Tag: emerging threats
8355 articles
Trump Order Accelerates Federal Post-Quantum Crypto Migration by 2030
The clock is ticking: by December 31, 2030, federal agencies must upgrade their cryptography to protect high-value assets from the looming threat of quantum computers, with digital signatures following suit by December 31, 2031. This executive order accelerates the migration to post-quantum cryptography, compressing the government's previous timeline by four to five years.
AI Skill Exploits Security Scanners, Reaches 26,000 Agents
In a shocking experiment, a security firm created a fake AI skill that evaded detection by security scanners and reached a staggering 26,000 agents, including those on corporate accounts. The skill, designed to be harmless, was able to bypass every scanner it was tested on, raising serious concerns about the safety of AI marketplaces.
Scattered Spider hackers plead guilty to TfL cyberattack
Two young hackers, part of the notorious Scattered Spider group, have pleaded guilty to orchestrating a devastating cyberattack on Transport for London, causing millions in losses and disrupting the lives of countless commuters. The breach, which lasted several days in September 2024, forced TfL to acknowledge that sensitive customer data had been stolen.
OpenAI Targets Faster Patching with Expanded Cyber-Defense Program
OpenAI's new GPT-5.5-Cyber model has achieved a record 85.6% score on CyberGym's vulnerability test, outperforming its standard counterpart and paving the way for faster patching with cutting-edge tooling and partnerships. This major breakthrough enables verified defenders to accelerate vulnerability fixes with enhanced security capabilities.
GitHub Bolsters Supply Chain Security by Blocking Pwn Request Patterns
GitHub is stepping up its game to protect your code by blocking common attack patterns on pull requests, helping to prevent security vulnerabilities from untrusted code. As of June 18, 2026, its actions/checkout v7 will refuse risky fork checkouts by default, keeping your workflows safer from attacker-controlled code.
Malicious npm Package Exploits Supply Chain with Multi-Stage Windows RAT
Beware of sneaky impostors in your build dependencies - a recent discovery by JFrog revealed a malicious npm package masquerading as a popular JavaScript tool, hiding a multi-stage Windows remote access trojan. Treat similar-sounding package names with caution, as they could be potential delivery mechanisms for threats.
LastPass Breach Exposes Customer Data in Supply Chain Hack
LastPass recently discovered a security incident at Klue, a third-party platform they use, which led to an unauthorized actor accessing some customer data through its Salesforce environment. Fortunately, customer vaults and core products remain secure, and swift action has been taken to mitigate the breach.
Vulnerability Management Faces AI-Driven Time Crunch
The time it takes for hackers to exploit a newly discovered vulnerability has dramatically shrunk from 53 days to just 8 hours, thanks to AI-driven automation that accelerates the process of finding and weaponizing weaknesses. This alarming trend makes it increasingly challenging for organizations to keep pace with patching and remediation efforts.
US Accelerates Post-Quantum Cryptography Migration with 2030 Deadline
The White House is taking a major step to protect America's sensitive data and digital economy by mandating a rapid migration to quantum-safe encryption, with a deadline of 2030 for key establishment and 2031 for digital signatures. This move aims to safeguard critical infrastructure, jobs, and growth by future-proofing the nation's cybersecurity.
Scammers Exploit GTA 6 Hype with Fake Pre-Order Sites
Don't fall for fake GTA 6 pre-order sites promising early access - any unofficial offer is likely a scam, and Rockstar Games will only announce legitimate pre-orders through official channels. Scammers are using professional-looking sites to trick victims into paying hundreds of dollars in cryptocurrency for a fake VIP experience.
Agentic AI Reshapes Offensive Operations
Meet the "script kiddie as a service" era, where AI has erased the old skill barrier, allowing attackers with just intent and access to capable tools to launch sophisticated, autonomous attacks. Agentic AI has made it possible for previously unskilled actors to plan and execute campaigns without needing to pull the trigger themselves.
Malicious npm Packages Deliver Windows RAT via PostCSS Tooling
Beware of malicious npm packages masquerading as popular tools like PostCSS - researchers have uncovered three fake packages that have racked up over 1,000 downloads and deliver a sneaky Windows remote access trojan. These lookalike packages, published just over a month ago, have been cleverly designed to fly under the radar.
Scattered Spider Teens Plead Guilty to TfL Cyberattack
Two British teenagers, Thalha Jubair and Owen Flowers, have pleaded guilty to infiltrating Transport for London's systems, causing a £29m hit and disrupting public services in a stark reminder that cybercrime has very real-world consequences. The breach, which occurred in late August 2024, highlights the significant impact of cyberattacks on everyday life.
Five Eyes Agencies Warn of AI-Driven Cyber Threat Surge
The Five Eyes cybersecurity agencies are sounding the alarm: AI-driven cyber threats are no longer a future threat, but a present danger that businesses and governments must tackle urgently. Frontier AI will revolutionize the threat landscape in months, not years, and malicious actors are already seizing the advantage.
WhatsApp Targeted in VBScript Campaign Installing ManageEngine RMM Tool
Malicious actors are using WhatsApp to trick victims into downloading and executing a Visual Basic Script (VBScript) file, disguised as a business or financial document, which ultimately installs a legitimate Remote Monitoring and Management (RMM) tool. The campaign has been detected in multiple countries worldwide, with Malaysia being the hardest hit.
Air Force's T-7 Red Hawk Trainer Faces Serious Airworthiness Risks
The Air Force's new T-7 Red Hawk trainer jets may be grounded by a serious airworthiness risk due to missing critical safety data from manufacturer Boeing. This critical gap in information could put pilots' lives at risk and threatens the program's success.
Lawmakers Warn Acting DNI Against ODNI Workforce Shakeup
Top Democrats are sounding the alarm, warning Acting Director of National Intelligence Bill Pulte that hasty changes at the Office of the DNI could put national security at risk. In a joint letter, Rep. Jim Himes and Sen. Mark Warner urged caution, citing Pulte's limited experience within the Intelligence Community.
Defense Industry Must Adapt, Scale and Accelerate Capability
The defense industry faces a harsh reality: taking down affordable drones with expensive interceptors just doesn't add up. To stay ahead, industry leaders must adapt to changing operational needs, scale up production, and accelerate innovation to deliver proven, scalable capabilities that meet today's demands.
Turkey Advances Autonomous Air Combat with Kizilelma Drone Trials
In a groundbreaking achievement, Turkey's Kizilelma drone successfully completed autonomous taxi, takeoff, and formation flight with a Leonardo M-346 jet, marking a significant step towards the future of crewed and uncrewed teaming in combat aviation. This innovative milestone was reached during live trials of the K-SWARM concept in Çorlu, Turkey.
Hacktivism Surges as Geopolitical Crises Expose Cybersecurity Gaps
Hacktivist attacks have skyrocketed amid rising geopolitical tensions, with over 149 incidents reported in just three days - a stark reminder of the growing cybersecurity gaps. This alarming surge is part of a larger trend that began in February 2022, with hacktivist groups increasingly targeting critical infrastructure during times of conflict.
US-Iran Nuclear Deal Hinges on Inspectors' Ability to Verify Compliance
The success of a new US-Iran nuclear deal hangs precariously in the balance as inspectors face a daunting task: verifying Iran's compliance with the agreement amidst concerns that critical equipment may be hidden from view. With Iran's history of restricting access to data and facilities, experts warn that inspectors may be starting from a near-total blind spot.
Iran War Exposes US Endurance Test
The US may have won the battle, but Iran might have won the war - a surprising twist that reveals the complex aftermath of the conflict. The US military delivered a strong blow, crippling Iran's nuclear infrastructure, air defenses, and command networks, but what did it really achieve?
Pentagon Accelerates Quantum Sensor Deployment
The Pentagon is fast-tracking the deployment of quantum sensors to enhance navigation capabilities, particularly in scenarios where GPS signals are jammed or spoofed. This move follows President Trump's Executive Order 14411, which aims to accelerate the development and operational use of quantum technologies.
US Aircraft Carriers Maintain Global Presence Amid Shift in Naval Posture
US aircraft carriers are staying put, continuing to operate in the region to support freedom of navigation, even as the US lifts its naval blockade of Iranian ports. The move ensures a steady US presence, with major naval assets remaining vigilant and ready to uphold the terms of a recent agreement.