Tag: emerging threats
8339 articles
Cl0p Ransomware Gang Exploits PTC Windchill Flaw in Data Extortion Drive
PTC Windchill users are under attack, with threat actors actively exploiting a critical flaw (CVE-2026-12569) that allows for remote code execution, prompting PTC to warn customers of heightened threat activity. This vulnerability, with a CVSS score of 9.3, has already been added to the US government's list of known exploited vulnerabilities.
Insurance Phishing Evolves Into Real-Time Account Hijacking
Insurance phishing attacks have taken a sinister turn, now using real-time account hijacking to actively engage with victims throughout the authentication process. Cybercriminals are using sponsored Google ads to launch these attacks, luring users with offers like car insurance comparisons and then diverting them into sophisticated phishing flows.
ChatGPT Disrupted Globally as OpenAI Confirms Outage
ChatGPT is currently down worldwide, leaving users in the US, Europe, India, Japan, Australia, and beyond unable to access the popular AI chatbot. OpenAI has confirmed the outage and is actively investigating the issue.
GitLab RCE Exploit Published, Targets Unpatched Servers
A security researcher has just published a working exploit that can execute commands on unpatched GitLab servers, putting sensitive data and systems at risk. If your GitLab server is unpatched, it's crucial to update now to prevent potential code execution and data breaches.
US Coast Guard Targets Tech to Counter Uncrewed Underwater Vehicles
The US Coast Guard is on the hunt for cutting-edge tech to outsmart uncrewed underwater vehicles (UUVs), seeking solutions that go beyond detection to effectively neutralize these stealthy threats. They're calling on innovators to submit ideas for systems that can defeat UUVs, a crucial step in protecting maritime operations.
AI's Unintended Actions Demand New 'Genie Coefficient' Metric
Imagine asking a question and getting a technically correct but utterly useless response - like telling someone there's water in the fridge, but only in the cells of an eggplant. This quirky example highlights the challenge of artificial intelligence understanding human intent, and the need for a new metric to measure AI's unintended actions.
US Submarine Deployment Exposes Australia's War Planning Dilemma
Australia is set to host a powerful US submarine force at HMAS Stirling from 2027, raising crucial questions about how this combat squadron would be deployed in war and how it aligns with Australia's commitments. A US Submarine Rotational Force–West will be established, consisting of up to four attack submarines with supporting infrastructure and facilities.
Thailand Bolsters Military with Chinese VN-1C Armored Vehicles
Thailand is boosting its military firepower with a 1 billion baht deal for VN-1 armored vehicles from China, enhancing its combat capabilities under the 2025 defense budget. This significant procurement comes as part of efforts to modernize the Royal Thai Army's arsenal.
CISA Faces Industry Pushback on Cyber Incident Reporting Rule
Industry leaders are pushing back on a proposed cyber incident reporting rule, arguing it casts too wide a net, with one critic saying it would ensnare far too many companies. The rule, aimed at bolstering national security, has sparked concerns about its broad scope and reporting requirements.
Ejection Seat Makers Adapt to Pilotless Battlefield Era
As the battlefield goes pilotless, ejection seat makers like Martin-Baker are shifting gears, leveraging their life-saving expertise to support drone manufacturers and stay ahead of the curve. With a legacy of saving over 7,800 aviators, Martin-Baker is now offering its engineering and electronics prowess to help shape the future of unmanned aircraft.
Pope's Prayer App Leaks 700K Users' Info Amid Security Vulnerability
A shocking security breach has been uncovered in the Pope's official prayer app, Click To Pray, exposing the sensitive information of over 719,000 registered users for months due to a vulnerability that allowed anyone to access account data. The flaw, discovered by an ethical hacker, highlights the alarming risks of unsecured personal data.
Europol Disrupts The Com's Online Ecosystem with 4,340 URL Takedowns
In a major crackdown, Europol and its partners have taken down 4,340 URLs linked to The Com, a notorious online network accused of radicalizing young people and facilitating illicit activity. This coordinated effort is part of a broader mission to protect vulnerable youth and disrupt the online ecosystem of recruiters and extortionists.
US Eases Export Curbs to Boost UAE's Drone, AI Tech Production
The US has just made it easier for the UAE to supercharge its drone and AI tech production by easing export restrictions, giving them cleaner access to cutting-edge dual-use technology. This game-changing upgrade is set to take their defense capabilities to the next level.
Pentagon Urged to Reassess Costs of Advanced Energetic Materials
The US military's critical munitions come with a hefty price tag - over $1 million each. Can the Pentagon afford to keep shelling out big bucks for these pricey explosives and propellants?
Pentagon Launches Ground-Launched Precision Strike Challenge
The Defense Innovation Unit is launching the Ground-Based Affordable Mass (G-BAM) challenge, seeking cutting-edge long-range precision strike systems that can be rapidly demonstrated and delivered to production in record time - within 12-18 months. This initiative aims to harness mature, cost-effective solutions that minimize logistical burdens while maximizing impact.
Ukraine Deploys Dutch-Made Ruta Block 1 Cruise Missiles in Operational Strike
Ukraine has taken a significant step in its military operations by deploying the Dutch-made Ruta Block 1 cruise missiles in a recent strike, as revealed by newly surfaced footage. The images, shared on Russian Telegram channels, show wreckage identified as the missile, sparking insights into its capabilities and use.
US Air Force Weighs Expanding B-21 Raider Fleet Beyond 100 Aircraft
Northrop Grumman and the US Air Force are working together to analyze the possibility of expanding the B-21 Raider Fleet beyond 100 aircraft, thanks to a flexible production agreement that allows for accelerated production. This comes on the heels of a 25 percent boost in annual B-21 production capacity.
Tech Giants Push Open-Source AI to Bolster Cybersecurity Defenses
Microsoft and over two dozen tech giants are calling on policymakers to back open-source AI, believing it can strengthen America's cybersecurity defenses and foster a vibrant tech ecosystem. By embracing open-source AI, the US can avoid relying on just a few closed systems and instead build a robust and diverse technological landscape.
NATO's Indo-Pacific Ties Endure Beyond Summit Absences
Despite the high-profile absences at the recent NATO Summit, the alliance's ties with Indo-Pacific partners remain strong. For the second year in a row, leaders from Australia, Japan, New Zealand, and South Korea missed the summit, but the relationship endures.
Botnets Persist Despite Takedowns, Fueled by Residential Proxy Networks
Botnets just won't quit, and it's no surprise why - there's a thriving market for access to millions of IPs, making it easy for them to keep growing and snaring more victims. Residential proxy networks are fueling this expansion, with nearly 60 million victim IP addresses globally and a significant chunk of them right here in the US.
OnTrac Data Breach Exposes Customer Information After Network Hack
OnTrac recently suffered a network hack, resulting in a data breach that exposed customer information, with the incident detected on March 23 after an intrusion occurred between March 20-22. Fortunately, the company has no evidence of the stolen information being misused or published.
Hermes AI Agent Fuels Automated Attack on Thai Finance Ministry
Security researchers uncovered a massive 470MB trove of 585 files detailing an automated cyberattack on Thailand's Ministry of Finance, led by the malicious Hermes AI Agent. The stolen data reveals a sophisticated operation, complete with web shells, exploit code, and logs that expose the attack's inner workings.
Hackers Target Hotel Wi-Fi to Steal Microsoft 365 Accounts
Hackers are targeting hotel Wi-Fi networks to steal Microsoft 365 accounts from unsuspecting travelers, with a widespread campaign affecting various industries across multiple countries. This sneaky tactic redirects visitors to attacker-controlled sites, putting business travelers at risk of having their sensitive information compromised.
BlueNoroff Phishing Kit Targets Crypto Wallets with Zoom Lures
BlueNoroff's phishing kit is a masterclass in deception, using Zoom lures and compromised industry contacts to trick victims into divulging their crypto wallet info. This sophisticated scam combines social engineering and malware to selectively target high-value victims.