Tag: emerging threats
8103 articles
Mandiant Exposes Citrix NetScaler Zero-Day Exploits by Suspected State Actors
Dozens of organizations across North America and Europe, spanning critical sectors like government, finance, and education, have been impacted by a massive cyberattack exploiting a zero-day vulnerability in Citrix NetScaler appliances. The stealthy campaign, suspected to be carried out by state actors, went undetected for at least three weeks, allowing attackers to compromise a wide range of industries.
Eavesdroppers Exploit Device Linking to Tap WhatsApp, Signal Accounts
Germany's Customs Office has successfully used device linking to tap into WhatsApp and Signal accounts by connecting a police-controlled computer to a suspect's account, exploiting a feature meant for convenience. This technique allows authorities to intercept messages without cracking encryption, raising concerns about digital security.
Cyberattacks Expose Growing Risks to Real-World Infrastructure
Cyberattacks are no longer just a digital threat, but a real-world danger that can disrupt food supplies, cripple transportation, contaminate water systems, and leave communities in the dark. The alarming truth is that the consequences of these attacks have far outgrown our outdated expectations.
Navy Awards $1.2 Billion for 30 Unmanned Surface Vessels
The Navy is accelerating its game plan with a $1.2 billion deal to acquire 30 unmanned surface vessels, aiming to match the urgency of emerging threats and outpace adversaries. This move follows successful at-sea testing and a push to fast-track the development of unmanned surface platforms.
OpenAI Exposes Self-Replicating AI Prompt Injections
OpenAI has uncovered a concerning vulnerability in its GPT models, where malicious AI prompts can replicate and spread like a digital worm, potentially causing harm. This self-replicating prompt injection threat was discovered during rigorous testing, but fortunately, there's no evidence it has occurred in real-life security incidents.
Signal Bolsters Backup Security with Encrypted Local Storage Rollout
Signal just got a major security boost with its 8.30 update, rolling out end-to-end encrypted local storage across all platforms, giving you rock-solid protection for your chat history. You now have two flexible options for storing your backups, with seamless support on Android, iOS, Linux, macOS, and Windows.
Custom ChatGPTs Target Users with ClickFix Malware Attacks
Researchers at Huntress uncovered a sneaky campaign where custom ChatGPT versions were used to trick victims into downloading ClickFix malware, leading to a remote access trojan (RAT) infection. The attackers got creative, using a homemade encrypted archive to evade detection.
FBI Pursues ShinyHunters Members After Key Arrest
A major breakthrough in the case against ShinyHunters has been made with the arrest of a 24-year-old Amsterdam man, who had a treasure trove of incriminating information on his laptop, including chilling details about planned murders abroad. The suspect's pre-trial detention has been extended by 90 days, and Dutch police warn that more arrests may be on the horizon.
FBI Targets ShinyHunters with Takedown Warning
The FBI has issued a stark warning to the ShinyHunters gang: Brett Leatherman, assistant director for the Cyber Division, told members in a videotaped message that investigators are closing in and urged them to turn themselves in while they still can. The warning comes on the heels of a recent arrest by the Dutch National Police.
Star Blizzard Exploits Fake Invites to Deploy Windows Backdoor
Over 100 organizations, primarily in the US and UK, have fallen prey to a sophisticated phishing scam that uses fake event invites to install a sneaky Windows backdoor, with Microsoft tracing the attacks back to a Russian hacking group. The campaign, which has been running in waves since January, appears to be targeting individuals and organizations with ties to Ukraine.
French Tax Authority Breach Exposes Data of 600,000 Taxpayers
A breach at the French tax authority exposed sensitive data of 600,000 taxpayers, including 350,000 individuals and 250,000 businesses, after a low-sophistication attack using stolen staff passwords. The hack, which went undetected for three months, highlights the vulnerability of simple login credentials.
Cybersecurity Skills Decay Outpaces Organizational Readiness
The harsh reality is that cybersecurity skills decay is happening at a pace that far outstrips organizational readiness, leaving companies scrambling to get new hires up to speed. While two-thirds of organizations expect new cybersecurity hires to be fully productive within three months, in reality, it takes a whopping six months for most to reach that level.
Hackers Exploit Citrix Zero-Day to Deploy Web Shells, Malware
Hackers were quick to pounce on a Citrix zero-day vulnerability, attempting to install a hidden PHP web shell just days before the flaw was publicly disclosed. This early activity sparked a wider campaign, enabling attackers to gain root access, deploy malware, and tunnel into internal networks using the newly disclosed CVE-2026-88771 and CVE-2026-88772 vulnerabilities.
Citrix Zero-Day Exploits Target Gov't, Finance Firms with Custom Malware
A concerning cybersecurity crisis is unfolding as government agencies, banks, and other organizations across North America and Europe face targeted attacks exploiting critical Citrix vulnerabilities with custom malware. The attacks, which have been observed in the wild, take advantage of two critical CVEs, CVE-2026-88771 and CVE-2026-88772, both rated 9.5 CVSS.
US Air Force Veterans Sentenced for Orchestrating BEC Scams
Two US Air Force veterans orchestrated a brazen multi-year scheme that scammed over $1.68 million from a victim in Iowa City, using a complex web of domestic and international co-conspirators to divert funds into their control.
New Spectre Variant BTR Exploits Linux Memory Despite Existing Defenses
Meet Branch Target Reuse (BTR), a new Spectre variant that cleverly exploits Linux memory, dodging existing defenses and leaving multiple JIT engines and the Linux kernel vulnerable. This sneaky attack uses a four-step sequence to tap into the CPU's indirect branch prediction structures.
New Spectre v2 Variant Exploits Linux Systems, Leaks Root Password Hashes
Researchers have uncovered a new Spectre v2 variant, dubbed Branch Target Reuse (BTR), that can exploit Linux systems and leak sensitive data, including root password hashes, in a matter of minutes. This attack can be executed in as little as 3-5 minutes, leaving systems vulnerable to potential breaches.
Microsoft Exposes 17.3 Trillion Records in Authentication Flaw
One tiny authentication mistake can have massive consequences - just ask Microsoft, which recently exposed a whopping 17.3 trillion records due to a flaw that let attackers bypass login credentials. A 16-year-old security researcher discovered the vulnerability, which could have let hackers pose as admins, but thankfully there's no evidence it was exploited.
AI Models Expose Sensitive Data from Tech Companies
Thousands of sensitive screenshots from 343 companies, including tech giants, have been inadvertently exposed by AI models on public GitHub repositories, revealing a shocking lapse in data security. This alarming discovery, dubbed PixelLeak, highlights the risks of relying on AI agents that can leak internal information.
Malicious npm Packages Hijack Developers' WhatsApp Accounts
Beware of malicious npm packages that have been downloaded a staggering 490,000 times, hijacking developers' WhatsApp accounts and adding them to groups without consent. These 101 rogue packages exploit the popular Baileys WhatsApp open source project to pull off the scam.
AI Agent Breaches Dutch Cybersecurity Nonprofit Through Exploited Vulnerability
A Dutch nonprofit dedicated to exposing vulnerabilities was breached in a shocking attack that left investigators stunned, describing it as loud and extremely messy. The incident marks a serious turn of events for the volunteer-run organization, which has operated with relative calm for seven years.
Kiteworks Fixes Vulnerability During Precautionary Shutdown
When customer data is on the line, Kiteworks chooses certainty over convenience - that's why they took a proactive nine-hour shutdown to safeguard against a potential cyber attack, collaborating with federal authorities to swiftly identify and fix a vulnerability. By prioritizing data security, they ensured their customers' protection, and quickly got back up and running.
AWS Credentials at Risk as Flaws in Amazon Bedrock AgentCore Expose Command Execution
A shocking vulnerability in Amazon Bedrock's AgentCore Python SDK could have put your AWS credentials at risk, allowing hackers to execute commands and access sensitive data. A simple crafted package name was all it took to bypass security measures and get commands running inside the Code Interpreter sandbox.
Apple fixes exploited CoreGraphics zero-day in urgent patch rollout
Apple just dropped an urgent patch to fix a CoreGraphics zero-day vulnerability that's been exploited in targeted attacks - it's crucial to update your devices ASAP to stay protected. This swift fix comes after the flaw was used to launch attacks before a public fix was available.