Tag: emerging threats
8636 articles
Fraudsters Exploit SMS Verification in Financial Fraud Schemes
Think a simple text message with a one-time passcode is the ultimate security measure? Not quite - a recent report reveals that fraudsters are exploiting SMS verification to hijack accounts and siphon off funds.
Hormuz Crisis Exposes Vulnerability in AI Chip Supply Chain
A shipping crisis in the Strait of Hormuz has exposed a vulnerable link in the AI chip supply chain, threatening to disrupt the production of specialist memory chips that power artificial intelligence systems. This critical bottleneck comes at a precarious time, with the industry's manufacturing heavily concentrated in South Korea.
LinkedIn Harvests Browser Data with Secret JavaScript Scripts
Did you know that LinkedIn is quietly harvesting browser data, including a list of your installed Chrome extensions, every time you load a page? A recent analysis, dubbed BrowserGate, uncovered the surprising truth behind LinkedIn's use of secret JavaScript scripts to scan visitor browsers.
Stryker Restores Manufacturing Systems After Iranian Hacktivist Attack
Stryker has successfully restored its manufacturing systems after a devastating cyberattack by an Iranian hacktivist group caused a global outage, and is now operating at full capacity across its global network. The company is still investigating the incident, but is reassuring customers that all is back to normal.
Vendor Breaches Spotlight Healthcare's Cyber Vulnerability
Recent vendor breaches have exposed healthcare's alarming cyber vulnerability, raising critical questions about who bears the cost - and the consequences - when a vendor's systems fail. As the threat landscape evolves, one thing is clear: the healthcare industry must rethink its approach to cybersecurity and vendor risk management.
CISOs Face Shadow AI Surge as Gen AI Deployments Stall
The alarming gap between AI pilot programs and enterprise-wide deployments has CISOs and IT leaders scratching their heads - while 60% of businesses are testing productivity AI tools like M365 Copilot, only 6% are successfully scaling them. What's holding them back, and how can organizations bridge the gap between experiment and enterprise?
TA416 Targets Europe with OAuth Phishing and PlugX Malware
A China-aligned cyber threat, known as TA416, has resurfaced in Europe, targeting government and diplomatic networks with OAuth phishing and PlugX malware, raising concerns about intent and defensive readiness. This renewed focus comes after a two-year lull, with the threat actor employing new tactics to infiltrate European organizations.
Hims & Hers Discloses Data Breach After Zendesk Ticket Compromise
Hims & Hers Health has alerted customers to a data breach after sensitive support tickets were stolen from a third-party platform operated by Zendesk, raising concerns about consumer safety when sharing personal info online. The breach exposed data from support tickets, highlighting the vulnerability of sensitive transactions on external systems.
Cloud Security Gaps Exposed on World Cloud Security Day
On World Cloud Security Day, it's clear that cloud security gaps are a pressing concern, but how do we measure the security of a technology that's both virtual and physical? Today's snapshot of cloud security reveals an uncertain landscape where digital protections and tangible safeguards intersect.
Microsoft Uncovers Cookie-Based Web Shells Persisting on Linux Servers
Microsoft's latest discovery reveals a sneaky new tactic: hackers are hiding malicious commands in browser cookies to secretly control compromised Linux servers. This clever trick forces us to rethink what we consider normal web traffic and take a closer look at the potential threats lurking in plain sight.
Qilin Ransomware Targets German Political Party Die Linke
Die Linke, a German political party, has fallen victim to a crippling Qilin ransomware attack, forcing a shutdown of its IT systems and compromising sensitive data. The Qilin group has claimed responsibility, threatening to leak stolen information unless demands are met.
Nation-State Hackers Exploit Cloud Services for Global Espionage
In the shadows of the digital world, nation-state hackers are quietly exploiting cloud services to orchestrate global cyber espionage - but how can organizations, governments, and individuals defend against threats they can't see? The hidden world of cyber espionage poses a daunting question: what's at stake when the invisible forces of cyber threats manipulate the systems we rely on?
Ransomware Attacks Evolve to Exploit Stolen Data for Double Extortion
Ransomware attacks have taken a sinister turn, now using stolen data to blackmail victims into paying up - not just by encrypting their files, but by threatening to expose sensitive information to the world. This double extortion tactic adds a whole new level of pressure, forcing victims to weigh the cost of a data breach against the cost of a ransom.
Venom Phishing Platform Targets C-Suite Execs in Credential Theft Campaigns
Meet Venom, a sneaky new phishing platform that's putting top executives in its crosshairs, threatening to drain their credentials and wreak havoc on corporate boardrooms. This automated threat is scaling up credential theft like never before, making it a high-risk concern for senior leaders and their organizations.
Third-Party Risk Exposes Hidden Weaknesses in Client Security Posture
The next big security breach hitting your clients likely won't come from within their own walls, but from a blind spot they never suspected: their trusted third-party relationships with vendors, SaaS tools, and subcontractors. Most organizations are woefully underprepared for this expanding attack surface.
Mercor AI Startup Discloses Data Breach Involving Open AI, Anthropic Partnerships
Mercor, an AI startup partnered with industry giants OpenAI and Anthropic, has confirmed a data breach - raising concerns about the potential impact on users and the company's ability to regain trust. The incident has left many questions unanswered, including what data was compromised and who might be affected.
North Korean Hackers Target Axios Maintainer in Supply Chain Breach
A shocking supply chain breach has been uncovered, where North Korean hackers launched a highly targeted social engineering campaign against the maintainer of the Axios npm package, successfully altering code relied upon by others. The attackers' tailored approach raises urgent questions about trust and vulnerability in open-source ecosystems.
US Tightens Router Security with Ban on Foreign-Made Devices
The US has taken a major step to safeguard its digital landscape by banning foreign-made routers, citing concerns that they pose a severe cybersecurity risk and supply chain vulnerability that could disrupt the economy and national defense. As a result, all new routers manufactured outside the US will require Federal Communications Commission approval before being sold in the country.
Zoom Meetings Exposed by Rogue Web Service
Meetings meant to be private, ended up being public. A rogue web service called WebinarTV has been exploiting Zoom meeting security by searching for publicly available invites, joining and secretly recording sessions, and publishing them online.
Microsoft Grapples with Weeks-Long Exchange Online Mailbox Access Disruptions
Weeks of frustrating disruptions have left Outlook mobile and macOS users struggling to access their Exchange Online mailboxes, sparking a flurry of questions about reliability and resolution. Microsoft is actively investigating the issue, but for affected users, the wait for a fix continues.
Drift Protocol Exploited for $285 Million in Novel Social Engineering Attack
In a shocking turn of events, the Drift Protocol, a Solana-based decentralized exchange, was exploited for a staggering $285 million in a highly sophisticated social engineering attack involving durable nonces. This novel attack allowed malicious actors to swiftly gain control of the platform's administrative powers, resulting in a massive loss of funds.
Engineer Pleads Guilty to Ransomware Extortion Plot Targeting Industrial Firm
A former infrastructure engineer has pleaded guilty to a ransomware extortion plot that targeted his own employer, an industrial firm in New Jersey, by locking administrators out of 254 servers. This shocking breach of trust highlights the devastating consequences of insider threats in the digital age.
Malware Resurfaces in Mobile Apps, Targets Crypto Wallets
Beware of a sneaky new malware hiding in plain sight on both app stores, designed to steal sensitive crypto wallet recovery phrases from unsuspecting users. This deceptive SparkCat variant masquerades as harmless apps, putting your digital assets at risk.
Microsoft Accelerates Windows 11 Upgrades with Mandatory 25H2 Rollout
Microsoft is taking a bold step by automatically upgrading unmanaged Windows 11 devices running 24H2 Home and Pro editions to the latest 25H2 version, starting this week. This move marks a significant shift in the company's approach to Windows 11 upgrades.