Tag: emerging threats
8610 articles
Booking.com Exposes Reservation Data Breach Risk
Did you know that a recent data breach at Booking.com may have exposed sensitive trip details, including your name, contact info, and private messages to hotels, to unknown attackers? This incident is a stark reminder that even major travel platforms can be vulnerable to data breaches, putting your personal info at risk.
Hackers Exploit Microsoft 365 Mailbox Rules to Conceal Post-Breach Activity
Hackers are exploiting a sneaky vulnerability in Microsoft 365 mailbox rules to hide their tracks, siphon sensitive data, and maintain a backdoor into compromised accounts. This stealthy tactic allows attackers to fly under the radar, making it even harder to detect and stop them.
Storm Infostealer Exploits Server-Side Decryption for Session Hijacking
Imagine if hackers could hijack your online sessions, bypassing even the strongest passwords and multifactor protections - a new infostealer called Storm makes this a chilling reality by exploiting server-side decryption to steal sensitive browser data. This sneaky malware allows attackers to take over your accounts, all without needing to crack your password.
Zero-Day Exploits Target PDF Files Amid State-Sponsored Infrastructure Meddling
A critical zero-day flaw has been hiding in plain sight within everyday PDF files, and at the same time, state-sponsored actors have been aggressively probing vital infrastructure, creating a perfect storm that demands immediate attention. This dual threat of quietly persistent PDFs and long-simmering meddling has escalated into a situation that requires rapid action.
Zero-Day Exploits Proliferate as Breakout Times Shrink
Imagine a research preview that can teach itself to find and exploit the very flaws security teams scramble to patch - that's now a harsh reality, as an advanced language model has autonomously discovered and exploited zero-day vulnerabilities in every major operating system and browser. This breakthrough should be a wake-up call for security teams to rethink their response times to alerts.
Booking.com Breach Exposes Customer Data
A single-line warning from Booking.com that your personal data may have been exposed can be unsettling, especially when it lacks crucial details on what happened and how to protect yourself. This data breach notification raises more questions than answers, leaving customers and experts alike searching for clarity.
Basic-Fit Discloses Data Breach Exposing Member Information
Basic-Fit, Europe's largest gym chain, has confirmed a data breach that exposed sensitive information, including bank details, for around one million customers, raising urgent concerns about data security and accountability. The breach, which resulted from a cyberattack, compromised names, addresses, dates of birth, and financial information, but thankfully did not involve password theft.
FBI Disrupts W3LL Phishing Operation Linked to $20m in Fraud
The FBI has successfully dismantled a massive phishing operation built around the notorious W3LL phishing kit, which was linked to a staggering $20 million in fraud attempts. By taking down this operation, the bureau has disrupted a key tool used by cybercriminals to carry out their scams.
Rockstar Games Data Breached as ShinyHunters Exploits Third-Party Vulnerability
Rockstar Games has been hit by a data breach, with a notorious hacking group called ShinyHunters claiming it accessed sensitive information through a vulnerability in a third-party tool, rather than a complex hack. The group says it simply walked through an open door, exploiting access to Snowflake metrics to get to the data.
APT37 Exploits Facebook for RokRAT Malware Delivery
North Korean hackers APT37 have cleverly turned Facebook friend requests into a sneaky way to deliver RokRAT malware, exploiting our natural tendency to trust social connections. By accepting a friend request, victims unwittingly open the door to a remote access trojan that can compromise their device.
UK Cyber Security Council Introduces Associate Title for Early-Career Pros
The UK Cyber Security Council has launched a new Associate Cyber Security Professional title to support early-career pros, giving them a recognised credential as they start their journey in the field. This move aims to help identify and develop the next generation of cybersecurity professionals.
Baltic States Face Rising Security Threats as NATO Shifts Focus
The chilling words of Soviet foreign minister Vyacheslav Molotov still echo today: "In the future, small nations will have to disappear," a stark warning that resonates as the Baltic States face rising security threats. This ominous message, delivered in 1940 as the Soviet Union occupied Lithuania, serves as a haunting reminder of the region's turbulent past.
DHS Intel Office Reorganization Bolsters ODNI Oversight
The Department of Homeland Security's Office of Intelligence and Analysis is set for a major overhaul, but a proposed reorganization in the fiscal year 2027 budget has raised eyebrows - despite restructuring, the office would still answer to the Office of the Director of National Intelligence, sparking questions about oversight. This bold move has left many wondering: who will be watching the watchers?
Kaspersky Uncovers JanelaRAT Malware Targeting Latin American Users
Kaspersky's Global Research and Analysis Team has uncovered a sophisticated malware campaign, dubbed JanelaRAT, that's specifically targeting users in Latin America with financial threats. This evolved malware has been detailed in a recent report, revealing its updated functionality and infection chain.
White House Expands Offensive Cyber Market, Blurs Industry Lines
The White House is shaking up the offensive cyber market by bringing more private companies into the fold, sparking crucial questions about who should be building and using digital weapons, and under what rules. As the lines between industry players blur, one thing is clear: the rules of engagement for this rapidly evolving market are still far from clear.
Lockheed Martin Expands Australian Missile Production
Lockheed Martin is taking a major step forward in Australian missile production, having successfully test-fired GMLRS rockets assembled in Australia - a milestone that marks a significant boost to the country's defense capabilities. But what does it really mean for a missile to be Australian-made when critical parts still come from overseas?
Islaman Talks Collapse, Iran-US Tensions Escalate
In a shocking turn of events, marathon talks between the US and Iran in Islamabad ended abruptly without a deal, leaving more questions than answers after 21 hours of intense diplomacy. The collapse of negotiations has escalated tensions between the two nations, with both sides issuing conflicting statements on the outcome.
Authorities Disrupt $12m Crypto Scam Targeting 20,000 Victims
A single click can be costly: over 20,000 crypto users across three countries fell victim to a $12 million approval phishing scam, tricked into handing over full access to their wallets. Thankfully, authorities swooped in, seizing the lost funds in a major cross-border crackdown dubbed Operation Atlantic.
US Navy Bolsters Middle East Presence with Strait of Hormuz Blockade
On April 12, 2026, US President Donald Trump made a bold move, ordering the US Navy to blockade the critical Strait of Hormuz waterway, a strategic chokepoint in the Middle East. A third carrier strike group was also deployed to the region, heightening tensions and uncertainty in an increasingly volatile area.
OpenAI Disrupts macOS App Signing Process After Supply Chain Breach
OpenAI recently took swift action to protect its users by revoking a macOS app certificate after discovering a malicious library had been downloaded through a GitHub Actions workflow used to sign its applications. This move highlights the vulnerability of even trusted software signing processes to supply chain breaches, and the importance of staying vigilant in macOS app security.
Anthropic Unveils Mythos AI, Raises Stakes in Zero-Day Exploitation Race
Anthropic just unveiled Mythos AI, a game-changing model that can allegedly uncover and exploit zero-day vulnerabilities with unprecedented skill - but is it a revolutionary breakthrough or just pre-IPO hype? The tech community is buzzing with skepticism and curiosity.
US Defence Exports Face Credibility Test in Europe
The Trump administration's defence export strategy is facing a credibility crisis in Europe, with a prominent defence analyst warning that the outlook for US defence exports on the continent is rapidly dimming. This development raises serious concerns about the viability of the strategy and its future prospects.
Iranian Strike Leaves KC-135 Requiring Extensive Field Repairs
A KC-135 tanker, badly damaged in a battle-scarred encounter with Iranian forces, has made an incredible journey across continents, thanks to quick thinking and skilled field repairs that kept it airborne. The aircraft's remarkable story is told in a single, striking image: shrapnel plates patched over damaged areas, a testament to the power of resilience and rapid repair in the heat of conflict.
Marimo Flaw Exploited for Credential Theft in Active Attacks
A critical vulnerability in Marimo is being actively exploited by attackers to steal sensitive credentials, and it requires no prior authentication to run code remotely. This flaw has severe consequences for organizations using Marimo, making it essential to take immediate action.