Tag: emerging threats
4865 articles
Dutch Police Disrupt Mystery Botnet, Seize 17M Devices
Dutch police have successfully dismantled a massive mystery botnet, freeing a staggering 17 million devices from its control. This significant disruption was made possible by tracing around 200 servers to the Netherlands and having the hosting provider shut them down.
Google Chrome Bolsters Defenses with Cookie Theft Protection Rollout
Google's new Cookie Theft Protection is a game-changer, tying session cookies to device hardware to prevent hackers from using stolen cookies to access your accounts. This cutting-edge tech binds user sessions to a machine's security chip, making it virtually impossible for thieves to get in.
Silent Ransom Group Escalates Tactics with In-Person IT Impersonation
The FBI warns that the notorious Silent Ransom Group is taking a more aggressive approach, impersonating IT staff in person to infiltrate corporate systems, targeting US law firms, insurance, finance, and healthcare companies since 2023. This new tactic marks a significant escalation from their previous remote trickery methods.
Russia-linked Group Leverages ChatGPT in Cyberattacks on Ukraine
Meet GREYVIBE, a Russia-linked cyber group that's taking its attacks on Ukraine to the next level with the help of AI tools like ChatGPT, targeting the country's military and government. This sinister crew is leveraging cutting-edge tech to supercharge its cyberattacks.
Russia-Linked GREYVIBE Exploits AI in Ukraine Cyberattacks
Discover how the Russia-linked group GREYVIBE is using AI to launch sophisticated cyberattacks on Ukraine, leveraging tactics like spear-phishing emails and fake websites to spread malware. WithSecure researchers have tracked GREYVIBE's activities back to August 2025, revealing a pattern of attacks targeting Ukraine's military, government, and civilian sectors.
ChatGPT Exposes Users to Prompt Injection Attacks via Browser Content
Researchers have uncovered a vulnerability in ChatGPT that leaves users open to prompt injection attacks, where malicious content is embedded into web pages and then summarized by the AI system as legitimate information. This loophole could put users at risk of falling prey to spoofed security alerts and other online threats.
ShinyHunters Breaches Charter, Exposes 4.9M Customer Records
A massive data breach at Charter has exposed a whopping 4.9 million customer records, with hackers from the notorious ShinyHunters group proudly adding the telco to their "trophy shelf" and making sensitive info like names, addresses, and phone numbers publicly available. Charter has downplayed the incident, claiming no sensitive data was taken, but the reality is that millions of customers are now at risk.
Shadow AI Exposes 2,000 Vibe-Coded Apps with Sensitive Data
A shocking discovery by Red Access revealed over 2,000 apps with sensitive corporate, operational, or personal data exposed online, leaving countless organizations vulnerable to risk. These apps, found on popular vibe-coding platforms, were often deployed without basic security controls, granting open access to sensitive information.
Elder Data Trafficker Draws 10-Year Sentence
A massive data scam that compromised the personal info of over 7 million elderly Americans has landed its mastermind, 57-year-old Troy Murray, a 10-year prison sentence - a major victory in the fight against these heartless crimes. Murray, who went by the alias "Steve Dixon," was found guilty of running a scheme that sold sensitive data, including names, phone numbers, and addresses, to overseas scammers.
Google Engineer Charged with Insider Trading Using Company Data
A Google engineer, Michele Spagnuolo, has been charged with insider trading in the Southern District of New York for allegedly using company data to make lucrative bets on a cryptocurrency-based prediction market. He faces serious penalties, including up to 10 years in prison for commodities fraud and 20 years for wire fraud and money laundering.
Malicious NuGet Package Exfiltrates Sicoob Banking Credentials
A malicious NuGet package, masquerading as a C# SDK for a major Brazilian financial system, was designed to steal sensitive banking credentials, including client IDs, PFX passwords, and certificate bytes, from unsuspecting developers. This rogue package, downloaded nearly 500 times, put automation and security at risk.
CyCOS Expands to Bolster UK SMEs' Cybersecurity Support
The CyCOS pilot is revolutionizing cybersecurity support for UK SMEs by connecting them with expert-led communities that offer personalized guidance and protection. By bringing together a small group of organizations with a few cyber experts, CyCOS creates a unique, supportive ecosystem that helps smaller firms bolster their defenses.
Chinese Hackers Exploit Middle East War to Target Energy, Maritime Firms
Chinese-aligned hackers are intensifying their attacks on maritime and energy companies in the Gulf region, exploiting the Middle East conflict to expand their espionage operations and gain a strategic advantage for Beijing. This alarming surge in cyber threats has been flagged by cybersecurity researchers at ESET.
Charter Communications Breach Exposes 4.9 Million Accounts
A shocking data breach at Charter Communications has left 4.9 million customer accounts vulnerable, with hackers gaining access to sensitive information including names, email addresses, phone numbers, and physical addresses. The breach occurred after a clever voice phishing attack on April 1 allowed cybercriminals to tap into the company's Salesforce database.
AI-Generated Malware Exposes Operator's GitHub Token
A malicious npm package, disguised as a harmless sync utility called "mouse5212-super-formatter", was downloaded 676 times before it was caught stealing sensitive data and exposing its creator's GitHub token. This AI-generated malware cleverly hid its true intentions, uploading stolen files to a fake repository and covering its tracks.
Kimsuky Expands Malware Arsenal with HTTPSpy, HelloDoor
Kimsuky, a notorious North Korean hacking group, has upgraded its malware arsenal with HTTPSpy and HelloDoor, using clever tactics like fake installation pages and a spoofed Webex meeting to infiltrate targets. The group's latest attacks involve highly tailored social engineering and real-time infection verification to maximize success.
Ukraine Bolsters Air Force with Gripen Jets, Meteor Missiles by 2027
Sweden is set to supercharge Ukraine's air force with a game-changing package of up to 16 Gripen C/D fighter jets, complete with Meteor missiles, by early 2027. The historic deal, announced by Swedish Prime Minister Ulf Kristersson, will also include comprehensive training for Ukrainian pilots and technicians.
US Weapons Stockpiles Dwindle After Iran War
The US has burned through a third of its Tomahawk missile stockpile in the recent war with Iran, and at the current production rate of just 86 missiles per year, it'll take over three years to replenish what's been lost. This alarming depletion rate raises serious concerns about the country's military readiness.
US Army Expands Surveillance Balloon Network in Pacific
The US Army is ramping up its surveillance capabilities in the Pacific with a new network of high-altitude balloons, sensors, and datalinks, and is currently seeking proposals from suppliers to support this expansion. The project, led by the 921st Contracting Support Battalion, is still in the market research phase, with a potential full and open competition to follow.
Turkish Defense Industry Targets Gulf Markets with Autonomous Tech
Turkey's defense industry is making a bold move into the Gulf markets with cutting-edge autonomous technology, and regional buyers are taking notice. The country's innovative defense systems, showcased at the SAHA defense expo in Istanbul, are generating significant interest for future purchases.
Russia Deploys Counter-Drone Pantsir System On Moscow Skyscrapers
A viral video shows a Russian Mi-26 helicopter deploying a Pantsir-SMD-E air defense system on a Moscow skyscraper, sparking concerns about the city's defenses. The unusual move has raised eyebrows, with one user joking that it just gave away the location for the next Ukrainian drone strike.
Senator Urges Inspector General for Iran War Oversight
Senator Tammy Duckworth is calling for greater transparency in the US military operation against Iran, urging the Council of Inspectors General to appoint a lead inspector general to oversee the mission and ensure accountability for taxpayer dollars. She has set a deadline of June 5 for the appointment, emphasizing the importance of regular audits and investigations to promote transparency and good governance.
Google Engineer Exploits Confidential Data for $1.2M Betting Gain
A Google engineer allegedly used confidential data to make a staggering $1.2M betting gain, sparking a federal crackdown on insider trading that threatens to undermine market integrity. The US attorney for the Southern District of New York vowed to investigate and prosecute such greed-driven conduct.
NATO's Eastern Flank Vulnerability Exposes Need for Predefined Responses
NATO's eastern flank is in a precarious state of vulnerability, leaving it struggling to keep pace with Russia's cunning hybrid tactics that blur the lines between peace and war. By deploying unidentified drones, launching cyberattacks, and orchestrating other ambiguous provocations, Russia is testing NATO's defenses and pushing the alliance to rethink its response strategy.