Tag: emerging threats
8354 articles
Cyberattackers Deploy Vidar Infostealer in Global Monero Mining Campaign
Cybercriminals are running a sneaky double game, using Vidar Infostealer to steal sensitive info and hijack computers to mine Monero cryptocurrency, all while selling stolen credentials on the dark web. This global campaign, targeting consumers and small businesses, is a potent reminder to stay vigilant online.
China-Linked APT Expands ORB Network with LONGLEASH Malware
Meet UAT-7810, a Chinese threat actor with a mission to build and expand Operational Relay Box (ORB) networks, which can be hijacked by other malicious groups to launch targeted attacks on high-value targets. Their latest move involves deploying the LONGLEASH malware to supercharge their ORB network.
CISA Mandates Patching of Exploited Langflow Auth Bypass Flaw
The CISA has stepped in to mandate patching of a critical Langflow Auth Bypass flaw, CVE-2026-55255, that's being exploited by financially motivated threat actors to access sensitive user data. This vulnerability allows attackers to siphon off sensitive data and hijack computing resources with just a crafted request.
Ubiquiti Discloses Max-Severity UniFi OS Vulnerability
Ubiquiti has urgently patched a critical vulnerability in its UniFi OS, warning customers of a maximum-severity flaw that could allow malicious actors to inject commands on host devices - and it's crucial to upgrade to version 3.4.20 or later to stay safe.
UK Unveils AI-Powered Cyber Shield to Bolster National Defense
The UK's National Cyber Security Centre warns that attackers are using AI to supercharge their cyber offensives, speeding up vulnerability discovery and reconnaissance to alarming levels. In response, the UK has unveiled an AI-powered Cyber Shield to bolster its national defense and stay ahead of the threats.
CISA Mandates Patching of Exploited Adobe ColdFusion Flaw
Adobe has issued a warning to patch a critical flaw, CVE-2026-48282, in ColdFusion versions 2025.9, 2023.20, and earlier, as attackers have already begun exploiting it just two hours after disclosure. Admins are urged to deploy the updates within 72 hours to prevent code execution on unpatched systems.
CISA Warns of Active Exploitation of Adobe, Joomla, and Langflow Flaws
The US Cybersecurity and Infrastructure Security Agency (CISA) has sounded the alarm on four high-severity vulnerabilities in Adobe, Joomla, and Langflow that are being actively exploited by hackers. Federal agencies have until July 10, 2026, to patch these flaws and avoid potential breaches.
Linux Flaw Enables Root Control on Most Distros
A shocking 15-year-old flaw in the Linux kernel, dubbed GhostLock, allows any logged-in user to gain full root control of a machine in just five seconds - if it hasn't been patched. This vulnerability, which affects most Linux distributions, is a serious wake-up call for developers and users alike.
China Builds Mysterious Hardened Structures At Missile Test Base
China has built mysterious hardened structures at a missile test base in Inner Mongolia, sparking intrigue over their purpose and capabilities. New satellite images reveal a pattern of rectangular structures with retractable roofs, potentially capable of launching multiple missiles.
Somali Pirates Resurge, Targeting Shipping Off Horn of Africa
Somali pirates are once again wreaking havoc on shipping routes off the Horn of Africa, with a recent attack on a Palau-flagged bulk carrier in the Red Sea serving as a stark reminder to stay vigilant. Shipowners and operators must remain alert and take precautions to protect their vessels and crews.
US Aircraft Carriers Reposition Amid Iran Talks Escalation
The US has beefed up its naval presence in the Middle East with four major warships on station, including two aircraft carriers, as tensions rise during ongoing Iran talks. This strengthened force posture features the USS Abraham Lincoln, USS George H.W. Bush, and amphibious assault ships USS Tripoli and USS Boxer.
B-52 Readiness Issues Disrupt AGM-181A Nuclear Missile Testing
The AGM-181A Long-Range Standoff missile testing has hit a roadblock due to B-52 readiness issues, causing a four-month delay and unfavorable cost and schedule changes. The setbacks have forced the Air Force to push back its initial operational capability target to November 2030.
Lawsuit Exposes AI Firms' Role in Deepfake Child Abuse Material
A shocking new lawsuit reveals that AI firms are enabling the creation of over 7,000 deepfake images of child abuse, leaving victims feeling humiliated and ashamed. The alarming case has been expanded to include two new anonymous plaintiffs, highlighting the devastating impact of this nonconsensual exploitation.
Pacific Seabed Becomes Contested Zone in Regional Power Struggle
The Pacific seabed, once a vast and empty space, has become a hotly contested zone as a growing number of nations and interests converge on its valuable resources, transforming the way power and risk are distributed in the region. This emerging crowded landscape is sparking new tensions, as mining, military operations, and other activities increasingly overlap and collide.
Malicious Activity on Industrial Systems Declines to 3-Year Low
Malicious activity on industrial systems has hit a 3-year low, with only 19.6% of ICS computers encountering malicious objects in Q1 2026 - a significant drop of 1.4 times from Q2 2023. However, beneath the calm surface, localized spikes of threats persist, warranting close attention.
Vidar Stealer Campaign Exposes Code Signing Abuse and Evasion Tactics
In a clever April 2026 campaign, cyber attackers used malvertising to trick victims into downloading seemingly cracked software versions, which actually unleashed the Vidar stealer and XMRig malware via a sneaky loader called Factory-v3. The attackers cleverly hid their malware in password-protected .bin archives to evade detection.
US Launches Retaliatory Strikes Against Iran After Shipping Attacks
The US has launched a strong retaliatory response against Iran, striking over 80 targets in a bid to hold the country accountable for its attacks on innocent civilians and commercial shipping in international waters. This decisive action aims to impose significant costs on Iran for its aggressive actions.
China Expands Undersea Nuclear Deterrent with Advanced SLBM Test
China's recent submarine-launched ballistic missile test was downplayed by Beijing as a routine annual training exercise, not targeting any specific country. The launch has sparked concerns about China's rapidly expanding nuclear capabilities.
Spain Seizes Suspect Tied to Russian Hacktivist Group
In a major cybercrime crackdown, Spanish authorities have arrested a suspect linked to a notorious pro-Russian hacktivist group, following a nearly year-long investigation sparked by a tip from the FBI. This breakthrough is a testament to global law enforcement collaboration, with the FBI vowing to continue disrupting cybercriminals worldwide.
China's Nuclear Buildup Exposes New Strategic Posture
China just took a major leap in its nuclear capabilities, publicly acknowledging the successful test launch of a long-range submarine-launched ballistic missile from a submerged nuclear-powered submarine on July 6. The impressive display of tech validated China's newest missile, the JL-3, and showcased its growing strategic prowess.
Accenture Confirms Data Breach After Hacker Offers Stolen Source Code for Sale
Accenture swiftly responded to a data breach, confirming that a security issue was isolated and resolved, with no disruption to their operations or client services. The company remains tight-lipped about the breach's scope and impact, leaving many questions unanswered.
Microsoft Telemetry Fingers Scattered Spider Suspect in US Crackdown
Microsoft's sharp-eyed telemetry has helped track down a suspect linked to the notorious Scattered Spider group, a prolific gang that allegedly raked in over $100 million in ransom payments by infiltrating more than 100 US company networks.
GitHub AI Agent Exposes Private Repos to Malicious Prompts
A shocking vulnerability in GitHub's AI-powered Agentic Workflows has been discovered, allowing attackers to expose private repositories with just a cleverly crafted issue and some plain English instructions - no coding skills or credentials required. This flaw lets hackers fetch and publicly share sensitive files, putting organizations at risk.
Google Dialogflow Flaw Lets Rogue Agents Hijack Chatbots
A security flaw in Google Dialogflow, dubbed "Rogue Agent," allowed hackers to hijack chatbots, but thankfully, a fix was rolled out after Varonis reported the issue through Google's Vulnerability Reward Program. The flaw was cleverly exploited through custom Code Blocks in Dialogflow CX, highlighting the importance of robust security measures in chatbot development.