Tag: emerging threats
8354 articles
Hackers Exploit Microsoft Entra Passkey Enrollment in Voice Phishing Attacks
Hackers are using voice phishing attacks to trick Microsoft 365 users into enrolling a new Entra passkey, targeting multiple sectors including food and beverage, technology, and healthcare. They're registering domains with the word "passkey" to convincingly pose as legitimate Microsoft representatives.
Free Android VPN Apps Expose User Traffic, Fail Basic Security Tests
Over 2.4 billion installs of free Android VPN apps have potentially exposed users to security risks, according to a recent study that revealed these apps fail basic security tests. A new testing framework called MVPNalyzer was used to evaluate the apps and uncovered alarming vulnerabilities, including the serious flaw of tunnel hijacking.
Exposed Server Unveils WP-SHELLSTORM's Massive WordPress Backdoor Operation
For 22 days, a US-based server sat exposed on the public internet with no password, revealing a massive WordPress backdoor operation that targeted over 1.4 million domains. The astonishing discovery included scans, exploits, and command history, giving a rare glimpse into the playbook of a notorious hacking group.
Miinto Breach Exposes Customer Order Data to Unauthorized Access
Miinto recently suffered a data breach, allowing unauthorized access to its internal order management system, potentially exposing your order data. The company has notified affected customers and taken steps to address the issue, reporting it to the police and relevant data protection authorities.
Unpatched XQUIC Flaw Exposes HTTP/3 Servers to Remote Crashes
A single, tiny error - just 260 bytes of ordinary QPACK traffic - can take down an HTTP/3 server, thanks to a flaw in Alibaba's XQUIC library, dubbed XRING. This unpatched vulnerability can cause remote crashes without needing a login or malformed packets.
Zimbra Warns of Exploited Web Client Flaw
If you're using Zimbra's Classic Web Client, upgrade to ZCS v10.1.19 ASAP to protect against a critical security flaw that's being actively exploited. This urgent update patches a vulnerability that could put your environment at risk.
NHS Trust Investigates Email Data Breach Involving Maternity Patients
NHS Forth Valley is taking immediate action to investigate a data breach that exposed the personal details of around 150 women who used local maternity services, after a staff member accidentally sent the information to a personal email account. The breach has been contained, with the staff member confirming they've deleted the data, but an internal probe is underway to ensure no further risk.
Microsoft Ramps Up Vulnerability Detection with AI-Driven Scanning Tools
Microsoft is supercharging its vulnerability detection capabilities with AI-driven scanning tools, which will soon lead to a surge in Windows updates as more zero-day vulnerabilities are uncovered. Get ready for a higher volume of security updates, as AI helps defenders identify and address issues faster than ever before.
Ransomware Negotiator Sentenced for Aiding BlackCat Extortions
A ransomware negotiator turned double agent, Angelo Martino, has been sentenced to 70 months in prison for betraying his clients and working with BlackCat to drive up ransoms for personal gain. Martino's shocking deceit involved selling out his clients' confidential negotiating positions to the very cybercriminals he was hired to thwart.
Attackers Drain $3.1 Million Using 'Ill Bloom' Crypto Wallet Flaw
A single coordinated attack exploited the Ill Bloom flaw on May 27, draining a staggering $3.1 million from 431 wallets in a single day. This shocking theft was made possible by a weak random-number generator in certain wallet software that created easily guessable recovery phrases.
NHS Targets Unauthorized Data Access with New Staff Guidance
The NHS is cracking down on staff who snoop through patient records, warning that such behavior is a disgraceful breach of trust and against the law. A new awareness campaign and guidance have been launched to prevent unauthorized data access and protect patient confidentiality.
Ex-Con Ransomware Negotiator Sentenced for BlackCat Attacks
A former ransomware negotiator, Angelo Martino, has been sentenced to 70 months in prison for his role in a string of BlackCat ransomware attacks that targeted multiple victims between 2023 and 2025. Martino's guilty plea brings to justice a key player in the notorious ALPHV ransomware gang.
Navy Advances Drone Boat Program with Prototype Request
The Navy is calling on experts in vessel construction, autonomy, and maritime problem-solving to participate in its innovative Drone Boat Program, with a request for prototype proposals set to launch on August 1. This exciting opportunity invites interested parties to submit their ideas for cutting-edge, medium unmanned surface vessels capable of supporting logistics and transporting containerized payloads.
Interpol Disrupts Global Cybercrime Network, Arrests 5,800
In a major crackdown on global cybercrime, Interpol's Operation First Light has led to the arrest of 5,800 individuals and the seizure of $293 million, highlighting the power of international cooperation in the fight against online scams. This huge success shows that when countries work together, they can make a real difference in keeping people safe from cyber threats.
Navies Adapt as Drones Disrupt Maritime Warfare Landscape
As drones revolutionize maritime warfare, the pressing question is: will they render navies obsolete, putting the security of global trade, sea deterrence, and regional stability at risk? The Ukraine-Russia conflict in the Black Sea offers a glimpse into this uncertain future, where drones can alter naval behavior, but not necessarily the balance of power.
Space Force Expands National Security Launch Roster with Two New Vendors
The Space Force is bolstering its national security launch capabilities with two new vendors, Impulse Space and Relativity Federal, joining the roster to develop next-generation launch vehicles. This expansion comes at a critical time as launch demands increase and the nation relies on these providers for enhanced security.
Ransomware Negotiator Sentenced for Duping Clients in $75.3 Million Extortion Scheme
A trusted ransomware negotiator turned double agent, Angelo Martino betrayed his clients, funneling their confidential info to BlackCat affiliates and lining his pockets with a share of their ransoms, leaving a trail of devastated businesses in his wake. His deceit raked in $75.3 million for him and his co-conspirators.
USS Abraham Lincoln Sets Record with 210 Days at Sea
Meet the USS Abraham Lincoln, a Nimitz-class aircraft carrier that's made history by spending a record-breaking 210 days at sea, showcasing its unparalleled endurance and capabilities. With over 5,000 Sailors and Marines on board, this unstoppable vessel has been a continuous presence in Middle Eastern waters since November 2025.
Indo-Pacific Powers Seek China's Deterrence Without US
As Japan, South Korea, India, Australia, and Indonesia navigate the complex Indo-Pacific landscape, they're facing a daunting question: can they keep China in check without the US on their side? The region's recent moves suggest a tentative no, highlighting growing unease as the US appears to be losing interest.
AI-Driven Patching Process Spurs Surge in Security Updates
Microsoft is supercharging its security update process with AI, leading to a surge in patches that keep customers safer. By harnessing the power of AI-driven scanning, the company is spotting more software vulnerabilities than ever before.
US County Pays $1M to Cyber Extortionists Amid Data Leak Threat
A US county recently made a shocking decision to pay $1 million to cyber extortionists, despite lacking concrete proof that the hackers had deleted the stolen data, after a month-long negotiation that began with a hefty demand of $3 million. The extortion group, Kairos, had threatened to leak sensitive information, prompting the county to make a counteroffer that was ultimately outweighed by the threat.
OpenMandriva Linux Project Hit by Sabotage Attempt
Davide Beatrici, a leading developer of the Mumble app, has denied allegations of sabotage against the OpenMandriva Linux Project, claiming his actions were deliberate but not malicious. He admitted to deleting key repositories and pushing a package, but insists his moves were targeted, not hurtful.
npm Package Infects Developers with Cryptocurrency Wallet Stealer
A malicious npm package, downloaded a staggering 50,000 times weekly, was briefly infected with code that stole cryptocurrency wallet private keys and sensitive seed phrases, putting countless developers at risk. The attack was launched after a contributor's GitHub account was compromised, allowing the hackers to spread the poisoned code across multiple projects.
US, Iran Escalate Strikes as Ceasefire Collapses
The US Embassy in Jordan issued a urgent shelter-in-place warning, advising Americans to seek cover and stay indoors amid reports of missiles, drones, or rockets entering Jordanian airspace. This comes as clashes between US and Iranian forces escalate for a third day following Iran's attack on three ships in the Strait of Hormuz.