Tag: emerging threats
8408 articles
Cisco Exposes New Zero-Auth Vulnerability in Secure Workload Platform
Cisco has uncovered a critical zero-auth vulnerability in its Secure Workload platform, allowing attackers to access sensitive information and make configuration changes with alarming ease and admin-level privileges. This severe flaw, scoring a perfect 10.0 on the CVSS scale, demands immediate attention to prevent exploitation.
Identity Exposures Form Highways for Cyber Attacks
A single compromised identity can become a superhighway for cyber attacks, giving hackers access to nearly every critical workload a business relies on - as seen in a recent incident where a cached AWS access key on one Windows machine put 98% of the company's cloud environment at risk. Identity has become the ultimate attack path, carrying with it a multitude of permissions just waiting to be exploited.
Microsoft Bolsters AI Safety with RAMPART and Clarity Tools
Microsoft is taking a major leap forward in AI safety with the launch of RAMPART, an open-source tool that automates red-teaming for agentic AI applications, helping to prevent real-world attacks like prompt injection. By integrating RAMPART into its CI/CD pipelines, Microsoft is turning AI safety from a philosophy into a practical engineering discipline.
Linux Flaw Enables Root Command Execution on Major Distros
A newly discovered Linux flaw, tracked as CVE-2026-46333, allows hackers to easily gain root access on major distributions, putting countless systems at risk. This nine-year-old vulnerability, just recently exposed, is a wake-up call for Linux users everywhere.
Grafana Breach Exposed by TanStack Supply Chain Attack
Grafana Labs revealed that a supply chain attack led to an unauthorized download of its codebase, exposing a vulnerability that allowed attackers to gain access to its GitHub repositories through a missed workflow token. The breach was detected on May 11, with the company swiftly rotating tokens, but unfortunately, one was overlooked.
Microsoft Disrupts Zero-Day Attacks with Defender Patch Rollout
Microsoft is taking swift action to protect its users from zero-day attacks with an emergency patch rollout for its Defender software, ensuring that even the most vulnerable systems are safeguarded. The update addresses two critical vulnerabilities that were being actively exploited by hackers.
GitHub Breach Exposes 3,800 Repos to TanStack Supply-Chain Attack
A single malicious Visual Studio Code extension, Nx Console version 18.95.0, was enough to spark a GitHub breach that exposed 3,800 internal repositories to a TanStack supply-chain attack. The poisoned extension was live on marketplaces for just 54 minutes, but long enough to steal credentials from a developer's machine.
Inactive User Account Enables Hackers to Control City's Water System
A simple mistake of leaving a former employee's user account active allowed hackers to take control of a city's water system, highlighting the importance of promptly disabling access for departed staff. This "zombie" account proved to be the vulnerable entry point that attackers exploited to wreak havoc on municipal operations.
GitHub Breach Exposes 3,800 Repositories via Malicious VS Code Extension
GitHub's security chief confirms that customer data remains safe, with no evidence of impact outside of GitHub's internal repositories. The breach originated from a poisoned VS Code extension installed on a compromised employee device, allowing attackers to steal credentials.
Turkey Advances Naval Hürjet for MUGEM Aircraft Carrier
Türkiye is taking a major leap forward with its indigenous aircraft carrier, MUGEM, by developing a carrier-capable version of the Hürjet, a high-performance jet that will need to withstand the intense demands of naval landings. Turkish Aerospace Industries has officially kicked off the Naval Hürjet programme, marking a significant milestone in the country's naval aviation ambitions.
US Military Seeks Replacement for Aging C-146 Special Ops Transport Plane
The US Military is on the hunt for a next-generation transport plane to replace its aging C-146 Wolfhound, as the current fleet faces sustainment and range limitations despite being battle-proven. A successor is needed to keep special ops missions flying high.
US Navy Deploys Laser-Armed Destroyers
The US Navy is taking a giant leap into the future of warfare with nine cutting-edge destroyers equipped with powerful laser weapons, poised to revolutionize the battlefield. Currently, two of these laser-armed destroyers, USS Spruance and USS John Finn, are on combat deployments in the Indian Ocean, supporting ongoing operations.
US, Ukraine Forge Drone Tech Pact for Joint Ventures
The US and Ukraine are joining forces to revolutionize drone technology, with a new pact that will bring Ukrainian innovation to American soil through joint ventures and tech transfers. This game-changing partnership is set to supercharge the US defense supply chain with cutting-edge drone tech.
Congress Scrutinizes Nuclear Cruise Missile Funding
The National Nuclear Security Administration is ramping up production of nuclear warheads, including crucial components for a sea-launched cruise missile with nuclear capabilities, sparking concern from a prominent Congressional leader. This development has raised eyebrows on Capitol Hill, where lawmakers are now scrutinizing the project's funding.
Pakistan Army Aviation Corps Struggles to Take Off
The Pakistan Army Aviation Corps is struggling to modernize, with its Puma transport fleet aging 40-50 years and a severe lack of new helicopters since the mid-2010s. Despite the Pakistan Army's investments in cutting-edge tech, the Corps' needs keep getting deferred, leaving it stuck in a cycle of decline.
Pentagon CTO Pushes Faster Tech Buying Process for Vendors
The Pentagon's CTO is shaking up the tech buying process, aiming for faster decisions for vendors - think "fast yeses and fast nos" to get small companies in and out quickly, avoiding years of uncertainty. This streamlined approach will create a single, efficient entry point for companies to showcase their tech.
China's CM-302 Missile Expands Global Footprint
Meet the CM-302, a game-changing Chinese export missile that's redefining regional anti-ship defenses with its blistering Mach 2.5-3 speed, 280 km range, and 250 kg warhead. Its cutting-edge design and advanced propulsion system make it a formidable opponent, compressing defenders' decision windows like never before.
GitHub Discloses Breach from Poisoned VS Code Extension
GitHub swiftly detected and contained a security breach that originated from a tainted Visual Studio Code extension, taking immediate action to remove the malicious version and isolate the affected endpoint. The breach appears to be limited to GitHub's internal repositories, with the company rotating critical secrets and conducting a thorough investigation.
China's CM-400AKG Missile Exposes Air Defence Vulnerabilities
Meet the CM-400AKG, dubbed the "aircraft carrier killer" by Pakistan Air Force officials, a game-changing missile that combines the best of cruise and guided rocket technology to deliver a devastating blow. This solid-fuel, air-launched powerhouse reaches its peak velocity in a heart-stopping, steep terminal dive, redefining the rules of air defence.
Microsoft Unveils AI-Powered Red Teaming Tools to Bolster Software Security
Microsoft is shifting the conversation around AI safety from philosophical debates to hands-on action, empowering developers to build more secure software with innovative tools. With the launch of Rampart, a cutting-edge red-teaming tool, the company is putting AI-powered security into practice, helping developers proactively identify and fix vulnerabilities.
Space Force Eyes New Launch Site to Ease Congestion
The US Space Force is scouting a new launch site to alleviate congestion and support the growing demand for heavy and super heavy rocket launches. This move comes after a recent study concluded that an additional launch site is likely needed to keep up with launch demands.
Air Force Eyes F-35s, F-15s for Combat Search and Rescue Role
As the A-10 Thunderbolt II retires, the Air Force is eyeing alternative aircraft, including F-35s and F-15s, to take on the critical combat search and rescue role. Gen. Kenneth Wilsbach told lawmakers that these platforms will make the mission a core part of their operations.
Federal Agencies Face New Security Tests in AI Procurement
When it comes to AI procurement, federal agencies must prioritize cybersecurity over speed to avoid potentially disastrous consequences, especially when AI systems are tied to critical infrastructure. Compromising on security can have far-reaching and devastating impacts.
Measuring AI Security Effectiveness Proves Elusive
Measuring AI security effectiveness is a complex challenge that can't be reduced to a single score or benchmark. Relying on benchmarks alone simply doesn't work when it comes to safeguarding AI systems.