Tag: emerging threats
8407 articles
Google API Keys Remain Usable for 23 Minutes After Deletion
Deleting a Google API key doesn't mean it's immediately useless to hackers - in fact, our experiments show it can remain active for up to 23 minutes, allowing attackers to continue misusing it even after you've tried to revoke access.
HackerOne Slashes Bug Bounty Rewards Amid AI-Driven Report Surge
HackerOne's Internet Bug Bounty program has slashed payouts, with medium-severity vulnerabilities now earning just $297, down from $1,843, and critical ones fetching $2,257, down from $9,250. The program is currently on pause as the company retools its rewards structure.
Google Exposes Unfixed Chromium Flaw Details
A security researcher just blew the whistle on a glaring Chromium flaw that Google thought was fixed - but still works, putting tens of thousands of users at risk of a botnet attack. The exploit, first reported in 2022, allows malicious websites to remotely execute JavaScript on unsuspecting devices.
Europol Disrupts Major Cybercrime VPN Service
Europol's bold operation has taken down a notorious VPN service used by cybercriminals to hide their tracks, seizing key infrastructure and sowing disruption among ransomware operators, fraudsters, and data thieves. This major win for cybersecurity could lead to further investigations and prosecutions, thanks to the treasure trove of data on thousands of threat actors.
GitHub Breach Exposes 3800 Repositories via Poisoned VS Code Extension
A malicious Visual Studio Code extension, Nx Console, was briefly listed on official registries and used to breach GitHub, exposing approximately 3,800 internal repositories to unauthorized access. The popular extension, with 2.2 million installs, was compromised for just 18 minutes, but long enough to cause significant damage.
Apple Foils $11 Billion in App Store Fraud Over Six Years
Apple's vigilant efforts have paid off, blocking a whopping $11 billion in App Store fraud over the past six years, with a staggering $2.2 billion foiled in 2025 alone. The tech giant's winning combination of human review and cutting-edge tech has kept scammers at bay.
World Cup Scams Target Security Leaders with AI-Driven Threats
As the 2026 World Cup approaches, security leaders are on high alert for AI-driven scams that could compromise corporate devices and accounts, especially when employees use them for personal activities like hunting for tickets or booking travel. Even personal emails can become a threat vector, making effective cybersecurity planning more crucial than ever.
Linux Malware Showboat Targets Telecom with SOCKS5 Proxy Backdoor
Meet Showboat, a sneaky Linux malware that's targeting telecom systems with its powerful SOCKS5 proxy backdoor, allowing hackers to spawn remote shells, transfer files, and carry out covert operations. This modular menace can quietly infiltrate and take control, making it a major threat to Linux systems.
Cisco Secure Workload Flaw Exposes Site Admin Privileges
A critical vulnerability in Cisco Secure Workload, known as CVE-2026-20223, allows hackers to gain Site Admin privileges without authentication, putting sensitive information and configuration changes at risk. Cisco has warned of this maximum-severity flaw and advised on remediation steps.
Ukraine Expands Drone Wall with Deeper Strikes into Russia
Ukraine's defense minister, Mykhailo Fedorov, reveals a major escalation in their drone warfare capabilities, with a record number of mid-range strike systems contracted to strike deeper into Russia. This expansion of the "kill zone" now reaches up to 200km, disrupting Russian forces' massing, logistics, and headquarters operations.
Chinese hackers infiltrate telcos with Showboat, JFMBackdoor malware
Chinese-aligned hackers have been secretly infiltrating telecommunications providers across Asia Pacific and the Middle East since mid-2022, using sneaky malware like Showboat and JFMBackdoor to stay under the radar. They even used a clever "hide" command to conceal their digital footprints on infected machines.
US Special Ops Head Warns on AI Battlefield Integration
The head of US Special Ops, Adm. Frank Bradley, is urging caution when it comes to integrating AI into combat operations, emphasizing the need for a reality check to ensure the technology is used effectively and safely. He acknowledges AI's potential to boost efficiency, but notes that true AI on the battlefield is still a future possibility.
Australia, India Confront Online Youth Radicalisation
As online gaming and social media continue to shape young minds, Australia and India are taking bold steps to combat the growing threat of online youth radicalisation - with Australia investing A$74 million in a Counter Terrorism Online Centre and India passing the Promotion and Regulation of Online Gaming Act. Their differing approaches offer a unique opportunity to compare and learn from each other's strategies to safeguard young people.
Cyber Confidence Erodes as Readiness Paradox Grows
Most organizations claim they're confident in their ability to tackle cyberwarfare and AI-driven threats, but their actions tell a different story - with many admitting to lacking the budget and resources to back up their boasts. This alarming gap between confidence and capability is what we call the Cyber Readiness Paradox.
Drones Adopt 3D Mapping to Navigate GPS-Denied Zones
As adversaries ramp up electronic warfare against GPS signals, drones are turning to 3D mapping to stay on course, even in zones where GPS is denied. This game-changing tech helps drones determine their exact position, ensuring they can navigate with precision, no matter what.
Linux Rootkits Persist in Updated Forms
A single misstep with an over-privileged or poorly designed agent can quickly spiral into a serious incident, making the UK National Cyber Security Centre's warning feel alarmingly relevant. This urgency was underscored at Pwn2Own Berlin, where researchers exploited 47 zero-day flaws, raking in over $1.2 million in rewards.
Crypto Drainers Evolve Into Sophisticated Service Platforms
Meet the modern Drainer-as-a-Service model, where affiliates supply victims through phishing links and fake websites, while the service handles the technical heavy lifting, including signatures, approvals, and token transfers, with operators taking a 20% commission from successful scams. This sophisticated platform is a far cry from ad-hoc phishing, with a business model that's both lucrative and alarmingly efficient.
Attackers Expose Plaintext Passwords of 46k Myspace Users
A shocking data breach has exposed the plaintext passwords of 46,000 Myspace users, putting their online security at risk. This alarming leak, linked to a 2021 security incident, also reveals email addresses and other sensitive credentials.
Vulnerability Exploitation Surpasses Credentials as Top Breach Entry Point
The latest Verizon Data Breach Investigations Report reveals a significant shift in how breaches occur: vulnerability exploitation now accounts for 31% of breaches, surpassing stolen credentials as the top entry point for hackers. Ransomware remains a major threat, involved in nearly half of all breaches.
Law Enforcement Disrupts First VPN Service Tied to Ransomware Attacks
In a major cybercrime crackdown, law enforcement agencies have dismantled a notorious VPN service used by ransomware attackers, seizing 33 servers and taking its domains offline in a coordinated operation across 27 countries. The takedown of First VPN, a so-called "no-logs" provider, has dealt a significant blow to threat actors behind ransomware and data theft campaigns.
Vulnerable Code Proliferates as AI Exploits Rise in Supply Chains
The alarming truth is that 75% of organizations are knowingly shipping vulnerable code, despite the risks, with the window from disclosure to exploit shrinking dramatically from 840 days in 2018 to just under two days today. This trend is expected to accelerate, with exploits potentially available in as little as one minute by 2028.
Microsoft Discloses Actively Exploited Defender Vulnerabilities
Microsoft warns of two critical vulnerabilities in its Defender software, one of which is being actively exploited by attackers to gain elevated privileges, and the other causing denial-of-service issues. These flaws, tracked as CVE-2026-41091 and CVE-2026-45498, highlight the need for urgent patching to prevent system compromise.
Linux Flaw Exposes SSH Keys, Password Hashes
A critical nine-year-old flaw in the Linux kernel, known as CVE-2026-46333, allows everyday users to access highly sensitive data, including SSH private keys and system password hashes, on popular Linux distributions. Fortunately, patches and updates are available to fix this vulnerability.
Cisco Exposes New Zero-Auth Vulnerability in Secure Workload Platform
Cisco has uncovered a critical zero-auth vulnerability in its Secure Workload platform, allowing attackers to access sensitive information and make configuration changes with alarming ease and admin-level privileges. This severe flaw, scoring a perfect 10.0 on the CVSS scale, demands immediate attention to prevent exploitation.