Tag: emerging threats
8478 articles
Linux Flaw Exposes Major Distros to Root Access
Meet CVE-2026-31431, aka "Copy Fail," a newly discovered Linux flaw that leaves major distros vulnerable to root access - and it's surprisingly easy to exploit, affecting a wide range of systems from 2017 to 2026.
GitHub Facades Used to Disguise EtherRAT Malware Distribution
Malicious actors have been using 44 cleverly disguised GitHub facades to spread EtherRAT malware, masquerading as legitimate admin and dev tools between December 2025 and April 2026. These fake repositories were designed to manipulate search results, leading victims to download a malicious MSI installer hidden in a second, secret GitHub account.
UK Education Sector Sees Sharp Rise in Cyber Breaches
UK higher education institutions are under cyber attack, with a staggering 98% reporting breaches in the past year - a sharp jump from 91% the year before. This near-universal vulnerability raises serious concerns about the sector's online security.
Python Backdoor Exploits Tunneling Service to Harvest Browser, Cloud Credentials
Meet DEEP#DOOR, a sneaky Python-based backdoor framework that's harvesting browser and cloud credentials by exploiting a tunneling service, and learn how it infiltrates systems through a clever sequence of stealthy steps. This sophisticated threat starts with a simple batch script that disables Windows security controls and ends with a fully featured Remote Access Trojan (RAT).
Phishing Exploits Persist, Breaching Half of UK Businesses
Phishing attacks remain a major threat, with nearly half of UK businesses falling victim to these scams in the past year, and a staggering 85% of breaches involving phishing as the primary entry point. These attacks often rely on human error, using tactics like impersonation emails and fake logins to trick staff into handing over sensitive information.
cPanel Bug Exploited in Wild as Zero-Day Before Patch Release
A cPanel bug, tracked as CVE-2026-41940, was exploited in the wild as a zero-day vulnerability before a patch was released, with attackers making execution attempts as early as February 23, 2026. The flaw forced vendors and hosting providers into emergency mitigation, with cPanel finally releasing a fix on April 28, 2026.
Global Operation Disrupts Crypto Scam Centers, Arrests 276 Suspects
In a major crackdown on crypto scams, a global operation led by Dubai Police has arrested 276 suspects and shut down nine fraudulent investment centers, dealing a significant blow to scammers who thought they were safe from law enforcement. This coordinated effort with US, Chinese, and Thai authorities has brought global justice to victims of these crimes.
Novel Chinese Spy Group Infiltrates Critical Networks in Poland, Asia
A recent investigation by TrendAI has uncovered a concerning China-linked espionage campaign, with a novel spy group infiltrating over a dozen critical networks across Poland and Asia, leaving behind a lingering threat that's experts' biggest worry. The threat group, tracked as Shadow-Earth-053, has been actively compromising networks since December 2024.
cPanel Vulnerability Exposes Millions of Domains to Root Access Attacks
A critical cPanel vulnerability, rated 9.8 under CVSS, has been discovered, allowing attackers to craft a simple sequence of requests to bypass authentication and gain root access to servers, putting millions of domains at risk. Emergency patches are available to fix this gaping security flaw.
Europol Disrupts Albanian Investment Fraud Ring
In a major crackdown on investment scams, Europol and international authorities have dismantled a sophisticated Albanian investment fraud ring, arresting 10 suspects and seizing nearly €900,000 and 443 computers. The alleged scammers are accused of swindling victims out of at least €50m through their professionalized operation.
UK Clears £6B Ajax Armored Vehicle for Duty Despite Troop Injuries
The UK Ministry of Defence has cleared the £6B Ajax armored vehicle for duty, despite reports of troop injuries, with Minister Luke Pollard emphasizing that the safety of personnel is non-negotiable. The move comes after investigators failed to pinpoint a single cause for the symptoms experienced by crews during a recent military exercise.
Cyber Risks Expose Organizations to Increased Threats
Organizations are facing a harsh reality: understanding cyber risk is only half the battle, as the real challenge lies in responding effectively when a threat strikes. Marsh's 2026 People Risks report reveals that cyber-related challenges, including cyber-threat literacy, top the list of people risks, ahead of technological change and skills shortages.
Linux Flaw Enables Unprivileged Root Access on Major Distributions
A newly discovered Linux flaw, dubbed "Copy Fail," allows unprivileged users to gain root access on major distributions by exploiting a logic error in the kernel's cryptographic subsystem. This high-severity vulnerability, tracked as CVE-2026-31431, poses a significant threat to Linux systems, enabling attackers to write controlled bytes into the page cache of readable files and escalate privileges.
Fintech Firm Exposes Database Credentials in Shared Spreadsheet
A fintech firm's most sensitive secrets were left exposed in a shared spreadsheet, with a password that was embarrassingly simple - literally a combination of the company's name and the year. The shocking discovery was made by Stanislav Kazanov during a routine compliance audit, when he stumbled upon a widely accessible SharePoint folder containing a file ominously titled Prod_DB_Root_Creds_DO_NOT_SHARE.xlsx.
Google Fixes Critical Gemini CLI Flaw Enabling Remote Code Execution
Google patched a critical flaw in Gemini CLI that allowed hackers to inject malicious code and take control of host systems, thanks to a report from Novee Security. The vulnerability, scoring a perfect 10.0 on the CVSS scale, has been fixed in recent updates to the @google/gemini-cli and google-github-actions/run-gemini-cli packages.
US Space Command Foregoes FY27 Funding Wish List
US Space Command is taking a strategic approach to its funding priorities, opting out of submitting an Unfunded Priority List for FY27 since its top needs are already covered in the President's Budget request. This decision follows extensive collaboration with the Department of Defense and the services to secure a generational investment in space capabilities.
US Marines Explore Theater Ballistic Missile Defense Amid Army Capacity Concerns
The US Marines are proactively exploring the need for theater ballistic missile defense capabilities, with Lt. Col. Robert Barclay revealing that studies and simulations are underway to determine if this is a crucial requirement for the service's future.
Marines Deploy Light Loitering Munition in June
Get ready for a game-changer on the battlefield: the Marine Corps is set to deploy its Light Loitering Munition in June, marking a major milestone with the delivery of live warheads to operational units. This cutting-edge Organic Precision Fires system is the result of rigorous testing and training, and is poised to revolutionize the Marines' firepower capabilities.
US Marine General Warns China Now a Peer Military Rival
The US Marine Corps' top strategist, Lt. Gen. Stephen Sklenka, just issued a stark warning: China has emerged as a peer military rival, matching the US in nearly every measure of national influence. This bold declaration signals a major shift in the global balance of power.
Pentagon Pegs $25 Billion Cost for Two-Month Iran Operation
The Pentagon is estimating a staggering $25 billion price tag for a two-month military operation against Iran, with munitions making up the bulk of the costs. This eye-watering figure was revealed to a skeptical Congress as the Pentagon prepares a supplemental budget request.
Pentagon's Iran War Spending Hits $25 Billion in 60 Days
The Pentagon has burned through a staggering $25 billion in just 60 days of operations against Iran, a jaw-dropping figure that highlights the intense military efforts in the region. This massive outlay has prompted the administration to prepare a supplemental budget request to Congress to cover the costs of munitions and operations.
Space Force Bolsters Satellite Defenses with Radar Warning Contracts
The US Space Force is taking satellite defenses to the next level with $3 million contracts awarded to three innovative companies to develop cutting-edge radar warning receivers. These game-changing sensors will empower the Space Force to detect whether their satellites are being tracked or targeted, ensuring a critical edge in space awareness.
Quad Nations Urged to Share Critical-Mineral Intel
As China tightens its grip on rare earth elements, the US and its allies are racing to secure critical mineral supplies, but there's a glaring gap in their knowledge of global mineral flows. Can the Quad nations bridge this gap by sharing intelligence and turning cooperation into action?
Israel Deploys Anti-Drone Netting to Counter Hezbollah Threat
Israel is fighting back against Hezbollah's drone threat with a surprisingly simple solution: anti-drone netting that looks like a soccer goal, draped over its combat vehicles to shield them from devastating strikes. This low-tech innovation comes as FPV drone attacks from Lebanon have been launched from as far as 15 kilometers away.