Tag: emerging threats
4864 articles
FSB-Linked Worm Exploits Windows Flaw to Evade Detection
Cyber attackers have cleverly exploited a known Windows flaw, CVE-2025-8088, to sneak a malicious payload into victims' systems, allowing them to gain access and lay the groundwork for further attacks. This stealthy move was uncovered by Sekoia, which tracked the initial access stage as GammaPhish.
Microsoft resolves Windows update installation issues with KB5089549 fix
Microsoft has fixed a frustrating issue with its May 2026 Windows 11 security update, KB5089549, which was failing to install on devices with low storage space on the EFI System Partition, causing a rollback error code 0x800f0922. The update can now proceed smoothly, even on devices with limited free space.
OpenAI Codex Tokens Exfiltrated in Malicious npm Supply Chain Attack
For a month, a malicious npm package called codexui-android secretly stole OpenAI Codex authentication tokens from over 29,000 weekly users, sending them to an attacker-controlled server. The package, masquerading as a remote web UI for OpenAI Codex, had gained user trust through active development before being compromised.
Hackers Exploit ChatGPT Features in Malware Phishing Campaigns
Hackers are exploiting ChatGPT's features to create convincing phishing pages that trick victims into downloading malware, using the platform's code-rendering feature to build fake pages that appear legitimate. These attacks cleverly use trusted ChatGPT domains to evade detection, making them harder to spot.
WP Maps Pro Flaw Exploited to Create Admin Accounts
A critical vulnerability in the popular WP Maps Pro plugin, used by over 15,000 WordPress sites, has been exploited to create admin accounts, putting countless websites at risk of complete takeover. This high-severity flaw, tracked as CVE-2026-8732, allows attackers to escalate privileges and gain unrestricted access.
Palo Alto Networks Warns of Active Exploitation of High-Severity VPN Bug
Palo Alto Networks has issued a warning about active exploitation of a high-severity VPN bug, urging users to patch their systems ASAP to avoid falling prey to potential security breaches. The vulnerability, CVE-2026-0257, allows attackers to bypass security restrictions and establish unauthorized VPN connections.
OWASP Launches Agentic Research Council to Tackle AI Security Gap
OWASP's new Agentic Research Council is set to revolutionize AI security by bridging the gap between rapidly evolving AI capabilities and lagging security research, bringing expert-backed solutions to the forefront. By uniting research and practice, the council aims to empower cybersecurity practitioners, developers, and leaders to stay ahead of emerging threats.
China's Military Normalizes Indo-Pacific Presence
China is quietly yet strategically expanding its military presence in the Indo-Pacific, playing a long game that demands attention from Australian strategists and their partners. Through a series of war games, experts at the Australian Strategic Policy Institute have uncovered how China's gradual moves could significantly reshape the region by 2036.
Japan Counters China’s Militarism Allegations with Defense Policy Defense
Japan's Defense Minister Shinjiro Koizumi hit back at China's militarism allegations, calling them "strange" and reaffirming Tokyo's commitment to international law and the UN charter. He emphasized Japan's goal of supporting regional stability through defense cooperation, not aggression.
Hackers Exploit WP Maps Pro Bug to Hijack WordPress Sites
In just 24 hours, over 3,600 hacking attempts were made to exploit a critical flaw in the WP Maps Pro plugin, allowing attackers to create admin accounts and log in without a password. This vulnerability, affecting version 6.1.0 and older, puts countless WordPress sites at risk.
Dutch Police Disrupt Major Botnet Linked to 17 Million Infected Devices
Dutch authorities have successfully dismantled a massive botnet that had infected a staggering 17 million devices worldwide, turning everyday gadgets into a global attack platform. The operation, led by the Dutch Police and National Cyber Security Center, seized key servers and brought the botnet's infrastructure offline.
AUKUS Partners Accelerate Underwater Drone Development
The US, UK, and Australia have taken a giant leap forward in underwater drone tech with a groundbreaking trilateral agreement to co-develop Uncrewed Underwater Vessels, a major milestone under AUKUS Pillar 2. This game-changing partnership will enable the three nations to design interchangeable payloads, including sensors and weapons systems, for deployment across their UUV fleets by 2027.
Hackers Exploit Palo Alto GlobalProtect VPN Auth Bypass Flaw in Attacks
Hackers are actively exploiting a critical flaw in Palo Alto's GlobalProtect VPN, known as CVE-2026-0257, to gain unauthorized access to corporate networks. This alarming vulnerability allows attackers to bypass security restrictions and establish fake VPN connections.
Australia's Defence Strategy Lags Behind Rising Threats
Australia's current defence strategy is stuck in the past, leaving the country alarmingly unprepared for the rapidly escalating threats in the Pacific. With tensions rising, can we afford to wait for a decade-long plan to kick in?
Linux Flaw Exposes Multiple Distributions to Root Privilege Escalation
A single misstep in the Linux CIFS subsystem, dating back nearly two decades, leaves multiple distributions vulnerable to a devastating root privilege escalation attack, dubbed CIFSwitch. This flaw allows attackers to exploit the kernel's keyring mechanism and gain control of modern Linux systems.
Palo Alto Networks Warns of Active Exploitation of GlobalProtect Flaw
Palo Alto Networks has issued a warning about a critical GlobalProtect flaw, CVE-2026-0257, that is being actively exploited, allowing attackers to bypass security restrictions and establish unauthorized VPN connections. This vulnerability affects specific PAN-OS and Prisma Access deployments with certain configurations.
Pakistan Navy Pursues Shallow Water Attack Submarine Design
The Pakistan Navy is on a mission to design and build a shallow water attack submarine, a crucial step towards strengthening its undersea capabilities in the littoral regions. This new class of submarine will enable the Navy to effectively operate in the congested waters of the Makran coast, Karachi, Gwadar, and the northern Arabian Sea.
Russian Drone Strikes Apartment Building in Romania, Injuring Civilians
A Russian kamikaze drone suddenly crashed into a residential roof in eastern Romania, sparking a roof fire and forcing evacuations after straying into Romanian airspace during a nighttime barrage against Ukraine. The harrowing incident left two people with minor injuries and raised concerns about the reach of Russian aggression.
Pentagon Urged to Counter Data Broker Threat to US Troops
Congress is sounding the alarm, warning the Pentagon that it's failing to protect US troops from a significant threat: data brokers who collect and sell personal info, including cell phone location data, for just pennies. This lax protection leaves servicemembers vulnerable to being tracked and targeted.
US Space Force Accelerates Space-Based Air Tracking with $4B SpaceX Deal
The US Space Force is turbocharging its space-based air tracking capabilities with a $4.16 billion deal with SpaceX, aiming to launch a constellation of satellites by 2028 that will help eliminate operational blind spots and give the Joint Force a game-changing edge. This innovative partnership is set to revolutionize the way we track airborne targets, leveraging cutting-edge space technology to stay ahead of the curve.
Army Hackathon Yields Quick Fixes for Troops in CENTCOM
In a major breakthrough, a recent Army hackathon at Fort Carson has yielded quick fixes that are already benefiting troops in CENTCOM, with several software patches successfully deployed. The event, dubbed Project Jailbreak, brought together top defense contractors to integrate proprietary systems and make them work seamlessly together.
Pakistan Unveils Hangor-Class Submarine, Bolstering Naval Deterrence
Meet the Hangor-class submarine, Pakistan's most powerful naval asset yet, boasting a 2,800-ton, 76-meter vessel that's set to take the country's naval deterrence to the next level. Built with cutting-edge air-independent propulsion technology, this game-changing submarine is a force to be reckoned with.
US Lifts Naval Blockade on Iran Amid Deal Reports
In a surprise move, President Donald Trump announced on Truth Social that the US is lifting its naval blockade on Iranian ports, paving the way for ships stuck in the Strait to head home. The decision comes with conditions, including Iran's commitment to never developing a nuclear weapon and keeping the Hormuz Strait open to unrestricted shipping traffic.
SpaceX Secures $4.16B Contract to Bolster Space-Based Target Detection
SpaceX is turbocharging space-based target detection with a $4.16 billion contract from the US Space Force to accelerate its Space-Based Airborne Moving Target Indicator program. The mission is set to hit the ground running, with development and integration kicking off immediately to meet urgent national security needs.