Tag: emerging threats
8518 articles
Lovable Disputes Data Leak, Shifts Blame to HackerOne
Lovable, a coding platform, is facing scrutiny after a security researcher uncovered a major data leak, exposing users' sensitive information, including credentials, chat history, and source code, to anyone with a free account. The company's shifting explanations have only added fuel to the fire, sparking concerns about its data handling practices.
Tempus AI Sued Over DNA Data Use Without Consent
A health AI company is facing a federal lawsuit in Chicago, accused of using and selling millions of people's DNA data without their consent. The plaintiffs claim that genetic information can't be fully anonymized, putting sensitive personal data at risk.
Lazarus Hackers Orchestrate $290 Million KelpDAO Heist
In a shocking turn of events, the Lazarus hackers struck again, making off with a staggering $290 million from the KelpDAO decentralized finance project in a single weekend heist. But who benefits from this massive theft, and who's left to deal with the devastating aftermath?
Malicious Apps Infiltrate Apple's China Store, Target Crypto Wallets
Scammers have infiltrated Apple's China App Store with 26 fake cryptocurrency wallet apps, cleverly disguised as popular wallets like Metamask and Coinbase, to steal sensitive recovery phrases and drain users' digital assets. These malicious apps put unsuspecting crypto investors at risk of losing their hard-earned money.
AI-Driven Threats Target Hybrid Workplaces with New Sophistication
As the modern workplace becomes increasingly decentralized, organizations face a daunting challenge: protecting their dispersed workforce from sophisticated threats powered by artificial intelligence. Fresh thinking is needed to secure hybrid work environments from these emerging AI-driven threats.
Coast Guard Rule Ramps Up Maritime Cybersecurity Standards
A new Coast Guard rule is set to revolutionize maritime cybersecurity by enforcing stricter standards on operational technology systems at US ports and commercial vessels, turning a long-overdue necessity into a booming market. This regulatory shift comes at a critical time, as global tensions rise and the shipping industry becomes an increasingly attractive target for cyber threats.
Anthropic's Claude Desktop sparks EU consent concerns
Can a single app really reach into your other software without asking for permission? The surprising behavior of Anthropic's Claude Desktop for macOS is raising eyebrows and sparking concerns about consent under EU law.
Gentlemen Ransomware Gang Taps SystemBC for Botnet Attacks
Imagine your business's infrastructure being hijacked and turned into a fleet of malicious proxies - it's a harsh reality that's now hitting home for over 1,570 corporate victims who've fallen prey to the Gentlemen ransomware gang's SystemBC botnet attacks. Their compromised systems are being used to run proxy services for the malware, leaving defenders scrambling to respond.
Agentic AI Compounds Enterprise Identity Risks
As autonomous machines increasingly act, decide, and transact on their own, a pressing question emerges: what constitutes an "identity" within an enterprise, and how can we safeguard against the rising risks? The lines between human and non-human identities are blurring, demanding a fresh look at enterprise security in the age of agentic AI.
SGLang Flaw Enables Remote Code Execution via Malicious Model Files
A single malicious file can become a powerful gateway for attackers to run arbitrary commands on vulnerable machines - and a newly disclosed flaw in SGLang, CVE-2026-5760, reveals just how easily this can happen through specially crafted GGUF model files. This highly severe vulnerability, scoring 9.8 out of 10.0, enables remote code execution on systems that trust it.
Seiko USA Website Defacement Exposes Customer Data Theft Claim
When a corporate website is hijacked like a ransomed storefront, who really owns the sensitive data inside? Seiko USA's recent website defacement has sparked a disturbing claim: hackers say they've stolen customer data and will leak it unless a ransom is paid.
Navy Tests Enhanced JDAM with Jet-Powered Propulsion
Imagine a guided bomb with a built-in engine, capable of transforming the face of modern warfare - that's exactly what the Navy recently tested with its enhanced JDAM, powered by a jet propulsion system. This game-changing technology could revolutionize affordable standoff strike capabilities.
US Carrier Deployments Intensify in Central Command Region
The US military is flexing its naval muscle in a big way, with not one, not two, but three carrier strike groups now deployed to the Central Command region - a significant show of force that's raising eyebrows and sparking questions about the strategic implications. This massive buildup is turning heads, and we're diving into what it means for the region and beyond.
Navy to Finalize F/A-XX Stealth Fighter Pick by August
The Navy is poised to break a years-long stalemate and make a crucial decision on its next-generation F/A-XX stealth fighter by August, bringing an end to what one report called "procurement purgatory." This game-changing aircraft will serve as the future centerpiece of a naval airwing, boasting cutting-edge, sixth-generation stealth technology.
Iran Targets US Radar Systems in Strategic Escalation
Iran's recent targeting of US radar systems marks a strategic escalation in tensions, highlighting the critical role these advanced defense tools play in modern warfare. The stakes are high, with radar systems like THAAD and TPY-2 being crucial for detecting and tracking enemy missiles and aircraft.
GreyNoise Tracks Emerging Edge-Device Vulnerabilities in Network 'Background Noise
Imagine if the hum of internet chatter could predict the next big security threat - GreyNoise researchers have cracked the code, uncovering a pattern in network background noise that signals impending edge-device vulnerabilities. This breakthrough offers defenders a crucial early-warning system to stay ahead of emerging threats.
Axios Breach Underscores Need for AI in Supply Chain Security
A single, sneaky change to a popular open-source software can spread like wildfire, infecting a staggering 100 million weekly downloads across businesses, startups, and government systems - and that's exactly what happened in a recent Axios breach. The lesson is clear: AI is no longer a nice-to-have, but a must-have for safeguarding supply chain security.
AI Models Turbocharge Vulnerability Discovery
Imagine a world where AI models don't just help find software bugs, but actually behave like expert security researchers - that's the reality we're facing, and it's changing the vulnerability discovery game. Frontier AI models are now capable of autonomously discovering zero-day vulnerabilities and speeding up patching processes.
Malicious iOS Apps Expose Crypto Users to FakeWallet Threat
Beware of scammers on the official app store: over 20 fake cryptocurrency wallet apps were recently discovered on the Apple App Store, masquerading as legit software to steal user credentials and secrets. These malicious apps, dubbed FakeWallet, put unsuspecting crypto users at risk of losing their digital assets.
Scotland's Scattered Spider Affiliate Pleads Guilty in US Cryptocurrency Heist
A Scottish affiliate of the notorious Scattered Spider cybercrime crew has pleaded guilty in the US to stealing at least $8 million in cryptocurrency through a cunning phishing and SIM-swap scheme. This guilty plea raises a pressing question: what can $8 million buy in the shadowy world of digital theft?
NSA Taps Blacklisted AI Model Claude Mythos
The National Security Agency's reported use of Claude Mythos, a tool blacklisted by the Pentagon, raises eyebrows and tough questions about risk management and operational necessity. What's behind this apparent disconnect between two US security agencies?
Misconfiguration Exposes Azure AI Agent to Unauthorized Access
A single misconfiguration in Microsoft's Azure SRE Agent turned a troubleshooting tool into a live wiretap, potentially allowing outsiders to intercept sensitive conversations, commands, and credentials from other companies in real time. This alarming security flaw may have left organizations vulnerable to unauthorized access, with no digital trail to detect the breach.
Vercel Breach Exposes Customer Data Theft via AI Tool Compromise
A single compromised AI tool has led to a massive breach at Vercel, exposing customer data and raising serious questions about trust and security. An attacker exploited a third-party AI tool used by an employee to steal sensitive credentials and OAuth tokens, gaining access to multiple services and customer data.
Vercel Breach Traced to Compromised AI Tool
A recent Vercel breach highlights a growing concern: what happens when AI tools, meant to boost efficiency, become the weakest link in our security chain? The breach was traced back to a third-party AI tool used by an employee, blurring the lines between human error and machine vulnerability.