Tag: emerging threats
4849 articles
ScarCruft Targets Microsoft Users with NarwhalRAT Malware
Beware of fake Microsoft account alerts! A sneaky North Korean hacking group, ScarCruft, is sending phishing emails that mimic Microsoft security notifications to trick you into downloading the NarwhalRAT malware.
FBI Warns of Courier Cash Scams Fueling Crypto Investment Fraud
Beware of scammers who are using couriers to collect cash from victims, often under the guise of required investments or fines to withdraw from a fake crypto investment firm. The FBI warns that these scammers will instruct victims to hand over cash to a courier, often using verification tactics like sharing a dollar bill serial number or password to gain trust.
DARPA Seeks Rapid Space System Reconstitution Tech
Imagine having the power to rapidly revive critical space services in mere hours to weeks after a setback - that's what DARPA aims to achieve with its latest quest for innovative space system reconstitution technology. The goal is to swiftly restore vital services to at least minimum levels, responding to urgent needs, lost assets, or unexpected collisions.
US Imposes Export Controls on Anthropic AI Model
The US has imposed strict export controls on Anthropic's AI model, Mythos/Fable 5, classifying it as a cyber weapon and effectively banning its sale to foreign nationals. This move comes as the Pentagon severs ties with the company, marking a significant shift in their dealings.
Australia's Intelligence Community Must Adapt to AI Era
The national intelligence community must revolutionize its approach to stay relevant in the AI era, shifting from traditional reporting to dynamic, real-time insights that match the evolving needs of decision-makers. Relying on outdated methods will render it obsolete.
Diversity Bolsters Cybersecurity Against AI-Driven Threats
With women making up only 17 percent of Australia's cybersecurity workforce, the industry's glaring gender gap leaves us vulnerable to AI-driven threats and puts women at greater risk of online harms. Closing this gap is crucial to bolstering our digital protection and ensuring a safer online world for all.
UK Nears GCAP Fighter Contract Signing Amid Funding Disputes
The UK is on the brink of securing a major deal for the Global Combat Air Programme, with a multi-national contract for a sixth-generation fighter expected to be signed by the end of the month. Prime Ministers Keir Starmer and Sanae Takaichi are set to confirm their commitment to the programme in a meeting in London.
US Naval Posture Persists Amid Iran Ceasefire Talks
The US naval blockade of Iran remains firmly in place, with CENTCOM forces disabling nine commercial vessels that attempted to breach it, as tensions persist ahead of a crucial ceasefire agreement signing in Geneva on Friday. The blockade will stay in effect until the deal is sealed.
CISA Warns of LiteSpeed cPanel Plugin Flaw Exploited for Root Access
A critical vulnerability in the LiteSpeed cPanel Plugin, known as CVE-2026-54420, has been flagged by CISA for its high risk of exploitation, with a CVSS score of 8.5, and federal agencies have until June 18, 2026, to apply the necessary fix. This flaw allows for privilege escalation and has been added to the Known Exploited Vulnerabilities catalog, requiring swift action to prevent potential root access attacks.
Australia Scrambles to Secure Access to Cutting-Edge AI Amid US Export Curbs
Australia's economic future, research base, and security hinge on accessing cutting-edge AI, but US export curbs are tightening control, treating advanced AI models as guarded national assets. The stakes are high, with the country's progress hanging in the balance.
B-52 Bomber Crashes at Edwards Air Force Base, Killing Eight
A devastating crash of a US Air Force B-52 Stratofortress bomber at Edwards Air Force Base in California has claimed the lives of eight people on board, in what authorities describe as a "not survivable" incident. The tragic accident occurred during a routine test mission on Thursday morning.
iRhythm Breach Exposes Patient Data in Cardiac Monitoring Hack
A recent data breach at iRhythm exposed sensitive patient information, compromising personal and health data from over 12 million patients whose heartbeat data was analyzed through the company's cardiac monitoring service. The breach was discovered after a ransomware-style intrusion hit third-party business applications used by iRhythm.
Cisco Disrupts Active Exploitation of SD-WAN Manager Flaw
Cisco is taking swift action to combat the active exploitation of a medium-severity flaw in its SD-WAN Manager, known as CVE-2026-20262, which could let hackers create or overwrite files on affected systems. Federal agencies have until June 29, 2026 to remediate the vulnerability.
Images Near Area 51 Suggest F-47 Roots in Stealth Legacy
Mysterious infra-red images captured near Area 51 have sparked speculation that a long-forgotten 1990s aircraft, the X-36, may be influencing the design of a modern stealth plane, with some observers drawing striking comparisons to the proposed F-47.
Congress Probes Pentagon's Use of Military Lawyers in Civilian Roles
Senator Elizabeth Warren slammed the Pentagon's deployment of military lawyers in civilian roles, warning it's undermining military readiness and morale in the process. She's now leading a push for a Government Accountability Office review of the practice.
B-52 Bomber Crashes At Edwards Air Force Base In California
A B-52 bomber crashed at Edwards Air Force Base in California shortly after takeoff, prompting an immediate response from emergency crews on the scene. The airfield was swiftly closed and all non-essential operations suspended to focus on the ongoing response efforts.
Google Uncovers China Espionage Group UNC6508 Lurking Undetected Since 2023
Google's Threat Intelligence Group has uncovered a stealthy Chinese espionage group, UNC6508, that had been secretly lurking in networks since 2023, targeting key sectors in the US and Canada. The full extent of the damage is still unknown, leaving experts concerned about potential long-term security breaches.
Cybersecurity's 72-Minute Challenge
The clock is ticking: in the blink of an eye, just 72 minutes, attackers can breach your defenses and make off with your data, highlighting a daunting speed gap between threat actors and security teams. This alarming acceleration demands a serious rethink of traditional security operations.
Cisco SD-WAN Vulnerability Exploited for Root Access
Cisco has warned of a critical vulnerability in its SD-WAN system that allows attackers to gain root access by sending a malicious HTTP request. This flaw, now patched, could have let hackers create or overwrite files and ultimately elevate their privileges.
US Seizes Deepfake Nude Sites in First TAKE IT DOWN Act Enforcement Action
In a groundbreaking move, the US Department of Homeland Security has seized two notorious deepfake nude sites, CFAKE.com and SOCFAKE.com, in the first-ever enforcement action under the TAKE IT DOWN Act. This bold operation, carried out in collaboration with Italy and France, has taken a significant step towards protecting online victims and holding perpetrators accountable.
Researcher Uncovers Feds' Swift Response to Simple Code Prompt
A researcher discovered that a simple code prompt to "fix this code" sparked a surprisingly swift and alarmed reaction from federal authorities regarding the Fable 5 model. However, the researcher disputes that this incident constituted a jailbreak, downplaying its significance.
Chinese Hackers Exploit Google Workspace to Siphon Research and Defense Emails
Chinese hackers have been secretly siphoning off sensitive emails from research and defense organizations using a clever exploit of Google Workspace, with a long-running campaign that spanned over two years. The threat actors, tracked as UNC6508, used custom malware called INFINITERED to breach externally facing servers and steal valuable intel.
North Korean Hackers Exploit Developer Tools in Malware Campaigns
North Korean hackers have launched a sneaky malware campaign, tricking victims into executing cross-platform malware for macOS, Linux, and Windows through malicious scripts hidden in GitHub repositories. Their latest tactic, dubbed UNK_DeadDrop, uses recruitment lures to deliver self-running code to over 75% of targeted organizations across various sectors.
SimpleHelp vulnerability exposes servers to rogue remote support accounts
A critical vulnerability in SimpleHelp, known as CVE-2026-48558, lets hackers create rogue remote support accounts and gain privileged access to servers, allowing them to execute scripts and wreak havoc on your system. This gaping security hole enables unauthenticated attackers to bypass multi-factor authentication and log in as a Technician user, putting your entire network at risk.