Tag: emerging threats
8082 articles
X Disrupts 13,000 Accounts Tied to Foreign Influence Ops Ahead of US Midterms
In a major move to safeguard the US midterm elections, X has proactively removed over 13,000 accounts linked to foreign influence operations from Iran, Russia, and China. These accounts were using fake identities to spread and amplify divisive political content targeting candidates and public figures.
Aoki Infostealer Expands to Target AI Coding Assistant Credentials
Stolen AI coding assistant credentials can be a goldmine for attackers, allowing them to resell or rack up usage charges on the victim's account, and even gain a foothold into the developer's broader environment. The Aoki infostealer has evolved to target these valuable credentials, expanding its reach beyond browser data and cryptocurrency wallets.
AI Validation Gaps Threaten Digital Forensics Integrity
When it comes to AI-driven investigative work, human examiners must remain in the driver's seat, verifying and validating every finding to ensure digital forensics integrity. Without transparent reasoning and a clear source file, even the most confident AI output is only as reliable as the examiner's ability to confirm it.
Fake AI Attacks Target US Companies via Impersonated Brands
US companies are under attack by fake AI campaigns that impersonate trusted brands like Claude, ChatGPT, and Copilot, spreading malware and stealing sensitive data. Attackers are using clever tactics, such as sponsored search results and fake download websites, to trick victims into compromising their business accounts.
Drupal Fixes Core RCE Flaw with No-Login Path via Contributed Modules
A critical remote code execution flaw in Drupal's core Field UI module, tracked as CVE-2026-108097, has been patched, but the fix only helps sites that don't rely on contributed modules or custom code to stay safe. Over 151,000 Drupal sites are still vulnerable, highlighting the urgent need for an upgrade.
Law Enforcement Disrupts Global CSAM Distribution Network, Arrests 95
In a major breakthrough, 95 suspects were arrested in a global crackdown on a CSAM distribution network, thanks to seamless collaboration between law enforcement agencies and the private sector across 17 countries. This impressive feat was achieved through INTERPOL's International Effort Confluencia, a coordinated operation that also led to the rescue of a five-year-old victim.
Vulnerabilities in LiteLLM Gateway Expose AI Systems to Takeover
With two high-risk vulnerabilities discovered in LiteLLM, a popular open-source gateway tool, hackers can easily hijack AI systems, allowing them to wreak havoc and cause serious damage. Anyone with an account on a vulnerable deployment can take over the gateway and exploit it for malicious purposes.
UK Legal Aid Agency Breach Exposes Decades of Personal Records
A massive data breach at the UK's Legal Aid Agency has exposed a staggering 250,000 personal records, including information dating back to 1978, forcing a major reassessment of the government's data security. The breach, detected in April 2025, reveals that decades-old personal data was surprisingly still accessible on government systems.
Air Force Exposed to Malware Risk via Unsecured USB Drives
The Air Force's use of CDs and later USB drives to transfer mission data between unclassified and classified systems created a vulnerability that allowed malware to slip into sensitive areas, reveals Justin Henkel, former Air Force IT security expert. This simple habit, born from convenience, ended up bridging the gap between secure and unsecure environments.
India Enforces Caller ID Display on 4G Networks
Starting November 1, 2026, telecom providers in India must display callers' registered names along with their numbers on 4G networks, giving users a safer and more transparent calling experience. This move aims to help people identify unknown numbers and curb spam and fraudulent calls.
UK Weighs AI Safeguards as Cyber Security Bill Nears
The UK government is ramping up its efforts to tackle growing AI risks, with plans to bolster national defenses and introduce new safeguards - and the upcoming Cyber Security and Resilience Bill may hold the key. Ministers are considering amendments to the bill to address AI-specific threats, as the AI minister vows to take a multi-faceted approach to mitigate risks.
Microsoft Disrupts Global Phishing Network Behind 1 Billion Messages
Microsoft and Japanese police have joined forces to take down a notorious phishing network, known as Yam Store or Storm-3119, that was responsible for a staggering 1 billion phishing emails and texts sent to over 75,000 organizations since January 2026. This underground marketplace was selling compromised accounts, licenses, and storage to threat actors, fueling a massive wave of cyber scams.
Microsoft Fixes Windows Bug Behind Black Screens, Explorer Crashes
Microsoft has squashed a pesky Windows bug that caused black screens and Explorer crashes, and it's already included the fix in updates released since October 13, 2026 - so be sure to get the latest update to keep your device running smoothly!
AhsayCBS Flaws Get Fresh Fixes After Exploitation
Don't wait until it's too late - apply the AhsayCBS hotfix immediately to shield your environment and customer data from severe vulnerabilities that can be exploited for unauthenticated remote code execution. Reboot your server after applying the fix to ensure you're fully protected.
Langflow Exploit Attempts Surge Amid Authenticated RCE Flaw
Authenticated hackers are on the hunt, with 1,423 attempts recorded to exploit a critical remote-code-execution flaw in Langflow, a vulnerability that scores a near-perfect 9.9 on the CVSS scale. This alarming spike highlights how quickly attackers pounce on high-risk weaknesses.
UK Police Face Data Watchdog Action Over Unchecked Use of Retail Crime Platform
The UK police are in hot water with the data watchdog for recklessly signing up around 500 free accounts on a retail crime platform, Auror, without proper checks or formal approval. This lack of oversight raises serious concerns about data protection and accountability.
GhostAction Exploits 1,900 GitHub Accounts, Hits 30,000 Repositories
Malicious actors launched a massive attack, dubbed GhostAction, that compromised nearly 1,900 GitHub accounts and infected over 30,000 repositories with a malicious workflow. The concentrated surge, which occurred on October 8-9, 2026, put thousands of users and organizations at risk.
UK Watchdog Cites Police for Data Leak Lapses
The UK's Information Commissioner's Office has reprimanded the Metropolitan Police Service for failing to properly protect data when using a retail crime intelligence platform, highlighting the importance of balancing innovation with robust data safeguards. Organizations must prioritize risk assessments and effective oversight to avoid similar data protection lapses.
UK Legal Aid Agency Breach Exposes Decades of Sensitive Records
A massive breach at the UK's Legal Aid Agency has exposed sensitive records spanning nearly five decades, with stolen data dating as far back as 1978 and affecting around 250,000 records from before 2007. The breach, which occurred in April 2025, compromised a vast trove of applicant, recipient, and provider data.
Australia's Information Environment Strains Democratic Institutions
The problem is that we've made it easy for anyone to create and share information, but we haven't developed strong enough tools to verify its accuracy and trustworthiness. This can have serious consequences, as seen in Bougainville in 1997, where a rumor-driven information vacuum threatened a fragile peace.
US Army Air Defense Shifts to Multi-Interceptor Systems
The US Army is overhauling its air defense strategy by shifting to multi-interceptor systems, ensuring a resilient and sustainable defense that can adapt to any dynamic environment. By diversifying interceptors and speeding up decision-making, the Army aims to stay ahead of emerging threats.
UK Sanctions Cryptomus for Aiding Russian Illicit Finance
The UK has imposed sanctions on Cryptomus, a payments platform accused of processing over $7 billion in transactions that benefit the Russian government and its financial institutions. This move freezes Cryptomus' UK assets and blocks British companies from doing business with the platform.
Airbus Conducts Maiden European Flight of U740 Valkyrie Combat Drone
The U740 Valkyrie combat drone has taken to the skies in Europe for the first time, successfully completing its maiden flight with flying colors on October 12, 2026. This milestone marks a major step forward in providing air forces with affordable combat mass, and paves the way for more sophisticated uncrewed combat aircraft capabilities.
Hegseth Champions Autonomy At AUSA Conference
As the AUSA conference wrapped up and exhibits packed up, Secretary of Defense Pete Hegseth took the stage to drive home a crucial message: autonomy is here to stay. In a speech to a packed audience of servicemembers and industry leaders, Hegseth put the focus squarely on autonomy.