Tag: emerging threats
8147 articles
Android Malware Mantax Otax Encrypts Devices, Steals Data, and Harasses Victims
Beware of Mantax Otax, a sneaky Android malware that's encrypting devices, swiping sensitive data, and even harassing victims - all thanks to clever tricks by Indonesian operators who are using sideloaded APKs to spread the threat.
AI Agents Fuel Rapid PaperCut Attacks on 395 Organizations
In a stunning display of speed, hackers used AI agents to exploit PaperCut vulnerabilities, compromising at least 11 organizations in just 26 seconds and gaining domain admin access in a mere two hours. This rapid, automated campaign hit 395 organizations across 48 countries, leaving a trail of destruction in its wake.
Apple Watch Enables Secret Conversation Snippets
The latest Apple Watch feature, Live Rewind, can secretly record and transcribe 15 seconds of nearby conversations, sparking concerns in 11 US states where all-party consent is required for recordings. This new capability, part of Apple's Audio Intelligence package, is easily activated with a double-press of the Digital Crown.
Microsoft Updates Disrupt Remote Desktop Services on Windows Servers
Windows admins are in a panic as September's Patch Tuesday updates cause Remote Desktop Services to go dark on production servers, forcing hard resets to get things back online. Reports are flooding in of RDS failures just hours after installation, with symptoms including stuck sessions, refused connections, and frustrating error messages.
EDGE Group Delivers Unmanned Helicopters to Angolan Navy
EDGE Group has successfully delivered six unmanned HT 100 NAVAL helicopters to the Angolan Navy, marking a significant milestone after completing rigorous Factory Acceptance Trials in Switzerland. This achievement follows a major contract signed in 2023, solidifying a new era of naval capabilities.
Pentagon Prepares to Realign FY27 Priorities Amid Funding Uncertainty
The Pentagon is gearing up to adjust its FY27 priorities due to funding uncertainty, with Comptroller Jules Hurst hinting that the department may revisit its requests with appropriators if the $350 billion reconciliation package isn't passed. This potential shift could impact high-priority programs like Golden Dome, munitions buys, and Defense Autonomy.
US Navy Deploys Upgraded Point Defense System on Destroyer
The US Navy has upgraded its Point Defense System with the Mk 38 Mod 4 Machine Gun System, a game-changing combo that tackles threats from unmanned aerial systems with precision and firepower. This cutting-edge system pairs a 30mm chain gun with a .50 caliber machine gun, ready to take on emerging challenges.
Microsoft Excel Update Disrupts Copy-and-Paste Functionality
Microsoft's latest security update, KB5002914, has caused frustration for some Excel users, disrupting basic workflows like copy-and-paste and autofill. The update, part of September's Patch Tuesday, has left many users, including entire teams, scrambling to find workarounds.
Terrorists Target AI for Lethal Attacks
We might be so busy worrying about AI-enabled catastrophes like asteroid impacts that we overlook a more immediate threat - terrorists using AI to launch lethal attacks right under our noses. The real danger may not be the Hollywood-style doomsday scenario, but the probable and more sinister misuse of AI that could be happening in plain sight.
US National Cyber Director Warns of AI-Driven Cybersecurity Time Crunch
National Cyber Director Sean Cairncross warns that the rapid spread of AI is creating a pressing cybersecurity time crunch, framing it as a high-stakes race between innovation and securing critical systems. Governments are scrambling to "buy time" to bolster defenses before AI-driven threats overwhelm them.
US Department of War Accelerates AI Integration with Commercial Ecosystem
The US Department of War is turbocharging its AI capabilities by integrating top commercial tools like ChatGPT and Grok into its GenAI.mil platform, now used by over 1.7 million personnel. This move marks a major leap from experimentation to enterprise-wide adoption of artificial intelligence.
Surfshark VPN Breach Exposes Internal Test Servers
A configuration mistake made by Surfshark's engineering team left an internal test server vulnerable to the internet, exposing sensitive data due to human error. The incident highlights the importance of robust security measures, even for trusted services.
AIs Accelerate Exploit Discovery
Meet the AI super sleuths that can uncover software vulnerabilities with just a whisper of a rumor. With minimal input, these agents can sniff out working exploits, potentially beating the patch cycle and leaving security teams scrambling to keep up.
SPIFFE/SPIRE Exposed to Post-Exploitation Identity Misuse
When a host is compromised, the damage runs deep: attackers can exploit identity mechanisms to access all authorized identities on that node, essentially collapsing machine identity and putting your entire system at risk. This is the stark reality of a SPIFFE/SPIRE security breach, where short-lived workload identities can become a double-edged sword.
PLA Bolsters Sniper Capabilities with Advanced 8.6×70mm Caliber
Meet GI Zhou, who's getting cozy with the QBU-202, a cutting-edge sniper rifle chambered in 8.6×70mm Lapua Magnum - and it's clear China's armed forces are taking their long-range precision capabilities to the next level. This high-tech rifle is getting the personal touch, with soldiers treating it like a trusted companion.
Europe's Low-Cost Air Defence Push Spurs Global Shift
Europe's defence industry is shifting towards low-cost air defence solutions, with a focus on scalable surface-to-air missiles that can take down drones and cruise missiles with equal effectiveness. This pivot is driven by the lessons of the Russia-Ukraine War, where Ukraine has seen Russia increasingly favour jet-powered Geran-4/5 drones over piston-powered Geran-3s.
AI Agents Emerge as New Insider Threat Vector
Get ready for a new frontier in cyber threats: AI agents are emerging as a prime target for hackers, with experts warning that attacks against these autonomous agents will become the next big threat vector. As AI agents gain access to sensitive data, organizations are essentially handing hackers the keys to the kingdom.
Pentagon Cyber Strategy Shifts Focus to High-Impact Offensive Ops
The Pentagon's new cyber strategy is shifting gears, focusing on high-impact offensive operations that drive real results, not just defense for its own sake. It's about delivering big, muscular blows that produce tangible outcomes, according to Brig. Gen. William Wilburn, the Department of Defense's deputy principal cyber advisor.
Al-Qaida Evolves, Adapts 25 Years After 9/11
Twenty-five years after 9/11, Al-Qaida is a shadow of its former self, with its core operations severely diminished and a leadership crisis unfolding. The group's operational reach has been crippled, and its top leaders have been decimated by US drone strikes, leaving only a handful of senior figures remaining.
Malicious Extensions Expose Crypto Data AI Agents Automate Cyber Intrusions Shadow AI Exposes Sensitive Data Fake M&A Deals Drive Wire Fraud 200 Android Flaws Patched 119K Domains Power Fake Shops Chrome Accelerates Security Releases Singpass Scheme Tied to 170 Victims Email Breach Fuels Wallet Phishing 33K+ Plex Servers Remain Exposed EtherRAT Chain Ends in Ransomware CISA Refreshes Insider Threat Guidance AI
Google just patched 200 security flaws in Android, including a critical Wi-Fi vulnerability that could let hackers take control of your device - and it's a stark reminder to stay vigilant about the risks lurking in ordinary access and trusted services.
FBI Shifts to Active Cyber Disruption Strategy
The FBI is taking a bold new approach to combating cyber threats, shifting from a reactive to an active disruption strategy that aims to proactively disrupt and impose costs on cyber adversaries. This move marks a significant departure from traditional law enforcement methods, embracing a more interventionist posture in cyberspace.
AdaptHealth Data Breach Exposes 4.1M Records
A massive data breach at AdaptHealth has compromised the sensitive information of 4.1 million people, including names, contact details, demographics, and health and insurance data. The cyberattack exposed a wide range of personal records, putting millions of individuals at risk.
CISA Updates Insider Threat Guide to Combat Evolving Risks
The Cybersecurity and Infrastructure Security Agency (CISA) has updated its Insider Threat Mitigation Guide to tackle today's complex risks, offering fresh insights and resources to help organizations stay ahead. This update acknowledges that insider threats are no longer just about disgruntled employees, but also about adapting to emerging trends like AI and remote work.
Cisco FMC Exploits Fuel Ransomware, APT Attacks
Cisco FMC vulnerabilities are being exploited by threat actors, including state-sponsored groups and crimeware attackers, to fuel ransomware and advanced persistent threat (APT) attacks. These bad actors are using recently patched flaws to gain initial access, run scripts as root, and escalate privileges.