Tag: emerging threats
8339 articles
Microsoft Outage Exposes Flaw in Automated Maintenance Process
Microsoft is launching a thorough investigation into its automated maintenance process after a recent outage, focusing on safety checks and process improvements to prevent future disruptions. The analysis comes on the heels of a significant disruption to Microsoft 365 services, affecting thousands of users.
Unfettered AI Fuels New Wave of Cybercrime
The alarming reality is that unregulated AI has become a cybercrime game-changer, with 6,644 openly available models labeled as "uncensored" and "unfiltered" racking up over 22 million downloads in just 30 days. This staggering statistic proves that guardrail-free AI is no longer a hypothetical threat, but a readily accessible tool for malicious use.
Certighost Exploit Enables Low-Privilege AD Users to Impersonate Domain Controllers
A newly discovered exploit, dubbed Certighost, lets low-privileged Active Directory users impersonate Domain Controllers, posing a significant threat to security. This vulnerability, tracked as CVE-2026-54121, allows attackers to obtain a certificate for a Domain Controller and authenticate as that machine.
AI Coding Agents Exposed to Predictable Name Attacks
Researchers have made a startling discovery: AI coding agents are surprisingly predictable, often generating identical fake names for tasks like skill installs and repository requests, making them vulnerable to exploitation by attackers. This weakness was found across multiple popular coding tools, with identical names being hallucinated up to 85% of the time for repository requests and 100% for skill installs.
Chick-fil-A Breach Exposes 13,000 Customers' Data
Thousands of Chick-fil-A customers are reeling after a credential stuffing attack compromised 13,322 accounts, exposing sensitive customer data over just three days in June. The breach allowed hackers to access a combination of customer info linked to Chick-fil-A One accounts, including names and more.
Bing Image Flaws Expose Microsoft Servers to Command Injection Attacks
Microsoft's Bing Image processing pipeline had a shocking vulnerability that allowed hackers to inject malicious commands, thanks to two critical flaws discovered by XBOW. These flaws enabled attackers to gain alarming levels of access, running commands as the system's highest authority on both Windows and Linux hosts.
Europol Targets 4,340 URLs in Crackdown on Violent Extremist Network 'The Com
Europol has launched a crackdown on the violent extremist network 'The Com', flagging 4,340 URLs for removal after detecting sinister content that promotes self-harm and exploitation of minors. The operation, involving nine countries, aims to protect vulnerable users from coded messages and emojis that can have devastating effects.
US Targets Overseas Cybercrooks with Visa Cancellations
The US is cracking down on overseas cybercrooks by cancelling their visas, a move aimed at curbing the $10 billion+ in scams that defraud American citizens every year. This targeted approach will deny visas to foreign nationals involved in cybercrime, including those behind investment scams and sextortion schemes that prey on vulnerable victims.
ChatGPT Flaw Exposes Risk of Rogue AI Agents via Phishing Link
One phishing link was all it took to expose a critical flaw in ChatGPT's security, allowing hackers to create rogue AI agents with access to an employee's credentials and unchecked approvals. This vulnerability, known as AgentForger, put organizations at risk of being hijacked by autonomous AI agents controlled by attackers.
ChatGPT Enters Top 10 Most Impersonated Brands in Phishing Attacks
ChatGPT has become a hot target for phishing attacks, entering the top 10 most impersonated brands in just the second quarter of 2026, with scammers sending fake emails that mimic OpenAI's billing notices to steal sensitive info. This new trend signals where attackers are focusing their efforts next.
Security Teams Must Enforce AI Agent Controls Beyond Visibility
Discovering AI agents across your organization is just the starting line - the real challenge lies in controlling their actions to prevent potential security threats. Simply seeing what's out there isn't enough; it's time to take charge and enforce limits on these active actors.
Cybersecurity Experts Warn of Global Hotel Wi-Fi Credential Harvesting Campaign
Beware of hackers lurking on hotel Wi-Fi networks, as a global campaign is underway to steal sensitive credentials from unsuspecting travelers and businesses. Cyber attackers are exploiting weak spots in hotel routers and Wi-Fi systems to gain control and manipulate DNS settings.
Illinois Hacker Sentenced for Exploiting Snapchat Accounts
A 26-year-old Illinois man, Kyle Svara, has been sentenced to 76 months in prison for hacking over 750 Snapchat accounts, using social engineering tactics to phish access codes and trading stolen images online. He'll also face three years of supervised release after serving his time.
Golden Chickens Malware Evolves With Modular Implants
The Golden Chickens malware has taken a significant leap forward with the emergence of four new, highly modular malware families, signaling a major evolution in the threat landscape. This development is a red flag, as it suggests a more sophisticated and adaptable attack strategy from the financially motivated malware-as-a-service developer behind it.
Hackers Leverage AI Tool Hermes to Breach Thai Finance Ministry Network
A careless mistake left 585 files and 470 MB of sensitive data exposed, as hackers used an open-source AI agent called Hermes to breach Thailand's Ministry of Finance network. The breach was made possible when an operator enabled YOLO mode, which disabled the agent's normal approval requirement.
Ransomware Attacks Intensify Against Universities Worldwide
Universities worldwide are under siege by ransomware attacks, with a single group called The Gentlemen responsible for a staggering 80% of their attacks on the education sector, and a 275% surge in attacks on education in just the first half of 2026. This alarming trend has contributed to a spike in ransomware activity against universities, despite an overall decline in recorded incidents across the broader education sector.
Redis Exposes Zero-Days, RCE Exploit in Latest Security Releases
Redis just released seven security updates to fix major vulnerabilities that could let attackers run malicious code remotely, thanks to newly published proof-of-concept exploits targeting several Redis versions. The fixes cover multiple branches, including 6.x, 7.x, and 8.x, and patch memory-corruption flaws that can be triggered using the RESTORE command and other requirements.
NodeBB Fixes Flaws Exposing Admin Access, Private Chats
NodeBB has patched eight high-severity security flaws that left its forum platform vulnerable to admin access and private chat exposure, affecting all versions prior to 4.14.0. Admins should install the fixes immediately to safeguard their sites.
Australia's Defence Faces Urgent Test in Autonomous Systems Race
Australia's internet lifelines are under attack, with a growing number of subsea cable damages threatening the nation's digital infrastructure - and Defence Minister Richard Marles warns that the frequency and scale of these incidents is historically unprecedented. Roughly 99 percent of Australia's internet traffic relies on just 15 of these vulnerable cables.
Munitions Display Highlights Escalating CCA Competition
The Farnborough International Airshow just wrapped up, offering a sneak peek into the booming defense and aerospace industries, where the Cloud Computing Contract (CCA) competition is heating up. The event put the latest munitions on full display, showcasing cutting-edge tech and intensifying rivalry among major players.
US Restricts Visas for Cyber Scammers and Sextortionists
The US is cracking down on cyber scammers and sextortionists by restricting visas for those behind these crimes, sending a strong message that it won't tolerate exploitation of its citizens. This move targets not only the culprits but also their immediate family members, aiming to dismantle these criminal networks.
Clop Ransomware Targets PTC Windchill in Data Theft Attacks
A critical vulnerability, CVE-2026-12569, with a near-perfect CVSS score of 9.3 is being exploited by Clop ransomware attackers to breach PTC Windchill and FlexPLM systems, putting sensitive data at risk. Security patches are available, but urgent action is needed to prevent data theft.
Encryption Debate Intensifies as Governments Target End-to-End Security
Limiting end-to-end encryption would have far-reaching and devastating effects on cybersecurity, commerce, and government operations. Governments worldwide are pushing laws to restrict this vital security measure, sparking a heated debate about the future of online protection.
Germany Seeks More P-8 Aircraft to Counter Russian Naval Activity
Germany is ramping up its maritime patrol capabilities with an initial order of eight Boeing P-8A Poseidon aircraft, but its naval air command chief hints that this is just the beginning. The move is part of a broader effort to counter growing Russian naval activity, particularly in the High North, where concerns over undersea operations and attacks on critical cables are on the rise.