Tag: emerging threats
8090 articles
UK Police Urge Passkey Adoption Amid 425% Surge in Hacking Profits
Hackers are raking in a whopping 425% more profits, with cybercrime linked to email and social media hacking hitting £6.3m in 2025/6 - and experts warn it's time to ditch passwords for good and switch to passkeys to protect yourself. The UK's Report Fraud service is sounding the alarm and launching a public campaign to help you safeguard your online life.
Nikkei Breaches Email Accounts, Exposes Data
Nikkei suffered not one, but two email breaches in just three months, exposing sensitive contact info and leaving staff and interviewees vulnerable to phishing scams. The hacks, which hit Google Workspace and Microsoft 365 accounts, allowed attackers to send thousands of malicious emails.
Bromcom Breach Exposes Email Addresses in Legacy Sign-on System
Bromcom's legacy single sign-on system has been breached, exposing email addresses and limited information of affected users. The incident, tied to a superseded registration functionality, has prompted the UK school software provider to withdraw the vulnerable component.
Ransomware Affiliate Betrays Partners, Siphons Victim Funds
In a shocking betrayal, a rogue ransomware affiliate named Azazel secretly siphoned off victim funds and ran his own leak site, defying the standard rules of the ransomware-as-a-service partnership. This brazen move not only hurt his partners but also left victims vulnerable to further exploitation.
Engineer Sentenced for Ransomware-Style Attack on Employer Network
A trusted insider turned rogue, launching a deliberate ransomware-style attack on his former employer's network, culminating in a ransom demand. The perpetrator, a 57-year-old former engineer, used an administrator account to remotely access the company's network without authorization over several days.
FBI Removes Accenture Contractor Over ShinyHunters Breach Patch Failure
The FBI has taken swift action by removing an Accenture contractor after a patch failure led to the ShinyHunters breach, exposing sensitive information of thousands of employees. A clever URL-encoding trick was used to outsmart a web application firewall, exploiting a vulnerability cataloged as CVE-2026-35273.
Security Researcher Exposes KVM Guest-Host Escape Flaw
A security researcher has uncovered a potential vulnerability in KVM, a widely-used virtualization technology, that could allow attackers to break free from virtual machines and wreak havoc on host systems. This claimed guest-host escape flaw has sent shockwaves through the cybersecurity community.
Atlassian Flaw Exposes File Data Across Multiple Products
A critical security flaw, rated 9.3 out of 10, has been discovered in multiple Atlassian products, allowing unauthenticated attackers to access sensitive files. This vulnerability, known as CVE-2026-21589, poses a significant risk to self-hosted Data Center products if exploited.
Microsoft Warns of ClickFix Browser Cache Smuggling Attacks Bypassing Windows Defenses
Microsoft warns of a sneaky new attack called ClickFix browser cache smuggling, where hackers disguise malicious scripts as harmless image files in your browser cache, allowing them to bypass Windows defenses. This clever trick lets attackers execute their payload without downloading or executing remote files in real time.
Denmark's CPR Register Exposes 8.8 Million People's Data via Company Breach
Millions of Danes had their sensitive personal data exposed in a massive breach of the country's Central Person Register, with 8.8 million people's names, addresses, and identification numbers compromised. The staggering leak affects nearly four in five records in the register, including both living and deceased individuals.
US Customs Retires P-3 Airborne Early Warning Aircraft
US Customs and Border Protection bid farewell to its trusty P-3 Airborne Early Warning aircraft, marking the end of an era in America's border security. The final plane touched down on September 30, 2026, bringing a unique chapter in US law-enforcement aviation to a close.
Missile Defense in Space Exposes New Logistical Challenges
Logistics in missile defense is no longer just about maintenance - it's a game-changer in the warfighting arena. The strategic landscape is shifting with new threats like hypersonics and fractional orbital bombardment, forcing a fresh look at defense logistics.
Citrix Unveils Third Exploited NetScaler Zero-Day Vulnerability
Citrix has just revealed a third critical NetScaler zero-day vulnerability, CVE-2026-88779, which can cause a denial of service in SAML-enabled deployments, and security experts warn it's painfully easy to trigger. This high-severity defect is the latest in a string of actively exploited NetScaler vulnerabilities.
Pentagon Breach Exposes 3 Million in Sensitive Data for Months
A recent Pentagon breach left a staggering 3 million people vulnerable after highly sensitive data was exposed for months due to undetected unauthorized access. This alarming incident serves as a stark reminder of the importance of robust data security measures.
USAF Launches Hypersonic Cruise Missile in Australian Flight Test
The US Air Force has successfully launched a Hypersonic Attack Cruise Missile in a groundbreaking flight test with its Australian partners, pushing the boundaries of long-range strike capabilities. This milestone marks a major step forward in the development of this game-changing technology.
Australia's Northern Logistics Gap Threatens Littoral Force Effectiveness
To unleash the full potential of its littoral force, Australia urgently needs a seamless northern logistics network that combines military and civilian resources. A cohesive system would enable key nodes in Darwin, Townsville, and northwestern Australia to work in harmony, boosting the nation's defence capabilities.
Atlassian Warns of File Access Flaw in Datacenter Products
Atlassian has sounded the alarm on a critical file access flaw in its datacenter products, putting customers at risk - but what does this mean for your business? A critical vulnerability has been discovered, and it's essential to take action to protect your data.
Japan's Defense Budget Boost Sparks Quest for Efficient Spending
Japan's Ministry of Defense is shaking things up with a record-breaking 9.3 trillion yen budget request for 2027, marking a 3.8% increase and hitting the 2% GDP target ahead of schedule. This bold move signals a fresh approach to defense, dubbed a "new way of fighting".
Pentagon Advances Counter-Drone Tech with Directed Energy Pilot Vendors
The Pentagon is taking a major step forward in counter-drone technology, selecting four top vendors to test their directed energy systems in a real-world setting to boost homeland defense. This cutting-edge pilot program will help determine how to effectively integrate and maintain these innovative solutions.
Security Researcher Uncovers KVM Guest-Host Escape Flaw
A security researcher has uncovered a critical vulnerability that allows hackers to break free from virtual confines, exploiting a flaw in KVM that enables a malicious guest to escape and compromise the host system. This alarming guest-host escape flaw has significant implications for virtualized environments.
OpenAI Embeds Watermarks in EU ChatGPT, Codex Outputs
OpenAI is taking a proactive approach to responsible AI development by introducing an invisible watermark to ChatGPT and Codex outputs in the European Union, helping to identify AI-generated content. This innovative technique, called textGrain, subtly alters word choices to create a detectable pattern.
Citrix NetScaler Exploited in Active Attacks Amid New 0-Day Reports
Citrix NetScaler is under active attack, with hackers exploiting a newly discovered vulnerability that can cause denial of service with just a single specially crafted request. The flaw, known as CVE-2026-88779, affects certain NetScaler deployments configured for single sign-on authentication.
Hackers Actively Scan Rejetto HFS Servers for Critical RCE Flaw
Hackers are on the hunt for Rejetto HFS servers with a critical flaw that lets them forge sessions, take over accounts, and execute remote code - and it's crucial to update to version 3.2.1 ASAP to avoid falling victim. This vulnerability, known as CVE-2026-61500, was patched in July, but attackers are actively scanning for affected servers.
FBI Arrests Multiple Suspects Linked to ShinyHunters Hack
The FBI has scored a major win in the fight against cybercrime, arresting multiple suspects linked to the notorious ShinyHunters hack, and vowing to leave no stone unturned in bringing all responsible individuals to justice. The operation is ongoing, with the bureau working closely with law enforcement partners to crack down on the group.