Tag: emerging threats
8141 articles
US Extradites Black Axe Leaders Over Internet Fraud Schemes
The FBI cracked down on a notorious crime ring, extraditing five alleged leaders of the Black Axe organization from South Africa to face charges in a New Jersey federal court for their roles in internet fraud schemes. These individuals, accused of heading the Cape Town zone of the Neo Black Movement of Africa, are now facing justice in the US.
Mass-Scanning Campaign Exploits Vite Flaw to Harvest Cloud Credentials
A high-severity flaw in Vite, tracked as CVE-2026-39364, has been exploited in a mass-scanning campaign, allowing attackers to bypass security restrictions and harvest cloud credentials. By manipulating query parameters, unauthenticated attackers can leak sensitive files that were meant to be blocked.
Cybersecurity Tests Miss Mark by Focusing on Isolated Techniques
Most organizations are playing a game of cyber defense whack-a-mole, testing security controls against individual threats in isolation - but 93% of security leaders admit their organization still suffered a major cyberattack in the past year. It's time to rethink the way we validate security and stop getting caught off guard.
Skilled Human Attackers Exploit Marimo Flaw to Reach SSH Bastion in 8 Seconds
In a stunning display of speed, a skilled human attacker exploited a flaw in Marimo to breach a secure SSH bastion in just 8 seconds - a pace typically associated with AI-assisted attacks. This remarkable feat was made possible by a pre-authenticated remote code execution bug, CVE-2026-39987, with a near-perfect CVSS score of 9.3.
CISOs Redirect Budgets to AI Amid Flat Cyber Spending
To stay ahead of cyber threats, savvy organizations are shifting their security budgets towards AI, with 69% of security executives planning to prioritize AI for new investments. By aligning AI security investments with business goals and upskilling their teams, these forward-thinking companies can effectively manage risk while driving innovation.
Ransomware gangs exploit VMware flaw
Ransomware gangs are actively exploiting a critical VMware flaw, CVE-2026-59310, that was patched just two weeks ago, putting organizations at risk of devastating attacks. The US Cybersecurity and Infrastructure Security Agency has warned of the vulnerability, which allows unauthenticated attackers to execute arbitrary code.
US Indicts Black Axe Gang Leaders for Global Cyber Fraud
Meet the notorious Black Axe gang, a violent transnational crime group that's been scamming people worldwide, including through romance scams, and now its leaders are facing justice. Five alleged members have been extradited to the US on wire fraud and money laundering charges.
Microsoft Fixes RDS, Hyper-V Issues with Emergency Patch
Microsoft's massive September Patch Tuesday update, which bundled a record 974 CVEs, caused widespread disruptions to core services, including RDS and Hyper-V, just days after its release. The company has now issued an emergency patch to fix these issues, restoring stability to affected systems.
LiteSpeed Web Server Flaw Enables Root Access Across Shared Hosting Accounts
A critical vulnerability in LiteSpeed Web Server Enterprise could allow a low-privilege website user to gain root access on a shared-hosting server, putting all hosted sites at risk. This flaw affects versions before 6.3.7 and can bypass key security controls, including CageFS.
Microsoft Update Disrupts Excel Copy and Paste Function
Struggling with Excel's copy and paste function? A recent Microsoft update has caused a frustrating issue where content appears to paste, but actually doesn't - with no error message or warning to let you know something's gone wrong.
Cisco Discloses Zero-Day Exploited in Secure Email Gateway Attacks
Cisco has warned of a zero-day flaw in its Secure Email Gateway that allows attackers to run commands as root, prompting federal agencies to patch the vulnerability within just three days. This critical defect, tracked as CVE-2026-76461, lets hackers execute arbitrary commands with root privileges, putting systems at risk.
China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain
Meet the sneaky hackers who just pulled off a triple threat: exploiting not one, not two, but three zero-day vulnerabilities to break free from Chrome's sandbox and wreak havoc on Windows hosts. Their latest move? A targeted spear-phish attack on NGOs via a cleverly crafted link.
Cisco Email Gateway Flaw Exploited, Enables Root Command Execution
A critical Cisco email gateway flaw, CVE-2026-76461, with a near-perfect CVSS score of 9.8, is being actively exploited in the wild, allowing attackers to send a single crafted email and gain root command execution on vulnerable devices. This severe vulnerability stems from insufficient validation in AsyncOS email parsing, making it a pressing concern for Cisco Secure Email Gateway users.
Navy Accelerates USS Ford Repairs Amid Lengthy Deployment
The Navy is racing against time to repair the USS Gerald R. Ford, vowing to deliver the ship back in just six months despite a grueling deployment and an onboard fire that threatened to derail the timeline. Rear Adm. Kavon Hakimzadah is confident that the Norfolk Naval Shipyard can meet the ambitious deadline.
Saudi Arabia Deploys Chinese-Made DF-15A Ballistic Missile in Yemen Conflict
Saudi Arabia may have just made a game-changing move in the Yemen conflict by deploying the Chinese-made DF-15A ballistic missile, with debris found in Raghwan District, Marib Governorate, sparking concerns about the escalating situation. If verified, this would mark the first known combat use of this short-range ballistic missile in the region.
US Spacewatch Effort TraCSS Faces Funding Crossroads
Eight years after the 2018 Space Policy Directive-3, the US Spacewatch Effort TraCSS is still in pilot mode, failing to deliver on its promise of integrating commercial spacewatch data to enhance space tracking. It's a critical crossroads: will TraCSS get the funding it needs to evolve beyond a pilot program?
US Airmen Describe Battling Iranian Barrages on US Bases
Airmen at US bases bravely withstood Iranian missile barrages, and one heroic security forces noncommissioned officer even saved trapped personnel by prying open a damaged bunker door.
EU Loan Fuels Ukraine's Defence Procurement Shifts
The EU has made a significant move to bolster Ukraine's defence capabilities, allocating the full €28.3 billion defence component for 2026, with a clear plan for equipment, suppliers, and implementation schedules. This development marks a major step forward in linking immediate defence needs with long-term industrial capacity to sustain production.
Microsoft Patching Accelerates Amid AI-Driven Vulnerability Surge
Microsoft just dropped a massive September patch, fixing a record-breaking 972 vulnerabilities, including 112 critical ones that could put your system at risk. This huge update is part of a rapid acceleration in patch releases, fueled by AI-powered vulnerability detection that's uncovering more threats than ever.
US Extradites Black Axe Leaders, Disrupts Global Romance Scam Network
In a major blow to international crime, the US has extradited five leaders of the notorious Black Axe gang, accused of running a global romance scam network, from South Africa to face federal charges. The extradited men, originally from Nigeria, were arrested in 2021 and will face court in New Jersey.
Japan's Defence Budget Pivots to AI-Driven Integration
Japan's Ministry of Defense is shaking things up with a bold new budget plan, shifting focus from mere hardware to smart, AI-driven integration - and it's asking for around 8.9 trillion yen to make it happen. This strategic pivot comes as Japan faces a more treacherous security landscape, prompting a defence spending surge.
AI Targets Defense Industrial Base's Supply Chain Woes
The traditional military platform development process, which can take years or even a decade, is a strategic liability in today's fast-paced operational landscape. To stay ahead, we need to redesign workflows with humans in the lead, leveraging AI-powered operations and secure, real-time data to drive faster and more effective decision-making.
AI Enables Yemen-Based Actors to Develop Advanced Guided Weapons
A cell of threat actors in northern Yemen has been developing advanced guided weapons, leveraging AI to power three sophisticated programs, including a guided rocket, a multi-stage ballistic missile, and a hypersonic glide vehicle. This alarming breakthrough highlights the growing threat of AI-enabled weapons development.
Australian Industry Builds Northern Defence Capability Ahead of Demand
Meet the Sea Archer, an Australian-built uncrewed surface vessel that packs a punch with its incredible speed of up to 40 knots, 1,500 nautical mile range, and 900kg payload capacity, designed to navigate the country's vast northern waters with ease. This cutting-edge tech was developed by industry leaders ahead of government demand, showcasing a commercial approach to capability development.