Tag: emerging threats
8194 articles
Attackers Exploit miniOrange SAML Flaws to Hijack WordPress Admin Access
A critical vulnerability in the Xecurify miniOrange SAML 2.0 Single Sign On plugin for WordPress allows hackers to hijack admin access with just a few clicks, giving them the keys to your site's kingdom. This flaw lets unauthenticated attackers log in as any existing user, including administrators, by exploiting a weakness in signature verification.
Mac Malware Exploits Fake OpenAI Codex Ads
Beware of fake OpenAI Codex ads: hackers are using Google search results to trick Mac users into downloading malware by pasting a malicious Terminal command. This sneaky tactic unleashes a multi-stage malware infection, putting your device at risk.
CISA Warns of Actively Exploited Oracle WebLogic Flaw
A critical Oracle WebLogic flaw, CVE-2026-21962, is being actively exploited, allowing hackers to wreak havoc on your system by creating, deleting, or modifying sensitive data. This severe vulnerability has a CVSS score of 10.0, making it a high-priority threat that demands immediate attention.
US Navy Develops Compact Air-To-Air Missile for Stealth Fighters
The US Navy is secretly developing a Compact Air-to-Air Missile (CAAM) for its stealth fighters, with limited details released due to operational security concerns. The new missile is being evaluated as a "future inner boundary weapon" by the Navy's Air Warfare Division.
US Army Cyber Command Forges Integrated Cyber Warfare Capability
The US Army Cyber Command's Joint Integrated Fire Cell proved to be a game-changer, seamlessly integrating Joint Force Headquarters with Army Cyber to tackle complex cyber challenges with unprecedented speed and agility. By synchronizing cyber effects in real-time, the team achieved a major milestone in coordinated cyber warfare.
Senate Bill Targets Energy Sector's Quantum Cybersecurity Gaps
The clock is ticking: as quantum technology advances, our critical energy systems are vulnerable to devastating cyberattacks - that's why Sen. Chris Coons is pushing for the Quantum-GUARD Act to safeguard our nation's infrastructure. This crucial bill would empower the Federal Regulatory Energy Commission to proactively defend against quantum-enabled threats.
US Aircraft Carriers Deploy, Relieve in Middle East Theater
After a grueling 277-day deployment, one of the longest in modern history, the Abraham Lincoln Carrier Strike Group is finally heading home, bringing relief to its weary crew. The US aircraft carrier will make a well-deserved port call in Thailand before docking at Naval Base San Diego.
US Treasury Targets Iranian Hackers in Cyber Sanctions Push
The US Treasury Department has launched a bold crackdown on Iranian hackers, designating four individuals for sanctions for their alleged roles in targeting critical US infrastructure and stealing sensitive information. This economic onslaught aims to disrupt Iran's global financial connections and hold its malicious cyber actors accountable.
US Targets Iran with New Sanctions as Ship Struck in Strait of Hormuz
The US is turning up the heat on Iran with fresh sanctions, and it's clear they mean business - Treasury Secretary Scott Bessent warned countries to toe the line, just hours before a ship was hit in the Strait of Hormuz. The incident saw a vessel struck by an unknown projectile 9NM northeast of Ash Shishah, Oman, leaving its engine room damaged and disabled.
China's Type 054B Frigate Upgrades Hint at 48 VLS Cells
Get ready for a thrilling update for all you naval enthusiasts and VLS aficionados out there - high-resolution photos from China's top shipyards reveal exciting upgrades to the Type 054B Frigate, potentially boosting its VLS cells from 32 to 48. Fresh images from Hudong-Zhonghua and CSSC Huangpu Wenchong shipyards showcase the latest developments.
Silicon Valley Fraud Exposes Façading Tactics
In a shocking expose, researchers uncover a cunning tactic used by Silicon Valley entrepreneurs to deceive investors: "façading," a deliberate process of creating and maintaining illusory growth stories to mask operational failure. By analyzing court records, they reveal a repeatable pattern of deception that has fooled even the most discerning eyes.
Navy Unveils Malice Long-Range Air-to-Air Missile
Meet the Malice, a game-changing Long Range Air-to-Air Missile that's giving Navy aviators a major edge in the skies, with greater reach, survivability, and tactical flexibility to take down threats. This cutting-edge missile is the Navy's latest move to stay ahead of the game and defend the fleet with unmatched air-domain superiority.
Supreme Court Upholds Trump Mail-in Ballot Rules
The Supreme Court has ruled in favor of the Trump administration's mail-in ballot rules, dismissing a lawsuit that sought to block changes to US Postal Service policies. In a 6-3 decision, the court decided that states don't have the grounds to challenge the White House's executive order.
Malware Spreads via Fake Minecraft Clients Using SEO Poisoning
Malware is sneaking its way into gamers' computers through fake Minecraft clients, using clever tricks like search engine manipulation and spreading malicious links on popular platforms like Discord and YouTube. Over 6,300 attempts to access these malicious sites have already been blocked by McAfee Labs.
Glassbox Exposes Browser Fingerprinting Tricks
Meet Glassbox, a tool that shines a light on browser fingerprinting tricks, allowing you to see how easily trackers can single out your browser and device from the crowd. By mirroring live fingerprinting, Glassbox gives you a glimpse into the raw data that can be used to identify you online.
Malware researcher uncovers Sleepwalker Windows backdoor with custom command language
Meet Sleepwalker, a sneaky new Windows backdoor discovered by malware researcher Dominik Reichel, featuring a custom command language that allows it to hide in plain sight. This clever malware masquerades as a Microsoft system component, making it a formidable foe in the world of cyber threats.
Unpatched Calix Routers Expose Internal Devices to Internet Threats
A single, unauthorized request can create a permanent vulnerability in your Calix router's firewall, exposing internal devices to internet threats - no password or prompt required. This shocking flaw, tracked as CVE-2026-75501, leaves devices running EXOS/6.6.47 firmware alarmingly susceptible to attack.
Hackers Exploit WordPress Sites in miniOrange Auth Bypass Attacks
Hackers are actively exploiting WordPress sites using a clever combination of two vulnerabilities, CVE-2026-61979 and CVE-2026-15981, to bypass authentication and gain administrator access. This stealthy attack uses the miniOrange SAML 2.0 Single Sign On plugin to forge SAML responses and hijack user sessions.
Iran Targets UK Power Grid with Cyberattack
A small UK power plant was taken offline for four days in July after a cyberattack, potentially linked to Iran, but officials quickly reassured that the broader energy system was never at risk. The incident has still been flagged as a major escalation in cyber threats, highlighting the need for continued vigilance.
TikTok Settles with US for $400M Over COPPA Violations
TikTok is coughing up $400 million to settle allegations that it violated children's online privacy laws, with $300 million changing hands immediately and another $100 million pending a court ruling. The hefty fine sends a clear message: companies must play by the rules when collecting kids' personal info.
UK Clears Way for Ukraine to Produce Storm Shadow Missiles Locally
The UK is taking a major step to bolster Ukraine's defense capabilities by sharing crucial technology that will allow them to manufacture Storm Shadow missiles locally, a move that underscores the UK's commitment to standing with Ukraine for as long as it takes. This groundbreaking technology transfer is set to empower Ukraine to produce these powerful missiles on its own soil.
Iran-linked hackers disrupt UK power plant operations
A recent cyberattack linked to Iran caused a small UK power plant to shut down, but fortunately, the incident was contained and posed no risk to the broader energy system. The UK government assured that the country's energy infrastructure is highly resilient and that they're working closely with the sector to protect it.
CMMC Pause Doesn't Halt Compliance Imperative
The pause on CMMC Phase 2.0 doesn't let you off the compliance hook - you still need to prioritize protecting controlled unclassified information (CUI) within your environment. Keep moving forward with necessary security measures to ensure CUI protection, as requirements remain in place despite validation delays.
Pentagon Preps Directed Energy Prototypes for Live Fire Test
Get ready for a game-changer in counter-drone missions: the Pentagon is gearing up for a live-fire test of directed energy prototypes in December, with top performers potentially scoring immediate purchase orders.