Tag: emerging threats
8084 articles
Citrix Patches Flaw That Enables RCE in SAML Deployments
Citrix has patched a critical vulnerability, CVE-2026-107406, with a near-perfect score of 9.5, that could allow devastating remote code execution or denial-of-service attacks in SAML deployments. The flaw can be triggered under specific configuration conditions when NetScaler instances are set up as a SAML identity provider or service provider.
Researchers Expose Flaws in Google Pixel 10 with Remote Hacks
Google just issued a warning that its Pixel 10 may be vulnerable to remote hacks, with researchers discovering flaws that could be exploited by attackers. Three teams of experts successfully broke into fully patched Pixel 10 devices at a recent hacking contest, raking in a total of $562,500 in prizes.
UK Warns of China's Integrity Tech Cyber Threat Tactics
China's Integrity Tech is raising red flags with its shady cyber activities, including building and selling malicious tools, hosting infrastructure, and compromising global networks. This tech group's ties to Beijing-backed cyber threats like Flax Typhoon have prompted a joint warning from the US, UK, and allied countries.
Microsoft Warns of Security Update Cutoff for Outdated Windows Devices
Don't wait until it's too late: if you're running an outdated version of Windows, you'll lose access to crucial security updates after May 17 and June 19, 2027, when key certificates expire. Upgrade to a supported version now to stay protected.
GoBalance Flaw Exposes Dark Web Sites to Hijacking
A careless mistake made by GoBalance has put numerous dark web sites at risk of hijacking, with a developer reportedly uploading a crucial private key into a software update. This simple error exposed the sites to potential takeover, highlighting the importance of secure coding practices.
ISACA Bolsters AI Governance with New Certification Amid Skills Gap
Get ready to take control of AI with ISACA's new AI governance certification, launching in early 2027, which helps professionals manage AI securely and responsibly. This game-changing credential is the ultimate tool for individuals looking to govern AI effectively, filling a crucial gap in the skills market.
Citrix Warns of Immediate Patching Need for NetScaler RCE Flaw
Citrix is sounding the alarm on a critical vulnerability, CVE-2026-107406, that can lead to remote code execution or a denial-of-service state in NetScaler devices - and it's urging admins to patch immediately.
UK Watchdog Secures AI Firms' Data Protection Pledges
The UK's data watchdog has secured pledges from AI firms to prioritize data protection, reassuring people that their personal info will be safeguarded as AI innovation continues to advance. This move aims to build trust, with the watchdog ensuring companies meet four key tests to guarantee responsible data use.
FBI Disrupts Flax Typhoon Tools Used in US Critical Infrastructure Intrusions
The FBI and Department of Justice have struck a major blow against a China-linked hacking group, seizing seven domains and blocking access to malicious tools used to infiltrate US and foreign critical infrastructure. This disruption targets Flax Typhoon, a notorious threat actor known for its widespread vulnerability scanning and intrusions.
Hackers Earn $1.3 Million for 98 Zero-Days at Pwn2Own Ireland Contest
In a stunning display of hacking prowess, contestants at Pwn2Own Ireland 2026 racked up a whopping $1.3 million in rewards by uncovering 98 zero-day vulnerabilities over just three days. Top prize winners Ikotas Labs took home $361,000 and a Pixel 10 chain by exploiting multiple zero-days in high-profile targets like Google Pixel 10 and Samsung Galaxy S26.
OpenAI Disrupts Russian, Iranian AI Influence Ops Targeting Western Media
OpenAI just took down a massive AI influence operation that was spreading disinformation across Latin America, targeting Ukraine's reputation and fuelling heated debates in Argentina and Bolivia. The network, dubbed Dark Clark, was using a fake journalist persona and think tank to seed false narratives into mainstream reporting.
Ransomware CEO Indicted for Pocketing Millions in Client Fees
Meet Zohar Pinhasi, the alleged ransomware scammer who pocketed millions by preying on vulnerable businesses, charging them hefty fees for a promised solution that didn't exist. His company, MonsterCloud, is accused of swindling hundreds of clients out of over $19 million, while only paying $8 million in actual ransom payments.
US Military Tests Counter-Drone Tech in Desert to Bolster CENTCOM Defenses
The US military recently put its counter-drone technology to the test in the Arizona desert, gathering crucial data on system durability and operator usability in extreme conditions. This exercise will help bolster defenses in critical regions like the CENTCOM area of operations.
US Presses Portugal on F-35 for F-16 Replacement
The US is pulling out all the stops to help Portugal upgrade its fighter jets, with US Secretary of State Marco Rubio promising a "very competitive" offer to replace the country's aging F-16 fleet. This high-stakes pitch puts Washington in a strong position as Portugal weighs its long-term fighter options.
US Seizes Flax Typhoon Hacking Tools in Cyber Crackdown
In a major cyber crackdown, the US has seized hacking tools linked to the notorious Flax Typhoon group, dealing a significant blow to Chinese government-backed cyber threat actors. The seized tools, Microscan and FishHub, were used to steal sensitive data from organizations worldwide, including US critical infrastructure sectors.
SAPA Transmission Targets US Defense Industrial Base Revitalization with Advanced Military Vehicle Tech
SAPA is revolutionizing the US defense industry with cutting-edge military vehicle tech, including a massive 200,000-square-foot manufacturing center that will create over 200 jobs. By addressing legacy transmission gaps, they're tackling a critical issue that's held back military vehicle performance for decades.
US Exposed to Gaps in Cyberdefense Against China in Taiwan Scenario
The US is vulnerable to cyber defense gaps in the face of a potential Taiwan crisis with China, with a recent war game simulation revealing that federal agencies lack the budget and systematic process to effectively respond to such threats. This weakness could leave the country exposed to China's gray-zone strategy of cyberattacks and economic pressure.
Anthropic Launches Cybersecurity Program to Fortify Critical Infrastructure
Anthropic is stepping up to support defenders of critical infrastructure and open-source software, who are rich in experience but often low on resources, by launching a long-term cybersecurity program to identify and fix vulnerabilities. By combining its Claude models, engineering expertise, and threat research with partner cybersecurity firms, Anthropic aims to help safeguard critical infrastructure from exploitation.
US Unveils Long-Range Missiles to Counter China's Aerial Advantage
Meet the game-changing trio of long-range air-to-air missiles that are about to flip the script on aerial warfare: the AIM-174, AIM-260, and AIM-424, boasting ranges of up to 480 km - that's roughly twice the reach of earlier US air-to-air weapons. These cutting-edge missiles are set to give the US a serious edge in the skies, particularly against China's aerial advantage.
Navy Injects $150 Million into Shield AI's Unmanned Fighter Jet Development
Shield AI is making rapid strides in developing its unmanned fighter jet, with two full-scale X-BAT prototypes nearing completion - and the first one expected to be finished within weeks. The company aims to take its innovative aircraft to new heights with flight testing by year-end and vertical takeoff and landing tests to follow.
Modern Sea Control Unravels Under Drone and Sensor Pressure
The era of guaranteed sea control is fading fast, as drones, sensors, and precision strike capabilities erode the advantage of superior ships and aircraft, leaving navies to fight for fleeting, localized dominance. The old rules of maritime supremacy no longer apply in the Indo-Pacific, where control will be hard-won and episodic.
Leader of 764 Child Sextortion Group Pleads Guilty
A disturbing world where children are exploited for twisted entertainment has been exposed, with 21-year-old Prasan Nepal, aka "Trippy", pleading guilty to leading a notorious child sextortion group. He faces 15-30 years in prison for his role in the heinous crimes committed by the group.
Afghan Taliban Escalates Drone War Against Pakistan
Pakistan's air defenses went into overdrive on September 23, successfully taking down eight drones that had crossed into its airspace from Afghanistan. The incident sparked a fierce response from Islamabad, which launched strikes on 10 Taliban strongholds in Afghanistan.
US Air Force Eyes KC-10 Tanker Transfer to North African Ally
The US Air Force is exploring the possibility of transferring up to four retired KC-10 Extender aerial refueling tankers to a North African ally, and is seeking industry partners to help regenerate the aircraft and return them to service. This potential transfer is a strategic move that could strengthen airpower capabilities in the region.