Tag: emerging threats
8111 articles
Elementor Plugin CSRF Flaw Enables Site Takeovers
A single click on a malicious link by a logged-in WordPress user can be all an attacker needs to take control of a site, thanks to a critical flaw in the popular Elementor Website Builder plugin. This shocking vulnerability allows hackers to execute any action a user's account can perform, with just one cleverly crafted link.
US Marine Corps Rushes Anti-Drone Jammers for Amphibious Vehicles
The US Marine Corps is rapidly deploying anti-drone jammers to protect its amphibious vehicles from emerging aerial threats, with a $15.7 million sole-source award to Anduril for Pulsar-L electronic warfare jammers. This urgent move aims to equip forward-deployed Marines with crucial self-defense capabilities, mitigating the risk of mission failure and loss of life.
China Revamps Tank Protection Against Drone Threats
China's latest tank protection tech is a game-changer: meet the GL-6 active protection system that's taking down drone threats from above and all sides. This cutting-edge defense is the country's answer to the rising menace of cheap FPV drones and high-angle attacks on the battlefield.
Latvia Pursues Barracuda Missiles for Long-Range Strike Capability
Latvia is taking a major leap in its defense capabilities with plans to acquire cutting-edge Barracuda long-range missiles, a move that marks a significant milestone in the country's pursuit of enhanced national security. This development follows Latvian President Edgars Rinkēvičs' visit to Anduril Industries in the US, where he witnessed the signing of key cooperation agreements.
Pakistan Pursues Ballistic Path to Hypersonic Capability
The US is set to supercharge its military capabilities with plans to acquire at least 10,000 hypersonic missiles in the next three years, while Pakistan is also pursuing a ballistic path to develop its own hypersonic capabilities. This move is driven by the game-changing potential of hypersonic missiles, which can travel at incredible speeds of over Mach 5 and maneuver through the atmosphere.
US Navy Deploys Blackbeard Hypersonic Missile in F/A-18 Flight Tests
Get ready for a game-changer: the US Navy has taken its Blackbeard Hypersonic Missile to new heights, literally, with thrilling flight tests on the F/A-18E/F Super Hornet. Check out the jaw-dropping footage of this powerful missile in action!
Navy Accelerates Medium Unmanned Ship Project with New Solicitation
The Navy is speeding up its Medium Unmanned Ship project, seeking innovative solutions that can tackle evolving threats with modular design principles. Vessels must be capable of 10+ days of unmanned ops, carry a payload of two 20-foot shipping containers, and be under 90 meters long.
Navy Shipyard Repairs Lag, GAO Warns of Billions in Added Costs
Congress risks making costly decisions in the dark, potentially squandering billions in taxpayer dollars, if it doesn't get a clearer picture of the Shipyard Infrastructure Optimization Program's funding and risks. The GAO warns that incomplete information could lead to a lack of program oversight for decades to come.
Supreme Court Backs Use of SAVE Database for Voter Citizenship Checks
In a significant move, the Supreme Court has ruled that states can use the Department of Homeland Security's SAVE database to verify voter citizenship, paving the way for more accurate and secure elections. This decision allows state and local election officials to request citizenship checks, helping to ensure the integrity of the electoral process.
US Soldier Sentenced for Telecom Extortions
Meet Cameron John Wagenius, a 22-year-old US soldier who traded in his security clearance for a life of cybercrime, exploiting exposed Snowflake credentials to orchestrate a massive data heist. As Kiberphant0m, he and his co-conspirators downloaded sensitive data from major Snowflake customers, earning a guilty plea and a federal sentence.
Court Upholds DOD Designation of Anthropic as Supply-Chain Risk
A federal appellate court has upheld the Pentagon's designation of Anthropic as a supply-chain risk, allowing the Defense Department to ban its products from being used for official business. This decision comes after a panel of judges reviewed the case and ruled in favor of the Pentagon's designation.
Pakistan Intensifies Cross-Border Strikes with Loitering Munitions in Afghanistan
Pakistan launched a series of intense cross-border strikes with loitering munitions into Afghanistan, targeting 10 sites across Khost, Paktia, and Kandahar provinces in a sudden escalation of violence. The strikes, which Pakistan claims hit identified military objectives, have resulted in conflicting reports of civilian casualties.
Anthropic Report Exposes AI Misuse Trends
Anthropic's eye-opening report reveals 117 alarming instances of AI misuse, shedding light on the dark side of generative models and autonomous agents. From reconnaissance to exploitation, these AI agents are increasingly being used in both investigative and operational workflows, often in a disturbing division of labor with humans.
Soldier's Cybercrime Spree Targets AT&T, Snowflake, Ends in 70-Month Sentence
Meet Cameron Wagenius, a former soldier who traded his badge of honor for a life of cybercrime, targeting giants like AT&T and Snowflake in a brazen spree that ultimately led to a 70-month prison sentence and a hefty restitution order of nearly $295,000. His guilty plea and sentencing bring closure to a multi-year saga of digital deception and attempted extortion that threatened to drain over $1 million from his victims.
Germany Revives Nuclear Fallout Shelter Plans Amid Rising Threats
Join the conversation at Bunker Talk, where community rules promote respectful discussion, ban name-calling and trolling, and encourage constructive debate. By following these prime directives, members create a safe space for sharing ideas and opinions.
Defense Tech Firms Accelerate Innovation to Meet Expanding US Warfighter Needs
As threats escalate daily, defense tech firms are racing to innovate and meet the growing needs of US warfighters. Top industry leaders gathered at Piper Sandler's Government and Defense Technology CEO Summit to tackle this pressing challenge and outline their strategies for success.
Kiteworks Orders Global Server Shutdown Over Zero-Day Threat
Kiteworks has issued a rare global server shutdown alert due to a credible threat of an imminent cyberattack, urging customers to power down their servers for six hours on Saturday. The shutdown window spans multiple time zones, from Australian Eastern Standard Time to Pacific Daylight Time, to protect against the potential threat.
ShinyHunters Exploits Grav CMS Flaw to Breach Clop Leak Site
The Grav CMS flaw, tracked as CVE-2026-42608, was exploited by ShinyHunters to breach the Clop gang's leak site, and the vulnerability has since been patched in Grav's 2.0 and 1.7 branches. Grav confirmed the legitimacy of the flaw and the threat actor's description, and has implemented a fix to prevent further attacks.
Criminals Expose Blunder in Google Voice Phishing Scam Recruiting Ad
Criminals trying to scam people into giving up their Google account info got caught out by their own careless mistake - a recruitment ad that included a script to read out loud, despite claiming no script reading was required. The blunder was exposed in a Telegram post seeking voice callers for a fake Google Security Team phishing operation.
ShinyHunters Breach FBI Systems, Exposes Agent Data
ShinyHunters hacked FBI systems to clear their name, not for financial gain, claiming the breach was a bold move to set the record straight and protect their business reputation. By exposing agent data, the group aimed to counter misinformation spread by the FBI and others.
Elementor WordPress Plugin Exploited to Create Admin Accounts
A critical vulnerability in the popular Elementor WordPress Plugin has put up to 2 million sites at risk of admin account takeovers, with a single click on a malicious link potentially allowing hackers to gain control. This alarming exploit highlights the importance of updating to secure versions and exercising caution when clicking on links.
North Korea Targets Bitget in $387.5M Crypto Heist
North Korean hackers pulled off a brazen $387.5 million crypto heist by infiltrating a key backend system of Bitget, a leading crypto exchange, and exploiting it to siphon off digital assets. The attack, bearing all the hallmarks of a sophisticated North Korean operation, left Bitget's cold wallets and customer balances remarkably unscathed.
CISA Warns of Widespread Exploitation of SharePoint, Adobe Commerce Flaws
Don't wait until it's too late - with nearly 1,000 customers across critical sectors like banking, government, and telecommunications at risk, organizations can't afford to delay action against widespread exploitation of SharePoint and Adobe Commerce flaws. A critical authentication-bypass vulnerability, CVE-2026-5430, is already being exploited, putting multiple WSO2 products at risk.
Fake HR Apps Install ScreenConnect for Remote Access
Cybercriminals are using fake HR apps to trick employees into installing ScreenConnect, granting hackers persistent remote access to their machines. This sneaky tactic targets HR and payroll staff, putting sensitive company data at risk.