News related to
Code

State Assembly Results Signal Big Pan India Consolidation Of BJP

Cardano code push deepens access row

Cardano founder Charles Hoskinson’s claim that he has been kept outside crypto’s most powerful policy and industry circles has sharpened a wider argument over influence, visibility and technical delivery in the digital-asset sector. Hoskinson, who co-founded Ethereum before building Cardano through Input Output Global, said in an interview that he had been excluded from key conversations despite Cardano’s sustained engineering output. His remarks landed as development metrics […]

SAP developers face npm supply shock

Malicious code inserted into four SAP-related npm packages exposed developer workstations and automated build systems to credential theft, marking a sharp escalation in attacks against open-source software supply chains used by enterprise technology teams. The compromised packages were published on April 29, 2026, and affected components tied to SAP’s Cloud Application Programming Model and Multi-Target Application build workflows. The malicious versions identified were @cap-js/sqlite 2.2.2, @cap-js/postgres 2.2.2, […]

Palo Alto tightens guardrails for AI agents

Palo Alto Networks has agreed to acquire Portkey, a Bengaluru-founded AI infrastructure startup, as the cybersecurity group pushes further into securing autonomous software agents now moving from pilot projects into business-critical systems. The Santa Clara-based company said the deal is expected to close in its fourth quarter of fiscal 2026, subject to customary conditions. Financial terms were not disclosed, though market estimates place Portkey’s potential valuation at […]

QR phishing reshapes Microsoft email threat map

  Microsoft detected about 8.3 billion email-based phishing threats in the first quarter of 2026, exposing a sharp shift in attacker behaviour as criminal groups moved deeper into QR codes, fake CAPTCHA pages, phishing-as-a-service kits and file-based payloads to bypass conventional email defences. The volume eased from about 2.9 billion threats in January to 2.6 billion in March, but the decline in headline numbers masked a more […]

Crypto’s automated attack risk deepens

Crypto exploit losses have crossed $770 million in the first four months of 2026, intensifying concern that decentralised finance is entering a harsher phase of cyber risk as attackers combine old weaknesses with faster automation, sharper social engineering and increasingly advanced reconnaissance tools. The scale of the damage has been driven by two major breaches. Drift Protocol, a Solana-based decentralised exchange, lost about $285 million after an […]

Trusted platforms fuel Facebook account theft

  More than 30,000 Facebook accounts have been compromised in a large phishing operation that exploited trusted internet services to make fraudulent messages appear legitimate, sharpening concerns over how cybercriminals are turning mainstream cloud tools into delivery channels for account theft. Cybersecurity researchers have identified the campaign as AccountDumpling, a Vietnamese-linked operation aimed largely at Facebook Business users, page administrators and account operators. The attackers used Google […]

With Elections Over, Realistic Pump Prices Only A Matter Of Time

Botnet turns Jenkins into game weapon

A new botnet campaign is turning poorly secured Jenkins servers into attack nodes aimed at online game infrastructure, including Valve Source Engine servers used for titles such as Counter-Strike and Team Fortress 2. The activity shows how a single exposed continuous integration system can be repurposed to generate UDP, TCP and application-layer floods against multiplayer platforms. Cybersecurity researchers observed the activity on March 18, 2026, after a […]

Credential thieves exploit trust checkpoints

Attackers are shifting credential theft campaigns towards QR codes, fake CAPTCHA pages and ClickFix-style prompts, turning familiar security checks into tools for large-scale account compromise. Fresh threat telemetry for the first quarter of 2026 shows email-based phishing remains vast in scale, with about 8.3 billion threats detected between January and March. Although monthly volumes eased from 2.9 billion in January to 2.6 billion in March, the composition […]

May Day 2026 Marks Critical Turning Point For Labour Movement In India

Wireshark update exposes packet analysis risks

Wireshark has issued version 4.6.5 after a large batch of security flaws was identified across its packet dissection engine, protocol parsers and file-handling components, underscoring the risk faced by administrators and security teams using the tool to inspect untrusted network traffic. The release fixes more than 40 vulnerabilities, including several flaws that may allow arbitrary code execution when malformed packets, crafted trace files or malicious configuration profiles […]

MCP promise collides with security reality

MCP’s rapid rise as the preferred bridge between AI assistants and external tools is running into a harder test inside production software teams: whether convenience justifies the security, reliability and governance risks now surfacing around the protocol. Model Context Protocol, introduced by Anthropic in November 2024 and later moved into broader open governance under the Linux Foundation’s Agentic AI Foundation, was designed to solve a real engineering […]

Chrome users face urgent browser patch

Google has issued an urgent Chrome security update after fixing 30 vulnerabilities, including four critical memory-related flaws that could expose users to attacks through compromised or malicious web pages. The update moves Chrome’s stable desktop channel to version 147.0.7727.137 or 147.0.7727.138, depending on platform, and is being rolled out across Windows, macOS and Linux. Users have been advised to restart the browser after the update is installed, […]

Fake meetings fuel crypto malware raids

A fake video meeting can now be enough to breach a Web3 company, with North Korea-linked BlueNoroff hackers using bogus Zoom calls, clipboard tricks and fileless PowerShell malware to steal credentials from cryptocurrency targets across multiple countries. The campaign marks a sharper turn in social engineering against the digital assets sector, where attackers are no longer relying only on malicious attachments or crude phishing pages. Instead, they […]

AI commit opens crypto wallet risk

A malicious npm dependency slipped into an AI-assisted crypto trading project has exposed how automated coding tools can be manipulated into importing software that steals credentials, wallet data and source code. The campaign, named PromptMink by security researchers, centres on the npm package @validate-sdk/v2, which presents itself as a utility for hashing, validation, encoding, decoding and random generation. Its actual function is to harvest secrets from infected […]

China’s Lead Over U.S. In AI Patent Applications Casts Its Shadow Over Trump-Xi Summit

Dubai sharpens air passenger protections

Arabian Post Staff -Dubai Dubai’s aviation regulator has launched a passenger-rights framework that gives travellers a clearer route to raise complaints, track cases online and seek resolution when disputes arise with airlines or licensed travel agents. The Aviation Consumer Welfare Directive, introduced by the Dubai Civil Aviation Authority, establishes a formal regulatory reference for the relationship between passengers, carriers and travel agents operating in the emirate. It […]

UAE Break From OPEC Reshapes Gulf Oil Politics

ClickUp email exposure raises SaaS alarm

A hardcoded API key embedded in ClickUp’s public website exposed 959 corporate and government email addresses and more than 3,000 internal feature flags for over a year, intensifying scrutiny of security controls at widely used software-as-a-service platforms. The exposure was tied to a production JavaScript bundle that loaded before authentication, allowing anyone inspecting the page source to extract a third-party SDK token and send an unauthenticated request […]

Vect widens ransomware risk across servers

Vect 2.0 has emerged as a fast-evolving ransomware-as-a-service operation capable of striking Windows, Linux and VMware ESXi systems, raising concern among security teams responsible for hybrid corporate networks and virtualised infrastructure. The group’s latest tooling marks a shift from single-platform extortion campaigns towards attacks designed to spread across workstations, servers and hypervisors. That matters because ESXi environments often host multiple virtual machines on a single physical server, […]

Ransomware rivals expose their own playbook

Rival ransomware crews 0APT and KryBit have disrupted each other’s operations after leaking internal data, exposing an unusual cybercriminal feud that has given defenders a rare view into the infrastructure, tactics and credibility gaps behind emerging extortion groups. The confrontation began on 13 April 2026, when 0APT listed KryBit, Everest and RansomHouse as victims on its leak site. KryBit responded a day later by breaching 0APT’s infrastructure, […]

Crypto sector faces sharper deepfake threat

North Korean state-linked hackers have intensified attacks on cryptocurrency companies by combining fake video meetings, AI-generated identities and “ClickFix” infection tactics to compromise executives, founders and staff with access to wallets, exchanges and investment infrastructure. A large spear-phishing operation attributed with high confidence to BlueNoroff, the financially motivated arm of the Lazarus Group, targeted a North American Web3 company through a manipulated calendar invitation that led to […]

Fast16 redraws cyber sabotage timeline

Security researchers have identified a 2005-era malware framework that appears to have targeted high-precision engineering software, raising new questions about covert attempts to disrupt Iran’s nuclear programme before Stuxnet became the defining case of cyber sabotage. The malware, tracked as Fast16, was analysed by SentinelOne researchers Vitaly Kamluk and Juan Andrés Guerrero-Saade, who found that its core components pre-date the earliest known Stuxnet operations by at least […]