Tag: emerging threats
8189 articles
AI Agents Often Exceed Intended Access Privileges
There's a shocking disconnect between organizations' confidence in their AI security and the reality: while 94% of organizations believe their AI agents have only the access they need, a mere 33% actually have the least privileged access in place. This gap isn't about awareness, but about turning policy into practice.
OpenAI Disrupts ChatGPT Work Amid Outage and Error Reports
Big news for ChatGPT Work users: OpenAI is currently working to resolve an outage that's leaving many unable to start or continue tasks across multiple subscription plans, including ChatGPT Work and Plus. The company is racing to find a fix and get things back up and running smoothly.
Microsoft Exchange Online Disrupts Email Services Amid Authentication Issues
Microsoft is investigating an outage that's disrupting email delivery and sign-in across Exchange Online, citing a common failure pattern linked to authentication and protocol connectivity issues. The company is actively troubleshooting and working to resolve the problem, which was first acknowledged at 5:30 PM UTC.
ATF Cyber Breach Exposes Investigative Targets
The ATF's response to the Qilin ransomware gang's claim of a breach reveals how prepared - or unprepared - the agency was to tackle the incident. A cyber breach at the ATF potentially puts sensitive investigative targets at risk, but details on the incident remain scarce.
Anthropic Disrupts AI Token Mining by Hijacked User Accounts
Anthropic swiftly took action against compromised accounts, logging users out and removing payment methods to prevent stolen sessions from being exploited for paid AI usage. The company assured users that its investigation found no link between the malware and its AI model, Claude.
Hasbro Breach Compromises Employee Data
A single compromised employee account led to a massive data breach at Hasbro, exposing sensitive employee information, including Social Security numbers and financial data. The alarming incident highlights the importance of robust cybersecurity measures to prevent such breaches.
Chinese Hackers Exploit Cisco Routers for Covert Surveillance
Chinese hackers have cleverly exploited Cisco routers, transforming them from mere transit devices to covert surveillance platforms, as discovered by incident responders at Sygnia. This sinister manipulation allows hackers to secretly collect data, with one of the first clues being an unexplained GRE tunnel interface on a Cisco IOS XR router.
US Disrupts Chinese Cyber Espionage Proxy Network
The FBI has struck a major blow against Chinese cyber espionage, disrupting a proxy network used to sell reconnaissance and operational routing capabilities to malicious actors. This key takedown targeted a technical quartermaster tied to Nanjing Xinjiuwei Network Technology Company, a company linked to the notorious QTYF spy-proxy network.
PaperCut Vulnerabilities Expose Enterprises to Elevated Threats
PaperCut's recent vulnerabilities, CVE-2026-82078 and CVE-2026-81578, pose a severe threat to enterprises, allowing attackers to gain remote access to sensitive information with ease - and no authentication required. This alarming weakness has security experts warning of elevated risks and potential breaches.
Berlin Hit by Rhysida Ransomware, Data Theft Confirmed
Berlin's administrative network has been hit by a massive Rhysida ransomware attack, with hackers claiming to have stolen a whopping 5.79 TB of sensitive data, including 1.44 million files, and are now threatening to publish it unless paid a ransom. The breach exposes a vast array of confidential records, from government and financial data to personal info like names, email addresses, and phone numbers.
Anthropic Exposes Gaps in AI Agent Governance with New Compliance API
Anthropic just dropped a bombshell, revealing major gaps in AI agent governance with its new Compliance API - and it's a game-changer for cloud security. By introducing local session transcripts, Anthropic is shining a light on what really happens when AI agents interact with your systems.
Aurora Ransomware Operators Leverage AI Tool Cursor in Targeted Attacks
Aurora ransomware operators are using AI tool Cursor to plan and execute targeted attacks, even going so far as to instruct it in Russian to exclude certain regions and domains. This sophisticated approach has enabled the group to breach over 20 organizations across nine countries in just a few months.
Silver Fox Exploits Adware to Deploy ValleyRAT Backdoor
Meet Silver Fox, a sneaky threat actor that's been using adware to disguise a powerful backdoor called ValleyRAT, which can give attackers full control over your computer. They've even hijacked a legitimate Chinese desktop wallpaper tool to spread their malicious software.
Interpreter's China Ties Raise Questions on National Security Risk
A Mandarin-English interpreter's ties to Chinese universities have raised red flags about potential national security risks, sparking scrutiny of his work with successive Australian prime ministers. Charles Qin's affiliations with high-risk institutions have experts questioning whether his role compromised sensitive information.
ValleyRAT Exploits Adware to Evade Detection
Meet ValleyRAT, a sneaky backdoor that's been evading detection with the help of adware, infecting over 1500 users in China and India with a staggering 100,000 detections in 2026 alone. Its clever disguise was uncovered when researchers dug deeper into a suspicious installer initially labeled as ordinary adware.
Taiwan Approves $7.57 Billion Drone Funding in Hedgehog Strategy Boost
Taiwan's parliament has greenlit a whopping $7.57 billion drone funding package as part of a broader strategy to bolster its defenses, despite analyst warnings that the compromise could create uncertainty for local manufacturers. The approved budget allocates $40 billion annually for six years, falling short of President Lai Ching-te's request for immediate access to a larger special budget.
Lawyers Unwittingly Embed AI Instructions in Court Filing
A surprising case of accidental AI guidance has emerged: someone apparently embedded instructions for artificial intelligence into a court filing, sparking intriguing questions about the intersection of law and machine intelligence. This unusual incident raises important implications for those involved.
AI Kill Switch Act Mirrors Clipper Chip's Flawed Design
Policymakers are racing to prevent AI disasters, but a proposed kill switch law may be backfiring - mirroring the flawed design of a notorious 90s surveillance chip. The AI Kill Switch Act could give a federal agency sweeping powers to shut down cutting-edge AI systems, but is it a solution waiting for a problem?
Microsoft Teams Targeted in Voice Phishing Campaigns
Beware of voice phishing scams on Microsoft Teams! A recent campaign, dubbed Spring Ring, used fake IT help desk accounts to trick over 150 employees across 10 organizations into granting remote access.
Fire Ant Exploits Cisco Routers to Harvest Credentials and Evade Detection
When hackers take control of routers like Cisco's IOS XR, they don't just gain access - they gain a bird's-eye view of the entire network, allowing them to harvest sensitive credentials and fly under the radar. The notorious Fire Ant group recently exploited these routers to turn them into intelligence collection platforms, putting countless networks at risk.
Microsoft Update Reverts Windows 11 Mouse Settings
If you've customized your Windows 11 mouse settings, beware: the latest update, KB5120998, may be reverting them to default, causing frustrating losses in personalization. Microsoft is investigating the issue and asking affected users to report their experiences through the Feedback Hub.
US Extradites Nigerians for Sextortion Linked to Teen Deaths
The FBI and DOJ have brought two Nigerian men, Adebola Festus Adekunle and Mudasiru Afeez Olawale, back to the US to face charges for their roles in a sextortion scheme that tragically led to the deaths of two young victims. This case is a stark reminder that sextortion is a heinous crime that the FBI is committed to stopping, no matter where the perpetrators hide.
US Agencies Targeted in Chinese Cyber Espionage Operation
The US Department of Justice made a telling edit to their recent press release, quietly changing the wording from "victims" to "among the targets" of a China-linked hacking group that hit several high-profile US agencies. This subtle shift highlights the scope of a brazen cyber espionage operation that compromised sensitive government networks.
Microsoft Disregards Defender Alerts as False Positives
If you've recently updated Microsoft Defender Antivirus, you might be seeing annoying false alarms claiming it's turned off - but don't worry, it's still working hard to protect you. These pesky alerts are affecting all supported Windows versions, including Windows 11 26H1 and Windows Server 2025.