Tag: emerging threats
4745 articles
India's .bank.in Domain Registry Exposes Sensitive Bank Employee Data
A major security slip-up by the registrar for India's .bank.in domain has left 5,576 bank employees' sensitive credentials and contact details exposed, putting their security at risk. This breach undermines the very purpose of the .bank.in namespace - to protect Indian banking web identities from phishers and fraudsters.
Researchers Expose Lethal Flaw in AI Model Security
Researchers have uncovered a shocking vulnerability in AI model security, revealing that a simple formatting trick used to separate system instructions from user requests has become a critical weakness. This flaw, known as role confusion, threatens the very foundation of modern AI systems.
Russia Revives Influence Ops in US, Europe
Google threat hunters warn that Russia's influence operations are shifting their focus back to the US and Europe, potentially intensifying their targeting of the EU, NATO, and other key priorities. This change signals a significant increase in covert cyber operations aimed at these regions.
Nissan Breach Exposes Employee Data After Oracle PeopleSoft Exploit
Nissan confirmed a data breach exposing employee information after a cyberattack exploited a critical vulnerability in Oracle PeopleSoft, part of a larger campaign that may have compromised hundreds of companies. The breach was tied to a specific threat actor targeting Nissan's personnel records.
ShinyHunters Breach Exposes NAIC's Public Data
The National Association of Insurance Commissioners (NAIC) revealed that a breach exposed its public data after an unauthorized third party exploited a PeopleSoft vulnerability, identified as CVE-2026-35273, tied to the notorious ShinyHunters extortion group. This security issue allowed attackers to gain access to a portion of NAIC's IT systems, compromising sensitive information.
Anonymous Researcher Exploits 15 Software Products with Zero-Day Code Dump
A security bombshell has been dropped: an anonymous researcher has publicly shared exploit code for zero-day vulnerabilities in 15 software products, and hackers are already taking advantage of at least two of them. The alarming revelation has sent shockwaves through the cybersecurity community.
Malicious Chrome Extension Exploits Search Functionality for Data Interception
A malicious Chrome extension, masquerading as a popular AI search engine, was discovered to be secretly logging users' searches and address bar inputs, with Microsoft confirming that the data collection was no accident. The extension, since removed by Google, cleverly disguised itself as a legitimate tool, routing queries through an attacker-controlled server.
US Military Expands Counter-Drone Tech with Smart Shooter Deals
The US military is stepping up its counter-drone game with cutting-edge tech from Smart Shooter, a company that's revolutionizing the way soldiers take down small, fast-moving drones. Their innovative Smash 2000LE system, a rifle-mounted fire control tool, digitally identifies and engages targets with pinpoint accuracy.
Quantum Deadline Looms: CISOs Face Post-Quantum Readiness Mandate
The clock is ticking: by December 31, 2030, federal high-value systems must adopt post-quantum cryptography for key establishment, and by December 31, 2031, for digital signatures too. Are your systems ready to beat the quantum deadline?
Supreme Court Bolsters Tech Privacy with Landmark Ruling
In a landmark ruling, the Supreme Court has bolstered tech privacy, declaring that bulk collection of phone location data from a geographic area constitutes a Fourth Amendment search. This game-changing decision protects individuals' reasonable expectation of privacy, limiting government access to their personal data.
Navy Draws Strong Interest in Tech-Focused Reserve Unit
The Navy's innovative tech-focused reserve unit, NIU, has sparked a surge of interest with over 200 applications pouring in for its direct commission officer program. The unit aims to tap into the expertise of top tech talent, specifically seeking seasoned pros in areas like cybersecurity, AI, and autonomous systems.
The Gentlemen Ransomware Gang Exposes Advanced Tactics
Meet The Gentlemen, a notorious ransomware gang that's made a name for itself with sophisticated tactics, ranking among the top 10 ransomware actors in just a few months. Since February 2026, they've been wreaking havoc across industries and geographies, with a strong presence in Brazil, China, Indonesia, Taiwan, and Thailand.
US Engine Deal Propels India's Fighter Jet Ambitions
India's quest for self-reliant fighter modernization has hit a major roadblock: the elusive jet engine, and now a deal with US manufacturer General Electric for 15 F414 engines to power its Advanced Medium Combat Aircraft prototypes has seen costs triple. This development cements America's grip on India's indigenous fighter ecosystem for decades to come.
Russia Arms Commercial Tanker with Heavy Machine Guns
Meet the Marshal Vasilevskiy, a 945-foot LNG tanker that's moonlighting as a heavily armed behemoth, sporting sandbagged machine-gun positions on its deck. This unusual floating fortress is Russia's only floating storage and regasification vessel, supplying the exclave of Kaliningrad with a secure gas supply.
Honeywell Aerospace Spins Off, Begins Trading Independently
Honeywell Aerospace has officially taken flight as an independent company, marking a new era of innovation and growth in the aerospace and defense industry. With its separation from Honeywell, the company is now free to focus on its mission to protect and advance the promise of flight, creating a safer and more connected world.
Microsoft Extends Windows Server 2022 Hotpatching Support Until 2027
Microsoft just gave you an extra year of uninterrupted protection, extending hotpatching support for Windows Server 2022 through October 2027 - so you can keep your systems secure and running smoothly without the hassle of reboots. Devices already enrolled will continue to receive monthly security updates with zero downtime.
Mustang Panda Exploits Zoho WorkDrive in Indian Government Attacks
Meet the sneaky hackers known as Mustang Panda, who've been using a clever trick to steal sensitive info from Indian government machines - by hiding in plain sight within legitimate cloud traffic on Zoho WorkDrive. Their covert operation went undetected for 10 days, blending in seamlessly with routine cloud activity.
OpenAI Unveils GPT-5.6 Sol Cybersecurity Model With Restricted Access
OpenAI has just unveiled GPT-5.6 Sol, its most advanced cybersecurity model yet, and is giving a select group of government-approved partners a sneak peek. This limited preview marks the first release in the GPT-5.6 series, with broader access promised down the line.
Linux Flaw Exposes Multi-Tenant Environments to Root Privilege Escalation
A newly discovered Linux flaw, dubbed DirtyClone, lets local users easily gain root privileges on popular systems like Debian, Ubuntu, and Fedora - putting shared environments at risk of a devastating breach. This vulnerability is especially alarming in setups with user namespaces enabled or privileged containers deployed.
US Offers Bounty for Hackers Targeting WhatsApp, Signal Users
The US government is cracking down on hackers targeting WhatsApp and Signal users, offering up to $10 million for information that helps track down those behind the attacks. The move aims to take down Russian-linked hacker groups that have been phishing US officials, military leaders, and allied personnel.
Millenium RAT Infects 60,000 Devices in Global Cyber Campaign
A new iteration of the Millenium RAT malware has infected 62,289 devices worldwide, with a staggering 39,730 compromises occurring in just the first quarter of 2026, thanks to its upgraded native C++ architecture that helps it evade detection. This powerful Telegram-controlled remote access trojan has become even more elusive in its latest version.
Human Error Exposes Security Breaches Despite AI Advances
Despite advancements in AI, human error continues to expose security breaches, as seen in a recent Salesforce supply-chain compromise where a legacy credential was exploited. A company called Klue, which integrates with Salesforce, was compromised when attackers used OAuth tokens to access customer data.
Hackers Exploit Oracle E-Business Flaw in Targeted Attacks
Hackers are actively exploiting a critical Oracle E-Business flaw, CVE-2026-46817, with a near-perfect CVSS score of 9.8, in targeted attacks, allowing for unauthenticated HTTP takeover. This alarming vulnerability has no known previous exploitation and no public proof-of-concept code exists, making it a high-risk threat.
Hackers Exploit SimpleHelp Flaw to Deploy Djinn Stealer Malware
Hackers have found a way to exploit a flaw in SimpleHelp, using it as a trusted channel to deploy the Djinn Stealer malware and wreak havoc on managed systems. This critical vulnerability, CVE-2026-48558, allows attackers to create highly privileged accounts without authentication, putting thousands of systems at risk.