Tag: emerging threats
8354 articles
RustDuck Botnet Evolves with Rust Rewrite to Evade Detection
Meet RustDuck, a sneaky botnet that's been evolving to evade detection since February 2026, tracked by researchers at QiAnXin's XLab. It gains a foothold by exploiting weak passwords, unpatched vulnerabilities, and targeting specific web software.
Microsoft Warns AI Agents Can Leak Data via Poisoned Tool Descriptions
A single line of plain text can unwittingly turn a helpful AI agent into a stealthy data thief, exposing sensitive information through a vulnerability in the Model Context Protocol (MCP). This fast-growing attack surface has Microsoft warning of a potentially disastrous trust boundary breach.
Infosec Pros Ditch Automated Pentesting Tools Amid AI Vulnerability Failures
Infosec pros are ditching automated pentesting tools as they fail to detect AI-driven vulnerabilities, with 78% of practitioners experiencing critical false negatives. Humans are needed to outsmart AI-era flaws that automated scanners miss.
UK Boosts Defense Spending to $105 Billion by 2029
The UK is set to bolster its defense capabilities with a significant boost in spending, reaching $105 billion annually by 2029, as Prime Minister Keir Starmer vows to prioritize national security. This substantial increase, from 2.3% to 2.7% of GDP, is just the beginning, with a target of 3% in the next parliament.
Marine Corps Accelerates Autonomous Ground Vehicle Production
The Marine Corps is fast-tracking the future of warfare with a $19.7 million contract to produce over a dozen autonomous ground vehicles, set for delivery by early 2027. This game-changing move comes as uncrewed ground vehicles prove their worth in current conflicts, with tech now mature enough to make a real impact.
US Aircraft Carriers Deploy Globally in Major Exercises
In a show of global military strength, US aircraft carriers are spearheading major exercises around the world, including the impressive RIMPAC, the largest international maritime exercise in history. The USS George Washington recently took part in a live-fire sinking exercise during Valiant Shield, showcasing the power of its F/A-18 Super Hornets, F-35C Lightning IIs, and E-2D Hawkeye aircraft.
Overland AI Secures $20M Contract for Marine Corps Autonomous Vehicles
Overland AI has landed a $20 million contract to supply the US Marine Corps with autonomous ground vehicles, a game-changing move that will supercharge the military's air defense capabilities. This cutting-edge tech will extend the operational reach and lethality of air defense units like never before.
B-2 Stealth Bomber Fires Anti-Ship Missile in Pacific Exercise
In a major show of force, a US Air Force B-2 stealth bomber fired a powerful anti-ship missile during a live-fire exercise in the Western Pacific, marking a significant milestone in countering maritime threats. The impressive display took place as part of Exercise Valiant Shield 2026, where the bomber launched an AGM-158C Long Range Anti-Ship Missile at a decommissioned US Navy ship.
Senate Bill Aims to Vetting AI Agents for Security, Trustworthiness
As AI agents become more prevalent, Sen. Mark Warner wants to ensure they're transparent, trustworthy, and accountable to the people they serve. His proposed AI AGENT Act aims to create a federal framework that promotes innovation while protecting consumers.
Pentagon Unveils War Force to Lure Top Tech Talent
The Pentagon has launched War Force, a new initiative that connects top engineers with the Department of Defense to tackle complex challenges, building on the success of the Office of Personnel Management's Tech Force program. This move aims to lure the best tech talent to help drive defense missions forward.
Ukraine's Military Fortifies Tactics Amid Russia's Prolonged Invasion
As Russia's invasion of Ukraine grinds on, the war is being reshaped by subtle yet powerful technological adaptations on the front lines. Expert Mara Karlin shares her eye-opening insights from a recent visit to the battlefront.
Turkey's F-35 Bid Sparks Security Concerns Over Russia, Hamas Ties
President Donald Trump's Oval Office remarks have rekindled debate over Turkey's potential readmission to the F-35 program, sparking concerns about the implications for security ties with Russia and Hamas. Trump hinted at making a move to please Turkish President Recep Tayyip Erdogan, saying he would probably do something to make him very happy.
Poland Halts MiG-29 Transfers to Ukraine Over Drone Tech Dispute
Poland has put a hold on sending more MiG-29 fighters to Ukraine after Kyiv reportedly failed to deliver on a deal to share drone technology, with Poland's defense minister saying "there will be no MiGs for Ukraine" without a fair trade. The move comes after a proposed partnership-based approach, with Poland's defense minister offering to swap MiGs for drone tech, was seemingly snubbed.
Ransomware Groups Adopt Corporate Structure to Extort Victims
Meet Black Basta, a ransomware group that operated like a corporate powerhouse, launching attacks on 520 victims across 39 industries and raking in at least $107 million in bitcoin payments. With a structured team, set schedules, and outsourced tasks, this syndicate's business model was surprisingly sophisticated.
Pentagon Launches 'War Force' to Deploy AI Talent
The Pentagon is calling on patriotic programmers and engineers to join its new "War Force" initiative, a short-term opportunity to serve their country and revolutionize the military with cutting-edge artificial intelligence and tech. Hundreds of young talent are sought for hands-on federal roles to drive innovation and support the warfighter.
Federal Agencies Modernize Security with Zero Trust Architecture
Federal agencies are revolutionizing their security approach with Zero Trust Architecture, shifting from mere compliance to a robust operational framework that enables seamless mobility, cloud modernization, and AI-driven decision making. By embracing this cutting-edge strategy, leaders are transforming their organizations to stay ahead of emerging threats.
DHS Revives Cybersecurity Council for Critical Infrastructure
The Department of Homeland Security is launching the Alliance of National Councils for Homeland Operational Resilience – Critical Infrastructure program to boost cybersecurity coordination between government agencies and private sector partners. This new initiative aims to bring together experts from various fields to tackle the latest threats and protect critical infrastructure.
Pentagon Shakeup Exposes Risk of Flawed Weapons Fielding
A recent Government Accountability Office report reveals that steep cuts to the Pentagon's testing and evaluation team have severely compromised its ability to oversee the development and deployment of new weapon systems. With a drastic reduction in staff from 106 to just 30, the team is struggling to keep pace with the demands of assessing increasingly complex and flawed weapons programs.
Huntress Insider Threat Exposed in Ransomware Probe Leak
A Huntress insider reportedly made a grave mistake, casually disclosing to a cybercriminal that law enforcement was on their tail - a moment of poor judgment that fell short of the company's high standards. The alarming exchange was part of a larger pattern of questionable communication uncovered between the currently employed threat hunter and the threat actor.
UK Pivots to Drone Warfare with $6.6 Billion Investment
The UK is revolutionizing its military strategy with a whopping $6.6 billion investment in drone warfare, betting big on autonomous systems to take center stage in modern combat. This game-changing move is part of a broader $395 billion defence spending package aimed at keeping pace with rapid innovation.
ToddyCat APT Group Exploits Google API for Email Access
Meet ToddyCat, a sneaky APT group that's taken automation to the next level with its new tool, Umbrij - allowing it to secretly tap into corporate email and cloud resources by exploiting Google API. This stealthy move has helped ToddyCat remain undetected by monitoring systems, leaving organizations vulnerable to attack.
Langflow Vulnerability Exploited to Deploy Monero Miner on AI App Endpoints
Hackers exploited a critical vulnerability in Langflow to sneak a Monero cryptocurrency miner onto AI app endpoints, using just one line of Python code to start the attack. Over 19 days in March and April, threat actors took advantage of the unauthenticated remote code execution flaw, rated CVSS 9.3, to spread the malware.
Malware Exploits Google Notes Extension to Steal Crypto Wallet Addresses
Malware actors are using a fake Google Notes extension to secretly steal cryptocurrency wallet addresses, and it's being delivered through sneaky unsigned installers that disguise the threat as a harmless utility. This stealthy operation, dubbed Silent Swap, uses a malicious Chromium extension to gain broad access to your browsing data and clipboard.
Nissan Breach Exposes Sensitive Employee Data via Oracle Zero-Day Flaw
Nissan's HR and payroll systems were compromised when hackers exploited a critical Oracle PeopleSoft vulnerability, putting sensitive employee data at risk. The breach, which occurred between May 27 and June 9, is a stark reminder of the importance of robust data security measures.