Tag: emerging threats
8194 articles
Pentagon Axes Civilian Protection Program, Faces Backlash
The Pentagon has axed its Civilian Protection Program, sparking widespread backlash, after Defense Secretary Pete Hegseth deemed its rules of engagement too restrictive. The move comes despite a 2025 poll of top commanders, who largely favored preserving the program in some form.
US Government Cyber Experts Warn of AI-Driven Security Challenges
The US Coast Guard faces a daunting task in keeping its vast network secure, with 1,500 global locations - including remote sites in Alaska and Maine that are only accessible by snowmobile - making routine maintenance and patching a logistical nightmare. This dispersed footprint poses significant cyber security challenges, especially when combined with environmental constraints.
CISA Red Team Exposes Defense Gap Between Water, Government Sectors
In a recent test, CISA's red team uncovered a shocking vulnerability in a government organization, breaching its defenses with ease by sending phishing emails from an internal address, then moving undetected to sensitive systems and cloud resources. The team was able to gain elevated privileges and spread laterally, exposing a significant gap in the organization's security.
Oracle Attack Exploits Database Functionality, Bypasses Patches
A recent Oracle database intrusion was not foiled by patches, but by a preventable configuration flaw - highlighting the importance of securing database settings over relying on patch count. Properly limiting database privileges and disabling code compilation on production servers could have prevented the breach.
NVIDIA NemoClaw Exposes AI Models to Poisoning via Webpage
NVIDIA's NemoClaw exposes AI models to poisoning via webpage, allowing attackers to take control of the model server by binding it to every network interface. This configuration vulnerability makes it easy for hackers to access and manipulate the Ollama API from outside the loopback address.
Norway's Digital Services Hit by Third DDoS Attack This Summer
Norway's digital services have been hit by a massive DDoS attack, crippling public-sector services and slowing logins for many users. The attack, which started at 03:38 CEST on Monday, targeted the country's shared government digital infrastructure, including public-service logins and secure digital mail.
ZeroTokens Phishing Platform Enables Real-Time Attack Adaptation
Meet ZeroTokens, a sneaky phishing platform that's sending shockwaves with its real-time attack adaptation capabilities, allowing live operators to steer victims through a multi-stage scam. Over 45,000 phishing messages have already been sent to 24,000 recipients across 700 organizations, making it a threat that's hard to ignore.
Nutex Health Probes Data Breach After Servers Exfiltrated
Nutex Health is investigating a data breach that may have compromised private and confidential information stored on its servers, which were accessed and exfiltrated by an unauthorized third party. The incident has prompted a thorough probe and disclosure to the U.S. Securities and Exchange Commission.
Identity Verification Exploited in Onboarding, Recovery Processes
Cyber attackers are now exploiting weaknesses in identity verification processes, targeting the moments when identities are created or re-established, and using tactics like falsifying documents and stolen credentials to gain a foothold. This shift comes as defenders have made logins more secure, with stolen credentials involved in nearly 45% of breaches.
Marimo Notebook Flaw Exposes Users to Pre-Execution Code Injection
A high-severity flaw in Marimo Notebook software, tracked as CVE-2026-75149, could allow attackers to inject malicious code on a user's machine simply by opening a specially crafted notebook in edit mode. This vulnerability, rated 8.7 out of 10 in severity, requires no authentication - just a click.
WhatsApp Bolsters Sign-In Security with Multi-Device Passkey Support
Big news for WhatsApp users: you can now use multiple passkeys across iOS and Android devices to securely log into your account, making it even easier to protect yourself from phishing and account takeovers. This update allows you to manage multiple credentials directly in the app, streamlining your sign-in experience.
Recruiter Scams Target Corporate Credentials on Mobile Devices
Beware of recruiter scams targeting your corporate credentials on mobile devices! A recent discovery by Zimperium uncovered a sneaky phishing campaign impersonating top employers and recruiters, including Amazon, Apple, and Louis Vuitton, to steal sensitive info.
WhatsApp Bolsters Security with Multi-Passkey Support, Enhanced Verification
Boost your WhatsApp security with a game-changing update: you can now set up multiple passkeys across Android and iOS devices, adding an extra layer of protection to your account. Simply head to Settings > Account > Passkeys to get started!
Vulnerability Management Faces AI-Driven Overhaul
The AI revolution is here, and it's forcing security teams to ask themselves: are their vulnerability programs ready to keep up with the lightning-fast pace of Frontier AI models that can identify zero-day flaws and adapt in real time? For many organisations, the answer is a worrying "no".
Malware Campaign Exploits FTP Banners to Deliver E4del and PINHOLE RATs
Malware attackers have found a sneaky way to control infected computers by hiding commands in plain sight - specifically, within the welcome messages that FTP servers send when you log in. This clever trick lets hackers use FTP server banners as secret instructions for their malicious software, E4del and PINHOLE.
npm Packages Host Fake Cloudflare CAPTCHA Pages via Unpkg Mirrors
Researchers uncovered a sneaky scam where attackers hide a fake Cloudflare CAPTCHA page inside harmless-looking npm packages, using mirrors to trick victims into revealing sensitive info. This clever tactic relies on exploiting trusted domains to deploy a ClickFix-style scam that redirects users to attacker-controlled infrastructure.
Mirage2FA Campaign Targets 4,500 Firms, Bypasses Microsoft 365 2FA
Thousands of companies, including 4,532 unique organizations worldwide, have been targeted by the Mirage2FA campaign, a sneaky phishing-as-a-service toolkit that cleverly bypasses Microsoft 365's two-factor authentication. US-based companies are among the hardest hit, making up 63.7% of the victims.
Hackers Breach 270 Zimbra Servers in Remote Code Execution Attacks
A massive wave of hacking attacks has hit 270 Zimbra servers, exploiting a vulnerability that lets attackers inject malicious code remotely, with fixes available since July 20. The attacks, tracked as CVE-2026-73570, have been spreading rapidly, sparking urgent security warnings.
Australian Cyber Agency Warns of Widespread TeamCity Server Exploit
A critical TeamCity server flaw, tracked as CVE 2026-63077, is being actively exploited, allowing unauthenticated attackers to bypass security checks and execute malicious commands, posing significant risks to organizations. This vulnerability, with a near-perfect CVSS score of 9.8, is a high-priority threat that demands immediate attention.
CISA Mandates Swift Patching for Oracle Flaw
Don't wait - patch now! A critical Oracle flaw, scored 10.0, requires immediate attention to prevent low-complexity attacks that could give hackers complete access to your critical data.
Global Crackdown Targets Cybercrime Networks, Arrests 58
In a major win for global security, an international crackdown on cybercrime networks has led to the arrest of 58 individuals and identification of 263 suspects linked to African crime groups. The operation, which ran from November 2025 to June 2026, targeted notorious cybercrime syndicates like Black Axe, known for large-scale financial fraud and romance scams.
WeedHack Malware Persists, Adapts After Infrastructure Takedown
Even after its infrastructure was taken down, the sneaky WeedHack malware managed to adapt and persist, continuing to infect Minecraft players with its malicious code. McAfee researchers tracked over 6,300 attempts to access the malware in August, showing its resilience as a malware-as-a-service operation.
US Targets Mabna Institute Hackers with Sanctions Over Iranian Cyber-Attacks
The US has imposed sanctions on 17 alleged Mabna Institute hackers responsible for a massive cyber-attack spree targeting over 300 universities, 50 private companies, and several government agencies since 2013. This crackdown, dubbed Operation Economic Outcast, aims to cut off the financial lifelines sustaining Iran's cybercrime operations.
ReliaQuest Exposes ShinyHunters' Social Engineering Tactics
ReliaQuest sets the record straight: claims of a ransomware attack or breach are completely false. The company recently thwarted a social engineering scheme by ShinyHunters, swiftly investigating and publicly rebutting the misinformation.