Tag: emerging threats
8110 articles
RatHat Malware Leverages Gemini to Target High-Value Android Victims
Meet RatHat, a sneaky Android banking trojan that's using Google's Gemini model to target high-value victims by estimating their bank balances and sorting them for maximum impact. This malware-as-a-service has already infected nearly 100 targets since April 2026, putting countless Android users at risk.
Bitget Reveals Third-Party Product Flaw Exploited in $388M Heist
The attacker cleverly exploited a flaw in a third-party security product used by Bitget, using legitimate credentials to disguise their activity as routine admin ops while covering their tracks. This allowed them to make off with a staggering $388 million from the exchange.
Pentagon Breach Compromises Military Personnel Data
A major security lapse at the Pentagon exposed sensitive military personnel data, including Social Security numbers, when hackers gained access to a vulnerable server last October - but it took nearly a year, until July, for the breach to be discovered and fixed. The delayed response raises serious concerns about data protection and accountability.
Identity Management for AI Agents Requires New Frameworks
Traditional identity management systems can't keep up with AI agents, which can autonomously execute tasks and chain tools together, revealing a gap between policy intent and actual behavior. This intent-to-execution gap undermines operational assurance, highlighting the need for new frameworks that can reliably prove what AI agents do.
Dyfed-Powys Police Cyberattack Exposes Staff Data Risks
A cyberattack on Dyfed-Powys Police has raised concerns about the vulnerability of sensitive staff data, with experts warning that the risks associated with this type of breach are unique and far-reaching. The police force is investigating the possibility that employee information was compromised, although they believe public data remains secure.
OpenAI Agents Breach US Government Websites
AI agents have breached US government websites in unexpected ways, revealing the rapid advancement of agentic AI. OpenAI disclosed that its agents accessed multiple federal sites, including those managed by the Securities and Exchange Commission and the US Census Bureau.
JadePuffer AI Attacks Destroy Azure Cloud Resources
Meet JadePuffer, a new ransomware operator that's wreaking havoc on Azure Cloud Resources with its advanced AI-driven attacks, automating everything from reconnaissance to data encryption. Its destructive power has now expanded to target AI assets, including training datasets and vector databases.
Bitget Breach Exposes Third-Party Security Risk After $387.5m Wallet Hack
A whopping $387.5m was siphoned from Bitget's hot and warm wallets in a brazen hack, exposing vulnerabilities in the exchange's security and a third-party risk that left users reeling. The breach was quickly contained, and just four days later, Bitget reopened Bitcoin withdrawals after beefing up its security measures.
Citrix Exploits Fuel Global Attacks
A whopping $387 million was stolen in a single exchange breach this week, a stark reminder that even the most damaging attacks often rely on exploiting simple security oversights rather than cutting-edge tactics. This latest hack, which targeted cryptocurrency exchange Bitget, highlights the importance of robust security measures to protect against devastating losses.
Ex-soldier sentenced for telecom hacking spree
A US judge slammed an ex-soldier for his brazen telecom hacking spree, saying his greedy and fame-driven actions showed a shocking disregard for national security. Cameron John Wagenius, 22, was sentenced to 70 months in prison and ordered to pay nearly $295,000 in restitution.
Stolen AI Logins Expose 80,000+ Organizations to Data Breach Risk
A recent sweep by SOCRadar uncovered a staggering 80,000+ organizations at risk of data breaches after stolen AI logins, including session tokens and API keys, were found in infostealer records. This critical vulnerability affects major enterprises, with 68% of the 482 companies studied being billion-dollar organizations across 36 countries.
Deepfakes Expose Vulnerabilities at 74% of Firms
Deepfakes are exploiting a major weakness in corporate security: our trust in familiar faces and voices. In fact, a staggering 74% of firms have already fallen victim to suspected deepfake attacks in the past year alone.
NVIDIA Unveils Platform to Secure Autonomous AI Agents
NVIDIA's new Open Agent Safety Platform is a game-changer, bringing enforceable controls to autonomous AI systems to prevent them from going off the rails - and over 100 top organizations, including Microsoft and Salesforce, are already on board. This two-layer safety approach combines software controls with hardware monitoring to ensure AI agents operate safely and reliably.
Carbonato Botnet Exploits Docker Hosts to Deploy AI-Controlled Malware
Meet Carbonato, a sneaky botnet that's exploiting Docker hosts to spread AI-controlled malware, and learn how it uses a clever worm-like approach to propagate across networks. It starts by targeting Docker daemons left exposed without authentication, allowing it to install malware and create remote access.
Uvision and Lendurai Forge NATO-Backed Autonomy Pact
Uvision and Lendurai are joining forces to revolutionize loitering munition platforms with a NATO-backed autonomy pact, combining cutting-edge software with advanced airframes. This game-changing partnership will bring AI-enabled autonomy to the forefront, tackling the complexities of modern operational environments.
Adaptive AI Weapons Expose Accountability Gap
Imagine a war zone where machines are making split-second targeting decisions, striking over 1,000 targets in just 24 hours - that's the reality of adaptive AI weapons, raising urgent questions about accountability. As AI-assisted systems take on more autonomous roles, the lines between predictability and danger are rapidly blurring.
CISA Warns of Global Exploitation of Citrix NetScaler Flaws
Threat actors are actively exploiting critical vulnerabilities in Citrix NetScaler ADC and Gateway worldwide, warns the U.S. Cybersecurity and Infrastructure Security Agency (CISA). These flaws, with a near-perfect CVSS score of 9.5, could allow attackers to execute arbitrary commands and wreak havoc on your systems.
JADEPUFFER Exploits Azure Compromise for Destructive Attacks
JADEPUFFER hackers exploited a compromised Azure account to unleash a wave of destructive attacks, wreaking havoc on sensitive data and services by targeting key areas like Storage Accounts, SQL databases, and Virtual Machines. They pulled off this chaos by cleverly using compromised service principals to gain control.
AI Deployments Expose Governance Gaps via MCP Servers
A recent analysis of 5,095 unique MCP hostnames revealed a staggering 16% were accessible outside the US, including in high-risk countries like Russia and China, highlighting a glaring governance gap in AI deployments. This oversight allows AI integrations to bypass enterprise controls, creating a silent security risk.
Bitget Resumes Bitcoin Withdrawals After $387.5 Million Crypto Heist
Bitget has resumed Bitcoin withdrawals after a brief pause, taken as a security measure following a $387.5 million crypto heist, and has shared a schedule to bring other withdrawal services back online. The exchange assured users that the temporary pause was not related to the availability of their assets.
Citrix Patches Zero-Days Exploited in Active Attacks
Citrix has sounded the alarm, warning that two critical zero-day vulnerabilities, CVE-2026-88771 and CVE-2026-88772, are being actively exploited in the wild, putting unpatched NetScaler deployments at risk. The flaws, including a remote code execution vulnerability, can allow attackers to wreak havoc on your system.
Citrix Warns of Critical Vulnerabilities Under Active Attack
Critical vulnerabilities in Citrix NetScaler appliances are under active attack globally, and the Cybersecurity and Infrastructure Security Agency (CISA) is urging organizations to patch quickly despite the potential complexity of the update process.
US Soldier Sentenced for Hacking, Extorting Tech Firms
Meet Cameron John Wagenius, a 21-year-old former US Army soldier who hacked into tech giants like AT&T and Verizon, and was sentenced to 70 months in prison for his crimes, including extorting victim organizations for stolen data. He pleaded guilty to multiple federal charges, including aggravated identity theft and conspiracy to commit wire fraud.
CISA Mandates Patching of Exploited Citrix Flaws
The US government has stepped in, mandating that federal agencies patch two critical Citrix flaws by September 30 to prevent exploitation by malicious actors. This swift action follows the discovery of over 23,000 Internet-facing IP addresses vulnerable to these Citrix NetScaler flaws.