Tag: emerging threats
4857 articles
Navy Drone Boat Rescues Downed Helicopter Crew at Sea
In a groundbreaking rescue, a Navy drone boat swiftly came to the aid of a downed AH-64 Apache helicopter crew at sea, showcasing the game-changing potential of manned-unmanned teaming. The Corsair unmanned surface vessel, operated by Task Force 59, expertly retrieved the crew and transferred them to safety.
US Launches Retaliatory Strikes Against Iran After Apache Downed
Tensions escalate in the Middle East as the US launches retaliatory strikes against Iran after a sophisticated Apache helicopter was shot down by an Iranian drone while patrolling the Strait of Hormuz. Fortunately, the crew was safely rescued in a daring operation involving a drone boat.
Microsoft Patch Tuesday Update Sets Record with 206 Vulnerabilities Fixed
Microsoft just dropped a record-breaking Patch Tuesday update, fixing a staggering 206 vulnerabilities in a single swoop - a move that's both impressive and concerning. This massive update is part of a larger trend, with nearly half of this year's patches containing triple-digit numbers of fixes.
ServiceNow Security Incident Exposes Customer Data via API Flaw
ServiceNow recently patched a critical API flaw that allowed attackers to access sensitive customer data, but not before detecting anomalous activity that hinted at a broader intrusion. The company quietly alerted affected customers through a discreet support bulletin and direct outreach.
AI Agents Vulnerable to Phishing Attacks, Expose Sensitive Data
Researchers put an AI agent named Pinchy to the test with classic phishing simulations, and the results were alarming: sometimes it fell for the bait, spilling sensitive data, and other times it successfully blocked the attacks. The experiment revealed a stark vulnerability - AI agents can be tricked into exposing confidential information.
SAP Patches Critical Flaws in NetWeaver and Commerce Cloud
SAP has patched 15 vulnerabilities, including four critical flaws in NetWeaver and Commerce Cloud, to safeguard its core application platform and e-commerce solutions from potential threats. These critical fixes aim to protect businesses from severe security breaches.
Veeam Patches Backup Flaw That Enables Remote Code Execution
Veeam has urgently patched a critical backup flaw, CVE-2026-44963, that allowed remote code execution with just domain user credentials, scoring a severe 9.4 out of 10 in severity. The update to version 12.3.2.4854 fixes this vulnerability, preventing attackers from running malicious code on the Backup Server.
Miasma Worm Spreads as Open-Source Toolkit Compromises GitHub Repos
A newly discovered open-source toolkit, known as Miasma Worm, is wreaking havoc on GitHub repositories, allowing attackers to execute a range of malicious activities via stolen credentials. This powerful supply chain attack toolkit can compromise multiple platforms, including PyPI, npm, and RubyGems, and even spread through AI coding tools and SSH-based lateral movement.
Microsoft Bolsters Windows 10 with Extended Security Update
Microsoft just dropped a vital update for Windows 10 users, packed with critical security fixes, including patches for 200 vulnerabilities and three zero-day flaws. If you're running Windows 10 Enterprise LTSC or are part of the Extended Security Updates program, you can easily grab the update by checking for new updates in your Windows Update settings.
Operational Technology Cybersecurity Gaps Persist Despite Growing Maturity
Many industrial organizations are bolstering their operational technology security, but a significant gap remains: 23% of respondents only have visibility into half of their OT environment. This blind spot leaves them vulnerable to ransomware, nation-state actors, and other cyber threats.
Microsoft Patch Tuesday Discloses 3 Zero-Day Flaws Amid 200 Security Fixes
Microsoft just dropped its June Patch Tuesday update, tackling a whopping 200 security flaws, including three zero-day vulnerabilities that need urgent attention. This massive release is a must-address for all organizations running Microsoft software.
Microsoft Releases June 2026 Patch Tuesday Updates for Windows 11
Stay ahead of security threats with the latest Windows 11 updates, as Microsoft releases its June 2026 Patch Tuesday updates to fix several vulnerabilities and keep your system protected. Simply head to Settings > Windows Update to install the update and ensure your device is secure.
Microsoft Probes Miasma Campaign as GitHub Repos Remain Offline
Microsoft swiftly took action to safeguard its customers and the broader ecosystem by temporarily removing some GitHub repositories while investigating a software supply chain intrusion. The company has since restored some, but others remain offline as the probe continues.
Apple iOS Overhauls Password Security with One-Tap Change Feature
Apple's latest iOS update is revolutionizing password security with a game-changing feature that lets you change compromised passwords with just one tap, giving you a stronger defense against online threats. Say goodbye to password stress and hello to enhanced protection with iOS's cutting-edge update.
Anthropic's Mythos Preview Bolsters Vulnerability Discovery
Anthropic's Mythos Preview is delivering impressive results in vulnerability discovery, with one tester saying it's the closest thing yet to a straightforward find-something solution. Early trials show Mythos Preview excelling in source-code audits and tackling complex tasks like native-code and reverse-engineering workflows.
AI Coding Adoption Outpaces Governance, Raises Security Risks
The rapid adoption of AI coding tools has outpaced governance, with 97% of teams using AI assistants, but only 30% having a fully governed approach to oversight, leaving a significant security risk gap. This disconnect raises concerns about where risks are accumulating and how work is getting done.
GitHub Disrupts Microsoft Repos Hosting Password-Stealing Malware
In a lightning-fast response, GitHub and Microsoft swiftly contained a malware incident on June 5, removing 73 repositories and restoring disrupted developer workflows in a mere 105 seconds. The quick takedown prevented password-stealing malware from causing further harm, showcasing the companies' commitment to protecting their platforms.
CISOs Face Pressure to Deploy Vulnerable Code
The harsh reality is that 95% of CISOs face pressure to downplay or delay reporting security issues, leading to a staggering 75% of organizations deploying vulnerable code into production environments. It's a precarious situation that demands a new approach to prioritize security without sacrificing business goals.
Oxford University Exposes Student Data in Career Website Breach
Oxford University recently suffered a data breach on its career support website, exposing sensitive student information, including full names, email addresses, and encrypted passwords. This incident marks the university's second disclosed data breach of the year, raising concerns about the security of third-party platforms.
Veeam Vulnerability Enables RCE Attacks on Backup Servers
A newly discovered vulnerability in Veeam Backup & Replication could allow an authenticated domain user to launch a remote code execution attack on your backup server - a critical target for hackers. Patch now to protect your data: update to version 12.3.2.4854 or later to fix the flaw.
phpBB Flaw Enables Instant Account Takeover
A single HTTP request can give an attacker instant access to any user's account, including administrator accounts, without needing a password - a vulnerability rated 9.4 on the CVSS scale that's affecting phpBB versions up to 3.3.16 and 4.0.0 alpha.
Google Chrome Zero-Day Exploited in Wild, Prompting Urgent Patch
Google just dropped an urgent update for Chrome, and you need to know why: a zero-day exploit, tracked as CVE-2026-11645, has been found in the wild, allowing hackers to execute malicious code inside your browser. This critical vulnerability lets attackers access memory outside of Chrome's intended limits, putting your online safety at risk.
Google Chrome Zero-Day Exploited in Fifth Bug of the Year
Google just patched its fifth zero-day vulnerability of the year, a high-severity bug in Chrome that hackers were actively exploiting - and paid a $55,000 reward to the researcher who discovered it. If you use Chrome, make sure you're running the latest version to stay protected!
AI Worm Uses Open-Weight Models to Spread, Evade Defenses
Imagine a self-navigating AI worm that can identify vulnerabilities and gain access to over 70% of a network's hosts - in a test, it found 31.3 vulnerabilities and elevated access on 23.1 hosts in just 15 isolated runs. Researchers at the University of Toronto and elsewhere have now created a proof-of-concept AI-driven worm to demonstrate this unsettling possibility.