Tag: emerging threats
8103 articles
CSuite Phishing Targets US Businesses with Dual Microsoft 365, RMM Attacks
US businesses are in the crosshairs of a cunning phishing attack that combines Microsoft 365 session theft with remote-access tool deployment, allowing hackers to turn a single incident into widespread account compromise, fraud, and persistent system access. This dual-threat attack path puts companies at risk of devastating breaches.
AI Coding Agents Leak Internal Company Images on GitHub
Thousands of sensitive internal images from over 300 organizations were accidentally exposed on GitHub by AI coding agents, revealing confidential data like customer billing records and unreleased features. These agents, used by developers to streamline coding, found a workaround to share visual updates - but it ended up making sensitive info public.
ChatGPT Abused to Deliver Trojan Malware via ClickFix Attacks
Beware of a sneaky malware attack that's using ChatGPT and other trusted brands to trick you into downloading Trojan malware via a clever ClickFix scheme. Don't fall for it - no legitimate site will ever ask you to copy and paste a command to prove you're human!
Bitget Breach Exposes Zero-Day Flaw in Third-Party Security Products
A staggering $387.5 million was stolen from Bitget after attackers exploited a zero-day flaw in third-party security products to breach the exchange's wallet environment. This shocking breach highlights the vulnerability of even the most secure systems to unknown threats.
OpenSSL Discloses High-Severity DTLS Flaw That Leaks Heap Memory
A newly discovered OpenSSL flaw, CVE-2026-84782, can cause serious problems, leaking sensitive heap memory or even crashing your program, putting your data at risk. Fortunately, OpenSSL has released fixes to patch this high-severity DTLS vulnerability.
UK Businesses Expose Gaps in Basic Cyber Skills
The UK is facing a wake-up call: over half of its businesses lack confidence in their basic cyber skills, leaving them vulnerable to breaches and slow to recover. This alarming gap in technical abilities affects an estimated 808,000 businesses, a significant jump from 699,000 last year.
Citrix NetScaler Flaw Exploited for Root Access, Web Shell Deployment
Security experts have uncovered a critical Citrix NetScaler flaw, CVE-2026-88772, that's being exploited to gain root access and deploy web shells, with attackers targeting ADC and Gateway appliances worldwide. This severe vulnerability, scoring 9.5 on the CVSS scale, allows for a devastating memory overflow that bypasses authentication and hands over total control.
Apple Fixes Zero-Day Flaw Exploited in Targeted Attacks
Apple just patched a zero-day flaw that let hackers run malicious code on your device - and it's already been used in super-sophisticated attacks on specific targets. Processing a malicious file could give attackers free rein, so update your iOS to stay safe!
UK Rail Police's Facial Recognition Trial Yields Zero Matches
The UK Rail Police's six-month facial recognition trial was a costly and time-consuming effort that yielded a surprising result: zero matches, despite scanning over 500,000 faces. The £320,000 trial, which took up almost 100 hours of officer time, produced just one false positive alert and no arrests.
Citrix NetScaler Flaw Exposes Pre-Auth Path to Shellcode Execution
A critical flaw in Citrix NetScaler appliances, tracked as CVE-2026-88772, has been patched after being exploited in the wild, allowing for remote code execution or denial-of-service attacks. This severe vulnerability, with a CVSS score of 9.5, was caused by a memory overflow in Datagram Transport Layer Security (DTLS) protocol handling.
Spectre Revives: Researchers Expose New JIT Engine Vulnerability
Meet Branch Target Reuse (BTR), a revived Spectre v2 attack that targets JIT engines, allowing hackers to exploit a major vulnerability in many CPUs that use speculative execution. This breakthrough lets attackers siphon sensitive data, like root password hashes, at alarming rates of up to 5.7 KB/sec.
Navy Probes EA-18G Growler Mishap Aboard USS Eisenhower
A dramatic scene unfolded off the Virginia coast on Monday evening when an EA-18G Growler jet experienced an arresting gear failure while attempting to land on the USS Eisenhower, forcing its crew to make an emergency ejection. Fortunately, the pilots were quickly recovered by search-and-rescue teams and returned safely to the ship, with only minor injuries reported among the eight sailors evaluated.
Kiteworks Resumes Operations After Heeding Federal Threat Intel
Kiteworks swiftly responded to credible threat intelligence from federal authorities by temporarily shutting down operations, a move that wasn't taken lightly, and is now safely back online. The precautionary measure was taken to protect customers from a potential imminent threat.
Russia's Jet-Powered Drones Target Ukraine with Increased Speed and Range
Meet the Geran-4, a turbocharged drone capable of screaming over Ukrainian skies at a mind-blowing 450-500 km/h - and sometimes even faster. This jet-powered beast marks a major upgrade from its predecessors, boasting a reinforced structure, improved aerodynamics, and a turbojet engine that packs a serious punch.
Pentagon Tests Drone Industrial Base with Mass Production Push
The Pentagon's push for drone mass production is ramping up the competition, shifting the focus from prototype perfection to factory-scale consistency - a challenge that's proving that producing a capable drone is only half the battle. Producing thousands that perform consistently is where true dominance takes flight.
Dutch Police Apprehend Alleged ShinyHunters Leader
A major blow has been dealt to the notorious ShinyHunters cybercrime group with the arrest of a 24-year-old man in Amsterdam, accused of helping to orchestrate a string of high-profile extortion attacks that have netted at least $70 million since last year. The suspect has been ordered to be detained for 90 days in Rotterdam as authorities continue to crack down on the group's activities.
Boeing Secures $20 Billion F/A-XX Stealth Fighter Contract
Boeing has landed a whopping $20 billion contract to develop the US Navy's next-generation F/A-XX stealth fighter, a game-changing aircraft that will dominate contested airspace. This major award marks a significant milestone in the Pentagon's efforts to maintain peace through strength.
US Army Bolsters Counter-Drone Arsenal with $7 Billion Contracts
The US Army is ramping up its defense against rogue drones with a $7 billion contract haul, aiming to bolster its counter-drone capabilities with cutting-edge sensors, effectors, and command systems. This massive investment will enable the Army to stay ahead of emerging threats and protect its personnel and assets more effectively.
US Integrates AI into Critical Infrastructure to Bolster Cyber Defenses
The US government is ramping up its cyber defenses by deploying AI models across critical infrastructure sectors - and it's working closely with industry partners to make it happen. National Cyber Director Sean Cairncross says the goal is to get these models up and running ASAP to secure systems and safeguard the nation's digital future.
Navy Destroyer Petersen Jr. Confronts Iranian Threats in 40-Day Combat Stint
Meet the Navy's newest destroyer, the Petersen, which just wrapped up a 40-day combat stint against Iranian threats and kept dozens of ships safe from missile and drone attacks. The USS Frank E. Petersen Jr. returned home to a hero's welcome after a 10-month deployment that took it over 85,000 nautical miles and through 45 replenishments at sea.
Microsoft Tracks Russian Hacker Group Star Blizzard's Global Phishing Expansion
Microsoft has uncovered a significant shift in the tactics of Russian hacker group Star Blizzard, which has begun conducting large-scale phishing campaigns in addition to its previous targeted spear-phishing operations. This new approach, observed in 2026, marks a major expansion of the group's phishing activities, with campaigns now sending tens to hundreds of automated emails.
Congress Weighs Risks of Hasty Cuts to Military Leadership Ranks
Defense Secretary Pete Hegseth is shaking up the military's leadership ranks with a plan to slash one-fifth of its general and flag billets, a move that's got everyone on high alert with a January 1 deadline looming. This bold cut follows a series of directives from Hegseth aimed at streamlining the military's top brass.
Pakistan Navy Tests CM-708UNB Anti-Ship Missile from New Submarine
The Pakistan Navy has taken a major leap in its maritime defense capabilities with the successful test-firing of the CM-708UNB anti-ship missile from its state-of-the-art submarine, PNS/M Hangor. This impressive display of firepower was showcased in a video released by the navy, highlighting the country's growing naval prowess.
Australia's Mine Countermeasures Capability Eroding
Australia's ability to tackle sea mines has taken a hit, with its dedicated mine countermeasures force dwindling from six to just two ageing vessels, now barely holding on as a viable defence capability. The Royal Australian Navy has been forced to rely on a skeletal fleet, leaving a gaping gap in its coastal defence strategy.