Tag: emerging threats
8086 articles
Web3 Enables Sophisticated Cloud Supply Chain Attacks
Malware authors are now using blockchain technology to launch devastating cloud supply chain attacks, as seen in the ChainDrop attack that infected over 400 npm packages. This sneaky tactic uses a custom runtime to launch a credential harvester, allowing attackers to capture sensitive cloud provider IAM keys and more.
New Federal Rules to Tighten Contractor Cybersecurity Reporting
Get ready for a seismic shift in cybersecurity reporting: new federal rules will soon require contractors to report unauthorized access to sensitive information within a tight 72-hour window. This stricter timeline aligns with upcoming CISA regulations, putting companies on notice to strengthen their incident response game.
US Army Bolsters Pacific Presence with Sustainment Brigade Activation
The US Army is ramping up its Pacific presence with the activation of the 45th Sustainment Brigade on Okinawa, a strategic move that will boost its logistics and sustainment capabilities in the region. This significant development marks a major shift in the Army's operational approach, enhancing its preparedness for future challenges.
Feds Charge Ransomware 'Fixer' with Defrauding Clients
Meet Zohar Pinhasi, a so-called ransomware "fixer" who's accused of running a brazen scheme that raked in over $19 million from desperate clients, with a simple twist: he paid just $8 million in ransoms, pocketing the rest.
Ransomware Recovery CEO Charged in Alleged Secret Ransom Payments Scheme
A CEO's shocking scheme to profit from ransomware recovery has landed him in hot water, accused of secretly paying off ransomers while pretending to decrypt the malware for his clients, leaving them victimized twice over. The alleged scam, which ran from 2018 to 2023, could now cost him up to 20 years in prison.
FBI Warns of Ongoing FortiBleed Attacks Targeting Fortinet VPN Admins
Tens of thousands of Fortinet FortiGate firewalls and SSL VPN gateways are under active attack by hackers leveraging a massive June credential leak, putting countless networks at risk of disruption. The breach, known as FortiBleed, exposed a staggering 73,932 firewall URLs across 194 countries, giving attackers a treasure trove of vulnerable targets.
Hackers Exploit ccTLD Vulnerabilities to Hijack Google Domains
Google revealed that several top brands and online services were hit by the same attacks, following their initial mitigation efforts. Attackers exploited vulnerabilities in country-code top-level domain (ccTLD) registries and DNS to hijack Google domains, not by breaching Google's infrastructure, but by compromising third-party operators.
Google Domains Targeted in DNS Hijacking Attacks
Google security alert: hackers hijacked DNS records, snagging unauthorized HTTPS certificates for several Google domains and others by exploiting vulnerabilities in three country-code top-level namespaces. The attacks, targeting .gh, .sl, and .as, cleverly combined DNS control with fake TLS certificates.
Hackers Hijack Country-Code Domains to Obtain Google HTTPS Certificates
Hackers hijacked country-code domains to obtain unauthorized Google HTTPS certificates, putting several domains at risk between September 22 and 27. Google quickly sprang into action, revoking the certificates and blocking them in Chrome to prevent any further damage.
SonicWall Fixes CVSS 10.0 Flaw in SMA1000 Appliances
SonicWall has patched a critical security flaw in its SMA1000 appliances that could let attackers infiltrate internal systems and run unauthorized operations. The bug, rated 10.0 on the CVSS scale, can be exploited before login, making it a high-risk vulnerability.
Malicious npm Packages Deliver Overlord RAT and Stealer in Supply Chain Attack
A single malicious npm package, "function-flag," was downloaded a staggering 37,419 times in a supply-chain operation that delivered Remote Access Trojans and information stealers to Windows hosts. This was part of a larger campaign, dubbed MALFEX, where 12 packages were published to the npm registry since August 2023, with eight of them flagged as malicious and collectively downloaded over 40,767 times.
AWS Unveils Open-Source Sandbox to Tame Rogue AI Agents
AWS just launched Strands Box, an open-source sandbox that helps keep rogue AI agents in check by combining top-notch isolation with policy enforcement to prevent unchecked actions. This game-changing tool tackles the growing risk of AI agents running wild, approving every action without human review.
Cybersecurity Pros Warn of Password Reliance
Relying on passwords for security is a recipe for disaster, as humans simply can't keep track of multiple complex combinations, leading to reused, shared, or poorly stored passwords. A recent survey found that nearly half of cybersecurity pros still use passwords for personal and work accounts, despite knowing they're one of the least secure authentication methods.
States Sue TP-Link, Citing China Ties and Router Security Risks
Four states are taking TP-Link to court, claiming the router maker has been dishonest about its security and hiding its ties to the Chinese government, putting sensitive data and national security at risk. Iowa's Attorney General Brenna Bird warns that Iowans' personal info is vulnerable due to TP-Link's alleged deception.
PoeLLM Malware Expands Crypto Botnet Via 3,400 Servers
Meet PoeLLM, a sneaky malware that's rapidly expanding its crypto botnet by hijacking 3,400 servers, with its operators using a clever poem-based trick to hide its command-and-control address. This cunning tactic lets the malware derive new addresses by tweaking a few words in a public GitHub poem.
Malware Exploits AI Systems with 'Adversarial Poetry
Meet the first-ever malware that uses a clever trick - a poem - to hijack AI systems and steer them to its command center, cleverly hidden in a forked GitHub repository. This sneaky tactic was uncovered by Lumen's Black Lotus Labs, revealing a new level of sophistication in cyber threats.
LMCache Flaw Exposes Servers to Remote Code Execution
A newly discovered flaw, CVE-2026-105192, allows hackers to send a single network message that can execute malicious code on vulnerable LMCache multiprocess cache servers, with no patch available yet. This vulnerability can be exploited when the multiprocess server is configured to listen on a routable address, making it a serious threat to servers that aren't properly secured.
Microsoft Outlook to Block MSIX Attachments in Security Push
Microsoft is bolstering security in Outlook on the web and Windows by blocking MSIX attachments, including .msix and .msixbundle file types, to protect users from potential threats. This update will be applied to the default list of blocked file types, enhancing overall security in the platform.
Pakistan Navy Charts Course for Multi-Domain Operations
The Pakistan Navy is charting a bold new course, prioritizing maritime security, deterrence, and regional collaboration to safeguard commerce and ensure stability in the increasingly complex North Arabian Sea and Indian Ocean. With a focus on uninterrupted Sea Lines of Communication (SLOCs), Admiral Naveed Ashraf is driving a modernization agenda that puts protection and partnership at its core.
ShinyHunters' Teen Ringleader Detained Amid Extortion Attempt
A teenager known as "Rey," suspected of leading ShinyHunters, has been detained in Amman, Jordan, and is cooperating with the FBI after the group allegedly attempted to extort a Boeing business unit. The group's exploits began with a PeopleSoft vulnerability, fueling a wave of data thefts.
PoeLLM Malware Targets Exposed AI Servers in Global Cryptomining Campaign
Meet PoeLLM, a sneaky malware that's compromised over 2,100 AI servers worldwide, with a staggering 800 infected systems active in just one day, all part of a massive global cryptomining campaign.
Pakistan Unveils Fatah-4 ER Cruise Missile with Extended Range Capabilities
Pakistan just took its military capabilities to the next level with the unveiling of the Fatah-4 ER cruise missile, a game-changing addition that can strike targets with pinpoint precision and devastating force at extended ranges. This powerful new missile was successfully test-fired on October 6, showcasing its impressive accuracy and survivability.
Anduril Expands into Shipbuilding with $6.6 Billion Navy Submarine Deal
Anduril is set to revolutionize shipbuilding with a groundbreaking $6.6 billion Navy submarine deal, partnering with the US government in a unique public-private arrangement that will see American taxpayers own a 40% stake in the new shipyard, Arsenal-2, outside Baltimore. The massive 200-acre facility, slated for construction starting in 2027, will create a new hub for submarine component manufacturing and bring jobs to the region.
Autonomous Endpoint Management Gains Urgency in Public Sector Networks
Public sector networks are facing a daunting challenge: managing tens of thousands of endpoints scattered across diverse environments, from remote mountain sites to manned stations and mobile units. Take the Coast Guard, for instance, which operates 1,500 locations worldwide, each with its own unique connectivity and security needs.