Tag: emerging threats
4771 articles
US Seizes Infrastructure Tied to Huione Cybercrime Marketplace
The US Justice Department has seized a crucial cloud computing account linked to Huione Group, a key player in a massive cybercrime operation that funneled billions in stolen funds through Southeast Asian scam centers. This significant takedown disrupted the technological backbone that allowed the illicit money to be transferred, moved, and concealed.
KDDI Breach Exposes 14.2 Million Email Credentials
A massive data breach at KDDI has potentially exposed a staggering 14.2 million email addresses and passwords, putting countless users at risk of cyber threats. The breach was detected on June 17, and although KDDI quickly took action to prevent further intrusion, the full extent of the incident is still under investigation.
Cisco Unified CM flaw exploited in targeted attacks
Hackers are actively exploiting a high-severity flaw in Cisco Unified Communications Manager, allowing them to gain unauthorized access and control over vulnerable systems. This newly discovered vulnerability, tracked as CVE-2026-20230, has a CVSS score of 8.6, indicating a significant threat to security.
Tata Electronics Hit by Cyberattack, Data Leaked
Tata Electronics recently fell victim to a cyberattack, but swift action was taken to contain the breach and minimize disruption, with the company confirming that its operations remained uninterrupted. The incident affected parts of its IT infrastructure, but established response protocols were activated to mitigate the impact.
Microsoft Rolls Out Windows 11 Update with Point-in-Time Restore Feature
Microsoft's latest Windows 11 update is here, bringing with it a game-changing feature: Point-in-time restore, which lets you snap your PC back to a previous state in just minutes. With this update, you can easily turn back the clock and get your computer up and running smoothly again.
FortiBleed Exposes 110 Million Credentials in Global Firewall Hack
A recent global firewall hack, dubbed FortiBleed, has exposed a staggering 110 million credentials, putting countless individuals and organizations at risk. This massive breach was made possible by a sophisticated five-stage pipeline that allowed hackers to capture sensitive information, including cleartext and hashed credentials, from compromised devices.
Xsolis Data Breach Exposes 1.4 Million People's Sensitive Information
A targeted phishing attack on January 20, 2026, led to a massive data breach at Xsolis, exposing sensitive information of 1.4 million people after the company detected unauthorized activity on its network two days later. Xsolis quickly sprang into action, containing the breach and launching a thorough investigation with cybersecurity experts.
MacOS ClickFix Attack Exploits Terminal Commands to Spread Infostealer
Beware of a sneaky new attack on macOS, known as ClickFix, that tricks you into pasting a Terminal command, allowing hackers to silently download and launch info-stealing malware on your device. This cleverly crafted scam starts with a fake CAPTCHA page, convincing victims to unwittingly give attackers a backdoor to their sensitive data.
US Eyes Civilian Hackers to Bolster Cyber Operations
The US is considering a game-changing move: enlisting civilian hackers to help breach foreign computer systems, with a pilot program proposed in the Senate Armed Services Committee's defense policy bill. This bold plan would bring private sector expertise under the operational control of US Cyber Command.
Pentagon Orders Review of US Troop Posture in Europe
The Pentagon has ordered a comprehensive review of US troop deployments across Europe, sparking significant implications for the region. This pivotal move is dissected in The Break Out's latest episode, where experts Lee Ferran and Ashley Roque delve into the directive's details and potential impact.
Squidbleed Vulnerability Exposes Decade-Old Flaw in Popular Proxy Server
A 29-year-old memory leak in the popular Squid proxy server, dubbed Squidbleed, could silently expose sensitive data, including login credentials and session tokens, to hackers in certain setups. This shocking vulnerability, rooted in a 1997 code commit, highlights the importance of regularly updating and securing even the most trusted systems.
Algerian Man Charged with Running Cybercrime Marketplaces
Meet the Algerian man behind a daring cybercrime scheme that swindled hundreds of thousands of dollars from thousands of victims - all from the safety of his anonymous online hideout. He allegedly ran two illicit marketplaces, selling stolen bank account and credit card numbers, phishing kits, and other tools of financial fraud.
Scattered Spider Members Plead Guilty Over Major Cyberattacks
Two young members of the notorious Scattered Spider group have pleaded guilty to cyberattack charges in London, admitting to crippling Transport for London's computer systems and putting human welfare at risk. The guilty pleas come as prosecutors reveal the group's victims paid a staggering $115 million in ransom payments.
China's J-15 Fighter Expands Reach with Y-20A Tanker Refueling
China just took a major leap in its military capabilities, showcasing its J-15 fighter jet refueling mid-air from a Y-20A tanker - a game-changing advancement in aerial reach and endurance. This remarkable footage was quietly released in a recent People's Daily YouTube video.
Anthropic's Fable 5 Model Quickly Jailbroken
Anthropic's supposedly secure Fable 5 model was quickly exploited, with its guardrails designed to prevent cyberattacks bypassed in just days. This rapid jailbreak raises concerns about the model's safety and reliability.
Air Force Grapples with Boeing Over T-7 Data Rights
The Air Force is facing a major headache in maintaining its new T-7 Red Hawk aircraft, with a high risk of sustainment issues due to a lack of technical data and parts shortages. This looming challenge threatens to severely hinder the aircraft's upkeep, a source close to the program warns.
Trump Order Accelerates Federal Post-Quantum Crypto Migration by 2030
The clock is ticking: by December 31, 2030, federal agencies must upgrade their cryptography to protect high-value assets from the looming threat of quantum computers, with digital signatures following suit by December 31, 2031. This executive order accelerates the migration to post-quantum cryptography, compressing the government's previous timeline by four to five years.
AI Skill Exploits Security Scanners, Reaches 26,000 Agents
In a shocking experiment, a security firm created a fake AI skill that evaded detection by security scanners and reached a staggering 26,000 agents, including those on corporate accounts. The skill, designed to be harmless, was able to bypass every scanner it was tested on, raising serious concerns about the safety of AI marketplaces.
Scattered Spider hackers plead guilty to TfL cyberattack
Two young hackers, part of the notorious Scattered Spider group, have pleaded guilty to orchestrating a devastating cyberattack on Transport for London, causing millions in losses and disrupting the lives of countless commuters. The breach, which lasted several days in September 2024, forced TfL to acknowledge that sensitive customer data had been stolen.
OpenAI Targets Faster Patching with Expanded Cyber-Defense Program
OpenAI's new GPT-5.5-Cyber model has achieved a record 85.6% score on CyberGym's vulnerability test, outperforming its standard counterpart and paving the way for faster patching with cutting-edge tooling and partnerships. This major breakthrough enables verified defenders to accelerate vulnerability fixes with enhanced security capabilities.
GitHub Bolsters Supply Chain Security by Blocking Pwn Request Patterns
GitHub is stepping up its game to protect your code by blocking common attack patterns on pull requests, helping to prevent security vulnerabilities from untrusted code. As of June 18, 2026, its actions/checkout v7 will refuse risky fork checkouts by default, keeping your workflows safer from attacker-controlled code.
Malicious npm Package Exploits Supply Chain with Multi-Stage Windows RAT
Beware of sneaky impostors in your build dependencies - a recent discovery by JFrog revealed a malicious npm package masquerading as a popular JavaScript tool, hiding a multi-stage Windows remote access trojan. Treat similar-sounding package names with caution, as they could be potential delivery mechanisms for threats.
LastPass Breach Exposes Customer Data in Supply Chain Hack
LastPass recently discovered a security incident at Klue, a third-party platform they use, which led to an unauthorized actor accessing some customer data through its Salesforce environment. Fortunately, customer vaults and core products remain secure, and swift action has been taken to mitigate the breach.
Vulnerability Management Faces AI-Driven Time Crunch
The time it takes for hackers to exploit a newly discovered vulnerability has dramatically shrunk from 53 days to just 8 hours, thanks to AI-driven automation that accelerates the process of finding and weaponizing weaknesses. This alarming trend makes it increasingly challenging for organizations to keep pace with patching and remediation efforts.