Tag: emerging threats
8157 articles
PLA Bolsters Sniper Capabilities with Advanced 8.6×70mm Caliber
Meet GI Zhou, who's getting cozy with the QBU-202, a cutting-edge sniper rifle chambered in 8.6×70mm Lapua Magnum - and it's clear China's armed forces are taking their long-range precision capabilities to the next level. This high-tech rifle is getting the personal touch, with soldiers treating it like a trusted companion.
Europe's Low-Cost Air Defence Push Spurs Global Shift
Europe's defence industry is shifting towards low-cost air defence solutions, with a focus on scalable surface-to-air missiles that can take down drones and cruise missiles with equal effectiveness. This pivot is driven by the lessons of the Russia-Ukraine War, where Ukraine has seen Russia increasingly favour jet-powered Geran-4/5 drones over piston-powered Geran-3s.
AI Agents Emerge as New Insider Threat Vector
Get ready for a new frontier in cyber threats: AI agents are emerging as a prime target for hackers, with experts warning that attacks against these autonomous agents will become the next big threat vector. As AI agents gain access to sensitive data, organizations are essentially handing hackers the keys to the kingdom.
Pentagon Cyber Strategy Shifts Focus to High-Impact Offensive Ops
The Pentagon's new cyber strategy is shifting gears, focusing on high-impact offensive operations that drive real results, not just defense for its own sake. It's about delivering big, muscular blows that produce tangible outcomes, according to Brig. Gen. William Wilburn, the Department of Defense's deputy principal cyber advisor.
Al-Qaida Evolves, Adapts 25 Years After 9/11
Twenty-five years after 9/11, Al-Qaida is a shadow of its former self, with its core operations severely diminished and a leadership crisis unfolding. The group's operational reach has been crippled, and its top leaders have been decimated by US drone strikes, leaving only a handful of senior figures remaining.
Malicious Extensions Expose Crypto Data AI Agents Automate Cyber Intrusions Shadow AI Exposes Sensitive Data Fake M&A Deals Drive Wire Fraud 200 Android Flaws Patched 119K Domains Power Fake Shops Chrome Accelerates Security Releases Singpass Scheme Tied to 170 Victims Email Breach Fuels Wallet Phishing 33K+ Plex Servers Remain Exposed EtherRAT Chain Ends in Ransomware CISA Refreshes Insider Threat Guidance AI
Google just patched 200 security flaws in Android, including a critical Wi-Fi vulnerability that could let hackers take control of your device - and it's a stark reminder to stay vigilant about the risks lurking in ordinary access and trusted services.
FBI Shifts to Active Cyber Disruption Strategy
The FBI is taking a bold new approach to combating cyber threats, shifting from a reactive to an active disruption strategy that aims to proactively disrupt and impose costs on cyber adversaries. This move marks a significant departure from traditional law enforcement methods, embracing a more interventionist posture in cyberspace.
AdaptHealth Data Breach Exposes 4.1M Records
A massive data breach at AdaptHealth has compromised the sensitive information of 4.1 million people, including names, contact details, demographics, and health and insurance data. The cyberattack exposed a wide range of personal records, putting millions of individuals at risk.
CISA Updates Insider Threat Guide to Combat Evolving Risks
The Cybersecurity and Infrastructure Security Agency (CISA) has updated its Insider Threat Mitigation Guide to tackle today's complex risks, offering fresh insights and resources to help organizations stay ahead. This update acknowledges that insider threats are no longer just about disgruntled employees, but also about adapting to emerging trends like AI and remote work.
Cisco FMC Exploits Fuel Ransomware, APT Attacks
Cisco FMC vulnerabilities are being exploited by threat actors, including state-sponsored groups and crimeware attackers, to fuel ransomware and advanced persistent threat (APT) attacks. These bad actors are using recently patched flaws to gain initial access, run scripts as root, and escalate privileges.
AI-Powered Attack Exploits PaperCut Flaws in 395 Organizations
In a shocking display of speed, an AI-powered attack exploited PaperCut flaws to compromise at least 11 organizations in just 26 seconds, with the entire campaign unfolding in a matter of hours. The attackers used "hundreds of AI agents" to automate the exploitation effort, combining AI models with commodity tools to target vulnerable PaperCut NG/MF servers.
Google Play Exposed to Deceptive App Abuse
A sneaky app, "Vice Streets: Open World", racked up over 1 million downloads on Google Play without a single public review or rating, taking advantage of the platform's Early Access feature. This feature, meant to help developers gather feedback, can also shield them from criticism - and warn signs - that might scare off users.
IDScan Breach Exposes 153 Million Driver's Licenses
A massive data breach at IDScan has exposed a staggering 153 million driver's license scans, which were allegedly advertised for sale on a dark-web forum, compromising sensitive information on a huge scale. The identity verification firm has confirmed unauthorized access to its cloud platform and is working with specialists to investigate the incident.
Identity Theft Dominates 4 Key Threat Patterns
Malicious hackers targeted identities in nearly half of all confirmed attacks, with session hijacking and replay emerging as the most effective tactics for gaining unauthorized account access. This alarming trend highlights the growing threat of identity theft in today's digital landscape.
BlueMoon Exploit Kit Targets Windows, Chrome with Zero-Day Flaws
Meet BlueMoon, a sneaky exploit kit that's been wreaking havoc on Windows and Chrome since August 28, using not one, not two, but three zero-day flaws to do its dirty work. This malicious tool, linked to the JungleBamboo threat actor, combines browser vulnerabilities with a Windows kernel exploit to gain ultimate control.
CISA Revamps Insider Threat Guide with Expanded Mitigation Advice
Stay ahead of insider threats with the latest guidance from CISA's revised Insider Threat Mitigation Guide, your go-to playbook for protecting your organization from evolving security risks. The updated guide offers practical advice on tackling emerging challenges like hybrid work, AI, and more.
Gigabud Trojan Exploits Android Work Profiles to Evade Banking App Malware Checks
The sneaky Gigabud Trojan is exploiting Android work profiles to slip past banking app security checks, allowing it to secretly tamper with transactions and drain accounts. By creating a separate work profile, Gigabud can hide in plain sight and facilitate fraudulent payments that appear legitimate.
AI Agents Fuel PaperCut Attacks at Scale
A suspected Russian-speaking actor has unleashed a massive assault on PaperCut MF/NG, compromising at least 440 instances with the help of hundreds of AI agents that supercharged exploit development, targeting, and post-exploit operations. The attacks hit the education sector hard, with victims in 48 countries, primarily in the US, UK, France, and other major nations.
Check Point Discloses High-Severity VPN Certificate Flaws Enabling Unauthenticated RCE
Check Point has uncovered two critical vulnerabilities in VPN certificates that could let hackers run code remotely without authentication, posing a huge threat to security. The flaws, with a near-perfect CVSS score of 9.8, affect various Check Point products, including Security Gateways, Security Management Server, and Spark Firewall.
ShinyHunters Breach Exposes 6.4M in McKesson Cyberattack
A massive 6.4 million individuals have been impacted by the McKesson cyberattack, with exposed data including sensitive information like names, email and physical addresses, and more. The breach, leaked by ShinyHunters, affects a wide range of people, from patients and staff to marketing recipients and healthcare providers.
MantaxOtax Malware Targets Android Devices with Ransomware and Spyware
Meet MantaxOtax, a sneaky malware that's putting Android users on high alert with its potent mix of ransomware and spyware, allowing hackers to hold your device hostage and snoop on your personal life. This hybrid threat can encrypt your files, track your location, and even siphon off sensitive info like contacts, call logs, and gallery content.
FBI Unveils Cyber Strategy to Disrupt Threat Actors
The FBI is taking a bold stance against cyber threat actors with its first-ever Cyber Strategy, aiming to disrupt and hold accountable those who target the US. By taking decisive action and investing in cutting-edge tools, the agency promises to stay one step ahead of cyber threats.
CISA Flags Exploited Cisco, Citrix, Fortinet Flaws Ahead of Federal Patch Deadline
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has sounded the alarm on three critical vulnerabilities in Cisco, Citrix, and Fortinet products, adding them to its list of Known Exploited Vulnerabilities - and federal agencies have just until September 12, 2026 to patch up. These flaws, including a severe CVE-2026-20079 with a CVSS score of 10.0, could leave systems exposed to serious threats if not addressed.
Microsoft Resolves Mouse Settings Reset Bug with September Updates
Good news for Windows 11 users: Microsoft has squashed a frustrating bug that reset customized mouse settings, and the fix is now available through the latest security updates. Installing the latest update will not only resolve this issue but also bring important improvements and fixes to your device.