Tag: emerging threats
8189 articles
PaperCut Issues Second Patch as Hackers Exploit Flaws
PaperCut has released an updated emergency patch to tackle vulnerabilities that hackers are actively exploiting, working closely with security researchers to stay one step ahead. This new patch includes extra security measures to protect PaperCut NG and MF installations from attacks.
Chinese Actor Exploits ownCloud Flaw to Breach Philippine Nuclear Research Body
A Chinese actor exploited a high-severity ownCloud vulnerability, CVE-2023-49105, to breach a Philippine nuclear research body and steal 176 files, totaling 372 MB of sensitive data. The flaw allowed unauthorized access to files without authentication, highlighting the importance of prompt patching and robust security measures.
Android 17 Bolsters Privacy with OS-Wide Encrypted Client Hello Support
Android 17 just got a major boost to online privacy with OS-wide Encrypted Client Hello support, making it harder for snoops to see which websites you're visiting. This new standard teams up with private DNS to keep your browsing habits private, shielding the domain names you visit from prying eyes.
PaperCut Flaws Chained for Remote Code Execution
Researchers have uncovered a vulnerability in PaperCut that allows an unauthenticated attacker to gain remote control, enabling them to execute arbitrary Java code within the application's process. This flaw can be exploited through a clever two-step chaining technique, putting unpatched PaperCut NG and MF instances at risk.
GiveWP Plugin Flaw Lets Hackers Execute Server Commands
A critical flaw in the GiveWP WordPress donation plugin, known as CVE-2026-82222, allows hackers to run malicious commands on your server - and it's surprisingly easy to exploit. This maximum-severity vulnerability can be triggered by an unauthenticated attacker, putting your site at risk of a devastating takeover.
Meta Overhauls Platforms Amid $18B Youth Safety Settlement
Meta is shelling out a whopping $18 billion to settle allegations that its platforms contributed to a mental health crisis among youth - and as part of the deal, it's making significant changes to its platforms to promote safer online experiences. This massive settlement could be a game-changer for social media, pushing other platforms to follow suit.
UK Man Imprisoned for Operating $1.3 Million IPTV Piracy Ring
A 68-year-old UK man, Milan Ibrahim, has been sentenced to over six years in prison for running a massive $1.3 million IPTV piracy ring that sold stolen broadcasts from top brands like the BBC, ITV, and Sky. His illicit operation raked in nearly £1 million over just three years, authorities say.
Security Leaders Urge Collective Defense Against AI-Driven Cyber Threats
As AI-driven cyber threats escalate, 100 top tech firms, including OpenAI, Google, and Microsoft, are sounding the alarm, calling for collective action to bolster cyber defenses. It's a wake-up call: defenders must adapt and become AI-native to protect against rapidly advancing threats.
Malicious Extensions Target Chrome, Edge Users With Crypto-Draining Code
Beware: malicious Chrome extensions have been discovered that can secretly drain your cryptocurrency wallet! Security researchers uncovered a sneaky campaign that uses 19 extensions to steal wallet secrets and drain crypto funds.
DIA Insider Pleads Guilty to Leaking Secrets to Foreign Spies
A DIA insider has pleaded guilty to leaking classified information to foreign spies, admitting to betraying his oath and putting national security at risk. The shocking case began with a single email in March 2025, sparking a months-long undercover operation that ultimately led to his arrest.
FBI Disrupts China-Linked Hacking Tools Targeting US Agencies
The FBI has cracked down on a massive China-linked hacking operation that used automated tools to scan for and exploit vulnerabilities in US agencies' systems, processing over 2 million attacks in a single day. At the heart of the operation were two powerful tools, QScan and QTRouter, which worked together to identify targets and cleverly conceal the hackers' tracks.
NSA Seeks Access to All Commercial AI Models
The NSA is on a mission to tap into the full potential of commercial AI models, with Deputy Director Tim Kosiba revealing the agency's ambitious plan to access all models and leverage their capabilities. This move marks a significant escalation in the NSA's AI strategy, as it seeks to harness the power of advanced artificial intelligence systems.
US Army Must Optimize for Adaptability
The US Army needs to shift its focus from predicting the future to adapting to the unexpected, because the next crisis will likely arrive with little warning. By optimizing for uncertainty, the Army can respond effectively to surprise attacks and rapidly evolving situations.
Vulnerability Management Scrambles to Keep Pace with AI-Driven Discovery
The National Vulnerability Database (NVD) is undergoing a major overhaul as it struggles to keep up with a staggering 30,000 reclassified vulnerabilities, now marked as "Not Scheduled" for further analysis, amid a surge in AI-driven discoveries. This change aims to help manage the overwhelming backlog through selective processing and automation.
Australia Eyes Drone Developments in Northern Neighbors
Australia's neighbors are taking a bold leap forward with drone technology, with a recent test featuring over 100 autonomous systems flying for an impressive 560 hours - and it's time for Australia to take note. The country's Northern Territory is poised to play a key role in this space, with plans to establish Darwin as a sustainment hub for uncrewed systems and a proving ground for next-gen equipment.
Encryption App Targets Military with AI-Proof Verification
Meet Kibu, an encryption app designed with military-grade security in mind, solving a pressing problem for government execs who rely on personal devices for sensitive conversations. Its cutting-edge verification features combine biometric authentication with organizational identity controls to ensure you're talking to the right person - or entity.
Pentagon Revises F-35 Lifecycle Costs Downward to $1.93 Trillion
The Pentagon just revised its estimate of the F-35's lifecycle costs down to $1.93 trillion, a significant drop from the previously reported $2 trillion price tag. This updated figure includes all development, procurement, operating, and sustainment costs over the jet's expected service life.
Unitree Humanoid Robot Flaws Expose Root Code Execution Risk
A security researcher has uncovered two critical vulnerabilities in the Unitree G1 EDU robot, allowing hackers to remotely execute code with root access, potentially putting users and systems at risk. These flaws, tracked as CVE-2026-76639 and CVE-2026-76640, highlight the importance of robust security measures in robotics and AI technology.
Gitea Servers Exposed to Ongoing Code Execution Attacks
Thousands of Gitea servers remain vulnerable to code execution attacks, with 8393 Internet-exposed IPs still susceptible to CVE-2026-60004, a code injection bug that lets attackers execute arbitrary shell commands. This flaw can be easily exploited by anyone with write access to a repository, which is especially concerning since Gitea enables self-registration by default.
SVG Attachments Fuel Large-Scale Phishing with JavaScript Smuggling
A massive phishing campaign, detected in over 5,500 organizations, used sneaky JavaScript smuggling tactics to evade native defenses, with a whopping 26,589 messages sent over just two months. The attackers cleverly exploited SVG attachments and voicemail lures to spread executable code.
ZBT Routers Expose Critical Flaw with Factory-Installed Implants
Millions of ZBT routers are at risk due to a critical flaw caused by factory-installed implants that grant hackers root access to every device connected to them. This severe vulnerability, rated 9.3 out of 10, allows attackers to take full control with just a network connection.
ServiceNow Flaws Expose Code, SQL to Unauthenticated Attackers
Critical vulnerabilities in ServiceNow's Now Platform could allow unauthenticated attackers to execute arbitrary code or SQL, putting sensitive data at risk. Three flaws, earning the maximum CVSS score of 10.0, were recently disclosed, highlighting an urgent need for patching to prevent devastating attacks.
CISA Warns of Persisting Vulnerabilities
Threat actors are still finding success by exploiting simple, preventable software weaknesses that have been known for years - and it's a problem that CISA says could have been designed out of products from the start. The agency's review reveals that decades-old bugs, like improper input validation, continue to plague the industry.
Manchester Airports Breach Exposes 8.7M Customer Records
A recent data breach at Manchester Airports Group exposed a whopping 8.7 million customer records, including emails, contact info, and vehicle registrations, after hackers demanded a ransom that was wisely refused. The breach is a stark reminder that public networks can put your data at risk, no matter how secure they seem.