Tag: emerging threats
8126 articles
Rydox Admin Pleads Guilty in Major Cybercrime Crackdown
In a major cybercrime crackdown, Ardit Kutleshi, a 28-year-old Kosovar national, has pleaded guilty to running Rydox, an illicit online marketplace that sold stolen personal info, including Social Security numbers, credit card details, and login credentials, of thousands of US citizens. The guilty plea comes after a massive investigation into over 7,600 sales of sensitive data on the platform.
North Korean Hackers Steal $351.6M from Bitget in Backend Compromise
In a shocking security breach, North Korean hackers made off with a whopping $351.6 million from cryptocurrency exchange Bitget, compromising a limited number of hot wallets. Fortunately, customer account balances remain intact and trading operations are still running smoothly, with withdrawals temporarily paused while the company conducts a thorough security review.
Roundcube Flaw Exploited in Wild, Warns Canadian Cyber Centre
A critical Roundcube Webmail vulnerability, CVE-2026-48842, is under active exploitation, allowing unauthenticated attackers to inject malicious SQL code and potentially expose sensitive mail account credentials and messages. This flaw affects versions 1.6.x and 1.7.x of Roundcube Webmail, and has been patched in versions 1.6.16 and 1.7.1.
RemControl Trojan Targets Android Users with Accessibility Exploit
Beware: the RemControl Trojan is targeting Android users with a sneaky accessibility exploit, putting over 30 major banks and their customers at risk across six countries. It starts with a clever fake Google Play Store page trick, disguising itself as a harmless app update.
Researchers Intercept AliExpress Phishing Domains Before Activation
EfficientIP Research Labs swooped in to stop a phishing scam, intercepting 10 AliExpress domains before they could be used to trick unsuspecting victims. The domains, tracked from June 9 to July 2, were part of a sophisticated phishing operation that was thankfully shut down before activation.
North Korean Hackers Steal $351.6 Million in Bitget Crypto Exchange Breach
In a shocking breach, North Korean hackers made off with a staggering $351.6 million from the Bitget crypto exchange, prompting the company to temporarily suspend withdrawals while it investigates and beefs up security. Fortunately, customer accounts remain unaffected, with deposits and trading continuing as usual.
CISA Flags WSO2, Adobe Commerce Flaws as Actively Exploited
Stay ahead of cyber threats: Federal agencies must patch WSO2 and Adobe Commerce flaws by September 27, 2026, to avoid exploitation, as CISA flags these vulnerabilities as actively exploited. The high-severity bugs, including a path traversal flaw and an authorization issue, can lead to remote code execution and unrestricted file uploads.
Cloudflare Fixes Flaw Exposing Leftover Disk Data Between Containers
A startling security flaw was discovered in Cloudflare's container storage system, allowing leftover disk data to be exposed between containers, with researchers finding remnants on 18 of 24 production tests and 20 of 22 underlying machines worldwide. This vulnerability was caused by a misconfigured setting that reused disk blocks without properly wiping them clean.
UK Grounds Hawk Trainer Jets After Crash Prompts Safety Probe
The Royal Air Force has grounded its Hawk T1 and T2 training jets after a dramatic crash near homes at RAF Valley on Anglesey, and launched a formal investigation into the incident. Both pilots ejected to safety and are expected to make a full recovery.
Senate Leaders Unveil Bill to Bolster Telecom Cybersecurity
Senate leaders Mark Warner and Ted Cruz have introduced the Telecommunications Cybersecurity and Resilience Act, a bipartisan bill aimed at fortifying the nation's telecom infrastructure against devastating cyberattacks like the historic Salt Typhoon hack. The legislation seeks to boost cybersecurity standards and bring government and industry together to protect critical infrastructure.
China Obtains F-35 Parts in Hong Kong Shipment Breach
A shipment of F-35 parts bound for the US took a mysterious detour from Australia to South Korea to Hong Kong, where Chinese authorities seized the components, including a cockpit canopy and a weapons-bay door, and have yet to return them. The incident has raised serious questions about security breaches in the international logistics system.
Air Force Scales Back China Think Tank Amid Budget Cuts
The Air Force's China Aerospace Studies Institute is facing a significant blow to its research capabilities due to budget cuts, with the loss of its 10-member civilian staff that handled critical analysis and translation work. Without these experts, the institute's ability to provide valuable insights on China is severely compromised.
US Probes Russian Ownership of Phone-Hacking Firm with Security Agency Contracts
The US government has launched an investigation into the Russian ownership of Oxygen Forensics, a phone-hacking firm that has sold its software to top US security agencies, including the Secret Service and Homeland Security. The probe led to the arrest of the company's US CEO and a Russian national allegedly controlling the firm.
France Bolsters Saudi Arabia's Red Sea Oil Defenses
France is stepping up to protect a crucial oil hub in Saudi Arabia, deploying troops, radar systems, and defense equipment to the Yanbu energy facility on the Red Sea to safeguard the vital oil lifeline. The move, announced by President Emmanuel Macron, is strictly defensive, aimed at shielding the site from potential attacks that could disrupt global oil supplies.
Governments Adapt SATCOM Systems for Dynamic Space Environment
The Australian Department of Defence scrapped its plans for a single-orbit SATCOM system in 2024, recognising that a rapidly changing space landscape and emerging threats demanded a more adaptable approach. Instead, they're prioritising resilient, multi-orbit communications systems to keep missions connected in an increasingly dynamic environment.
Navy Launches Robotics Warfighting Center to Accelerate Autonomous Systems Integration
The Navy's new Robotics and Autonomous Systems Warfighting Development Center will harness expertise from across the country to revolutionize naval power, says Rear Adm. Melvin Smith. The center's mission is to connect and accelerate the development of unmanned systems, driving innovation and dominance in the field.
China Builds Mothership for Large Uncrewed Submarines
China is taking its uncrewed submarine program to the next level with the construction of a massive mothership, as evidenced by satellite images of a boxy vessel taking shape at Hudong-Zhonghua Shipyard in Shanghai. This new, specialized ship is a significant upgrade from the floating docks currently used to house China's XXLUUV prototypes.
China Mobilizes Militia for Counter-Drone Defense
China's People's Militia is trading in its Cold War-era rifles and machine guns for a new role: defending the skies against drones with advanced air-defense systems. The shift is part of a larger trend, with recent drills and reports showcasing the militia's growing focus on counter-drone warfare.
Pakistan's Air Power Export Strategy Gains Traction
The JF-17 Thunder is gaining momentum as a top air power export, with Azerbaijan reportedly landing a $4 billion deal for 40 jets, plus extensive infrastructure and training support. Turkey's Aselsan has also successfully integrated its advanced radios into the JF-17, paving the way for more third-party subsystem collaborations.
Lawmakers Push CISA to Bolster Biotech Cyber Defenses
US lawmakers are taking a crucial step to safeguard America's biotech sector by introducing bills that would boost cyber defenses for this rapidly evolving industry, deemed vital to the nation's economic and national security. The proposed legislation aims to fortify protections for biotech infrastructure, biomanufacturing, and sensitive biological data.
Malicious npm Packages Evade Traditional Defenses
Don't rely solely on install-time scanning to protect your projects - also use runtime behavioral analysis to catch malicious npm packages that can evade traditional defenses. JavaScript's widespread use has even led some to label it a bigger security pest than Flash.
NASA's SR-71 Blackbird Vanishes From Public View
NASA's SR-71 Blackbird has seemingly vanished from public view, sparking curiosity about its current whereabouts. A recent presentation by NASA Administrator Jared Isaacman hinted at an exciting new era for X-planes, leaving fans wondering if the legendary Blackbird might be getting a successor.
Denmark Warns of Rising Russian Hybrid Attacks on NATO States
Get ready for a new wave of attacks: Denmark's Defence Intelligence Service warns that Russia is gearing up to launch more frequent and more severe hybrid attacks on NATO states. The threat level is rising, with potentially greater consequences for targeted countries.
AI Tools Fuel $18,000 Data Heist Across 27 Firms
In a shocking near-autonomous theft campaign, hackers used AI tools to siphon data from 27 companies, including a Fortune 500 firm and a major US airline, in a matter of hours. The attackers launched at least 105 attacks in just five days, leaving a trail of compromised businesses in their wake.