Tag: emerging threats
5090 articles
NCSC Warns of Russia's Ongoing Router Exploits
Russia's notorious hackers, Fancy Bear, are exploiting routers to steal passwords and sensitive information, compromising the security of countless individuals and organisations. With around 5,000 devices and 200 organisations already affected, experts warn that this latest threat is one to take seriously.
GPU Rowhammer Flaw Enables System Compromise via Memory Corruption
Researchers have uncovered a chilling new threat: GPUBreach, a flaw that uses GPU Rowhammer to corrupt memory, granting hackers a backdoor to escalate privileges and take control of your entire system. This sneaky attack exploits GDDR6 memory, flipping bits and paving the way for a complete system compromise.
White House Slashes CISA Funding by $707 Million
The White House's plan to slash $707 million from CISA funding raises critical questions about the impact on the agency's vital services and the trade-offs policymakers will have to make. This massive cut will have far-reaching consequences for the people who rely on CISA's work to keep them safe and secure.
APT28 Hijacks Routers to Steal Credentials via Malicious DNS Servers
Beware of invisible hands rerouting your online traffic: a state-linked Russian hacking group, APT28, has been hijacking routers to intercept credentials by manipulating DNS servers, putting your online security at risk. This stealthy tactic allows them to capture user authentication data, compromising your digital identity.
Docker Flaw Exposes Hosts to Unauthorized Access
A recent security patch meant to tighten up Docker Engine's defenses has left a gaping hole, exposing hosts to unauthorized access - and it's up to you to make sure you're not the one who gets exploited. A high-severity flaw, tracked as CVE-2026-34040, allows attackers to bypass authorization plugins and potentially gain access to your host.
Law Enforcement Disrupts APT28's Router DNS Hijack Operation
In a major breakthrough, an international coalition of law enforcement authorities and private companies has successfully disrupted a sneaky DNS hijack operation by APT28, known as FrostArmada, that targeted home network routers to steal Microsoft account credentials. This operation thwarted the hackers' plan to intercept traffic and harvest cloud account keys, protecting countless individuals from potential cyber threats.
Defense Agencies Pursue Multi-Cloud Strategies to Bolster Operational Tempo
As defense agencies shift their focus beyond mere cloud migration metrics, they're now prioritizing a new set of goals that will give them a decisive edge in the digital landscape. They're leveraging multi-cloud strategies to drive decision advantage at scale, financial transparency, and operational tempo.
GrafanaGhost Exploit Bypasses AI Defenses for Covert Data Theft
A newly discovered exploit, dubbed GrafanaGhost, has been found to cleverly bypass AI defenses, allowing for covert data theft by chaining together AI prompt injection and URL-handling flaws. This sneaky attack enables silent exfiltration of sensitive Grafana data, catching users off guard.
ComfyUI Instances Enlisted in Widespread Cryptomining Botnet Campaign
A sneaky campaign is on the hunt for exposed ComfyUI instances, using them to fuel a cryptomining botnet and secretly install malicious nodes - putting unsuspecting users' systems at risk. This covert operation uses a Python scanner to scour cloud IP ranges, exploiting vulnerabilities and turning systems into cryptocurrency-mining machines.
Automated Pentesting Tools Hit PoC Plateau
Automated pentesting tools can deliver impressive early results, quickly uncovering low-hanging fruit and generating proof-of-concept failures - but often hit a plateau, leaving significant attack surfaces untested and creating a validation gap that's hard to ignore. This phenomenon, known as the PoC cliff, can abruptly halt progress, causing detection and exploitation attempts to drop off and tools to stop producing actionable findings.
Recurring Credential Incidents Drain Corporate Finances
Did you know that a single credential security breach can cost a whopping $4.4 million, making it a top priority for businesses to prevent? But while avoiding a major incident is crucial, what's often overlooked are the recurring credential incidents that quietly drain corporate finances.
FBI Warns of $17bn Cyber Fraud Surge
The FBI has sounded the alarm on a staggering $17 billion surge in cyber fraud, with cryptocurrency scams alone accounting for over $7 billion in losses - and experts warn that AI-enabled threats are on the rise. This isn't just a minor annoyance, it's a massive financial hemorrhage that's happening right now.
New Mexico Ruling Threatens End-to-End Encryption
A recent New Mexico court ruling against Meta has sparked a crucial debate: is it riskier to have social platforms that shield private messages with end-to-end encryption, or to leave them exposed for law enforcement to scrutinize? This case highlights the tricky trade-offs between user privacy and public safety.
Fortinet Rushes Patch for Exploited FortiClient EMS Vulnerability
Fortinet has rushed out an emergency patch for a zero-day vulnerability in its FortiClient EMS product, which was being exploited by attackers before the fix was even available. This swift response aims to protect businesses from potential security breaches through its endpoint security clients.
GPUBreach Attack Escalates CPU Privileges via Graphics Units
Imagine a scenario where the very processor that powers your gaming experiences or fuels your AI models becomes a vulnerability that attackers can exploit to hijack your entire machine - new research reveals that this is no longer just a theoretical threat. A recently discovered attack, dubbed GPUBreach, can escalate CPU privileges through graphics units, leaving your system exposed to potential takeover.
Microsoft Uncovers Storm-1175's Medusa Ransomware Link
Microsoft just dropped a crucial report linking Storm-1175, a notorious threat actor, to high-velocity Medusa ransomware attacks that exploit flaws in networked systems. This newly uncovered connection raises the alarm for anyone building, defending, or relying on these systems to stay vigilant against Medusa ransomware attacks.
China-Linked Storm-1175 Weaponizes Zero-Days to Fuel Medusa Ransomware Blitz
Medusa ransomware attacks are happening at alarming speed, thanks to a China-linked threat actor called Storm-1175 that is exploiting a potent mix of zero-day and known vulnerabilities to rapidly infect exposed systems. This high-velocity campaign is a stark reminder of the evolving ransomware threat landscape.
Flowise AI Platform Faces Active RCE Exploitation
A critical vulnerability in Flowise, an open-source AI platform used by over 12,000 public instances, is being actively exploited, allowing attackers to run arbitrary code and take control. This maximum-severity flaw, tracked as CVE-2025-59528, demands immediate attention from Flowise operators to prevent devastating attacks.
Germany Names REvil, GandCrab Ransomware Leaders
German federal police have identified two Russian nationals as the masterminds behind the notorious REvil and GandCrab ransomware operations, shedding light on the elusive leaders of a global extortion network. This breakthrough has significant implications that extend far beyond a single investigation.
Censys Bolsters AI-Driven Threat Intel with $70M Funding
Censys just secured $70 million in funding to supercharge its AI-driven threat intelligence platform, giving defenders real-time visibility into the global network's underlying infrastructure. This game-changing tech helps defenders stay one step ahead of attackers by mapping and monitoring the internet's technical surface.
White House Proposes Sharp Cut to Cyber Defense Agency CISA
Can a cyber defense agency with a sharply reduced budget safeguard a nation that's more connected - and vulnerable - than ever? The White House's FY2027 budget proposal takes a concerning step back, slashing $707 million from CISA, the agency tasked with protecting against rising nation-state cyberthreats.
CUPS Flaws Expose Linux, Unix Systems to Remote Code Execution
A harmless printing service? Think again! Two flaws in the Common UNIX Printing System can be exploited by an unauthenticated attacker to execute code remotely and overwrite files as root, turning a routine print stack into a potential entry point for intruders.
GPUBreach Attack Exploits GPU Memory for System Takeover
A newly discovered vulnerability, dubbed GPUBreach, allows hackers to exploit modern GPU memory and take control of an entire machine by inducing Rowhammer bit-flips in GDDR6 memory. This alarming attack can escalate privileges and lead to a full system compromise, leaving no room for complacency.
Financial Services Grapple with SecOps and GRC Alignment Challenges
In financial services, two crucial functions - SecOps and GRC - are struggling to move in lockstep, despite their shared goals of protecting assets and meeting regulatory expectations. Can they ever align to tackle security and compliance challenges head-on?