Tag: emerging threats
8360 articles
DragonForce Ransomware Exploits Microsoft Teams to Facilitate Months-Long Breach
Meet Backdoor.Turn, a sneaky new threat that uses Microsoft Teams to hide its tracks and wreak havoc on your network for months on end - and it's surprisingly sophisticated. This Go-based RAT masquerades as legit traffic by exploiting Teams' TURN relay servers.
CISA Warns of Actively Exploited cPanel Plugin Flaw
The US Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning about a critical cPanel plugin flaw, CVE-2026-54420, that's being actively exploited by hackers, posing a significant risk to all user-end plugin versions prior to 2.4.8. This vulnerability allows attackers to escalate privileges to root, putting your online security at risk.
China-Linked SprySOCKS Backdoor Targets Windows with Driver-Based Stealth
ESET has uncovered a Windows variant of the SprySOCKS backdoor, previously thought to only affect Linux, marking a significant expansion of its capabilities. This new variant, version 1.8, uses driver-based stealth and can communicate through TCP, UDP, and WebSocket channels.
Fortinet FortiSandbox Flaws Targeted by Attackers in Wide-Ranging Exploits
Cyber attackers are actively exploiting three high-severity Fortinet FortiSandbox vulnerabilities, CVE-2026-39813, CVE-2026-39808, and CVE-2026-25089, which were patched just last month and carry a near-critical CVSS score of 9.1. These flaws have been targeted in wide-ranging exploits over the past 24 hours, according to threat intelligence firm Defused Cyber.
Ransomware Gang Exploits Microsoft Teams to Conceal Malicious Traffic
Meet Backdoor.Turn, a sneaky new malware that's abusing Microsoft Teams to hide its malicious activities - and it's a game-changer for cyber threats. This clever RAT uses Teams' own infrastructure against us, making it harder to spot its secret communications.
Fortinet Flaws Exposed to Active Exploitation
Critical vulnerabilities in Fortinet's FortiSandbox platform are under active attack, with multiple flaws, including CVE-2026-39813, CVE-2026-39808, and CVE-2026-25089, being exploited by hackers just 24 hours after security updates were issued.
Earth Lusca Expands Arsenal with Windows SprySOCKS Malware
Chinese threat actor Earth Lusca has upgraded its malware arsenal with Windows SprySOCKS, a sneaky tool that lets hackers secretly send commands to compromised devices, allowing them to fly under the radar. This latest move has been linked to a string of high-profile attacks on government organizations worldwide.
ScarCruft Targets Microsoft Users with NarwhalRAT Malware
Beware of fake Microsoft account alerts! A sneaky North Korean hacking group, ScarCruft, is sending phishing emails that mimic Microsoft security notifications to trick you into downloading the NarwhalRAT malware.
FBI Warns of Courier Cash Scams Fueling Crypto Investment Fraud
Beware of scammers who are using couriers to collect cash from victims, often under the guise of required investments or fines to withdraw from a fake crypto investment firm. The FBI warns that these scammers will instruct victims to hand over cash to a courier, often using verification tactics like sharing a dollar bill serial number or password to gain trust.
DARPA Seeks Rapid Space System Reconstitution Tech
Imagine having the power to rapidly revive critical space services in mere hours to weeks after a setback - that's what DARPA aims to achieve with its latest quest for innovative space system reconstitution technology. The goal is to swiftly restore vital services to at least minimum levels, responding to urgent needs, lost assets, or unexpected collisions.
US Imposes Export Controls on Anthropic AI Model
The US has imposed strict export controls on Anthropic's AI model, Mythos/Fable 5, classifying it as a cyber weapon and effectively banning its sale to foreign nationals. This move comes as the Pentagon severs ties with the company, marking a significant shift in their dealings.
Australia's Intelligence Community Must Adapt to AI Era
The national intelligence community must revolutionize its approach to stay relevant in the AI era, shifting from traditional reporting to dynamic, real-time insights that match the evolving needs of decision-makers. Relying on outdated methods will render it obsolete.
Diversity Bolsters Cybersecurity Against AI-Driven Threats
With women making up only 17 percent of Australia's cybersecurity workforce, the industry's glaring gender gap leaves us vulnerable to AI-driven threats and puts women at greater risk of online harms. Closing this gap is crucial to bolstering our digital protection and ensuring a safer online world for all.
UK Nears GCAP Fighter Contract Signing Amid Funding Disputes
The UK is on the brink of securing a major deal for the Global Combat Air Programme, with a multi-national contract for a sixth-generation fighter expected to be signed by the end of the month. Prime Ministers Keir Starmer and Sanae Takaichi are set to confirm their commitment to the programme in a meeting in London.
US Naval Posture Persists Amid Iran Ceasefire Talks
The US naval blockade of Iran remains firmly in place, with CENTCOM forces disabling nine commercial vessels that attempted to breach it, as tensions persist ahead of a crucial ceasefire agreement signing in Geneva on Friday. The blockade will stay in effect until the deal is sealed.
CISA Warns of LiteSpeed cPanel Plugin Flaw Exploited for Root Access
A critical vulnerability in the LiteSpeed cPanel Plugin, known as CVE-2026-54420, has been flagged by CISA for its high risk of exploitation, with a CVSS score of 8.5, and federal agencies have until June 18, 2026, to apply the necessary fix. This flaw allows for privilege escalation and has been added to the Known Exploited Vulnerabilities catalog, requiring swift action to prevent potential root access attacks.
Australia Scrambles to Secure Access to Cutting-Edge AI Amid US Export Curbs
Australia's economic future, research base, and security hinge on accessing cutting-edge AI, but US export curbs are tightening control, treating advanced AI models as guarded national assets. The stakes are high, with the country's progress hanging in the balance.
B-52 Bomber Crashes at Edwards Air Force Base, Killing Eight
A devastating crash of a US Air Force B-52 Stratofortress bomber at Edwards Air Force Base in California has claimed the lives of eight people on board, in what authorities describe as a "not survivable" incident. The tragic accident occurred during a routine test mission on Thursday morning.
iRhythm Breach Exposes Patient Data in Cardiac Monitoring Hack
A recent data breach at iRhythm exposed sensitive patient information, compromising personal and health data from over 12 million patients whose heartbeat data was analyzed through the company's cardiac monitoring service. The breach was discovered after a ransomware-style intrusion hit third-party business applications used by iRhythm.
Cisco Disrupts Active Exploitation of SD-WAN Manager Flaw
Cisco is taking swift action to combat the active exploitation of a medium-severity flaw in its SD-WAN Manager, known as CVE-2026-20262, which could let hackers create or overwrite files on affected systems. Federal agencies have until June 29, 2026 to remediate the vulnerability.
Images Near Area 51 Suggest F-47 Roots in Stealth Legacy
Mysterious infra-red images captured near Area 51 have sparked speculation that a long-forgotten 1990s aircraft, the X-36, may be influencing the design of a modern stealth plane, with some observers drawing striking comparisons to the proposed F-47.
Congress Probes Pentagon's Use of Military Lawyers in Civilian Roles
Senator Elizabeth Warren slammed the Pentagon's deployment of military lawyers in civilian roles, warning it's undermining military readiness and morale in the process. She's now leading a push for a Government Accountability Office review of the practice.
B-52 Bomber Crashes At Edwards Air Force Base In California
A B-52 bomber crashed at Edwards Air Force Base in California shortly after takeoff, prompting an immediate response from emergency crews on the scene. The airfield was swiftly closed and all non-essential operations suspended to focus on the ongoing response efforts.
Google Uncovers China Espionage Group UNC6508 Lurking Undetected Since 2023
Google's Threat Intelligence Group has uncovered a stealthy Chinese espionage group, UNC6508, that had been secretly lurking in networks since 2023, targeting key sectors in the US and Canada. The full extent of the damage is still unknown, leaving experts concerned about potential long-term security breaches.