Tag: emerging threats
4745 articles
CVE-2026-48558 Exploitation Deploys TaskWeaver, Djinn Stealer Malware
A critical vulnerability, CVE-2026-48558, with a maximum severity score of 10.0 is being exploited to spread two new malware families, TaskWeaver and Djinn Stealer, by turning remote monitoring servers into malware distribution points. This flaw allows attackers to bypass OpenID Connect authentication in SimpleHelp and gain a fully authenticated session.
Microsoft Bolsters Teams Security with Enhanced Bot Protections
Microsoft is stepping up its Teams security game with enhanced bot protections, allowing admins to block third-party bots from joining meetings without approval. This new policy gives organizations greater control over who can access their meetings, helping to prevent malicious apps and unwanted disruptions.
Hackers Exploit Blockchain to Target Japan Hotels via Phishing
TrendAI Research uncovered a sneaky phishing campaign in late May 2026 that targeted hotel staff in Japan, cleverly disguising emails as guest complaints or review requests to trick employees into divulging sensitive info. The attackers stayed one step ahead, constantly updating their tactics to maximize their success.
AirDrop and Quick Share Flaws Expose Devices to Local Attacks
Millions of devices are vulnerable to local attacks due to flaws in popular sharing services like AirDrop and Samsung Quick Share, discovered by researchers Arash Ale Ebrahim and Nils Ole Tippenhauer. They found six distinct flaws that can be exploited by nearby attackers to crash services or bypass security checks.
Kali Linux Release Bolsters Cybersecurity Arsenal with 9 New Tools
Kali Linux just got a major boost with its latest release, packing 9 new tools to supercharge your cybersecurity arsenal. This update slashes boot time by nearly 3x and trims down the initrd to just 60 MB for VM users.
Progress LoadMaster Flaw Lets Attackers Run Root Commands Pre-Auth
A critical flaw in Progress Kemp LoadMaster, known as CVE-2026-8037, allows attackers to run root commands without authentication - but a patch is now available to fix this gaping security hole. This vulnerability, scoring a severe 9.8, can be exploited with a simple crafted API request.
Blackfield Ransomware Targets Nidec with $2 Million Extortion Demand
Nidec Corporation revealed that its Taiwanese subsidiary was hit by a Blackfield ransomware attack, prompting swift emergency measures to contain the breach and prevent further damage. The hackers are now demanding a whopping $2 million in extortion, threatening to leak sensitive data if their demands aren't met.
UK Healthcare Sector Faces Surge in Cyber-Attacks
The UK healthcare sector is under siege, facing a staggering tenfold surge in cyber-attacks with 264,000 intrusion events recorded in just the first five months of 2026. This alarming rise has left health networks being “stress-tested to breaking point.”
AI Browsers Exposed to Credential-Leaking BioShocking Attack
A shocking new attack has been discovered that can trick AI browsers and assistants into leaking sensitive user credentials, with six popular agents already proven vulnerable. This sneaky tactic, called BioShocking, uses a clever game-like approach to bypass safety protocols and get agents to cough up personal info.
Ransomware gangs exploit Windows BlueHammer flaw
Ransomware gangs are actively exploiting a critical Microsoft Defender flaw, nicknamed BlueHammer, which has been added to CISA's list of Known Exploited Vulnerabilities. This vulnerability is a prime target for malicious cyber actors, posing a significant risk to those who haven't yet applied the necessary patches.
Ransomware Strikes 323 UK Firms in a Year
Stay ahead of ransomware threats with proactive protection - keep your data safe with regular backups, strong access controls, and up-to-date systems. Every month, over 26 UK firms fall victim to these crippling attacks, with small and mid-sized businesses being hit the hardest.
Apple Bolsters Security with AI-Discovered WebKit Flaw Patches
Apple is stepping up its security game by releasing patches for over three dozen WebKit flaws, discovered with the help of AI, to protect its users from potential hacking threats. By speeding up its update process, Apple aims to outpace malicious hackers who are leveraging AI to develop exploits at an alarming rate.
Microsoft Fortifies Teams Against Bot Intrusions
Microsoft is stepping up its game to protect Teams meetings from unwanted bot intrusions by introducing a virtual bouncer that keeps automated accounts at bay. This new defensive measure is a significant boost to Microsoft Teams security.
Pakistan Launches Cross-Border Strikes into Afghanistan
Pakistan has launched a bold move, carrying out cross-border strikes into Afghanistan, killing 29 militants in a two-part operation that underscores its commitment to prioritizing citizen safety above all else. The daring action, which included a ground raid and precision air strikes, targeted high-value targets and destroyed enemy strongholds.
Romania Secures Spyder Air Defense System in $2.3 Billion Deal with Rafael
Romania has sealed a game-changing $2.3 billion deal with Rafael to secure the cutting-edge Spyder Air Defense System, marking the largest agreement in the Israeli firm's history. This strategic partnership bolsters Romania's defenses and cements its position as a key player in regional security.
Australia, France Upgrade Security Pact Amid Global Turmoil
Australia and France have upgraded their security pact to promote a peaceful, stable, and prosperous Indo-Pacific region, a move that comes as global tensions rise and the international landscape grows increasingly complex. This strengthened partnership is a bid to tackle shared strategic challenges and foster greater cooperation between the two nations.
Poland Seeks Bidders for Air Defence Laser Systems
Poland is taking a giant leap in air defence technology, exploring cutting-edge laser directed-energy weapons with twenty potential contractors already on board. The Armament Agency is seeking innovative solutions for its Laserowy System Broni Skierowanej Energii (LSBSE), a game-changing system designed to provide layered air defence capabilities.
Drone Disarms Suspect in Landmark Police Operation
In a tense standoff, a police drone was deployed with a high-powered magnet to disarm a suspect who had refused to negotiate, showcasing a groundbreaking use of technology in law enforcement. The daring operation was captured on video and shared by the Sacramento County Sheriff's Office.
Weak RSA Keys Exposed in Widespread Use
Meet the badkeys project, an open-source service that scans public keys for vulnerabilities, which recently uncovered a surprising pattern of weak RSA keys in widespread use. By analyzing a massive dataset of real-world public keys, the team discovered a substantial number of keys with a suspicious structure, featuring regularly spaced blocks of zero bits and random data.
China's J-20 Exposes Refueling Limitations
New high-resolution photos reveal the J-20's mid-air refueling probe, highlighting a key difference between China's advanced fighter jet and the US Air Force's F-22. The images provide a glimpse into the J-20's refueling capabilities, or limitations.
Ukraine Accelerates Robot Warfare with Unmanned Ground Vehicles
In a major push for robot warfare, Ukraine is rapidly deploying unmanned ground vehicles, with over 10,000 successful missions completed in April alone, mostly for logistics operations. The country is now aiming to take it to the next level, with a target of supplying 50,000 of these vehicles to its armed forces this year.
UK Shifts Defence Focus to Hybrid, Unmanned Systems with $6.6 Billion Drone Push
The UK is set to revolutionize its defence strategy with a $6.6 billion drone initiative, shifting focus to hybrid and unmanned systems to bolster its Armed Forces. This bold move is part of a broader £13.5 billion Defence Investment Plan aimed at equipping servicemen and women with cutting-edge capabilities to tackle emerging threats.
Pakistan Air Force Pursues High-Energy Laser Systems for Counter-UAS Defense
The Pakistan Air Force is ramping up its defense against rogue drones with a cutting-edge pursuit of high-energy laser systems, complementing its existing electronic warfare and anti-air gun arsenal. This move marks a significant upgrade to its counter-UAS capabilities, potentially with interceptor drones and directed-energy weapons.
Oracle E-Business Suite Flaw CVE-2026-46817 Sees Active Exploitation
A critical flaw in Oracle Payments, known as CVE-2026-46817, is being actively exploited by hackers, allowing them to easily take control of vulnerable Oracle E-Business Suite instances. This easily exploitable vulnerability has a near-perfect CVSS score of 9.8, making it a high-risk threat to organizations using Oracle Payments.