Tag: emerging threats
4863 articles
VS Code Zero-Day Vulnerability Exposes GitHub Tokens to Theft
A security researcher just revealed a shocking VS Code zero-day vulnerability that lets attackers swipe your GitHub authentication tokens with just one click, exposing your online projects to potential theft. This exploit cleverly abuses VS Code's system to run malicious code and extract sensitive tokens.
WeedHack Malware Targets 116,000 Minecraft Systems Worldwide
Over 116,000 Minecraft systems worldwide have fallen victim to the WeedHack malware campaign since January, with an alarming rate of 2,000 to 3,000 infections daily. This massive operation has spread its reach across the US, Germany, India, and the UK, affecting a staggering number of users.
Rheinmetall Secures $6.6 Billion Arms Deal with Romania
Rheinmetall is set to supercharge its Romanian operations with a whopping $6.6 billion arms deal, boosting local production and tech transfer. The massive contract includes 300 Lynx combat vehicles, cutting-edge Skyranger air defense systems, and more.
US Air Force Designates New Bunker Buster Bomb GBU-76/B
The US Air Force has officially designated its new bunker-busting bomb as the GBU-76/B, and is now seeking industry partners to support its research, development, production, and delivery. The Next Generation Penetrator is set to revolutionize the Air Force's arsenal, and the Air Force is inviting vendors to demonstrate their capabilities in helping to bring it to life.
Defensive Cyber Evolves to Counter AI-Driven Threats
The cyber threat landscape is undergoing a seismic shift, with AI-driven attacks now unfolding at a breathtaking pace and scale that traditional defenses can't keep up with. This exponential explosion of attacks is ratcheting up the stakes for data availability and integrity, and it's only getting worse.
Ukrainian Mirages Expand Role with Air-To-Ground Strikes
Newly released footage shows Ukrainian Mirage 2000-5Fs taking on a more versatile role, using low-level passes and toss-bombing techniques to deliver air-to-ground strikes. This tactical shift marks a significant expansion of their capabilities, moving beyond pure air-defense work.
AI Tools Expose Vulnerabilities in Army's Unified Network
The Army's unified network is facing a new wave of vulnerabilities, thanks to AI tools that are making it easier for attackers to breach defenses. With AI, techniques that once required specialized skills can now be scaled with ease, expanding the attack surface and increasing risk.
Anthropic Expands Vulnerability Detection Program to Critical Infrastructure Firms
Anthropic's expanded Vulnerability Detection Program is helping protect critical infrastructure firms from cyber threats, having already uncovered over 10,000 high-risk software vulnerabilities since April. The program, known as Project Glasswing, now includes 150 organizations across 15 countries.
NSA to Play Central Role in Overseeing AI Development
The White House has issued an executive order establishing a voluntary framework for AI oversight, with the NSA at the helm, to assess and benchmark the cyber capabilities of advanced AI models. This move puts the NSA in a central role in shaping the development of AI, sparking debate about the implications of government oversight.
Australia Seeks to Leverage Stability in AI Infrastructure Race
In a concerning escalation, cyberattacks against Israeli targets skyrocketed by 700 percent over just two days following the June 2025 strikes, with Israel accounting for 12.2 percent of all geopolitically motivated cyberattacks worldwide in 2025. This alarming surge highlights the growing threat of cyber warfare in the region.
Trump Orders Federal Agencies to Oversee AI Systems Amid Cyber Fears
The White House has issued a new directive requiring companies to give the federal government 30 days' notice before publicly releasing advanced AI systems, a move aimed at balancing innovation with cybersecurity concerns. This change, down from a proposed 90 days, marks a significant shift in federal oversight of AI technology.
Philippines' Security Council Bid Targets Enforcement of Global Rules
The Philippines is vying for a non-permanent seat on the UN Security Council, with a vote on June 3 in New York, and its bid is centred on pushing for stronger enforcement of global rules. Defence Secretary Gilberto Teodoro is leading the charge, urging the international community to take a stand and call out breaches of international rules.
Iran Escalates Attacks on Kuwait, Bahrain Amid Ceasefire Tensions
Tensions escalate in the region as Iran launches a barrage of ballistic missiles and drones at Kuwait and Bahrain, only to be thwarted by swift countermeasures from US and regional forces. The US Central Command reports that all Iranian missiles and drones were successfully intercepted or failed to reach their targets.
AI Reshapes Geospatial Intelligence Landscape
The GEOINT conference has emerged as a pivotal event for the intelligence community, offering a unique glimpse into the priorities of top agencies like the National Reconnaissance Office and National Geospatial-Intelligence Agency. This year's gathering presents a strategic window into the future of geospatial intelligence, where AI adoption and data sharing will shape the industry landscape.
Pentagon Integrates Cyber into Operations, Prioritizes AI Security
The Pentagon is revolutionizing its approach to cyber operations, shifting away from treating it as a separate entity and instead weaving it into every military operation from the ground up. By doing so, the Defense Department aims to harness the full power of information on the battlefield, with AI security at the forefront of this strategic evolution.
Ransomware Operator Flouts Unwritten Rule, Hits Russia
A shocking move by a ransomware operator has sent shockwaves through the cybercrime underworld: they've brazenly targeted Russia, flouting an unwritten rule that's long been observed by hackers. This bold - and some might say, boneheaded - decision has left many in the cybersecurity community scratching their heads.
WeedHack Malware Infects 116,000 Minecraft Systems Worldwide
A massive malware campaign, dubbed WeedHack, has infected a staggering 116,464 Minecraft systems worldwide since January, with a whopping 2,000 to 3,000 new infections occurring daily. The widespread attack has hit the US, Germany, India, and the UK the hardest.
Google Patches Actively Exploited Android Flaw Amid June Update
Google just dropped a crucial security update for Android, fixing 124 vulnerabilities, including a high-severity flaw that's being actively exploited - don't wait, patch up your device now! This critical fix tackles a privilege escalation bug that can be triggered without any user interaction, putting your data at risk.
AI-Built Ransomware Toolkit Evades EDR Solutions with Automated Attacks
Sophos researchers uncovered a sophisticated AI-built ransomware toolkit that cleverly evades detection by automated security solutions, triggering alerts only after it had already compromised a customer system. The toolkit's sinister purpose was revealed through investigation, which found references to a ransom note and a list of targeted organizations on a dark web leak site.
CISA Flags Oracle WebLogic Flaw as Actively Exploited
The US Cybersecurity and Infrastructure Security Agency (CISA) has flagged a high-severity Oracle WebLogic flaw, CVE-2024-21182, as actively exploited, prompting federal agencies to apply fixes by June 4, 2026. This critical vulnerability, rated 7.5 by CVSS, was added to CISA's Known Exploited Vulnerabilities Catalog after evidence of active exploitation was confirmed.
Gamaredon Exploits WinRAR Flaw to Deliver GammaWorm, GammaSteel Malware
Cyber attackers have cleverly exploited a WinRAR flaw to unleash a potent malware duo, GammaWorm and GammaSteel, with the goal of taking control of infected systems and executing malicious scripts. This sneaky tactic, spotted by French cybersecurity firm Sekoia, allows hackers to fingerprint host systems, manipulate network settings, and fetch additional payloads from command and control servers.
US Tightens Oversight of AI Models with New Executive Order
The US government's new executive order marks a major shift in AI oversight, requiring companies to submit advanced models for review before release, effectively ending the Wild West era of AI development. This move has drawn support from security leaders, who see it as a crucial step towards ensuring AI safety and security.
Anthropic Expands AI Bug Hunting Program
In just eight weeks, Cisco's AI-powered bug hunting program scanned a staggering 1.8 billion lines of code, a task that would have taken their top security team a whopping eight years to complete. This groundbreaking feat showcases the incredible potential of AI-driven cybersecurity solutions.
Microsoft Exchange Online Disrupts Email Services Across North America, Germany
Microsoft Exchange Online is currently experiencing a widespread outage, causing significant delays in sending and receiving emails across North America and Germany, with some messages remaining undelivered for over an hour. The issue was detected at 10:33 a.m. EDT and is being actively investigated by the company.