News related to
Security

By Girish Linganna The prisoner-hostage exchange between Israel and Hamas has been completed successfully, and many are calling it a major victory for peace. Twenty Israeli hostages returned home in exchange for about 2,000 Palestinian prisoners, aid started flowing back into Gaza, and guns fell silent after months of devastating conflict. But anyone familiar with […]

The article A House Built On Sand: The Fault Lines In Trump’s 20 Point Gaza Peace Plan appeared first on Latest India news, analysis and reports on Newspack by India Press Agency).

CJ Hetherington, CEO of Limitless Labs, has accused Binance of demanding 8 per cent of his project’s token supply and a multimillion-dollar deposit as conditions for listing. Binance, in a forceful rebuttal, called the allegations false and defamatory, and hinted at legal recourse.

Hetherington shared purported internal communications that outlined Binance’s demands: 1 % of the token supply for a day-one airdrop, 3 % for subsequent airdrops over six months, 1 % reserved for marketing, and another 3 % allocated to the BNB HODLer programme. He claimed Binance also asked for a $250,000 security deposit and required around $2 million in BNB as collateral. In total, he argued, these terms effectively extracted 8 % of total tokens in exchange for a listing.

Binance responded swiftly via its official X handle, stating it “does not profit” from token listings and that the content of Hetherington’s posts is “false and defamatory.” The exchange emphasised that it does not charge listing fees and that any required security deposits are typically refundable within one to two years. Binance also denied allegations of token dumping by its executives, calling them “entirely untrue and unsubstantiated.”

The exchange further asserted that Hetherington’s disclosures breached confidentiality, undermining trust and transparency in industry processes. It reserved the right to pursue legal action for what it characterised as unauthorised disclosures.

The dispute has drawn responses from industry observers. Mike Dudas, founder of 6MV, stated on X that he has seen Binance listing proposals with nearly identical terms in the past month and was able to talk about them because he did not sign a nondisclosure agreement. He implied the arrangement described by Hetherington reflects a recurring model.

Crypto analyst Howard Peng, by contrast, criticised Hetherington for publicising the discussions and labelled the move immature. Peng urged projects dissatisfied with listing proposals to walk away and suggested exploring alternative exchanges.

Binance founder Changpeng “CZ” Zhao also weighed in, arguing that successful projects should attract listings without paying “fees.” He wrote that if a project must “beg an exchange to list,” it indicates weak demand and could invite scrutiny from within the community.

The exchange’s defence comes amid broader regulatory scrutiny of centralised exchanges and their listing practices. Some market participants argue that hidden costs and opaque listing criteria undermine fairness and can stifle innovation, especially for emerging projects. Others maintain that exchanges are entitled to protective mechanisms—such as collateral or token commitments—to mitigate risk and ensure project stability.

A new wave of supply-chain assaults has seen North Korean hackers publish more than 300 malicious npm packages, infecting developer systems with sophisticated malware that steals credentials and crypto assets. The campaign, known as “Contagious Interview,” exploits the trust developers place in open-source tools by cloaking malware inside packages mimicking legitimate ones.

The Socket Threat Research Team disclosed that attackers uploaded 338 malicious npm modules, collectively downloaded over 50,000 times, many featuring a newly observed loader named XORIndex. About 27 of them remain active in the npm registry. Within those packages, XORIndex collects host metadata and downloads a second-stage payload, BeaverTail, which in turn leverages a backdoor called InvisibleFerret to maintain persistence and exfiltrate data. This expansion follows a preceding June surge of 35 malicious modules using a HexEval loader.

Researchers emphasise that Contagious Interview is not a static campaign but a dynamic interplay between defenders and adversaries. As packages are taken down, attackers quickly reissue variants under fresh aliases or change loader techniques. The latest 67-package load pushed last month illustrates this cat-and-mouse escalation: the new modules alone exceeded 17,000 downloads. Attackers have mixed XORIndex and HexEval in parallel deployments, suggesting modular development and adaptability.

The campaign’s social engineering backbone remains key. Actors pose as recruiters or HR contacts on platforms like LinkedIn, targeting software engineers or job-seekers. They offer interview assignments that require cloning a GitHub or Bitbucket repository, with the malicious npm module embedded deep in the project. Because many developers run these projects outside sandboxed environments, the malicious loader quietly executes and bridges the gap to full system compromise.

Analysts attribute Contagious Interview to DPRK-aligned threat groups tracked under names such as CL-STA-0240, DeceptiveDevelopment, Tenacious Pungsan and Void Dokkaebi. The methodology aligns with patterns shown by the Lazarus Group and its affiliates, as attackers continue to weaponise open source ecosystems for espionage and financial theft. XorIndex and HexEval share infrastructure and tactics, including encrypted communication with command-and-control servers. In several cases, submitters of the malicious packages have crafted repository names containing “interview,” reflecting the campaign motif.

Beyond npm, the campaign’s reach extends: some modules reference Bitbucket repositories, and similar tactics have appeared in PyPI package attacks. The broader goal appears dual: accessing developer environments to steal intellectual property or credentials and siphoning cryptocurrencies from wallets detected on compromised machines.

Security firms and registry maintainers have responded with takedown requests and account suspensions. Socket reported removing six live HexEval-based modules earlier this year, and the npm security team has collaborated to suspend associated accounts. But defenders admit the reactive posture is fragile; attack waves resurface within hours.

Multiply Group, the Abu Dhabi investment holding firm, will acquire 2PointZero and Ghitha Holding via a share-swap deal, creating a combined enterprise with an estimated valuation of AED 120 billion. The transaction involves issuing around 23.36 billion new shares, lifting Multiply’s share capital from AED 2.8 billion to AED 8.64 billion and expanding the total shares to 34.56 billion. Approval from shareholders and regulators is pending.

The decision follows board sanction and aligns with a broader move by IHC to consolidate its leading portfolio companies—Multiply, 2PointZero, and Ghitha—into a unified listed entity under the name 2PointZero Group PJSC. The merger is pitched as an effort to streamline governance, deepen synergies across sectors, and accelerate growth. The transaction is slated for completion by mid-November 2025, contingent on formal clearances.

Under the proposed structure, Multiply will absorb full ownership of 2PointZero and a majority of Ghitha Holding. The merged entity will retain its listing on the Abu Dhabi Securities Exchange. With combined operations across energy, mining, financial services, agrifood, consumer goods, media, logistics, and related verticals, the new 2PointZero Group aims to harness diversification and integrated scale.

2PointZero brings to the table AI, energy transition, mining and financial services capabilities. Its role as a facilitator in cleantech and future resource assets is central to the logic of the merger. Ghitha Holding contributes a robust agriculture, food production, processing and distribution footprint—one of the UAE’s key players in national food security. Multiply already has stakes in sectors including mobility, media & communications, retail/apparel, packaging, and beauty.

Syed Basar Shueb, Chairman of Multiply, called the deal “a natural evolution of our portfolio strategy,” emphasising the aim to “optimise scale and strengthen the platforms we have built.” Samia Bouazza, Group CEO and Managing Director, framed the merger as aligning capital with megatrends, stating the unified entity would “grow bottom line both organically and inorganically, unlock value through AI, and deliver consistent long-term returns.” The new group will operate across more than 85 countries and target service to one billion people globally.

IHC’s own communications parallel Multiply’s narrative. The parent firm describes the merger as a means to craft a “next-generation investment powerhouse” anchored in a dual focus on energy and consumer sectors, intended to enhance operational efficiency and strategic scale. Sheikh Tahnoon bin Zayed Al Nahyan, IHC Chairman, cited the move as reaffirming IHC’s role as a catalyst of transformation, leveraging AI and value networks. Sheikh Zayed bin Hamdan bin Zayed Al Nahyan, Chairman of 2PointZero, said the consolidation would further the mission of driving energy transition, enabling AI, and empowering communities.

Abidjan — The World Food Programme has secured a US$9.3 million grant from the Korea International Cooperation Agency to support a five-year school meals and resilience programme across northern Côte d’Ivoire. The initiative will target 200 primary schools and 50,000 pupils from 2025 to 2029, backed by support for local farmers and community health efforts.

Under the partnership, WFP will channel the Korean funding into locally sourced, nutritious meals intended to enhance students’ concentration, health and retention. Alongside direct school feeding, 100 farmer groups will receive training and technical assistance to improve crop quality and yield, while forging supply links with school kitchens — aiming to stimulate rural markets and buttress food systems. The programme also includes capacity-building in hygiene and nutrition education, investment in hand-washing stations, and multisectoral coordination with national ministries of education, health and agriculture.

Olivia Hantz, WFP’s Representative and Country Director in Côte d’Ivoire, described the cooperation as “an investment in the country’s future”, noting that bolstering national systems and empowering local producers helps advance both nutrition and resilience. Kim Sangjun, the KOICA Country Director in Côte d’Ivoire, emphasized that linking schools with nearby farmers ensures the programme’s sustainability and reflects Korea’s own experience in leveraging school meals to support development.

Government agencies in Côte d’Ivoire will play a leading role in implementation. The Ministries of National Education and Literacy, Agriculture and Food Production, and Health and Public Hygiene will work through departmental directorates such as the Directorate of School Canteens to integrate this project with national plans. WFP already operates school feeding across 733 schools nationwide, reaching over 166,000 pupils, and this new injection will focus on underserved northern regions.

The strategy centres on what is often called a “home-grown school feeding” model: meals are locally procured, thereby linking educational support with rural livelihoods. This approach is intended not only to support children, but to stimulate smallholder agriculture, strengthen supply chains and reduce dependency on external imports.

Côte d’Ivoire faces persistent inequalities in food access. In rural and northern areas, food insecurity and chronic malnutrition remain major challenges. According to WFP’s internal data, more than 30% of children in those regions suffer from stunting, and households face high post-harvest losses, limited access to credit or inputs, and exposure to climate stresses. WFP’s country briefing from mid-2025 highlights programmes aiming to strengthen climate resilience among women and youth in zones such as Poro by promoting sustainable agricultural practices.

WFP’s school feeding and resilience operations in Côte d’Ivoire are embedded in a broader strategy. The agency seeks to scale national social protection systems, enhance disaster preparedness, and support agriculture-led recovery. The KOICA-funded project aligns with both Côte d’Ivoire’s national development plan, which emphasises human capital and inclusive growth, and with global objectives on nutrition, education and resilience.

Analysts view the agreement as part of a broader trend of South–South development cooperation. Korea has expanded its development financing across Africa in recent years, often emphasising education, agriculture and infrastructure. The model adopted here reflects that emphasis: combining direct welfare support with investment in domestic capacity. For WFP, the strategy offers a way to reduce long-term dependency on donor aid by anchoring programmes in national institutions and markets.

Commvault has entered a Memorandum of Understanding with HPE to scale joint cybersecurity, backup and recovery services across the Gulf and wider Middle East, unveiling the pact at GITEX Global in Dubai.

The agreement mandates co-development of integrated solutions and joint market initiatives combining HPE’s infrastructure platforms — such as GreenLake, Alletra Storage MP, Zerto, StoreOnce — with Commvault’s cyber-resilience and data protection capabilities. It aims to drive enterprise adoption of hybrid cloud backup, ransomware mitigation and cross-region redundancy.

HPE previously announced a broader strategic expansion of its alliance with Commvault aimed at neutralising advanced cyberthreats, spotlighting tighter integration across cloud, storage and policy automation. The local MoU is intended to bring those capabilities closer to enterprises operating in the Gulf and MENA markets.

HPE’s Zerto platform will feed into Commvault Cloud offerings to enable near-zero recovery time and point objectives, while snapshot immutability, geographic replication, and anomaly detection powered by AI are planned as central joint features. Running side by side, HPE’s storage and infrastructure fabric supports Commvault’s orchestration layer for unified policy enforcement across hybrid deployments.

Regional leadership within both firms emphasised the growing urgency of resilience as data volumes and threat sophistication rise. Yacob Ahli, HPE’s Commercial Director for UAE, said that the Gulf’s data-centric growth narrative demands infrastructure foundations that safeguard continuity. Havier Haddad, heading Commvault’s EMEA emerging markets distribution, framed the MoU as a strategic move to reinforce customer confidence in mission-critical operations across the region.

Analysts say the new alliance helps bridge a gap many enterprises in the Middle East face: lacking in-region partner support for complex, integrated cyber resilience stacks. By localising go-to-market strategies, certification and training, the partnership may reduce friction in adoption. Still, adoption also depends on regulatory compliance, cross-border data governance, and interoperability with incumbent systems.

Commvault has also introduced new additions to its HyperScale portfolio — HyperScale Edge and HyperScale Flex — designed to support remote and edge data protection workloads, broadening its partner ecosystem to include HPE, Dell, Lenovo and others. These tools complement its flagship HyperScale X offering.

By Nitya Chakraborty On October 10, the Nobel Prize Committee awarded the Peace prize for the year 2025 to the Venezuelan right wing politician Maria Corina Machado who has been working for the last few years for the removal of the President Nicholas Maduro from his office. The White House initially reacted that the Nobel […]

The article Trump Has Not Got Nobel Peace Prize But The Winner Machado Is His Acolyte In Latin America appeared first on Latest India news, analysis and reports on Newspack by India Press Agency).