flaw Enables Unprivileged Root Access on Major Distributions
A newly discovered Linux flaw, dubbed "Copy Fail," allows unprivileged users to gain root access on major distributions by exploiting a logic error in the kernel's cryptographic subsystem. This high-severity vulnerability, tracked as CVE-2026-31431, poses a significant threat to Linux systems, enabling attackers to write controlled bytes into the page cache of readable files and escalate privileges.
Fintech Firm Exposes Database Credentials in Shared Spreadsheet
A fintech firm's most sensitive secrets were left exposed in a shared spreadsheet, with a password that was embarrassingly simple - literally a combination of the company's name and the year. The shocking discovery was made by Stanislav Kazanov during a routine compliance audit, when he stumbled upon a widely accessible SharePoint folder containing a file ominously titled Prod_DB_Root_Creds_DO_NOT_SHARE.xlsx.
Google Fixes Critical Gemini CLI Flaw Enabling Remote Code Execution
Google patched a critical flaw in Gemini CLI that allowed hackers to inject malicious code and take control of host systems, thanks to a report from Novee Security. The vulnerability, scoring a perfect 10.0 on the CVSS scale, has been fixed in recent updates to the @google/gemini-cli and google-github-actions/run-gemini-cli packages.
US Space Command Foregoes FY27 Funding Wish List
US Space Command is taking a strategic approach to its funding priorities, opting out of submitting an Unfunded Priority List for FY27 since its top needs are already covered in the President's Budget request. This decision follows extensive collaboration with the Department of Defense and the services to secure a generational investment in space capabilities.
US Marines Explore Theater Ballistic Missile Defense Amid Army Capacity Concerns
The US Marines are proactively exploring the need for theater ballistic missile defense capabilities, with Lt. Col. Robert Barclay revealing that studies and simulations are underway to determine if this is a crucial requirement for the service's future.
Marines Deploy Light Loitering Munition in June
Get ready for a game-changer on the battlefield: the Marine Corps is set to deploy its Light Loitering Munition in June, marking a major milestone with the delivery of live warheads to operational units. This cutting-edge Organic Precision Fires system is the result of rigorous testing and training, and is poised to revolutionize the Marines' firepower capabilities.
US Marine General Warns China Now a Peer Military Rival
The US Marine Corps' top strategist, Lt. Gen. Stephen Sklenka, just issued a stark warning: China has emerged as a peer military rival, matching the US in nearly every measure of national influence. This bold declaration signals a major shift in the global balance of power.
Pentagon Pegs $25 Billion Cost for Two-Month Iran Operation
The Pentagon is estimating a staggering $25 billion price tag for a two-month military operation against Iran, with munitions making up the bulk of the costs. This eye-watering figure was revealed to a skeptical Congress as the Pentagon prepares a supplemental budget request.
Pentagon's Iran War Spending Hits $25 Billion in 60 Days
The Pentagon has burned through a staggering $25 billion in just 60 days of operations against Iran, a jaw-dropping figure that highlights the intense military efforts in the region. This massive outlay has prompted the administration to prepare a supplemental budget request to Congress to cover the costs of munitions and operations.
Space Force Bolsters Satellite Defenses with Radar Warning Contracts
The US Space Force is taking satellite defenses to the next level with $3 million contracts awarded to three innovative companies to develop cutting-edge radar warning receivers. These game-changing sensors will empower the Space Force to detect whether their satellites are being tracked or targeted, ensuring a critical edge in space awareness.
Quad Nations Urged to Share Critical-Mineral Intel
As China tightens its grip on rare earth elements, the US and its allies are racing to secure critical mineral supplies, but there's a glaring gap in their knowledge of global mineral flows. Can the Quad nations bridge this gap by sharing intelligence and turning cooperation into action?
Israel Deploys Anti-Drone Netting to Counter Hezbollah Threat
Israel is fighting back against Hezbollah's drone threat with a surprisingly simple solution: anti-drone netting that looks like a soccer goal, draped over its combat vehicles to shield them from devastating strikes. This low-tech innovation comes as FPV drone attacks from Lebanon have been launched from as far as 15 kilometers away.
Hegseth Details Iran War Strategy Before House Panel
Defense Secretary Pete Hegseth, alongside top Pentagon officials, stepped into the spotlight at the House Armed Services Committee, marking a crucial moment of transparency in the ongoing Iran war. This high-stakes hearing, the first public appearance of its kind since the conflict began, offers a rare glimpse into the US war strategy.
China's Expanding Presence Fuels Friction in Indo-Pacific Region
As China's military and paramilitary presence grows in the Indo-Pacific, the risk of incidents, friction, and escalation is increasing - not due to deliberate aggression, but due to the growing proximity of operations. This shift from episodic to routine activity is transforming the region into a hotbed of potential conflict, where accidents and miscalculation could have serious consequences.
US Weighs Critical Infrastructure Status for Data Centers
Protecting data centers is a must, and considering them part of the country's critical infrastructure is a crucial step towards achieving that goal. This idea was recently discussed at a House Homeland Security Subcommittee hearing, where lawmakers and industry experts explored the possibility of designating data centers as a standalone critical infrastructure sector.
Linux Flaw Enables Fast Root Access via Cryptographic Code
A newly discovered Linux flaw, dubbed Copy Fail, allows unprivileged users to gain root access by writing controlled bytes into the page cache of readable files, enabling a swift and stealthy privilege escalation. This vulnerability, tracked as CVE-2026-31431, poses a significant threat to Linux systems, putting them at risk of exploitation.
SAP npm Packages Compromised in Supply-Chain Attack
Security researchers have uncovered a supply-chain attack that compromised four official SAP npm packages, allowing attackers to extract sensitive secrets from CI runner memory. The affected packages, which support SAP's Cloud Applications, have been deprecated on NPM and users are urged to update to secure versions.