Tag: emerging threats
8097 articles
Cyber Threats Explosively Target Critical Infrastructure
In today's digital age, cyber threats have become a pressing national security concern, with adversaries able to bypass traditional borders and wreak havoc with just a few keystrokes. The lines between cybersecurity and strategic warfare have blurred, making it imperative to treat digital threats as a matter of national strategy.
China-linked group targets US AI policy experts with phishing campaign
A cunning phishing campaign impersonated top US AI policy voices, including a former White House science advisor and a renowned economist, to gain the trust of targeted experts. The attackers carefully crafted initial messages that seemed to invite recipients into an AI policy advisory committee or a report collaboration, slowly building a relationship before making their next move.
AI Reshapes Cyberattack Landscape With Automated Vulnerability Discovery
A shocking 543,699 valid credentials were left exposed in public GitHub repositories, putting companies at risk - and the oldest one has been lingering since 2009. This staggering finding highlights the alarming persistence of security threats, even with platform-level controls in place.
Police Disrupt KillSec Ransomware Group, Arrest Suspects Worldwide
In a major cybercrime crackdown, international law enforcement agencies joined forces to dismantle the notorious KillSec Ransomware Group, arresting suspects and seizing key servers, domains, and cryptocurrency wallets. The operation resulted in a massive haul of at least 110 terabytes of data, dealing a significant blow to the group's extortion campaign.
EU's China Tech Policy Gaps Expose Security Risks
The EU's 5G security framework is woefully underimplemented, with only a third of member states having taken action, leaving the bloc vulnerable to security risks from Chinese vendors. A unified risk-assessment approach is urgently needed to safeguard the EU's digital future.
AI Executives Sign Accord Amid Rising Cybersecurity Concerns
In a landmark move, President Donald Trump and top AI executives from OpenAI, Anthropic, Google, Meta, Nvidia, and xAI have signed a voluntary safety accord, pledging to enact multiple layers of controls to tackle rising cybersecurity concerns. This non-binding agreement, described as "morally binding" and "almost like a constitution," aims to prioritize safety and security in AI development.
China-Aligned Spies Target AI Policy Experts in Sophisticated Phishing Campaigns
In a sophisticated phishing scam, a China-aligned group impersonated top US officials, including a former White House science advisor, to target AI policy experts in July 2026. The attackers used fake emails to trick their victims into divulging sensitive information.
AI Agents Expose New Cybersecurity Risks
As we enter a new era of cybersecurity, CISA warns that AI is supercharging hackers, allowing them to exploit vulnerabilities at lightning speed and putting our country and economy in the crosshairs. It's time for organizations to adapt to this new wave of faster, smarter threats.
MI5 Warns UK Academics of Unwitting Aid to Chinese Espionage Efforts
MI5 warns UK academics to be vigilant, as their research may be inadvertently aiding Chinese espionage efforts that threaten national security. The China General Technology Research Institute has been identified as a key player, using academic funding to boost China's Ministry of State Security's technical espionage capabilities.
China-Linked Hackers Impersonate AI Experts to Steal US Policy Insiders' Credentials
Beware of fake AI experts trying to trick US policy insiders into handing over their credentials - a China-linked hacker group, TA419, has been impersonating AI authorities to steal sensitive information since at least April 2025. Verify unexpected messages from supposed AI experts through another channel to stay safe.
Law Enforcement Disrupts KillSec Ransomware Gang Led by Teenager
In a major breakthrough, international authorities have successfully disrupted the notorious KillSec Ransomware Gang, led by a teenager, in a coordinated effort dubbed Operation KillSwitch. The operation, backed by Europol and cybersecurity experts, has taken down the gang's servers, dark-web leak site, and seized a staggering 110 terabytes of stolen data.
Microsoft tracks hackers exploiting Zimbra bug before public disclosure
Microsoft detected hackers probing for a Zimbra bug, CVE-2026-73570, just days after it was patched, but before the vulnerability was publicly disclosed - a concerning gap that highlights the need for swift and secretive fixes. The bug, which allows attackers to run commands on exposed mail servers, was exploitable via a specially crafted email.
WordPress Backdoor Persists Through Self-Healing Mechanisms
Meet the sneaky WordPress backdoor that refuses to be erased, thanks to its cunning self-healing mechanisms that spread its payload across eight files, the database, and shared memory. This clever malware can rebuild itself from any surviving copy, making it a formidable foe for security experts.
Cisco SD-WAN Zero-Day Exploited in Active Attacks
Cisco is urging customers to upgrade to a fixed software release after a critical zero-day vulnerability in its Catalyst SD-WAN Manager was exploited in active attacks, allowing unauthenticated remote attackers to gain admin-level access. The company has patched the flaw, rated 9.8 in severity, and advises swift action to prevent further breaches.
Kiteworks Fixes Code Injection Flaw in Email Protection Gateway
Kiteworks has patched a critical vulnerability in its Email Protection Gateway that could have allowed hackers to take full control of the system, and it's essential to update your software ASAP to avoid potential threats. This max-severity flaw, tracked as CVE-2026-54154, could be exploited through low-complexity attacks that require no user interaction.
Zero Trust Vulnerable to Onboarding Attacks
The often-overlooked onboarding process is a glaring weak spot in Zero Trust security, leaving companies vulnerable to attacks that exploit the "Day One window" when new hires are first brought into the environment. Stolen credentials, involved in nearly 45% of breaches, can easily be stolen during this chaotic period when service desk agents are busy activating accounts and issuing initial credentials.
CloudSyncD Backdoor Exploits Zoom Installer to Infiltrate MacOS Systems
Meet CloudSyncD, a sneaky backdoor that's exploiting the Zoom installer to secretly infiltrate MacOS systems. This cleverly disguised malware can masquerade as a legitimate Zoom installer, putting your system at risk.
Law Firm's CISO Exposes Weakness with Laughable Password
A law firm's chief information security officer inadvertently exposed a shocking security gap when he loudly questioned why his password, "r3@lg00dp@$$w0rd", was displayed on the screen. The incident revealed a larger problem that started with unpatched Windows servers and ended with a laughable password.
Financial Firms' Software Supply Chain Vulnerability Backlog Reaches Crisis Point
The financial services sector is facing a crisis point as a massive backlog of software supply chain vulnerabilities has finally caught up with it, with exploitation now overtaking phishing as the top breach threat. For years, firms tolerated this risk due to legacy systems, regulatory pressures, and the need for ultra-reliability, but attackers have changed the game.
CISA Flags Exploited Cisco SD-WAN Flaw
A critical vulnerability in Cisco SD-WAN Manager, known as CVE-2026-76504, has been flagged by CISA and is being actively exploited, allowing hackers to gain admin-level access with a CVSS score of 9.8. This hex encoding flaw could let unauthenticated attackers remotely access and control affected systems.
OpenAI Disrupts AI Model Extraction Campaign Tied to Moonshot AI
OpenAI successfully foiled a large-scale attempt to illicitly extract sensitive information from its AI models, thwarting a sophisticated campaign that involved over 15,000 users and nearly 16,000 attempted requests. Fortunately, no sensitive data was compromised, thanks to robust security measures that prevented encryption breaches, database hacks, or unauthorized access to user conversations.
England's Schools Bolster Cyber Resilience
England's secondary schools are getting better at fending off cyber threats, with a significant drop in reported incidents - but the real test is in recovering quickly when attacks do happen. A recent Ofqual survey shows 27% of schools reported a cybersecurity incident in 2025/26, down from 34% in 2023/24.
Cybersecurity Leaders Struggle to Address AI Threats
A whopping 52% of business and tech leaders admit they are unprepared to tackle adversarial AI threats, citing it as their biggest cyber-preparedness gap. This alarming gap highlights the pressing need for organizations to bolster their defenses against AI-driven attacks.
Pentagon Data Breach Exposes 3 Million Personnel Records
Millions of military personnel are being notified that their sensitive data was compromised when hackers breached the Pentagon's human resources management system, putting their personal information at risk. The breach has prompted an immediate response from the Defense Manpower Data Center to assess and enhance its cybersecurity measures.