Tag: emerging threats
8218 articles
Microsoft patches exploited Entra ID flaw amid rising attacks
Microsoft has patched a critical vulnerability in its Entra ID platform, known as CVE-2026-69836, which allowed attackers to execute code remotely with ease, and has already been exploited in recent attacks. This flaw enabled unauthorized threat actors to gain control and wreak havoc, making swift action crucial to prevent further damage.
SickKids Breach Exposes Employee and Applicant Data
A recent cybersecurity incident at Toronto's Hospital for Sick Children (SickKids) may have exposed sensitive personal data of current and former employees, job applicants, and staff from affiliated organizations. The breach, linked to a flaw in third-party software, is under investigation with the help of external cybersecurity experts.
AI Skills Become Mandatory in Over Half of Cybersecurity Job Ads
The demand for AI skills in cybersecurity is skyrocketing, with over half of job postings now requiring AI expertise - a number that's doubled in just one year, from 14.2% to 28.5%. This seismic shift signals a fundamental change in the way cybersecurity teams operate, combining human oversight with machine automation.
GitLab Flaw Exploited in Wild Days After Disclosure
In a chilling demonstration of the new reality in vulnerability exploitation, attackers began exploiting a newly disclosed GitLab flaw within minutes of its public disclosure, leaving little time for patching. This rapid reproduction and exploitation is a stark reminder that waiting for the next patch cycle may no longer be a viable defense strategy.
Microsoft Entra ID Flaw Exploited, Enables Remote Code Execution
Microsoft warns of a critical flaw in Entra ID that lets hackers execute code remotely by exploiting a deserialization vulnerability, giving them free rein to wreak havoc over the network. This maximum-severity flaw, tracked as CVE-2026-69836, has been patched, but highlights the importance of staying vigilant against remote code execution threats.
General Atomics Unveils Wildfire Drone as MQ-9 Reaper Successor
Meet the Wildfire, General Atomics' game-changing drone that's poised to revolutionize the skies - and one expert says it's so impressive, you'd want 100 of them ASAP. The Wildfire is the next-gen MALE UAS that's designed to outpace current Pentagon requirements and take America's warfighting edge to the next level.
US Carrier Deployments Strain Naval Force Amid Global Tensions
The US Navy is feeling the strain as four of its aircraft carriers are currently sidelined for maintenance, putting extra pressure on the remaining ships to manage global hotspots. With tensions running high, the USS George Washington has been redeployed to the Middle East to help relieve the overworked USS Abraham Lincoln.
Army Seeks Digital Twin to Bolster Network Security, AI Training
The Army is on a mission to supercharge its network security and AI training by building a comprehensive digital twin of its networks - a virtual replica that will allow humans and AI to team up and defend against a staggering 1.2 million daily cyber attacks. This ambitious project will create a realistic, constantly updated training environment where operators can test and harden their defenses.
OpenAI Exposes Hugging Face AI Model Vulnerability
OpenAI recently revealed a vulnerability in a Hugging Face AI model, showcasing impressive cyber offense work in a presentation at Black Hat. The incident's details can be found in Simon Willison's step-by-step timeline.
Congress Wrestles with Funding for Trump's Missile Shield Plan
The fate of Trump's Missile Shield Plan, codenamed Golden Dome, hangs in the balance as lawmakers grapple with securing crucial funding, with the White House seeking $17.5 billion but only $400 million currently in the baseline budget.
US Hands Down Record 77-Year Sentence to Nihilistic Extremist Leader
The US has delivered a crushing blow to violent extremist groups with a record 77-year sentence handed down to Kyle William Spitze, a 27-year-old leader who preyed on vulnerable children to further his twisted ideology. This landmark case sends a clear message: federal law enforcement will relentlessly pursue and prosecute those who exploit and harm innocent lives.
Ukraine's Fire Point Courts Pakistan with Loitering Munitions Tech
Ukraine-based Fire Point is wooing Pakistan with its cutting-edge loitering munitions tech, specifically the FP-1 Deep Strike with a 2,600 km range and the FP-2 Front Strike with a 200 km range. Can this be the spark that ignites a practical defence-industrial partnership between the two?
China Unveils Y-15 Tactical Transport with Mid-Air Refueling Capability
China just took a major leap in military aviation with the unveiling of its Y-15 tactical transport, equipped with a game-changing mid-air refueling capability that sets it apart from its predecessors, like the Y-9. This cutting-edge feature puts the Y-15 in the same league as next-generation tactical transports.
Cisco Bug Severity Scores Spark Urgent Patching Calls
Cisco's bug severity scores are sounding alarm bells, with warnings rated as high as 10 out of 10 - a perfect score that's more commonly associated with Olympic gymnastics! It's time to take urgent action and patch those bugs ASAP.
Agencies Face Mounting Pressure to Modernize FOIA Systems
With over 1.7 million Freedom of Information Act requests pouring in during FY2025, federal agencies are facing unprecedented pressure to modernize their FOIA systems and ditch outdated infrastructure that's slowing them down. Legacy platforms are struggling to keep up with record request volumes, causing bottlenecks, duplication, and increased risk.
Google Tracks Russian Cyber Spies Abusing OAuth in Targeted Phishing Campaigns
Google is sounding the alarm on Russian cyber spies who are using OAuth to carry out highly targeted phishing campaigns against top industries, and is sharing details of the attacks to help people recognize malicious outreach. The tech giant has identified three distinct groups behind the ongoing operations, which have been targeting individuals in Europe and the US since last year.
Rust Crates.io Supply Chain Hit by Build-Time Malware Attack
A single compromised account on Rust's Crates.io led to a cunning malware attack, with an attacker using the popular arrayref crate - which has been downloaded over 245 million times - to spread build-time malware to unsuspecting users through malicious package releases. The attack was swiftly contained, with the Rust Project removing the compromised releases within 86 to 107 minutes of their publication.
Russian Hackers Exploit Google OAuth, WhatsApp to Hijack High-Value Accounts
Meet the sneaky Russian hackers who are hijacking high-value accounts using clever tricks and fake emails to get their hands on sensitive info. They're using Google OAuth and WhatsApp to pull off their phishing scams, and experts warn that no one is safe.
Signed Drivers Exposed to Abuse Microsoft Defender Driver Repurposed $10 Million Reward Offered AI Model Exploits Vulnerabilities RCE Flaws Discovered in Gogs, n8n
In a stunning example of old-school ingenuity, a team of investigators finally thwarted a sophisticated espionage campaign by doing something remarkably low-tech: cutting a cable to a compromised router in a Chicago data center. This bold move brought an end to months of digital detective work that had been stymied by the elusive threat actors.
White House Targets AI, Undersea Tech in New Military Priorities
The US military is shifting its focus to cutting-edge tech, prioritizing undersea superiority, space, and artificial intelligence to stay ahead of threats. By combining lower-cost platforms with advanced tech, the goal is to deploy a powerful and flexible defense system.
US Army Cyber Command Trains AI Agents for High-Speed Cyber Operations
Meet the US Army's secret cyber squad: Task Force Lexington is leading the charge in AI-powered cyber operations, training specialized agents to tackle high-speed missions. These agents are being molded to fill specific roles, revolutionizing the way the Army tackles cyber threats.
US Questionnaire Tests NATO Allies' Support
The US is putting NATO allies to the test with a questionnaire that probes their support for American policies, sparking concerns that it's an unnecessary stress test. Estonia's Foreign Affairs Committee chairman Marko Mihkelson is already speaking out against it, calling it an unwelcome way to handle the situation.
US Urges AI Sector to be Designated Critical Infrastructure
The US government is being urged to recognize the AI sector as critical infrastructure, a designation that would highlight its importance to the country's well-being and security. This call to action comes from a new report by Americans for Responsible Innovation, which argues that the AI sector already has all the hallmarks of a vital industry.
Castelion Unveils Affordable Blackbeard Hypersonic Weapon Design
Meet the Blackbeard, a game-changing hypersonic weapon design that's affordable and powerful, designed to bolster American strength and deter adversaries with its unmatched capabilities. Castelion's innovative two-stage design is poised to revolutionize the industry with its unapologetic approach to defense technology.