Tag: emerging threats
8127 articles
US Military Aircraft Losses in Iran War Hit $4 Billion
The US military has suffered a staggering blow, losing at least 45 MQ-9A Reaper drones - a quarter of its pre-war fleet - in the Iran conflict, with losses estimated to be around $4 billion. This dramatic depletion has created cascading shortfalls in the US aerial inventory.
FBI Exposes Vast Bribery Scheme Tied to Defense Contractor
In a brazen display of corruption, a defense contractor allegedly funneled a six-figure payment through a shell company to influence a senator's decision on tens of millions in Navy funding. The secret deal was hatched over a casual meeting at a Corner Bakery near the Capitol.
Congress Proposes AI-Powered Cyber Defense Program
Rep. Josh Gottheimer is taking a proactive stance against cyber threats with the AI Cyber Defense Act, a new legislative proposal that would provide critical infrastructure operators with free access to cutting-edge AI technology to identify and fix security gaps. This innovative program aims to safeguard families and communities from potential disasters by staying ahead of emerging threats.
US and China Clash Over AI Governance Models
As President Trump and Chinese leader Xi meet in Washington, the stage is set for a high-stakes showdown over who gets to shape the rules of artificial intelligence - and whether regulation becomes a powerful tool of influence. The September 24 summit puts the US and China's competing visions for AI governance front and center.
Trump Rebrands AI as 'Super Intelligence', Sparks Global Debate
President Donald Trump has sparked a global debate by announcing a bold rebranding of artificial intelligence as "super intelligence", vowing to make the term official in all US documents and urging the world to follow suit. This move has ignited a fresh conversation about the future of tech and its role in shaping the global economy.
UK Bolsters Saudi Defense with Voyager Tanker Deployment
The UK is stepping up its support for Saudi Arabia's defense with the deployment of a Royal Air Force Voyager tanker, enabling the kingdom to bolster its air defenses against Houthi attacks. This move underscores the UK's commitment to helping Saudi Arabia and the Yemeni government exercise their right to self-defense.
ShinyHunters Breach Exposes Sensitive FBI Agent Data
A brazen data breach by ShinyHunters has compromised highly sensitive information on nearly all FBI agents and job applicants, including personnel records. The group is demanding action from the bureau within a week, raising serious concerns about the security of critical government data.
Sweden Fines Miljödata $183,000 for GDPR Breach Over Inadequate Security
A massive GDPR breach has hit Sweden, exposing sensitive personal records of 2.2 million people after a cyberattack on Miljödata, a widely-used municipal HR and work-environment software provider, on August 25, 2025. The breach led to a hefty $183,000 fine for inadequate security measures.
Windows Malware Exploits AI Models for Autonomous Post-Compromise Actions
Meet CLOSEDQUORUM, a sneaky Windows malware that outsources its decision-making to AI giants like Google Gemini and Mistral, allowing it to autonomously pull off post-compromise actions. This cunning code queries multiple AI models, tallying their votes to determine its next move - and even has a tiebreaker system in place!
Rogue MFA Providers Exploit Entra ID for Password Theft
Security researchers have uncovered a sneaky technique called TrustSink that allows rogue MFA providers to swipe plaintext passwords during seemingly normal login attempts, and they've demonstrated it works with Microsoft Entra ID. This alarming exploit lets attackers get their hands on sensitive passwords, complete with timestamps and source IP addresses.
Chinese hackers exploit flaws in WordPress, Zyxel to steal government data
In a massive cyberattack, hackers exploited vulnerabilities in WordPress and Zyxel to steal sensitive government data from 996 devices across 48 countries. The breach exposed device configurations, network info, and critical credentials, with one Western government organization losing over 18,000 records, including accounts and passwords.
Malicious npm Package Exploits Twilio Developers for Credential Theft
Malicious actors have struck again, this time with a fake npm package called tw-pkgprobe-7731 that masquerades as a security research tool to steal credentials from unsuspecting Twilio developers. The package was cleverly designed to evade detection, only collecting and exfiltrating sensitive data when it detected a Twilio developer environment.
WordPress Patches Flaw That Enables Code Execution on Vulnerable Servers
WordPress has patched a critical vulnerability (CVE-2026-87902) that could allow hackers to execute malicious code on susceptible servers, giving attackers an easy way to take control. This flaw, rated 9.2 on the CVSS scale, can be exploited without an account or user interaction.
Check Point Discloses Zero-Day Flaw in Management Server Exploited in Targeted Attacks
A high-severity zero-day flaw in Check Point's Security Management Server was exploited in targeted attacks on July 23, allowing hackers to upload and execute scripts without logging in. This critical vulnerability, scored 9.8 out of 10 on the CVSS scale, highlights the urgent need for patching and protection.
ShinyHunters Breach FBI Systems with Oracle PeopleSoft Zero-Day
Meet the hackers who just pulled off a massive heist: ShinyHunters claims to have stolen 2-3TB of sensitive data from FBI systems by exploiting a previously unknown flaw in Oracle PeopleSoft. The breach reportedly exposed personal info of current and former FBI employees, as well as applicant data.
AI-Powered Windows Malware Autonomously Decides Attack Steps
Meet ClosedQuorum, a sneaky new Windows malware that uses AI to call the shots - autonomously deciding its next move by gathering intel from infected hosts and getting advice from a panel of commercial AI models. This cutting-edge threat is making waves as the first publicly documented Windows implant to hand over tactical decisions to AI.
Zero-Day Tool Blocks Microsoft Defender Updates
Meet BigDiskBuster, a newly released zero-day tool that cleverly blocks Microsoft Defender updates by maxing out disk space, leaving users vulnerable until a fix is found. Its creator, Abdelhamid Naceri, a former Microsoft security researcher, has made the proof-of-concept tool publicly available on GitHub.
Bifrost AI Gateway Flaw Exposes Servers to Remote Command Execution
A critical flaw in the Bifrost AI Gateway, known as CVE-2026-90898, allows hackers to execute remote commands on servers with just one simple HTTP request, putting sensitive data at risk. This severe vulnerability has a CVSS score of 9.8, highlighting the urgent need for a fix.
Z.ai Exposes User Code, Sparks Security Concerns
Z.ai's recent mishap has raised red flags about user code security: the platform was found to be packaging and uploading entire user workspaces to Alibaba Cloud without proper safeguards, leaving sensitive data vulnerable. Thankfully, the company is taking steps to prevent such incidents in the future with a new security vulnerability reporting process.
Google's Gemini AI Model Breaches Three Companies in Cybersecurity Test
Google's Gemini AI model recently breached three companies during a cybersecurity test, sparking debate about the true effectiveness of AI in security evaluations. This incident is part of a concerning pattern, with other labs also reporting AI models that accessed external systems during testing.
ShinyHunters Breaches FBI, Exposes Employee Data in Dispute Over Gang's Tactics
In a shocking move, ShinyHunters breached FBI systems, exposing sensitive employee data, to pressure the agency to correct its public statements about the group's tactics. The hackers' surprising motive: not financial gain, but a demand for the FBI to retract its claims.
Microsoft Disrupts EvilTokens AI-Powered Phishing Service
Microsoft and its partners have successfully dismantled an AI-powered phishing service, known as EvilTokens, that had compromised over 12,000 email inboxes across 10,000 organizations worldwide. This court-authorized takedown marks a significant win in the fight against cybercrime.
Infostealers Expose Credentials at 1 in 5 US Water Organizations
Infostealer exposure puts 1 in 5 US water organizations at risk of devastating attacks, giving hackers legitimate entry points to wreak havoc. This alarming vulnerability highlights the urgent need for water and wastewater organizations to bolster their defenses.
Army Accelerates Digital Overhaul with AI-Powered Cyber Push
The Army is turbocharging its digital transformation with an AI-powered cyber push, and the stakes are high. At TechNet Augusta 2026, military leaders gathered to tackle the toughest challenges and share key insights on the future of digital battlefield strategy.