Tag: emerging threats
8189 articles
Venezuelans Plead Guilty to ATM Jackpotting Attacks
Meet the five Venezuelan nationals who just pleaded guilty to orchestrating a string of daring ATM jackpotting attacks across the US, using malware to target vulnerable machines and make off with the cash. Their clever - but ultimately doomed - scheme involved installing malware in ATMs, but surveillance caught them in the act, leading to their arrest and guilty pleas.
Financial Stability Board Warns of AI-Driven Cyber Risks
The Financial Stability Board warns that advanced artificial intelligence could revolutionize cyber threats, potentially shaking market confidence and posing a systemic risk, especially with highly concentrated third-party service providers. Its chair, Andrew Bailey, is urging the sector and authorities to prepare for this emerging threat.
Attackers Exploit Langflow, Rails Flaws for Credential Probing
Attackers are actively exploiting vulnerabilities in Langflow and Rails to launch credential probing attacks, using tactics like querying sensitive environment variables and reading secret keys to harvest valuable info. This alarming mix of reconnaissance and credential harvesting activities highlights the urgent need for robust security measures.
McKesson Probes Data Breach After ShinyHunters Claims 284 Million Records Stolen
McKesson is investigating a data breach after a hacking group claimed to have stolen 284 million records, prompting the healthcare giant to probe unauthorized access to its third-party applications. The breach appears to be limited to a subset of customers within two of its business units.
PaperCut Zero-Days Exploited in Data Theft Attacks
Hackers are actively exploiting two zero-day vulnerabilities in PaperCut NG and MF, using them to bypass authentication and steal sensitive data from vulnerable print management servers. Attackers have already been spotted chaining these flaws to launch data theft attacks, prompting emergency patches from PaperCut Software.
Security Leaders Warn of Evolving Insider Threats
Insiders pose a uniquely potent threat because they already have the keys to the kingdom - and traditional defenses often miss the mark by relying on alerts that don't account for the devastating impact of trusted accounts gone rogue. To stay ahead, defenders must validate their readiness against insider threats by asking tough questions about access, escalation, and lateral movement.
US Army Grapples with Nuclear Microreactor Waste, Fuel, and Safety Concerns
The US Army is investing $2.2 billion in its Janus program to develop 20 prototype nuclear microreactors, aiming to reduce reliance on the vulnerable domestic electric grid and mitigate risks in remote operations. The first prototype is set to be operational by fall 2028.
Japan's ASM-3 Kai Missile Expands to Anti-Air Role
Japan's defense budget request takes a surprising turn with the ASM-3 Kai missile, now being eyed for a dual role as both an anti-ship and anti-air missile, marking a significant expansion of its capabilities. This development hints at a more versatile and robust defense strategy for the country.
Facilities Face Evolving Threats Beyond Traditional Security Measures
Protecting facilities today is no longer just about traditional security measures like fences, guards, and firearms - it's about countering emerging threats like affordable drones, AI-powered cyberattacks, and targeted assaults on vital infrastructure. The threat landscape has become increasingly complex, with attacks now coming from unexpected angles and domains.
Israel Seals $3.4B Deal to Bolster Greece's Air Defense Capabilities
Greece has just sealed a game-changing $3.4 billion deal with Israel, dubbed Achilles' Shield, to revolutionize its air defense capabilities with a cutting-edge, multi-layered defense array. This powerhouse package will shield Greece from a wide range of threats, from ballistic missiles to tiny drones.
Japan Unveils Powerful New Missile Defense Warship
Meet Japan's game-changing new warship, boasting a powerful radar system with five times the tracking capability of its predecessor, designed to tackle multiple ballistic missile threats at once. Its massive integrated mast, carrying four cutting-edge AN/SPY-7(V)1 arrays, is a striking feature that's setting a new standard in naval defense.
Japan's Defense Budget Request Signals Shift to High-Tech Warfare
Japan's Ministry of Defense is shaking things up with a bold new budget request of 8.9 trillion yen, focusing on building a robust defense infrastructure that's as much about factories and stockpiles as it is about cutting-edge jets and missiles. The proposal includes around 160 unfunded items, hinting at an even bigger price tag to come.
AI Reshapes Federal eDiscovery to Meet Surging FOIA Demands
Federal agencies are struggling to keep up with a surge in FOIA requests that are not only increasing in volume but also growing more complex, involving large volumes of electronic records, multiple custodians, and sensitive data. This perfect storm is putting a strain on legacy eDiscovery systems and already limited staff, all while meeting a strict 20-day deadline.
US Launches 'Watershed 250' to Bolster Water Sector Cybersecurity
The US has launched Project Watershed 250, a game-changing initiative that brings together top cyber and AI experts to safeguard America's water systems from growing cyber threats. This six-month pilot in Texas marks a major step forward in the nation's cybersecurity strategy, uniting state, industry, and federal efforts to put America's safety first.
Japan Pursues Extended-Range Missiles in Record $55B Defense Budget
Japan's defense ministry is pushing the boundaries of its military capabilities with a record-breaking $55.6 billion budget proposal, aimed at bolstering its defense systems with cutting-edge tech. The 8.89 trillion yen request, covering the next fiscal year, sets a new high bar for Japan's defense spending.
Ukraine's Intel Exposes Zircon Missile's Complex Production Chain
Ukrainian intelligence has uncovered a massive network of 70 enterprises and 84 individuals working together to produce Russia's advanced 3M22 Zircon missile, revealing a complex production chain that's raising new questions about technical and policy implications. The detailed breakdown, courtesy of the Main Directorate of Intelligence, names specific companies and components, shining a light on the intricate web of suppliers behind this cutting-edge weapon.
India, UK Accelerate Defense Ties With Joint Projects, Tech Sharing
India and the UK are turbocharging their defense partnership with a bold plan to co-design, build, and deploy cutting-edge maritime electric propulsion systems, starting with a game-changing deal for four Indian Navy landing platform docks. This innovative collaboration is set to revolutionize naval capabilities with Integrated Full Electric Propulsion technology.
McKesson Discloses Data Theft After ShinyHunters Extortion Attack
McKesson has confirmed a data theft incident following a cyberattack by ShinyHunters, but has assured customers that its business and distribution centers are up and running with no ongoing unauthorized activity. The company sprang into action, activating incident response protocols and launching an investigation to minimize disruption.
Congress Urged to Act as Munitions Shortage Widens
The Pentagon's alarmingly long procurement lead times have sounded the alarm: 31 months for crucial PAC-3 interceptors, 34 months for THAAD interceptors, and a staggering 40 months for Tomahawk missiles. If Congress delays appropriations, these timelines will stretch even further, leaving our defenses vulnerable for years to come.
Cyberattacks Disrupt Healthcare Firms, Compromise Patient Data
Millions of patient records are at risk and remote monitoring for newly implanted cardiac devices has been crippled after two major healthcare firms, Boston Scientific and McKesson, fell victim to separate cyberattacks. Boston Scientific's hack has left new pacemakers and heart devices unable to transmit vital data remotely, putting patients' health and privacy in immediate jeopardy.
Cronos Restarts After $74 Million Tectonic Exploit
Cronos is back online after a swift restart, restoring its chain state to before the $74 million Tectonic exploit and resuming block production from block 90,896,189. The network had temporarily halted activity to protect users from a rapid price-manipulation attack on a major DeFi lending protocol.
Microsoft Exposes TerminalFix Attacks Deploying Reverse Tunnels
Beware of TerminalFix attacks that use fake Cloudflare CAPTCHA prompts on compromised websites to trick you into executing malicious PowerShell commands in Windows Terminal. These sneaky attacks can lead to more complex threats, making it crucial to stay vigilant online.
North Korea Expands Job Fraud Into New Sectors
North Korean workers are pulling off a clever scam, tricking companies into hiring them remotely and often doing legitimate work, all while hiding their true identities. Huntress has uncovered alarming cases of this employment fraud expanding into healthcare, sales, marketing, and medical fields.
Microsoft Warns of TerminalFix Malware Hiding in PNGs
Microsoft researchers have uncovered a sneaky malware campaign, dubbed TerminalFix, that hides in plain sight by masquerading as harmless PNG images - only to delete them after extraction, leaving behind a trail of PowerShell commands that can compromise your system. This fresh variant of the ClickFix social-engineering trick tricks victims into pasting malicious commands into Windows Terminal or PowerShell.