Tag: emerging threats
4863 articles
Security Leaders Scramble to Accelerate Post-Quantum Cryptography Transition
The pressing question isn't when quantum computers will crack today's encryption, but whether organizations will be prepared to make the switch to post-quantum cryptography before it's too late. With only 8% of SSH servers currently making the transition, experts warn that the time to act is now.
US Disrupts Southeast Asia Crypto Fraud Networks, Freezes $3.8 Million
The US Department of Justice has struck a major blow against crypto fraudsters, freezing $3.8 million and disrupting a network of scam centers in Southeast Asia that prey on vulnerable Americans, wiping out life savings with devastating cyber-enabled investment scams. This crackdown is part of the Scam Center Strike Force initiative, aimed at protecting citizens from transnational criminal organizations.
Hackers Exploit Active Directory Flaw to Harvest Passwords
Storing passwords in Active Directory description fields is a rookie mistake that hackers are eager to exploit, and one hacker did just that with alarming ease. It was disturbingly simple for them to get their hands on sensitive information.
US Military to Test High-Altitude Balloon Sensor System
The US military is on the verge of testing a game-changing sensor system, pairing tiny sensors with a high-altitude balloon to overcome the challenges of operating in the stratosphere. The innovative Project Wallabee will take flight in the coming days, marking a major milestone in advancing autonomous target recognition technology.
Trump's Pick for Intel Chief Jeopardizes Surveillance Powers Deal
President Trump's surprise pick for intel chief, William Pulte, has thrown a wrench into a fragile deal to extend a critical surveillance authority, sparking concerns from lawmakers that his appointment could put politics over national security. With Pulte's lack of experience and questionable past, some are worried that the nation's intelligence operations may be weaponized for personal gain.
US Military Weighs Standalone Cyber Force by 2028
The US military is considering a game-changing move: creating a standalone Cyber Force by 2028, but its success hinges on a crucial decision from Congress or the White House this year. A recent report outlines a bold plan to overcome longstanding structural challenges in cyber operations and make this vision a reality.
Defense Industry Faces Drone Wingman Training Hurdles
As the US military increasingly partners with drones in combat, defense manufacturers face a new challenge: training drone wingmen to work seamlessly with human pilots. The future of manned-unmanned teaming will require significant changes in the defense industry.
Ukraine Strikes Russian Baltic Fleet Base with Drones
Ukraine's precision drone strike on a Russian Baltic Fleet base has brought the conflict to a new level, with President Volodymyr Zelensky hailing the attack as a crucial step towards peace. The daring raid, which set a Russian corvette ablaze in a Kronstadt dry dock, is part of Ukraine's long-range strategy to counter Russian aggression.
Taiwan's Frontline Experience Fortifies Australia's Undersea Defenses
As Deputy Prime Minister Richard Marles warned, the seabed is rapidly becoming a battlefield, posing a stark threat to Australia's undersea defenses, with a whopping 99 percent of the country's internet traffic relying on just 15 vulnerable subsea cables. This alarming exposure puts everything from financial services to healthcare and communications at risk of disruption.
Lawmakers Probe Pentagon Loan to Firm Tied to Trump Jr.
Democratic lawmakers are raising red flags over a $620 million Pentagon loan to Vulcan Elements, a small North Carolina startup, after it emerged that a top White House aide, and friend of Trump Jr., intervened to secure the deal. The loan has sparked questions about favoritism and undue influence at the highest levels.
Cybersecurity Language Excludes Talent
The language used in cybersecurity can be a major turn-off, as one panelist discovered when a high school student sniggered at the term "penetration tester" - a reaction that sparked a thought-provoking question about who this language invites into the field, and who it inadvertently shuts out. This moment highlights a broader cultural issue in cybersecurity's approach to attracting new talent.
China Unveils Large Sailless Submarine in Satellite Imagery
China has just revealed a massive, futuristic submarine without a traditional sail, sparking curiosity among naval enthusiasts and experts. This sleek, 394-foot-long vessel is taking shape at the JN Shipyard in Shanghai.
Europe Cracks Down on Illegal Streaming Networks, Arrests 29
Behind the scenes of cheap streaming deals, complex crime networks are at work - but thanks to Operation Kratos 2, 29 alleged cybercriminals have been arrested and nine organized crime groups dismantled. This major crackdown on illegal streaming networks marks a huge win for European law enforcement.
AI Cyberattacks Expose Need to Rethink Resiliency
Cyberattacks are no longer just about stealing data - they're now aimed at taking over entire virtual environments, wiping out all data and leaving businesses in a state of digital darkness. The game has changed, and it's time to rethink our approach to resiliency.
Chinese Hackers Deploy Atlas RAT in Europe With Heightened Cyberattacks
Chinese hackers have significantly ramped up cyberattacks in Europe, with a financially motivated group, tracked as TA4922, launching a high volume of unique campaigns targeting countries including Germany, Italy, and the UK. This surge in activity, which began in March, has been marked by unprecedented diversity in tactics and objectives, including fraud, data theft, and network breaches.
Autonomous AI Tool Exposes 2-Year-Old Redis RCE Flaw
A 2-year-old vulnerability in Redis, tracked as CVE-2026-23479, went undetected until a cutting-edge autonomous AI tool uncovered it, revealing a critical remote code execution flaw that had been hiding in plain sight. This shocking discovery highlights the power of AI in uncovering even the most elusive security threats.
Microsoft 365 Android Apps Expose Account Tokens Due to Debug Flag Oversight
A single line of code, "setIsDebugMode(true)," inadvertently left in multiple Microsoft 365 Android apps, created a gaping security hole that allowed other apps on the same phone to access sensitive account tokens without user permission. This tiny oversight, discovered by Enclave's Yanir Tsarimi and Ofek Levin, exposed users to potential security risks.
Google DoubleClick Exploited in Malspam Campaign Delivering DesckVB RAT
Cyber attackers are cleverly using Google's DoubleClick to disguise malicious emails, routing victims through a legitimate domain that often flies under the radar of security tools. By exploiting this trusted platform, hackers can easily trick people into downloading the DesckVB RAT malware.
Researchers Expose Vulnerability in Anti-Jamming Tech
Researchers have uncovered a shocking weakness in anti-jamming technology, revealing that curved radio beams can outsmart even the most advanced direction-finding defenses. In lab tests, this vulnerability led to disastrous errors, leaving traditional safeguards useless.
Google Gemini on Android Exposed to Notification-Based Hijacking
Researchers have uncovered a vulnerability in Google Gemini on Android that allows hackers to hijack the assistant using a single hostile notification, no malicious app required. This shocking exploit lets anyone able to push a notification to a device deliver a payload and take control.
Hackers Target Fuel Tank Monitoring Systems with Cyberattacks
Cyber attackers are launching targeted strikes on internet-exposed fuel tank monitoring systems, allowing them to modify and manipulate critical infrastructure. These compromised systems, known as automatic tank gauges, remotely track fuel levels, temperatures, and leaks, making them a prime target for malicious actors.
US Sanctions Nobitex Crypto Exchange Over Terrorism Financing Links
The US Treasury has sanctioned Nobitex, Iran's largest crypto exchange, and several top executives, citing its role in supporting the regime and processing over 50% of Iranian digital asset inflows. This move is part of a broader effort to crack down on terrorism financing through cryptocurrency.
HTTP/2 Bomb Attack Disrupts Web Servers in Seconds
A home computer on a typical 100Mbps connection can cripple a vulnerable server in mere seconds using a new technique called the HTTP/2 Bomb, which cleverly combines two known weaknesses in HTTP/2 server configurations. This potent attack can be unleashed quickly, leaving servers inaccessible.
Vulnerability Patching Lag Exposes 91% of Organizations to Known Threats
The alarming truth is that 91% of organizations are leaving themselves exposed to known threats due to a vulnerability patching lag, with only 9% able to remediate high-severity flaws within a critical 24-hour window. This delay is not just a statistic - it's a recipe for disaster, with organizations that patch more slowly facing significantly higher breach rates.