Tag: emerging threats
8209 articles
Malware Campaigns Deliver Stealers via ClickFix and Phishing
Beware of the sneaky ClickFix trick: just a click on the 'I'm not a robot' checkbox can lead to a malware attack, putting your sensitive info at risk. This clever scam uses a malicious command to download WordlistLoader, ultimately unleashing the Amatera Stealer.
Notion Abused to Harvest Authentication Tokens in Targeted Attacks
Researchers uncovered a sneaky phishing campaign where attackers abused Notion to steal authentication tokens, using free accounts to impersonate senior executives and send legit-looking document-sharing notifications. This clever tactic was linked to two phishing-as-a-service platforms and over 600 malicious scripts.
AI Super-Users Expose Enterprises to Growing Security Risk
A small group of power users, known as "AI super-adopters," are driving a growing security risk for enterprises, interacting with AI models at 12 times the rate of their colleagues and embedding them into core business operations. These heavy users are having lengthy conversations with AI, with some exchanges lasting 18 prompts or more.
China-nexus Operation QUICSILVER Targets Myanmar with QUICAgent Backdoor
Meet Operation QUICSILVER, a sneaky cyber espionage campaign targeting Myanmar's government and tech sectors with a multi-stage backdoor delivery chain, likely orchestrated by a China-nexus threat actor. The attack begins with clever social-engineering lures disguised as official materials, like graduation invites and fake holiday messages.
Keycloak Flaw Exposes Accounts to Unauthenticated Takeover
A critical flaw in Keycloak, rated 9.1 by Red Hat, allows hackers to hijack any account, including admin ones, by manipulating the password reset process. This vulnerability, CVE-2026-18963, lets attackers take control without even logging in.
AliExpress Exposed Using Silent Audio Trick to Fingerprint Shoppers
Ever had your phone's audio mysteriously cut out when browsing a specific website? A developer discovered that AliExpress was using a sneaky silent audio trick to secretly fingerprint shoppers, sparking concern over online privacy.
AI Coding Tools Exacerbate Open-Source Remediation Debt
AI coding tools are speeding up development, but at a hidden cost: they can quickly introduce a flood of new open-source components that security teams struggle to keep up with, multiplying remediation debt. This creates a downstream cycle of vulnerability assessments, licensing checks, and ownership questions that can be overwhelming.
Microsoft Updates Disrupt Printing, PDF Export in WPF Apps
If you've installed the August 2026 .NET Framework cumulative update, you may be experiencing printing and PDF export issues in your WPF applications, particularly with certain fonts like Calibri. This update has caused a System.IO.FileFormatException error, disrupting workflows that rely on printing and PDF/XPS content generation.
CISA Mandates Emergency Patching for Exploited Zimbra Flaw
A critical Zimbra flaw, CVE-2026-73570, allows hackers to inject malicious code, and the CISA is mandating emergency patching to prevent devastating attacks - don't wait, get protected now!
Password Books Make Comeback as Low-Tech Security Option
In a world where digital security breaches are on the rise, a simple, low-tech solution is making a surprising comeback: password books, now available for just AU$4.90 at AusPost branches in Australia. These compact books offer a practical, old-school way to store your credentials - but do they offer a secure solution?
Iranian Hackers Expose UK Power Plant Vulnerability
Can a UK power plant vulnerability leave millions in the dark? Iranian hackers recently caused a four-day blackout at an unnamed UK facility, raising concerns about the potential for a larger, more critical attack.
Microsoft Issues Workaround for Windows 11 Gaming Glitches
If you've noticed glitches while gaming on Windows 11 after installing the August 11 update (KB5121003) or later, you're not alone - Microsoft has confirmed the issue and linked it to problematic drivers from RGB devices. A workaround is now available to help you get back to gaming smoothly.
Thousands of Leaked AWS Keys Remain Active
A recent scan by Truffle Security uncovered a staggering 9,300+ active AWS keys that were leaked online, including hundreds with full administrative rights, putting sensitive data at risk. These compromised keys were found across various public platforms, with a shocking 88% still authentic and vulnerable to exploitation.
UAT-10147 Deploys AI-Powered SPECTRE Backdoor with EDR Bypass
Meet UAT-10147, a Chinese-speaking cybercrime group that's taking AI-powered attacks to the next level with its sophisticated SPECTRE backdoor, capable of bypassing EDR defenses. This group's arsenal includes a range of open-source tools and custom AI solutions that streamline and scale their malicious operations.
Military Software Must Operate Offline to Ensure Reliable Decision Support
When communications links break down in the heat of combat, military decision-support software must be able to keep providing critical guidance - and that's only possible if it can operate offline. By doing so, it enables lower-level commanders to take charge and make informed decisions, even when higher officers are out of the loop.
China's Lunar Ambitions Hit Snag with Chang'e-7 Delay
China's ambitious lunar plans have hit a roadblock with the sudden delay of its Chang'e-7 launch, a crucial mission to scout out a future research base on the Moon's south pole. The postponement throws a wrench into the country's quest to establish a foothold on the lunar surface and set the rules for future exploration.
China's PL-17 Missile Spotted On J-16 Fighter
Meet the PL-17 missile, a behemoth of a weapon that's roughly six meters long and making a striking appearance on China's J-16 fighter. Its massive size is one of the few confirmed details about this mysterious missile, sparking intense speculation about its capabilities.
US Weighs Loyalty Tests in European Force Posture Review
Loyalty tests can backfire, warn experts Mara Karlin and Julianne Smith, as the US considers a new review of its European force posture that may judge countries on their ideological alignment with America. The proposed pass/fail criteria have sparked debate, with critics arguing that such tests erode, rather than build, loyalty.
ToxicPanda Malware Exploits VPN Permissions to Evade Google Play Security Checks
Meet ToxicPanda, a sneaky malware that's evolved to outsmart Google Play's security checks by exploiting VPN permissions and controlling device traffic. This cunning threat can now target nearly 350 apps and execute over 160 remote commands, putting your mobile security at risk.
Navy Unveils AIM-424 Malice Long-Range Air-To-Air Missile
Meet the AIM-424 Malice, a game-changing long-range air-to-air missile that tips the scales at 1500 pounds and boasts a range of over 250 nautical miles, roughly triple the punch of its AIM-120 counterpart. This behemoth of a missile is set to revolutionize air combat.
Australia Faces Shrinking Warning Time on China Threat
Australia's Defence Minister warns we're living in the most perilous times since World War II, and our window to prepare for a potential threat from China is rapidly shrinking. The days of having a decade to ready our defences are over.
China's J-16 Fighters Debut in Africa with Egypt Joint Drills
China's J-16 fighter jets have made their debut in Africa, traveling over 6,000 kilometers to join Egyptian forces for a joint training exercise, marking a significant upgrade in their overseas deployment. This milestone moment showcases China's growing military reach and capabilities.
USPS Advances Mail Ballot Rules Amid SCOTUS Review
The USPS is pushing forward with new mail ballot rules, despite court challenges, citing a need to be ready for the 2026 general election. The rules, which drew 200,000 public comments, take effect immediately, even as the Supreme Court prepares to weigh in.
China Builds Next-Gen Nuclear Aircraft Carrier
China's latest satellite images reveal its next-gen nuclear aircraft carrier, Type 004, is taking shape with a massive hull that's now approximately 1,050 feet long. The enormous vessel is being assembled at Dalian Shipyard, marking a major milestone in its construction.