News related to
Linux

Vect 2.0 has emerged as a fast-evolving ransomware-as-a-service operation capable of striking Windows, Linux and VMware ESXi systems, raising concern among security teams responsible for hybrid corporate networks and virtualised infrastructure. The group’s latest tooling marks a shift from single-platform extortion campaigns towards attacks designed to spread across workstations, servers and hypervisors. That matters because ESXi environments often host multiple virtual machines on a single physical server, […]

Rival ransomware crews 0APT and KryBit have disrupted each other’s operations after leaking internal data, exposing an unusual cybercriminal feud that has given defenders a rare view into the infrastructure, tactics and credibility gaps behind emerging extortion groups. The confrontation began on 13 April 2026, when 0APT listed KryBit, Everest and RansomHouse as victims on its leak site. KryBit responded a day later by breaching 0APT’s infrastructure, […]

Arabian Post Staff -Dubai Nokia has chosen Egypt as its support hub for the Middle East and Africa, setting up a centralised operational centre in Cairo to handle regional support activities and customer services across one of the world’s most diverse telecoms markets. The move places Egypt at the centre of Nokia’s service delivery model for operators, enterprises and public-sector customers across the region. The Cairo hub […]

Cybersecurity teams running local artificial intelligence models are facing a high-risk exposure after a flaw in Ollama’s model-processing system was found to allow attackers to extract sensitive server memory through a malicious model file. Tracked as CVE-2026-5757, the vulnerability affects the model quantisation engine used by Ollama, an open-source platform widely adopted by developers and enterprises to run large language models on personal computers, workstations and servers. […]

The Gentlemen ransomware operation is building momentum across the cybercrime market, drawing in more affiliates, broadening its toolset and sharpening its focus on corporate targets as security researchers trace a faster pace of attacks through the opening months of 2026. Check Point said the group has publicly claimed more than 320 victims, with about 240 of those listed this year, a pattern that points to rapid affiliate […]

Anthropic’s Model Context Protocol, a fast-growing standard used to connect AI models with external tools and data, has come under intense scrutiny after security researchers disclosed a critical weakness that they say can open the door to arbitrary remote code execution across a broad swathe of the AI software stack. The issue, published on April 15, centres on how MCP implementations handle STDIO-based server configurations and command […]

Anthropic’s Claude Opus has been thrust into a fresh security debate after researcher Mohan Pedhapati said he used the model to help build a working V8 exploit chain that achieved code execution against an outdated Chromium build bundled with Discord. Pedhapati, CTO of Hacktron and known online as s1r1us, said the exercise ran over about a week, consumed 2.3 billion tokens, cost $2,283 in API fees and […]

Advertisements

Google has issued an emergency-style security update for Chrome after disclosing 31 vulnerabilities in the desktop browser, including five rated critical, in a release that underlines how quickly memory-safety flaws in widely used software can become a serious risk for consumers, businesses and public institutions. The stable desktop channel moved on April 15 to version 147.0.7727.101/102 for Windows and Mac, and 147.0.7727.101 for Linux, with the rollout […]

OpenAI has told users of its Mac software to update their applications after a third-party supply-chain incident touched the company’s app-signing workflow, prompting a wider effort to replace security certificates and tighten the process that proves its desktop software is authentic. The company said there is no evidence that user data was accessed, that passwords or API keys were exposed, or that its systems, intellectual property or […]

Iran-linked cyber operatives using the CyberAv3ngers banner are again in the spotlight after U. S. authorities warned on April 7 that Iranian-affiliated hackers have stepped up efforts to compromise programmable logic controllers and supervisory control systems used in water, energy and government facilities, with some intrusions already causing operational disruption and financial loss. The alert marks a sharper phase in a campaign that security officials say has […]

Three ransomware operations — Qilin, Akira and DragonForce — were behind 40% of the 672 attacks logged worldwide in March, according to Check Point Research, highlighting how a criminal market that still looks fragmented on the surface is being pulled by a smaller group of high-output players. Check Point said Qilin accounted for 20% of published attacks, Akira 12% and DragonForce 8%, while 47 separate groups were […]

Amazon Web Services has patched three high-severity vulnerabilities in its open-source Research and Engineering Studio platform, closing weaknesses that could have allowed authenticated users to run commands on key systems or gain broader permissions inside cloud environments used for scientific and engineering work. The flaws affected AWS Research and Engineering Studio, known as RES, a web-based portal that helps administrators build and manage controlled research and engineering […]

Google has begun rolling out vertical tabs and an upgraded reading mode to the desktop version of Chrome, adding two widely requested features aimed at users juggling large numbers of open pages and those seeking a cleaner full-screen reading experience. The company said the changes are arriving for Chrome on desktop platforms including Windows, macOS, Linux and ChromeOS, with availability expanding gradually rather than landing for all […]

Anthropic has launched Project Glasswing, a controlled cybersecurity programme that gives a select group of large technology, finance and security organisations access to its unreleased Claude Mythos Preview model to identify and help fix serious software vulnerabilities in widely used systems. The company says the model has already uncovered thousands of significant flaws across operating systems, browsers and other foundational software, but has stopped short of making […]

Attackers behind the compromise of the widely used Axios package have widened their campaign, turning from code repositories to the people who maintain them and exposing how a single deceptive approach can threaten vast stretches of the software supply chain. Security researchers and the Axios maintainer’s own post-mortem show the March 31 breach was not an isolated package hijack but part of a co-ordinated social-engineering operation aimed […]

A compromise of the widely used Axios software package has triggered fresh concern over open-source security after attackers used a hijacked maintainer account to publish poisoned versions carrying remote access trojan malware for Windows, macOS and Linux systems. Security researchers said the malicious releases were pushed to npm on March 31 and removed within hours, but warned that any machine or build pipeline that installed them during […]

A supply-chain attack on the widely used Axios JavaScript library has raised fresh concern over the fragility of open-source software distribution after attackers slipped malicious code into two versions of the package and exposed Windows, macOS and Linux systems to remote compromise. Security researchers and Google’s threat intelligence team said poisoned Axios releases 1.14.1 and 0.30.4 were pushed to npm during a narrow window on March 31, […]

Security teams are scrambling after two malicious releases of the Telnyx Python SDK were uploaded to PyPI on March 27, turning a widely used developer tool into a credential-stealing backdoor that could execute as soon as the library was imported. The compromised versions, 4.87.1 and 4.87.2, were published at 03:51 UTC and quarantined by 10:13 UTC, leaving a window of a little over six hours in which […]

A security weakness in Ubuntu Desktop 24.04 and later versions has raised fresh concerns over the resilience of widely used Linux environments, after researchers confirmed that local attackers can exploit the flaw to gain full administrative control. The vulnerability, described as a local privilege escalation issue, allows a user with limited access to elevate permissions and execute commands as the root user, effectively compromising the entire system. […]

Google has issued an urgent security update for its Chrome browser to address multiple vulnerabilities that could expose users to cyberattacks, including flaws capable of enabling remote code execution or system compromise. The patch, deployed through the Chrome stable channel on March 3, targets ten security weaknesses identified by Google engineers and external researchers. Three of the issues are classified as critical, while seven carry high-severity ratings. […]

Mac users have long faced a stubborn reality: many of the world’s most popular games are built for Windows, leaving Apple Silicon machines underused in a global industry worth more than $180 billion. A new application from Mist Studio, called GameHub, is seeking to narrow that gap by combining several compatibility technologies into a single interface designed to make Windows titles playable on macOS with far less […]

Microsoft has unveiled a new security feature in Windows 11 that fundamentally alters how administrator privileges operate on personal computers, signalling a decisive shift in the company’s approach to endpoint protection. The feature, known as Administrator Protection, removes persistent administrative rights from user accounts and replaces them with a tightly controlled, task-based elevation model. Instead of granting broad and continuous access to system-level controls, Windows 11 now […]

PocketBook has unveiled the InkPad One, a 10.3-inch e-ink tablet built on an open Linux architecture, positioning it as a direct challenger to Amazon’s Kindle Scribe and signalling a push to loosen the grip of closed digital reading ecosystems. The device combines stylus support with broad file compatibility, underscoring the Swiss-based company’s attempt to appeal to readers and professionals seeking greater control over their digital libraries. The […]

Nvidia has issued urgent security updates for its GPU display drivers after identifying multiple high-severity flaws that could allow attackers to execute arbitrary code and gain elevated privileges across a wide range of systems. The vulnerabilities, disclosed in a security bulletin dated January 27, affect drivers used on Windows, Linux and virtualised environments, underscoring the broad exposure created by modern GPU deployments in consumer, enterprise and cloud […]

VISHNU RAJA
RYO YAMADA
HITORI GOTOH
IKUYO KITA