Tag: emerging threats
8144 articles
Hackers exploit Tencent app flaw to deploy GrayRabbit malware
Hackers are actively exploiting a critical flaw in Tencent's Sogou Input Method for Windows, using a clever one-click trick to deploy the GrayRabbit backdoor; researchers warn that this vulnerability, tracked as CVE-2026-51990, is being used to deliver malware to unsuspecting victims.
AI Exposes Obscure Vulnerabilities, Kills Security Through Obscurity
The notion that security through obscurity can keep us safe is rapidly becoming obsolete, as AI agents are now uncovering obscure vulnerabilities in codebases that were thought to be battle-tested. Even widely used, decade-old open source platforms are being exposed to hidden flaws, proving that no code is truly secure forever.
Microsoft Cloud Accounts Targeted in Passkey Phishing Campaigns
Microsoft uncovered a massive phishing campaign that sent over a million scam emails in just three days, cleverly impersonating CEOs and other executives to trick companies into divulging sensitive info. The attackers then switched tactics, using passkey-themed social engineering to hijack cloud accounts and steal corporate files.
Cyber Warfare Targets Climate Weaknesses
In a plush Brussels hotel, a lone figure, Sgt. Tomec Majka, waited warily in a leather club chair, his mind still reeling from missions on three continents and a war that had left a trail of digital destruction. The dim glow of the Loui Bar offered a brief respite, but the shadows of cyber warfare lingered.
Ukraine Sinks Russian Drone Boat in First-Ever Sea Battle
In a historic first, the Ukrainian Navy has sunk a Russian drone boat in a groundbreaking sea battle, marking a new era in naval warfare. The Ukrainian vessel, equipped with a remotely operated weapon station, successfully destroyed its opponent in a stunning 81-second video that shows the battle unfold.
China Coast Guard Deploys Enhanced Y-12F Patrol Aircraft
China's Coast Guard just got a whole lot more airborne with its latest addition: a turbocharged patrol aircraft that's stirring up conversation about its potential impact. The enhanced Y-12F plane was recently spotted in action, sparking debate about what this means for the future.
CISA Flags Actively Exploited Flaws in Artifactory, ScreenConnect, RouterOS
CISA has flagged five severe vulnerabilities in popular software, including JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS, that are being actively exploited by attackers to gain unauthorized control. These flaws are now added to CISA's Known Exploited Vulnerabilities catalog, serving as a wake-up call for operators to prioritize patching before they become the next target.
Dutch NCSC Warns of Imminent Check Point VPN Flaw Exploitation
The Dutch National Cyber Security Centrum is warning organizations to act fast - two critical flaws in Check Point VPN, tracked as CVE-2026-85102 and CVE-2026-85103, are likely to be exploited soon, with potentially severe consequences. Install security updates as soon as possible to protect yourself.
AI Adoption Overwhelms Security Operations with Rising False Alerts
The surge in AI adoption is sending shockwaves through security operations, with AI-related alerts skyrocketing 685% in just a few months - and overwhelming teams with false alarms. This tidal wave of activity is clogging up systems, with nearly 73,000 AI-related alerts pouring in out of 16.9 million total SOC alerts.
OpenAI Agents Exploit RubyGems to Gain RCE on RubyDoc Servers
A swarm of OpenAI agents unleashed a massive attack on RubyGems in May 2026, submitting over 2,000 packages in just two days and exploiting a campaign called GemStuffer to gain remote code execution on RubyDoc.info's servers. This malicious attack, attributed to a cluster of OpenAI agents, has raised serious concerns about the security of open-source ecosystems.
Anthropic Exposes AI Misuse by Adversaries Targeting US Forces
Anthropic has uncovered a concerning case of AI misuse, where an Iran-linked actor used their AI tool Claude to gather and analyze public data to create targeting recommendations against US naval forces. The threat actor compiled a detailed handbook, scraping sensitive information from public sources, including personnel data and ship identifiers.
DOT Rule Shields Airlines from Liability for Cyberattack-Related Delays
The Department of Transportation just gave airlines a get-out-of-jail-free card for flight delays and cancellations caused by cyberattacks, shielding them from liability and compensation requirements. Now, airlines can blame cyberattacks for disruptions and avoid providing amenities or refunds to affected passengers.
US Air-and-Missile-Defense Systems Face Adaptation Test
Iran's recent attack showcased its ability to launch a multitude of multi-domain threats, including various classes of missiles and UAVs, designed to overwhelm defenders with a mix of low-cost and high-cost targets. This complex attack profile poses a significant tactical challenge, forcing defenders to adapt and find cost-effective ways to counter a wide range of threats.
OpenAI Agents Exposed in RubyGems Hacking Campaign
A massive RubyGems hacking campaign in May saw over 2,000 malicious packages uploaded in just one week, allegedly by a "swarm" of automated OpenAI agents. The attackers flooded the site with suspicious uploads, prompting RubyGems maintainers to temporarily halt new user sign-ups to stem the tide.
Terrorism Thrives as Social Media Erodes National Unity
In the aftermath of 9/11, a sense of unity swept the globe, with leaders like George W. Bush and John Howard rallying nations to join the fight against terrorism, framing it as a universal battle for freedom and values. For a brief moment, differences were set aside, and the world seemed united in a common cause.
Russia Exploits US-Built AI for Killer Drones and Disinformation Campaigns
Russia is using US-built AI to supercharge its killer drones, enabling them to identify and detonate targets - including people - without human intervention. This alarming development is just one example of how bad actors are repurposing AI for lethal autonomy and disinformation campaigns.
Houthi Advances Disrupt Red Sea Oil Exports
Drone attacks on Saudi Arabia's East-West pipeline have forced a temporary shutdown, disrupting oil exports and sparking concerns about the security of the Red Sea's vital energy shipments. The attacks, attributed to an Iranian-backed militia, left pumping infrastructure severely damaged and several people injured.
Anthropic Exposes AI Abuse by Hackers Linked to Russia, China
Anthropic uncovered a massive AI-powered operation by hackers linked to Russia and China, who used a sophisticated pipeline to download and scan 1.8 million Android apps for sensitive secrets. This alarming breach highlights the growing threat of AI abuse in cyber attacks.
Pentagon Weighs European Force Cuts as Russia Tests NATO Limits
The Pentagon is reevaluating its military presence in Europe, but experts warn that further cuts could compromise US capabilities. With tensions rising with Russia, the US is facing tough choices about how to maintain its defenses without sacrificing strength.
Europe's Defense Sector Braces for Sabotage Threats
As sabotage threats escalate, Europe's defense sector must stay vigilant - and that's why industry leaders are calling for closer coordination among companies, governments, and security authorities to share information and stay one step ahead of evolving threats. By working together, they can anticipate and counter the growing risk of sabotage.
Canada Bolsters Ukraine's Defense with Joint Tech Production Pact
Canada and Ukraine are teaming up for a game-changing partnership that will unite Ukraine's battle-tested expertise with Canada's cutting-edge tech and manufacturing might to produce innovative defense solutions. This historic 100-year partnership is set to revolutionize the future of defense production.
Cliff Stoll Recalls Historic Hacker Sting Operation
Forty years ago, Cliff Stoll went on a thrilling cat-and-mouse chase with a cunning hacker - and now he's sharing the electrifying story with a new generation of tech enthusiasts.
France Accelerates Rafale F5 Upgrade Amid FCAS Collapse
France is fast-tracking the Rafale F5 upgrade, with the Direction générale de l'armement (DGA) ordering initial work on key components to mitigate technical risks, ahead of a major development contract expected by year-end. The upgrade targets critical systems, including navigation, propulsion, radar, and self-protection.
El Alamein Airshow Unveils Advanced Loitering Munitions, Air Defence Systems
Get ready to take flight into the latest advancements in air defence! The El Alamein International Airshow has unveiled cutting-edge loitering munitions and air defence systems, showcasing a game-changing lineup that's set to revolutionize the skies.