Tag: emerging threats
8347 articles
Google Introduces Selfie Video Sign-in for Locked Accounts
Say goodbye to account lockouts! Google's new selfie video sign-in feature lets you register a short video of yourself and use a fresh recording to regain access to your account if you get locked out.
GitHub Actions Abused to Target cPanel, WHM Servers
Malicious actors have cleverly exploited GitHub Actions to launch attacks on cPanel and WHM servers, using compromised source repositories to unleash a wave of automated exploits. By adding dozens of malicious workflows, attackers can scan and exploit vulnerable systems with alarming ease.
Swiss Train Maker Thwarts Ransomware Demand
A Swiss train maker, Stadler Rail, recently outsmarted a ransomware attack by refusing to give in to a hefty $123 million extortion demand from hackers. By taking a firm stance, the company protected its operational integrity and public reputation.
AI Agents Expose Growing Enterprise Attack Surface
The rapid proliferation of AI agents in enterprise environments - up 466.7% in just one year - has created a massive, high-value target for cybercriminals, with these AI identities often being granted privileged access to core systems. This surge in AI adoption has significantly expanded the enterprise attack surface, making it a prime time for cyber threats to exploit these new vulnerabilities.
Linux Flaw RefluXFS Exposes Systems to Root Privilege Attacks
A nine-year-old Linux kernel vulnerability, dubbed RefluXFS, has been discovered in the XFS filesystem, allowing local attackers to gain root privileges and wreak havoc on systems - patching is urgently recommended to prevent exploitation. Immediate action can neutralize this threat and safeguard your systems from potential attacks.
Synthetic Identity Fraud Targets Machine Identities
Imagine a new kind of identity theft where attackers create fake machine identities from scratch, blending real and invented attributes to fly under the radar. These fabricated Non-Human Identities can go undetected, allowing cybercriminals to wreak havoc without triggering the usual alerts that catch stolen accounts.
Dolphin X Stealer Uses AI to Target High-Value Victims
Meet Dolphin X Stealer, a sneaky new Windows malware that's packing some serious AI-powered punch, allowing cybercriminals to zero in on high-value targets with ease. Its operator panel boasts an impressive 329 features, giving attackers an unprecedented level of control and insight.
RefluXFS Linux Flaw Exposes Default RHEL Installs to Local Root Access
A newly discovered Linux kernel flaw, known as RefluXFS, leaves default RHEL installs vulnerable to local root access, allowing unprivileged users to gain persistent control over root-owned files. This critical vulnerability can be exploited with just read access, making it a major security concern.
Chaos Ransomware Gang Exploits Browsers for Stealthy C2 Communications
Cisco Talos researchers have uncovered a sneaky new backdoor, msaRAT, that hijacks Chrome or Microsoft Edge to secretly communicate with its command center, avoiding direct network connections. This stealthy tactic uses the browser's remote debugging interface to inject JavaScript and stay under the radar.
Microsoft Battles Exchange Online Mailbox Quarantine Glitch
Microsoft is working to resolve a frustrating glitch in Exchange Online that has caused some mailboxes to be incorrectly quarantined, blocking users from receiving emails and disrupting access to calendars. The issue, which began on July 19, has left affected users unable to send or receive emails and access their calendars.
Check Point Discloses Zero-Day Flaw in SmartConsole Exploited in Attacks
A critical zero-day flaw in Check Point's SmartConsole has been exploited in attacks, allowing hackers to modify security policies and configurations with ease. A patch is now available to fix this authentication bypass vulnerability, tracked as CVE-2026-16232.
Boeing Expands Ghost Bat Production Plans with Overseas Hubs
Boeing is shifting its production strategy for the MQ-28 Ghost Bat to a more localized approach, with multiple smaller factories around the world, to empower countries to meet their own defense needs. This move prioritizes national sovereignty and resilience over a single large-scale manufacturing facility.
Lawmakers Face AI-Enabled Cyberattacks in Simulated China-Taiwan Conflict
Lawmakers faced a chilling reality check in a simulated China-Taiwan conflict, where AI-enabled cyberattacks were unleashed with devastating potential. In a high-pressure tabletop exercise, they got a glimpse of how artificial intelligence could escalate a future crisis.
US Army Targets Supply Chain Bottlenecks in Abrams Tank Engine Production
The US Army is tackling a major hurdle in Abrams tank engine production: a shortage of 166 critical components that are causing significant delays and impacting fleet readiness. These supply chain bottlenecks, particularly with subcomponents for the AGT1500 engine made by Honeywell Aerospace, are leaving tanks idle and prompting the Army to seek help from industry partners.
House passes 2027 Defense Bill Amid Senate Stalemate
The House has passed the 2027 Defense Bill with a narrow 216-to-212 vote, despite some lawmakers on both sides expressing disagreement with certain provisions. This key step in a long process sets the stage for further negotiations, particularly with the Senate, where a stalemate currently exists.
Boeing's MQ-28 Ghost Bat Deploys in Pacific Exercise
The MQ-28 Ghost Bat, developed by Boeing for the Royal Australian Air Force, made its debut in a major Pacific exercise, flying alongside US and allied aircraft, including F-35s and F-15EX, in a groundbreaking display of collaborative combat. This marked the first time a collaborative combat aircraft has been deployed to a multinational exercise.
Australia's AI Data Centres Should Shift North
Australia's reliance on AI data centres in Sydney and Melbourne poses a significant geographic risk, with the country's infrastructure vulnerable to disruption due to its concentrated capacity. Shifting data centres north could be a strategic move to mitigate this risk and ensure national security.
US Falsely Portrays Antifa as Terror Threat
The US has mischaracterized Antifa as a terrorist threat, despite a lack of evidence from its allies, and is using this false narrative to rally international support against a supposedly global far-left menace. Secretary of State Marco Rubio has led the charge, but several countries, including the Netherlands and Germany, have failed to find any credible evidence to back up these claims.
Ransomware Attacks Intensify as AI Enhances Phishing Tactics
Ransomware attacks are getting smarter and more effective, with AI-powered phishing tactics leading to a significant increase in successful breaches. In fact, 65% of organizations hit by ransomware say AI tools made the attack more convincing and effective.
Identity Theft Exposes Vulnerability in Email Account Security
Giving a scammer a two-factor authentication code can have devastating consequences, as one unfortunate account owner discovered when it allowed the scammer to take over their email address. This simple mistake opened the door to a broader security risk, highlighting a vulnerability in email account security.
India, Japan Forge Naval Shipbuilding Alliance
In a major breakthrough, India and Japan have taken their naval partnership to the next level with a groundbreaking shipbuilding alliance, sparked by Japan's transfer of its cutting-edge UNICORN mast system to India. This game-changing deal paves the way for joint shipyards and further collaboration, revolutionizing their maritime cooperation.
Check Point Disrupts Exploited SmartConsole Flaw Granting Admin Access
A critical flaw in Check Point's SmartConsole has been exploited, allowing hackers to gain admin access with a CVSS score of 9.3, and Check Point has released updates to address the vulnerability. This authentication-bypass flaw lets attackers modify security policies and configurations with full administrative rights.
China's PLA Upgrades Logistics with Heated Troop Transport
The People's Liberation Army is taking its logistics to the next level with cutting-edge upgrades, including the development of heated troop transport vehicles, like the modified Shaanxi Auto HMV3 truck. This high-tech heavy-duty vehicle is being tested as an unmanned platform in Inner Mongolia, showcasing China's push for autonomous military capabilities.
Australia Bolsters Philippines' Maritime Security with Drone Technology Aid
Australia is ramping up its support for the Philippines' maritime security with a generous aid package, adding 10 million Australian dollars, or 413 million pesos, worth of cutting-edge drone technology and operator training. This brings Australia's total drone support to nearly 600 million pesos since April 2025.