Tag: emerging threats
5054 articles
Terrarium Sandbox Flaw Enables Code Execution, Container Escape
A critical flaw in Terrarium's sandbox, rated 9.3 on the CVSS scale, allows attackers to break free from container constraints and execute code with root privileges. This alarming vulnerability, tracked as CVE-2026-5752, stems from a JavaScript prototype chain traversal that lets sandboxed code run amok on the host Node.js process.
Mustang Panda Expands LOTUSLITE Malware to Target India, Korea
Meet the evolved LOTUSLITE backdoor, now wielding dynamic DNS-based command-and-control over HTTPS, enabling its operators to remotely access and manipulate targeted systems for espionage purposes. This sophisticated malware supports remote shell access, file operations, and session management, a potent toolkit for data collection and access persistence.
Microsoft Disrupts ASP.NET Flaw Allowing SYSTEM Privilege Escalation
Microsoft has patched a critical ASP.NET Core vulnerability, CVE-2026-40372, that allowed unauthenticated attackers to forge authentication cookies and gain SYSTEM privileges on affected devices. This fix addresses a flaw in the ASP.NET Core Data Protection cryptographic APIs that could be exploited for privilege escalation.
UK Faces Rising Nation-State Cyber Threats Amid Tech Advances
The UK is bracing for a perfect storm of cyber threats, with the National Cyber Security Centre warning of a tumultuous decade ahead, driven by rapid technological change and rising geopolitical tensions. Nation-state threats from China, Russia, and Iran are already targeting UK firms, with 204 significant incidents recorded in the last review.
Unpatched SharePoint Servers Exposed to Ongoing Spoofing Attacks
Over 1,300 Microsoft SharePoint servers are still vulnerable to a spoofing attack, despite a security update being available since last week, leaving them exposed to ongoing exploitation by hackers. This comes after Microsoft warned that the CVE-2026-32201 vulnerability was exploited as a zero-day, and attackers are continuing to abuse it in widespread campaigns.
Mozilla Sees AI-Powered Bug Detection as Game-Changer for Security
Mozilla's CTO, Bobby Holley, exclaims that AI-powered bug detection is a game-changer for security, giving defenders a decisive edge. This innovative technology, tested on Firefox releases, has already uncovered hundreds of vulnerabilities, outpacing traditional automated fuzzers and human researchers.
US Navy Bolsters Air Defense with Patriot PAC-3 Missiles
The US Navy is taking a major leap forward in air defense with a new contract awarded to Lockheed Martin, integrating the advanced Patriot PAC-3 Missile Segment Enhancement (MSE) with the Aegis Combat System. This game-changing move, backed by a $1.73 billion budget, will equip the Navy with 405 cutting-edge PAC-3 MSE missiles.
Lawmakers Weigh Terrorism Labels for Hospital Ransomware Attacks
Lawmakers are considering slapping terrorism labels on ransomware attacks targeting hospitals, a move that could lead to severe penalties for those responsible, as Rep. Michael Guest says there should be no penalties too severe for individuals that target the healthcare system. This tough stance comes as experts and officials discuss ways to deter the growing threat of hospital ransomware attacks.
Pentagon Targets $55 Billion for Drone and Autonomy Development
The Pentagon is pushing the boundaries of innovation with a $55 billion investment in drone and autonomy development, led by the Defense Autonomous Warfare Group (DAWG) - a pathfinder for cutting-edge technology that's accelerating progress in low-cost, attritable platforms. DAWG is already live-testing systems and tools with top companies, providing real-time feedback to drive growth.
US Navy Fires Deck Gun at Ship in Combat for First Time in 38 Years
In a historic move, the US Navy fired its deck gun at a ship in combat for the first time in nearly four decades, with the USS Spruance blasting an Iranian cargo vessel on April 19, 2026. The rare display of gunfire, involving a 5-inch MK 45 gun, left a hole in the unarmed Touska's engine room, but the freighter remained afloat.
Scotland Hacker Pleads Guilty in Scattered Spider Cybercrime Case
Meet Tyler Robert Buchanan, the 24-year-old mastermind behind the notorious Scattered Spider cybercrime gang, who has pleaded guilty to federal charges of conspiracy and identity theft. With a potential 22-year prison sentence looming, Buchanan's guilty plea marks a major win for law enforcement in the fight against cybercrime.
Sea Air Space Showcases Emerging Defense Tech
At Sea Air Space 2026, senior military officials took the stage to share insights, while attendees got hands-on with the latest defense innovations at National Harbor, Md. The event brought together formal remarks and immersive exhibitions, showcasing the future of defense technology.
Former Ransomware Negotiator Pleads Guilty to Extortion Scheme
A former ransomware negotiator has pleaded guilty to masterminding a brazen extortion scheme that raked in a staggering $75.3 million, exploiting his position to secretly collude with ransomware gangs and betray the very companies he was supposed to protect. Angelo John Martino III faces up to 20 years in prison for his role in the conspiracy.
Australia's Defence Tech Push Exposes Funding, Scale Gaps
Australia's defence tech push is hitting a roadblock, with a significant gap in funding and scale hindering progress. With a proposed A$500 million investment, the Advanced Capability Investment Fund aims to bridge this gap and catalyse private equity in critical areas like AI, quantum, and autonomy.
Pakistan Navy Bolsters Anti-Surface Warfare with Taimoor Missile Test
The Pakistan Navy has successfully test-fired its Taimoor air-launched cruise missile, a game-changing addition to its anti-surface warfare capabilities that can strike targets on land and sea with precision. This powerful new tool is set to bolster the Navy's maritime strike and deterrence abilities.
Australia Aligns Defence Strategy with US Balance of Power Push
Australia's new 2026 National Defence Strategy is taking a bold stance, shifting its focus from upholding a rules-based order to actively shaping the regional balance of power in the Indo-Pacific. By strengthening its alliance with the US, Australia aims to safeguard its economic interests and play a key role in defining the region's future dynamics.
Pentagon Bolsters Cyber Budget with $20.5B Allocation
The Pentagon is shoring up its defenses with a $20.5 billion cyber budget allocation, aimed at outsmarting adversaries who are increasingly sophisticated in their digital threats. This major investment is part of a broader strategy to integrate cyber capabilities across all warfighting domains and safeguard military networks.
US OPM Health Data Collection Plan Sparks Privacy Concerns
The Office of Personnel Management wants to collect detailed, identifiable health records from the 65 health insurers that cover over 10 million federal and postal service employees, retirees, and their families - a move that's raising concerns about privacy. The proposed data collection would include medical claims, pharmacy claims, and provider data to help OPM oversee health benefits programs.
UK Warns of Nation-State Cyber Threats Beyond Financial Theft
The UK is bracing for a future where nation-state cyber threats could escalate beyond financial theft, and experts warn that organisations must prioritise cybersecurity as a core mission to stay resilient. It's a call to action: embed robust defences now, or risk being caught off guard.
Airbus Bolsters Cyber Defenses with Quarkslab Acquisition
Airbus is bolstering its cyber defenses with the acquisition of Paris-based Quarkslab, aiming to become a trusted, sovereign partner for French authorities and a major player in European cybersecurity. This move will help build a robust digital shield to protect nations and allies from evolving cyber threats.
France's ANTS Agency Exposes Data Breach After Hacker Offers Stolen Records for Sale
France's ANTS Agency has suffered a data breach, with hackers offering stolen records for sale, putting individual and professional accounts at risk. The agency is investigating and notifying affected users, urging them to stay vigilant for suspicious activity.
Managed Detection and Response Targets Gaps in Cyber Defenses
State, local, tribal, and territorial organizations, along with their schools, are facing a perfect storm of rising cyber threats, limited staff, and tight budgets - making it tough to stay ahead of attacks. Managed Detection and Response can help bridge the gaps in their cyber defenses, providing the support and visibility needed to respond quickly and effectively.
Ex-FBI Chief Urges Homicide Charges for Ransomware Actors Tied to Patient Deaths
It's time to hold ransomware attackers accountable for their deadly actions - Cynthia Kaiser, ex-FBI chief, urges prosecutors to consider felony homicide charges when attacks on hospitals result in patient deaths. Closing the gap between crime severity and consequences is crucial, she stresses.
Enterprises Face Identity Crisis as Machine Access Surges
As AI agents increasingly reshape enterprise operations and defenses, a new reality sets in: machine identities are surging, outnumbering human users and introducing unprecedented risks that are autonomous, fast-moving, and difficult to control. This seismic shift demands attention, as organizations scale AI and transform their attack surfaces and decision flows.