News related to
Code

Oman ministries face widening cyber breach

Omani government networks have been hit by a wide-ranging espionage campaign attributed to Iran-linked operators, with evidence pointing to the theft of judicial records, identity data, staff credentials and internal system files from multiple state entities. The operation centred on the Ministry of Justice and Legal Affairs, where attackers used a custom ASP. NET webshell to maintain access, issue commands and extract data. Exposed attacker infrastructure showed […]

Mamata’s Defiance Makes A Mockery Of Constitutional Propriety

QLNX raises alarm over developer credential theft

A newly documented Linux remote access trojan has sharpened concerns over software supply-chain security after researchers found it was built to steal developer and DevOps credentials that could be used to compromise trusted code repositories, cloud systems and package registries. The malware, known as Quasar Linux or QLNX, combines remote access functions with a rootkit, a Pluggable Authentication Module backdoor, keylogging and credential-harvesting features. Its design suggests […]

Compliance lures expose Microsoft account risks

Microsoft has warned of a large-scale credential theft operation that used fake workplace compliance emails to target more than 35,000 users across over 13,000 organisations in 26 countries, underscoring how cybercriminals are refining corporate-style social engineering to bypass both human caution and automated defences. The campaign, observed between April 14 and 16, 2026, relied on emails that appeared to come from internal human resources, regulatory or conduct […]

Gaming platform breach exposes Yanbian users

North Korea-linked hackers compromised a gaming platform used by ethnic Koreans in China’s Yanbian region, turning Windows and Android game software into surveillance tools aimed at users in a strategically sensitive border community. Cybersecurity researchers identified the operation as the work of ScarCruft, also tracked as APT37, Reaper and Ricochet Chollima, a long-running espionage group aligned with Pyongyang. The campaign appears to have been active since late […]

OpenAI widens cyber access for public defenders

OpenAI plans to open its Trusted Access for Cyber programme to government cyber defenders across federal, state and local levels, marking a broader push to place advanced artificial intelligence tools in the hands of public agencies responsible for protecting critical systems. The expansion is aimed at agencies handling national security, emergency response, public health systems, benefits delivery, municipal infrastructure and other services that face rising digital threats. […]

Trellix breach sharpens source code concerns

  Cybersecurity vendor Trellix has confirmed unauthorised access to part of its source-code repository, raising fresh questions over the protection of development environments inside companies trusted to defend enterprises and public-sector networks. The privately held company said it had brought in external forensic specialists after identifying the intrusion and had notified law enforcement. Trellix said its investigation had so far found no evidence that its source-code release […]

Small contractors face stealth cyber squeeze

Small US defence suppliers are being outmatched by nation-state hackers using poorly monitored network edges to gain long-term access before attacks become visible, new cyber threat analysis has warned. Team Cymru senior threat intelligence adviser Stephen Campbell said smaller companies inside the US Defense Industrial Base face a structural disadvantage because many hold sensitive contract, technical and personnel data but lack the network-level visibility available to major […]

Fall Of Two Regional Pillars Mamata And Stalin Weakens Fight For Federal India

State Assembly Results Signal Big Pan India Consolidation Of BJP

Cardano code push deepens access row

Cardano founder Charles Hoskinson’s claim that he has been kept outside crypto’s most powerful policy and industry circles has sharpened a wider argument over influence, visibility and technical delivery in the digital-asset sector. Hoskinson, who co-founded Ethereum before building Cardano through Input Output Global, said in an interview that he had been excluded from key conversations despite Cardano’s sustained engineering output. His remarks landed as development metrics […]

SAP developers face npm supply shock

Malicious code inserted into four SAP-related npm packages exposed developer workstations and automated build systems to credential theft, marking a sharp escalation in attacks against open-source software supply chains used by enterprise technology teams. The compromised packages were published on April 29, 2026, and affected components tied to SAP’s Cloud Application Programming Model and Multi-Target Application build workflows. The malicious versions identified were @cap-js/sqlite 2.2.2, @cap-js/postgres 2.2.2, […]

Palo Alto tightens guardrails for AI agents

Palo Alto Networks has agreed to acquire Portkey, a Bengaluru-founded AI infrastructure startup, as the cybersecurity group pushes further into securing autonomous software agents now moving from pilot projects into business-critical systems. The Santa Clara-based company said the deal is expected to close in its fourth quarter of fiscal 2026, subject to customary conditions. Financial terms were not disclosed, though market estimates place Portkey’s potential valuation at […]

QR phishing reshapes Microsoft email threat map

  Microsoft detected about 8.3 billion email-based phishing threats in the first quarter of 2026, exposing a sharp shift in attacker behaviour as criminal groups moved deeper into QR codes, fake CAPTCHA pages, phishing-as-a-service kits and file-based payloads to bypass conventional email defences. The volume eased from about 2.9 billion threats in January to 2.6 billion in March, but the decline in headline numbers masked a more […]

Crypto’s automated attack risk deepens

Crypto exploit losses have crossed $770 million in the first four months of 2026, intensifying concern that decentralised finance is entering a harsher phase of cyber risk as attackers combine old weaknesses with faster automation, sharper social engineering and increasingly advanced reconnaissance tools. The scale of the damage has been driven by two major breaches. Drift Protocol, a Solana-based decentralised exchange, lost about $285 million after an […]

Trusted platforms fuel Facebook account theft

  More than 30,000 Facebook accounts have been compromised in a large phishing operation that exploited trusted internet services to make fraudulent messages appear legitimate, sharpening concerns over how cybercriminals are turning mainstream cloud tools into delivery channels for account theft. Cybersecurity researchers have identified the campaign as AccountDumpling, a Vietnamese-linked operation aimed largely at Facebook Business users, page administrators and account operators. The attackers used Google […]

With Elections Over, Realistic Pump Prices Only A Matter Of Time

Botnet turns Jenkins into game weapon

A new botnet campaign is turning poorly secured Jenkins servers into attack nodes aimed at online game infrastructure, including Valve Source Engine servers used for titles such as Counter-Strike and Team Fortress 2. The activity shows how a single exposed continuous integration system can be repurposed to generate UDP, TCP and application-layer floods against multiplayer platforms. Cybersecurity researchers observed the activity on March 18, 2026, after a […]

Credential thieves exploit trust checkpoints

Attackers are shifting credential theft campaigns towards QR codes, fake CAPTCHA pages and ClickFix-style prompts, turning familiar security checks into tools for large-scale account compromise. Fresh threat telemetry for the first quarter of 2026 shows email-based phishing remains vast in scale, with about 8.3 billion threats detected between January and March. Although monthly volumes eased from 2.9 billion in January to 2.6 billion in March, the composition […]

May Day 2026 Marks Critical Turning Point For Labour Movement In India

Wireshark update exposes packet analysis risks

Wireshark has issued version 4.6.5 after a large batch of security flaws was identified across its packet dissection engine, protocol parsers and file-handling components, underscoring the risk faced by administrators and security teams using the tool to inspect untrusted network traffic. The release fixes more than 40 vulnerabilities, including several flaws that may allow arbitrary code execution when malformed packets, crafted trace files or malicious configuration profiles […]

MCP promise collides with security reality

MCP’s rapid rise as the preferred bridge between AI assistants and external tools is running into a harder test inside production software teams: whether convenience justifies the security, reliability and governance risks now surfacing around the protocol. Model Context Protocol, introduced by Anthropic in November 2024 and later moved into broader open governance under the Linux Foundation’s Agentic AI Foundation, was designed to solve a real engineering […]

Chrome users face urgent browser patch

Google has issued an urgent Chrome security update after fixing 30 vulnerabilities, including four critical memory-related flaws that could expose users to attacks through compromised or malicious web pages. The update moves Chrome’s stable desktop channel to version 147.0.7727.137 or 147.0.7727.138, depending on platform, and is being rolled out across Windows, macOS and Linux. Users have been advised to restart the browser after the update is installed, […]

Fake meetings fuel crypto malware raids

A fake video meeting can now be enough to breach a Web3 company, with North Korea-linked BlueNoroff hackers using bogus Zoom calls, clipboard tricks and fileless PowerShell malware to steal credentials from cryptocurrency targets across multiple countries. The campaign marks a sharper turn in social engineering against the digital assets sector, where attackers are no longer relying only on malicious attachments or crude phishing pages. Instead, they […]