Tag: emerging threats
8360 articles

Palo Alto Networks Warns of Active Exploitation of GlobalProtect VPN Flaw
Palo Alto Networks has warned of active exploitation of a critical GlobalProtect VPN flaw, CVE-2026-0257, which allows attackers to bypass security controls and set up unauthorized VPN connections. The company first observed exploitation attempts on May 17, 2026.

Sniper Dz Scams Target MENA Users with Fake Offers and Browser Exploits
Scammers are targeting people in the Middle East and North Africa with fake offers of free mobile internet, financial rewards, and government subsidies, using fraudulent Facebook accounts to trick victims into divulging sensitive info. These Sniper Dz scams impersonate trusted figures and organizations to lure users in with enticing deals.

China Tightens Grip on Supply-Chain Data
China's new regulations, effective April, are tightening controls on supply-chain data, with a focus on the intent behind data collection, not just what is collected. Authorities can now scrutinize the purpose of investigations and information gathering to ensure they align with Chinese laws and regulations.

FBI Disrupts AI-Powered Phishing Service with 1 Million URLs
In a major win for cyber safety, the FBI, Google, and Black Lotus Labs joined forces to dismantle Outsider Enterprise, a notorious phishing-as-a-service operation based in China that had been spreading fake text campaigns through 1 million URLs. This coordinated takedown seized key servers and accounts used by the threat actors.

China Unveils Modernized Guided Depth Charge for Anti-Submarine Warfare
China has unveiled a game-changing guided depth charge for anti-submarine warfare, with a recent photo showing a Z-9D naval helicopter deploying the advanced Type 11 munition. This modern, air-deployable weapon is equipped with fins and sensors that enable it to precisely target submarine hulls.

Developers Weaponize Code to Disrupt AI-Powered Malware
Meet Johannes Link, a self-proclaimed AI skeptic who's taking a stand against AI-powered coding agents by weaponizing his own code - specifically, the Java property-testing tool jqwik - to disrupt their operations. His latest software update includes a clever anti-AI clause designed to throw a wrench in the works.

US Bans Anthropic AI Models Citing National Security Concerns
The US government has taken a drastic step, banning Anthropic's advanced AI models, Fable 5 and Mythos 5, citing national security concerns and imposing strict export controls that even affect foreign-born employees. Anthropic responded with a blunt statement, disagreeing with the decision to recall models used by hundreds of millions of people.

Former IT Employee Sabotages School District with Prolonged Cyberattack
A former IT employee waged a relentless cyberwar against his old employer, the Saydel Community School District, launching a devastating 21-month attack that crippled the district's systems and disrupted classrooms. The attacks began just days after he left his job, with the deletion of the district's Facebook account, and continued with repeated intrusions into critical services.

Splunk Enterprise Flaw Exposes Systems to Unauthenticated Code Execution
A critical vulnerability in Splunk Enterprise, rated 9.8 on the CVSS scale, leaves systems open to devastating attacks, allowing unauthenticated hackers to execute malicious code and wreak havoc. This shocking flaw, tracked as CVE-2026-20253, enables attackers to create or truncate files with ease, putting your entire system at risk.

US Gov Directive Disrupts Access to Anthropic's AI Models
The US government has issued a directive that restricts access to Anthropic's most advanced AI models, Fable 5 and Mythos 5, citing national security concerns, forcing the company to suspend these models worldwide. This move affects not only foreign users but also Anthropic's own foreign-national employees, and has significant implications for the future of AI development and access.

US Orders Anthropic to Curtail AI Model Access
Anthropic has been ordered by the US government to restrict access to its advanced AI models, Claude Fable 5 and Mythos 5, for foreign nationals, and will abruptly disable them to comply. This move comes after the company received a directive to suspend all access to the models by users outside the US.

FBI dismantles $1.9B China cybercrime network
In a major breakthrough, the FBI, with the help of Google and Lumen Technologies, has dismantled a massive $1.9 billion China-based cybercrime network that impersonated trusted brands to scam hundreds of thousands of victims. This coordinated takedown, part of Operation Riptide, seized key infrastructure and domains used by the group.

MacOS Update Exposes New Artifact for Tracing Digital Intent
The latest macOS update has introduced a game-changing digital trail: the App.MenuItem stream, which meticulously logs every menu selection you make, complete with exact timestamps. This new artifact reveals a detailed narrative of your interactions with the operating system interface.

Poland Plans to Double F-35 Fighter Jet Order
Poland is set to supercharge its air defense capabilities by doubling its order of F-35 fighter jets, with plans to add two more squadrons to the initial 32 aircraft, as announced by Deputy Prime Minister and Minister of Defense, Władysław Kosiniak-Kamysz. This massive upgrade is part of the country's ambitious Armed Forces Development Program, aimed at bolstering its defense priorities through 2039.

Congress Moves to Restore U-2S Spy Plane Fleet, Defying Air Force Plans
In a surprising move, Congress is pushing to revive the U-2S spy plane fleet, bucking the Air Force's plans to retire the entire 23-aircraft fleet due to concerns over its viability in future conflicts. A new House Appropriations Committee draft bill would limit retirements and fund maintenance to restore four aircraft.

ShinyHunters Exploits Oracle Flaw to Breach Universities
A zero-day flaw in Oracle PeopleSoft PeopleTools, known as CVE-2026-35273, has been exploited by ShinyHunters, potentially infiltrating over 100 organizations, with universities being the hardest hit. This vulnerability allows attackers to execute remote code and take over affected servers, posing a significant threat to higher education institutions.

Boeing Exits Navy Trainer Jet Competition
Boeing has bowed out of the Navy's Undergraduate Jet Training System competition, citing that its T-7A Red Hawk, designed for the Air Force, doesn't meet the Navy's specific requirements. The company is focusing on delivering solutions that perfectly match its customers' needs.

Conti Ransomware Member Pleads Guilty to Cybercrimes
A longtime member of the notorious Conti ransomware group has pleaded guilty to cybercrimes in federal court, marking a major win for justice after the defendant's attacks caused millions of dollars in damage to people and businesses worldwide. Oleksii Oleksiyovych Lytvynenko, a 44-year-old Ukrainian national, admitted to developing malware and participating in Conti's ransomware campaign.

Miniature Drones Make Inroads at Berlin Air Show
At the Berlin Air Show, a quiet revolution is underway: miniature drones are stealing the scene with their tiny buzz, offering a glimpse into the future of flight. Amidst the roar of fighter jets and jumbo tankers, these small, first-person-view drones are making a big impact.

Russia Bolsters Arctic Military Presence with New Bases Along NATO's Northern Flank
Russia is ramping up its military presence in the Arctic, with satellite images revealing new bases, barracks, and ammunition storage facilities along Norway's and Finland's borders, capable of hosting tens of thousands of troops. The alarming buildup has been uncovered by a joint Nordic-Baltic investigation, sparking concerns over the region's security.

Authorities Disrupt Massive Deepfake Porn Site in Global Operation
In a major global crackdown, authorities have shut down a notorious deepfake porn site that was profiting from the humiliation, exploitation, and violation of personal privacy of thousands of women, including celebrities and public figures. The site's massive collection of AI-altered images and videos has been seized, putting an end to its large-scale trafficking of digital forgeries.

AUKUS Tests Partners' Resolve Amid Industrial, Fiscal Pressures
The recent AUKMIN meeting in London made one thing clear: AUKUS is no longer just a partnership deal - it's a commitment to action, with the UK and Australia leading the charge in turning strategic alignment into real-world capability. The big question is: can the partners overcome industrial and fiscal pressures to deliver on their ambitious plans?

Cyber Force push falters in Senate, but proponents persist
Despite a narrow setback in the Senate Armed Services Committee, supporters of a new Cyber Force remain undeterred, with Senator Kirsten Gillibrand's team vowing to continue the push for its creation. The proposed Cyber Force, which would be housed under the Army, fell just 1 vote short in a 14-13 defeat.

Pentagon Weighs Cutting Traditional Weapons to Fund Drones
The Pentagon is considering a bold move: cutting back on traditional, high-end weapons to make room for swarms of low-cost drones, a shift that could revolutionize modern warfare. If funding plans fall through, the department is prepared to make tough trade-offs, prioritizing affordable, autonomous tech over pricier systems.