Tag: emerging threats
4849 articles
Malware Exploits Arch Linux Packages to Spread Rootkit, Infostealer
Over 400 Arch Linux packages were compromised in a shocking discovery, distributing a sneaky Linux rootkit and infostealer to unsuspecting users through the Arch User Repository (AUR). A cleverly spoofed maintainer account was used to modify the packages and download malicious code.
Security Experts Weigh In on Claude Fable 5 Launch Risks
As powerful AI models like Claude Fable 5 become more accessible, security experts warn that the controls in place to manage them are still imperfect, raising concerns about potential risks. Dr. Margaret Cunningham, Vice President of Security & AI Strategy at Darktrace, shares her insights on the launch of this cutting-edge technology.
Experts Cast Doubt on Handala's US Water Hacking Claims
Experts are debunking Handala's claims of being able to shut off water in US cities, with no evidence to back up the group's bold assertions. According to Sean Malone, Chief Information Security Officer at BeyondTrust, the breach appears to be limited to non-critical systems, with no impact on water treatment or distribution.
Microsoft Fixes Firmware Flaw in Surface Devices That Allowed Bricking via Single Packet
A security researcher discovered that a routine attempt to adjust the backlight on a Surface laptop turned into a nightmare when Microsoft Copilot generated a Python script that overwrote the embedded controller firmware, rendering the machine useless. The script sent faulty commands to the device's microcontroller, highlighting a serious firmware flaw that Microsoft has now fixed.
FBI and Europol dismantle major crypto laundering platform
In a major crackdown, the FBI and Europol have dismantled AudiA6, a massive cryptocurrency laundering operation that helped cybercriminals move a whopping $389m in illicit funds between 2022 and 2025. The service was linked to at least 15 ransomware operations and multiple cryptocurrency theft schemes, making it a key player in the digital underworld.
Novo Nordisk Discloses Cyberattack, Patient Data Stolen
Novo Nordisk revealed that a cyberattack has compromised patient data, specifically information related to clinical-trial participants, though assured that the data is not directly linked to patients by name or other identifiers. The company is working with outside experts to investigate and contain the breach.
Dark Web Exposes Early Warning Signs of Supply-Chain Attacks
Attackers are quietly buying and selling access to trusted integrations, developer accounts, and unattended credentials on the dark web, revealing early warning signs of supply-chain attacks. Monitoring underground forums for these subtle signals can help flag potential risks long before a breach makes headlines.
Microsoft Fixes Flaw in Surface Hardware That Allowed Devices to Be Bricked
A security researcher recently discovered that Microsoft's Copilot AI tool could be used to create a series of aggressive Python scripts that accidentally bricked a Surface device by overwriting its firmware. The incident highlights a flaw in Microsoft's Surface hardware that has since been fixed.
GitHub Bolsters npm with Security Updates to Thwart Supply Chain Attacks
GitHub is stepping up its game to protect against supply chain attacks by introducing security updates to npm, aiming to prevent hostile code from running amok during package installation. With the upcoming npm v12, three historically permissive defaults are being flipped to prioritize explicit opt-in over implicit trust.
AI Coding Agents Exposed to Agentjacking Attack
Imagine a sneaky new attack that tricks AI coding assistants into doing an attacker's bidding - without ever touching the victim's infrastructure. This clever hack, dubbed Agentjacking, uses a sneaky sequence of steps to get AI tools to execute malicious code on developers' machines.
Google Sues Alleged Chinese Phishers Over AI-Powered Fraud Ops
Google is taking a stand against scammers, suing a Telegram-based group called "Outsider Enterprise" for allegedly sending millions of AI-powered scam texts and impersonating trusted brands. The lawsuit aims to put a stop to their large-scale fraud operations.
Managed Detection and Response Hits Limits in AI-Powered Attack Era
The traditional Managed Detection and Response model is struggling to keep up with the evolving threat landscape, leaving nearly 1% of real threats hidden in low-severity alerts that often go unreviewed. This means that in a typical enterprise generating 450,000 alerts annually, hundreds of potential security incidents may be slipping through the cracks.
Cyber-Attacks Infiltrate 84% of Sports Organizations
Cyber-attacks have hit a staggering 84% of sports organizations in the past year, with over half of those being targeted multiple times - a worrying trend in an industry where timing and spectacle are everything. This alarming statistic highlights the vulnerability of professional sports teams, venues, and event bodies to cyber threats.
Microsoft Resolves Windows Update Failures Tied to WUSA Installer
Microsoft has fixed a frustrating issue with Windows updates, where installations using the Windows Update Standalone Installer (WUSA) were failing with an ERROR_BAD_PATHNAME error when run from a network share with multiple update files. This fix should bring relief to admins who've struggled with update failures.
INTERPOL Disrupts Sniper Dz Phishing Platform in Global Operation
In a major global crackdown, INTERPOL dismantled the notorious Sniper Dz phishing platform, a hub for cybercriminals to buy and use ready-made phishing kits, in a coordinated effort that resulted in 201 arrests across 13 countries. The operation, dubbed Operation Ramz, dealt a significant blow to the phishing-as-a-service industry.
LangGraph Flaw Chain Enables Remote Code Execution in Self-Hosted AI Agents
A critical flaw in LangGraph's system could let attackers take control of your self-hosted AI agents with just a single exploit, allowing for remote code execution. Thankfully, the vulnerability has been patched after being discovered by cybersecurity researchers Check Point and Yarden Porat.
Plymouth Council Breach Exposes 500 Home-Schooling Families' Email Addresses
A careless mistake by Plymouth City Council's Elective Home Education team has led to a data breach, exposing the email addresses of around 500 home-schooling families after a single email was sent with all recipient addresses visible. The council is now dealing with the fallout after compromising the personal email addresses of hundreds of families.
Novo Nordisk Discloses Clinical Trials Data Breach
Novo Nordisk revealed a clinical trials data breach, confirming that hackers accessed and copied sensitive personal data, including patient information and healthcare professional records, from its internal IT systems without authorization. The stolen data includes patient IDs, trial details, and health information such as biomarkers, lifestyle factors, and more.
Pentagon Seeks $13.7 Billion to Bolster F-35 Sustainment Amid Readiness Decline
The Pentagon is throwing a lifeline to its struggling F-35 fleet, requesting $13.7 billion to boost sustainment and reverse a troubling decline in readiness that saw full mission capable rates plummet from 38% to just 25%.
Elbit Systems, Diehl Defence Partner on Loitering Munition Bid
Elbit Systems and Diehl Defence are joining forces to offer cutting-edge loitering munition systems to the German Armed Forces, enhancing their autonomous precision-strike and reconnaissance capabilities. This strategic partnership will also boost Germany's defense industry through local manufacturing and assembly.
Section 702 Teeters on Brink of Lapse Amid Spy Chief Dispute
The US intelligence community is on the brink of losing a crucial surveillance authority as Section 702 of the Foreign Intelligence Surveillance Act teeters on the verge of lapsing, following a 218-198 House vote against its extension. This development comes amid a dispute over the nomination of a new spy chief.
China Bolsters Mekong River Patrols With Advanced Weaponry
China is taking its Mekong River patrols to the next level with cutting-edge gear, including remote weapon stations and rocket launchers, to ensure the waterway remains safe and open. This move is part of a long-standing joint security operation with Laos, Myanmar, and Thailand to prevent incidents like the 2011 massacre that sparked the initiative.
China's Influence Silences Dissent in Zambia
In Zambia, a stark reality has emerged: China's growing influence is stifling dissenting voices, with critics like Michael Sata labeling the Chinese presence as parasitic rather than beneficial. The recent postponement of RightsCon, a human rights summit, has starkly illustrated this chilling effect.
China Rapidly Expands Special Mission Aircraft Fleet
China is rapidly bolstering its special mission aircraft fleet, with recent reveals including the GX-19, Y-9PT (GaoXin-18), and Y-9GR, showcasing a surge in airborne ISR and electronic-warfare capabilities. This steady stream of new aircraft unveilings highlights China's accelerating advancements in military aviation.