Tag: emerging threats
8129 articles
Transparent Tribe Exploits GitHub for Rust Backdoor Deployment
Meet RUSTYSHADE, a sneaky Rust-based backdoor that's being used by Transparent Tribe to target government and defense organizations in India and Afghanistan, leveraging private GitHub repositories for covert communication. This latest tactic is part of a broader campaign, dubbed Operation RapidRust, aimed at infiltrating sensitive targets.
Malware Campaign Targets LastPass Users with Rapuncel Infostealer
Beware of a sneaky malware campaign targeting LastPass users with the Rapuncel Infostealer - hackers are using fake GitHub repositories and search engine tricks to steal your info. Victims who search for popular software like LastPass Authenticator may unknowingly download the malware.
Microsoft Enhances Teams Security with Custom File Extension Blocking
Microsoft Teams just got a major security boost: admins can now customize file type blocking to shield their organization from malicious threats, giving them more control over what file types are allowed or blocked. This update builds on Teams' built-in safety feature, Weaponizable File Protection, which scans conversations for high-risk file attachments.
Microsoft 365 Sharing Risks Exposed in Enterprise Environments
Did you know that 61% of security leaders admit that access to shared files in Microsoft 365 often stays active longer than it should, leaving sensitive information vulnerable? This alarming trend highlights the hidden risks of easy cloud collaboration.
Flaw in AI Coding Agents Exposes Users to Plugin Swaps
A newly discovered flaw, dubbed Plugin4Shell, allows hackers to swap out a plugin installed by an AI coding agent with malicious code, putting users at risk of having their files read, credentials stolen, and accounts compromised. This vulnerability was found in all four major AI coding agents, and the affected vendors have been notified.
Browser Alerts Expose Rogue Scripts in Thousands of Sites
Thousands of websites, repositories, and documentation pages are unwittingly exposing users to rogue scripts, thanks to a long-abandoned content delivery network domain that was re-registered by a malicious actor. This simple domain hack has opened the door to a massive security vulnerability.
Microsoft Fixes Critical Azure AI Foundry Flaw Enabling Privilege Escalation
Microsoft just patched a critical flaw in Azure AI Foundry that allowed unauthorized attackers to escalate privileges over a network - a vulnerability that earned a perfect 10.0 CVSS score for its severity. Thankfully, there's no evidence it's been exploited in the wild... yet.
Settra Ransomware Targets Retail, Manufacturing with Advanced Tactics
Meet Settra, a sneaky new ransomware variant that's targeting retail and manufacturing firms with clever tactics, leaving a trail of chaos in its wake. First spotted in June, this malicious software has already been linked to two separate attacks, one in July and another in September.
Microsoft Fixes Defender Bug Behind False Antivirus Alerts
Microsoft has squashed a bug in its Defender Antivirus software that was causing false alerts saying the protection was turned off, even when it was working properly. The fix is now live in update version 4.18.26080.4, which you can install to get back to worry-free browsing.
npm Packages Deliver WeaselBiscuit Stealer to Harvest Chrome Data
Meet WeaselBiscuit, a sneaky new malware that's small but packs a punch, stealing Chrome data by masquerading as harmless npm packages. This stripped-down stealer is designed to evade detection, and it's being spread through 13 infected npm packages.
Threat Actor Exploits LLM to Craft PhantomRaven npm Stealer
Meet PhantomRaven, a sneaky JavaScript information stealer crafted by a financially motivated actor - and likely created with the help of a large language model, a cutting-edge AI tool. The surprising twist? The malware's code reveals telltale signs of AI involvement, including verbose comments and placeholder code.
Check Point Flaw Enables Hackers to Execute Code with Root Privileges
A critical flaw in Check Point's Security Management Server has been discovered, leaving all deployments vulnerable to hackers who can exploit it to execute code with root privileges, putting the entire firewall estate at risk. This severe vulnerability, tracked as CVE-2026-91843, requires immediate attention with Check Point releasing security updates to fix the issue.
Microsoft Fixes Excel Copy-Paste Bug in Security Update
Frustrated with Excel's stubborn copy-paste problem after the September 2026 security update? Thankfully, Microsoft has swooped in with a fix, resolving the silent failure that left users scratching their heads.
Ransomware Attacks Surge in Manufacturing Sector
Ransomware attacks on manufacturing organizations are surging, with a staggering 22% of all victims coming from this sector over the past year, making it the most targeted industry for the fifth year in a row. This alarming trend shows a steady rise in attacks since 2022, with a significant spike in early 2026.
RatHat Malware Exploits ADB to Maintain Shell Access on Android Devices
Meet RatHat, a sneaky Android malware that uses Accessibility tricks and ADB exploits to break free from the sandbox and gain shell-level control on your device. By combining these tactics, RatHat can secretly pair with your device and run malicious daemons with elevated privileges.
USAF Weighs Reviving F-16 Production Amid Fighter Shortfall
The US Air Force is considering reviving F-16 production to address a fighter shortfall, with Lockheed Martin pitching an enhanced F-16G model featuring advanced capabilities like conformal fuel tanks and an infrared search-and-track system.
Australia Urges Faster Defence with Commercial Providers
Australia can accelerate its defence capabilities by months, not years, by leveraging commercial providers - a crucial strategic choice in today's fast-paced security landscape. By adopting commercially owned, commercially operated models, the government can rapidly acquire cutting-edge solutions without the hefty upfront costs.
US Clears $24B F-35 Sale to Saudi Arabia
The US has greenlit a massive $24.3 billion deal for Saudi Arabia to purchase up to 48 F-35A aircraft, strengthening the countries' security partnership. The sale, which now heads to Congress for review, aims to bolster long-term cooperation and stability in the region.
Air Force Pursues Rapid Tech Integration Amid Safety Focus
The Air Force is speeding up tech integration while prioritizing safety, with a focus on balancing urgency with caution to avoid unnecessary risks. Brig. Gen. Mark Massaro emphasizes that safety always comes first, especially given the potentially hazardous nature of their work.
China Develops AI to Refine Global Propaganda Tactics
Meet Huanyu Zhiying 1.0, an AI system that can simulate foreign media reporting and craft tailored responses to shape global public opinion. This cutting-edge tool can mimic the perspectives of over 10,000 users across 18 countries, allowing China to refine its global propaganda tactics like never before.
US Approves $24 Billion F-35 Sale to Saudi Arabia
The US has greenlit a massive $24 billion deal to sell 48 F-35 fighter jets to Saudi Arabia, a move that will bolster the security of a key ally in the Gulf region and support US foreign policy goals. This sale will help Saudi Arabia continue to promote stability and economic growth in the area.
US Army Accelerates Drone Training Amid Electromagnetic Spectrum Challenges
The US Army is ramping up its drone training program to keep pace with its rapidly expanding fleet, but a shortage of trained operators is emerging as a major challenge. With hardware no longer a bottleneck, the Army is now focused on getting more pilots qualified to operate the drones.
F-16 Fighter Jet Crashes in Michigan, Pilot Ejects Safely
A US Air Force F-16 Fighting Falcon, part of the 149th Fighter Wing from Texas, crashed in northern Michigan, but thankfully the pilot ejected safely. The incident occurred in Blair Township, with air traffic control audio hinting at a possible cause.
Northrop, Lockheed Pursue Munitions Deals Amid Budget Uncertainty
Northrop Grumman is seizing the opportunity to collaborate with new partners and showcase its cutting-edge munitions products, aiming to secure a larger share of the market. The company is in active discussions with major contractors on around 10 agreements covering eight key weapons systems.