Tag: emerging threats
8082 articles
Spyware Exploits Targeted Ads to Infect Devices Worldwide
Meet AdFection, a sneaky campaign that's exposing the dark side of digital advertising, where Israeli firm Discover-Tech's platform Controlium helps mercenary spyware distributors infect devices worldwide with just a single ad. It's a stark reminder that online ads can be more than just annoying - they can be a gateway to cyber attacks.
Pentagon Showcases Global Reach Amid Budget Uncertainty
The calm of a business-focused conference was shattered when six anti-war protesters stormed the stage, disrupting a high-stakes discussion on autonomous warfare featuring Pentagon chief Pete Hegseth and top military brass. The tense moment sparked a show of patriotism from some audience members, who countered the protesters' chants with a rousing "USA, USA".
Websites Deploy Indirect Prompt Injection via HTTP Headers
Thousands of websites are secretly sending instructions to AI agents through HTTP headers, using a sneaky tactic called indirect prompt injection to manipulate these intelligent systems. This surprising attack vector allows hidden messages to be embedded in web pages, emails, files, or tool results, and is a growing concern for security researchers.
Unit 42 Exposes PEERSTITCH, Novel FortiGate Implant
In a shocking discovery, Unit 42 uncovered PEERSTITCH, a novel FortiGate implant used by attackers to exfiltrate sensitive data from over 500 firewalls, all originating from a single compromised appliance. The breach began with a clever exploitation of a previously unknown vulnerability, CVE-2024-47575, in FortiManager's FMG-Access channel.
Federal Agencies Scramble to Fortify Infrastructure Ahead of Post-Quantum Deadlines
The clock is ticking: with post-quantum deadlines looming, federal agencies are racing against time to fortify their infrastructure and shield sensitive transactions from potential cyber threats. By 2030 and 2031, they must adopt post-quantum cryptography to protect high-value assets and digital signatures.
US Army Braces for Supply Chain Impacts as Critical Mineral Deadline Looms
The US Army is gearing up for potential supply chain disruptions as a critical mineral deadline approaches, with some impacts expected as early as January. The Army is bracing for a gradual effect, rather than a catastrophic one, as defense companies work to map their supply chains and comply with new rules.
Australia Fortifies Undersea Power with AUKUS Strategy
AUKUS is a game-changing strategy that's not just about acquiring submarines, but about empowering Australia to dominate the undersea landscape in a rapidly shifting Indo-Pacific. By building undersea power, Australia will gain the capacity to understand, monitor, protect, and defend its underwater interests like never before.
Foreign Actors Exploit AI Chatbots in U.S. Election Influence Campaigns
In a shocking display of election meddling, a network of hyperlocal websites sprouted up across 14 states, spreading influence and propaganda in a remarkably coordinated effort. These sites, registered in a matter of minutes, seemed designed to sound local but were actually part of a large-scale operation to sway US voters.
US, South Korea Weigh Wartime Control Transition
As the US and South Korea consider a historic transition of wartime control, a critical decision looms for the two commanders-in-chief: what level of support will the US provide if South Korea takes the lead in deterring North Korea? The 2026 US National Defense Strategy hints at a limited but crucial role for the US in this new era.
Google Bolsters Android Defenses Against AI-Powered Messaging Scams
Stay one step ahead of scammers with Google's latest Android defense: AI-powered analysis that scrutinizes suspicious conversations and flags potential fraud, all while keeping your private chats safe. Google Messages now offers Gemini-backed cloud protection that helps shield you from sophisticated messaging scams.
Ransomware Groups Exploit VPN Vulnerability
Ransomware groups like Qilin and Settra are sneaking into organizations by exploiting a VPN vulnerability, disguising their malicious activity as legitimate remote work. This allows them to steal credentials, move laterally, and deploy ransomware undetected until it's too late.
Hackers Exploit Devices to Build Global Proxy Network
Meet the sneaky hackers who've been secretly hijacking devices worldwide to build a massive proxy network, making a profit by reselling innocent victims' internet bandwidth. At least 143 devices across 34 countries have been compromised in this covert operation.
Malicious Packages Infiltrate Arch Linux Repository with Rootkit Malware
Malicious actors have struck the Arch Linux community by uploading trojanised packages to the Arch User Repository, cleverly disguising them as legitimate AUR helpers like yay and paru. The fake packages, including a malicious yyay package, used identical source code and URLs to blend in with the real deal.
Silent Lynx Exploits WinRAR Flaw in CIS Government Cyberattacks
Meet Silent Lynx, a stealthy cyber threat actor wreaking havoc in Central Asia and beyond, exploiting a WinRAR flaw to launch targeted attacks on government agencies and embassies across nine countries in the CIS region. Their campaign, tracked from January 2025 to May 2026, has left a trail of breaches in its wake.
Citizen Lab Exposes Candiru Spyware Infections Through Targeted Online Ads
Meet the sneaky spyware that can infect your device with just a single online ad - no clicks required. Citizen Lab researchers uncovered a cunning ad-delivery chain used by Discover-Tech to spread zero-click spyware, infecting targets with alarming precision.
Healthcare Ransomware Attacks Surge, Exposing Sector's Vulnerabilities
Healthcare organizations are being hit with a staggering 3.33 ransomware attacks per day, making them a treasure trove for hackers seeking sensitive information and massive payouts. This surge in attacks highlights the sector's alarming vulnerability to cyber threats.
Next.js Patches Code Execution Flaws in Caching, SVG Processing
Critical security flaws in Next.js have been patched in an out-of-band update, fixing two remote-code-execution bugs and one denial-of-service vulnerability that left applications open to attacks. The severe flaws, rated 9.5 on the CVSS scale, affected React Server Components and SVG processing.
NGINX Disrupts Multiple Flaws, Including Possible RCE and TLS Session Forgery
NGINX just dropped a critical update to squash five vulnerabilities, including a long-standing flaw dating back to May 2005 that could lead to code execution or crashes in certain configurations. The patches fix memory bugs, a TLS session-ticket weakness, and an HTTP/3 parser issue that could put your system at risk.
Help TDS Exposes Hotejka's Tech Support Scam Network
Infoblox has uncovered a tech support scam network run by Help TDS, which tricks users into calling centers where scammers use social engineering to get them to install remote desktop tools. This scam has been linked to a Russian affiliate program called Hotejka, which may be a rebrand of the traffic monetization operation ROI777.
CenterPoint Energy Breach Exposes 1M Customer Records
A security breach at CenterPoint Energy has put the personal data of around 1 million Texans at risk, with hackers gaining unauthorized access to customer information through an externally facing system. The incident was discovered after hackers claimed to have stolen a dataset, prompting an investigation that confirmed the breach.
Adtech Firm Exposes Online Ads as Spyware Vector
Meet Discover-Tech, an Israeli adtech firm with a shady secret: its Controlium platform has been caught exploiting online ads to spy on users across over 70,000 mobile apps and 120,000 websites.
Bank of America Bolsters Tech Staff to Address AI-Discovered Vulnerabilities
Bank of America is ramping up its tech squad by hiring 1,000 contractors to tackle a surge in security work sparked by AI-discovered vulnerabilities. The move comes as the bank faces a hefty remediation bill of over a couple of hundred million dollars to address the issues flagged by Anthropic's Mythos model.
Danfoss Controllers Disappear After Cyber-Attack
A massive 71% of internet-exposed Danfoss StoreView control panels in France vanished within just three days following a cyber-attack that crippled hundreds of supermarkets, suggesting a frantic effort to pull systems offline rather than fix them. This sudden disappearance was tracked by Censys researchers, who monitored the dramatic decline from 1,825 exposed hosts on October 11 to just 537 by October 14.
AI Pentesting Matches Human Skill in Vulnerability Detection
Meet Daniel Thatcher, a seasoned security research engineer with 12 years of pentesting experience, who's shaking up the game with Intruder's AI-powered pentester that's giving human skills a run for their money in vulnerability detection. He shares his insights on what works - and what doesn't - in the world of AI-driven pentesting.