Tag: emerging threats
8377 articles
China's Civilian Tiltrotor Advances Spark Dual-Use Concerns
On August 18, 2025, a sleek, cutting-edge tiltrotor aircraft made a smooth test flight, leaving a trail of intrigue as it effortlessly hovered and soared over a Chinese test range. The quietly released footage and photos on social media sparked curiosity, hinting at a major breakthrough in civilian aviation technology.
Malvertising Campaign Targets macOS with FlutterShell Backdoor
Google swiftly suspended advertiser accounts linked to a massive malvertising campaign that spread a new macOS backdoor, known as FlutterShell, after researchers sounded the alarm. The culprits, tracked by Palo Alto Networks as CL-CRI-1089, used hundreds of verified Google ads and a web of shell companies to deceive ad networks.
Military AI Tested in Desert E-Bike Race
Imagine a high-stakes, thousand-mile e-bike race through the harsh Baja Desert - that's where a cutting-edge military AI platform is being put to the test. This innovative technology, developed by GDIT and AWS, is designed to revolutionize energy management in challenging environments.
AUKUS Advances Undersea Warfare Capabilities with Joint UUV Project
The AUKUS partnership is turning talk into action with its first signature project: a joint uncrewed undersea vehicle (UUV) initiative to revolutionize undersea warfare capabilities. Britain, Australia, and the US are joining forces to make this vision a reality by 2027.
Hackers Exploit Meta's AI Bot to Hijack Instagram Accounts
This weekend, hackers exploited a vulnerability in Meta's AI-powered customer support tool to hijack high-profile Instagram accounts, highlighting the platform's notoriously poor human support infrastructure. A simple sequence of steps, documented in a video circulated on Telegram, allowed attackers to add a new email address to an account and seize control.
Bayer Overhauls Security Training to Counter AI-Driven Threats
Bayer is revolutionizing its security training to combat AI-driven threats by ditching traditional checklist-driven advice for a psychology-first approach that outsmarts increasingly realistic social engineering tactics. This bold move aims to empower staff and suppliers to safely harness the power of generative AI.
AI-Driven Exploitation Forces New Vulnerability Management Tactics
The threat landscape has changed: vulnerabilities are now being discovered, exploited, and weaponized in a matter of hours, leaving defenders scrambling to keep up. With AI-driven attacks accelerating, it's clear that traditional vulnerability management tactics just aren't fast enough.
Microsoft Softens Stance After Public Feud with 0-Day Researcher
Microsoft has backpedaled in its public feud with a 0-day researcher, easing tensions with the security community after facing criticism for its aggressive stance. The tech giant now explicitly assures that vulnerability hunters are not in its legal crosshairs.
CISA Warns of Actively Exploited Oracle WebLogic Server Vulnerability
The US Cybersecurity and Infrastructure Security Agency (CISA) is sounding the alarm on a highly exploitable Oracle WebLogic Server vulnerability, CVE-2024-21182, that's being actively targeted by threat actors. Over 1,592 vulnerable servers are currently exposed online, making it a pressing concern for organizations to patch up ASAP.
EDR Adoption Falls Short on Cyber Resilience
Many organizations have invested in advanced endpoint detection and response (EDR) platforms, but struggle to turn that visibility into real-world protection, leaving them vulnerable to cyber threats. The harsh reality is that EDR is only as effective as the team's ability to act on its alerts.
Anthropic's Claude chatbot suffers major outage after stock market float
In a major mishap, Anthropic's Claude chatbot crashed in spectacular fashion, experiencing a significant outage that coincided with the company's highly anticipated stock market float. The timing couldn't have been more awkward, undermining the excitement of this key financial milestone.
Google patches actively exploited Android zero-day flaw amid June security updates
Google just patched a high-severity Android flaw that's being actively exploited by hackers, allowing them to gain control of devices running Android 14 or later. The June security update fixes this zero-day vulnerability, along with 123 others, to keep your device safe.
Scammers Spoof Northern Ireland Police Phone Number in Gift Card Scam
Stay vigilant, folks! Scammers are at it again, this time spoofing the Northern Ireland police phone number to trick people into handing over gift cards.
Threat Actor Leverages AI to Craft EDR Evasion Tools
Sophos X-Ops stumbled upon a secret laboratory while investigating a routine endpoint alert, uncovering a trove of AI-powered tools designed to sneak past modern EDR agents. The surprising discovery revealed a sophisticated operation using partly AI-generated Python scripts to craft evasive tools.
Red Hat npm Scope Hijacked to Spread Cloud Credential Malware
In a shocking 72 seconds, an attacker hijacked Red Hat's npm scope to spread malware, publishing 32 malicious packages that racked up nearly 10 million downloads. The sneaky move exploited the trust developers have in Red Hat's official namespace, turning it into a conduit for cloud credential malware.
SideCopy Targets Afghan Finance Ministry with Xeno RAT Malware
Seqrite Labs researchers uncovered a sneaky malware attack, dubbed Operation XENOFISCAL, where the Pakistan-aligned SideCopy group targeted Afghanistan's Ministry of Finance and government officials with a cleverly crafted phishing lure written in Pashto. The attack used Xeno RAT Malware, delivered through a ZIP archive with a malicious LNK file, to infiltrate its targets.
UK Firms Bolster Defenses Against AI-Powered Cyber Attacks
UK organizations are bracing themselves for a perfect storm of cyber threats, with AI-powered attacks topping the list of concerns as the most pressing risk over the next year. In fact, 43% of UK respondents rank AI-powered attacks as their biggest worry, surpassing traditional threats like ransomware and phishing.
Threat Intelligence Fails to Bridge Business Risk Gap
Threat intelligence falls short when it doesn't drive informed decision-making, often leaving a gap between analyst findings and senior leaders' priorities. Silobreaker and the SANS Institute are bridging this gap with a new study that explores how to turn threat intelligence into actionable business risk strategies.
Dashlane Exposes Brute-Force Attack on User Accounts
Dashlane recently alerted a small group of users, fewer than 20, that an external threat actor had launched a brute-force attack on their accounts, attempting to bypass two-factor authentication and gain unauthorized access. The company quickly sprang into action, notifying affected users and taking steps to protect their accounts.
Space Force Launch Plans Unscathed by New Glenn Disaster
Despite the recent setback with Blue Origin's New Glenn heavy lifter explosion, the U.S. Space Force and National Reconnaissance Office are staying the course, reaffirming their commitment to the company. The Space Force has even awarded Blue Origin a new task order for an NRO satellite just hours before the accident.
Turkey Unveils Advanced Electronic Warfare Jet in New Imagery
Turkey has just revealed its game-changing electronic warfare jet, the HAVA SOJ, in stunning new footage - a cutting-edge airborne standoff jammer that can disrupt enemy air defenses and communications from a safe distance. Built on Bombardier Global 6000 airframes, this high-tech aircraft is a powerful asset for Turkey's military.
Air Force Resumes T-38 Flights After Safety Inspections
The Air Force has lifted its grounding of the T-38 fleet, allowing flights to resume after a thorough inspection process ensured the aircraft's safety. This move comes nearly two weeks after a T-38 crash in Mississippi prompted a precautionary pause in flights.
Cybersecurity Threats Target Election Campaign Systems
As the 2026 midterms approach, a new report warns that cybersecurity threats are increasingly targeting the online accounts, platforms, and websites used by election campaigns, donors, and voters, rather than voting machines or ballot-counting systems. This shift in focus allows attackers to exploit vulnerabilities and manipulate public perception with alarming ease and realism.
Northrop Grumman Accelerates Space-Based Missile Defense with Apex Partnership
Northrop Grumman is turbocharging its space-based missile defense capabilities through a game-changing partnership with Apex Space, aiming to deliver on-orbit protection for the homeland by 2027. With successful ground tests already under its belt, the company is poised to rapidly scale up affordable production and take missile defense to new heights.