News related to
Security

Kuwait’s air defence systems intercepted hostile missiles and drones targeting its airspace early Thursday, triggering loud explosions across parts of the country but causing no casualties or damage, the army said, as Gulf states remained on high alert amid a volatile security environment. The General Staff of the Kuwaiti Army said air defence units detected multiple aerial threats attempting to enter national airspace and dealt with them […]

Arabian Post Staff -Dubai Washington carried out defensive strikes against Iranian drone operations near the Strait of Hormuz after what it described as imminent threats to American forces and commercial shipping, deepening strain around one of the world’s most important oil transit routes while both sides claim they remain committed to a ceasefire. US forces shot down four one-way attack drones and struck a ground control station […]

Cybercriminals are exploiting mounting demand for the 2026 FIFA World Cup by creating spoofed FIFA-themed websites designed to steal personal details, payment data and money from fans seeking tickets, hospitality packages, jobs and tournament information. The warning, issued by the Federal Bureau of Investigation on May 27, 2026, places FIFA impersonation scams among the key online threats facing supporters before and during the tournament across the United […]

Global investment in oil projects is set to fall for a third consecutive year as the Middle East conflict forces governments and companies to redirect capital towards gas, alternative supply routes and cleaner energy systems. The International Energy Agency’s latest investment assessment points to a sharp reordering of global energy priorities, with upstream oil spending weakening even as overall energy security concerns intensify. The shift reflects both […]

Google Cloud has moved deeper into AI-native cybersecurity with Google AI Threat Defence, an autonomous security platform aimed at helping enterprises detect, prioritise and remediate attacks at machine speed as rivals Anthropic and OpenAI push frontier models into vulnerability discovery and code defence. The launch marks a sharper contest in enterprise security, where artificial intelligence is shifting the centre of gravity from manual patching and alert handling […]

InMotion Hosting said it contained a critical cPanel and WHM authentication-bypass flaw that threatened one of the web-hosting industry’s most widely used management platforms, after blocking exposure across its network and patching affected systems. The vulnerability, tracked as CVE-2026-41940, created a high-impact route for unauthenticated attackers to gain access to cPanel and WebHost Manager interfaces. The issue drew urgent attention because cPanel is used by hosting providers, […]

Arabian Post Staff -Dubai Deloitte has expanded its alliance with Netskope to deliver managed Secure Access Service Edge services across Europe, the Middle East and Africa, targeting large enterprises reshaping networks for cloud workloads, hybrid work and AI adoption. The offering brings together Deloitte’s cyber operations, advisory and managed security capabilities with Netskope’s cloud security platform, giving clients a single service model for network transformation, access control, […]

Advertisements

Cybersecurity researchers have warned that BTMOB, an Android remote access trojan, has developed into a potent tool for criminals seeking to hijack smartphones, steal data and run fraud from compromised devices. The malware, first identified in early 2025, has moved beyond the narrower behaviour associated with many banking trojans. It can capture screens, record activity, manage files, intercept credentials, control device functions and give an attacker near-live […]

State Bank of India has warned customers against a phishing campaign that falsely claims its YONO app will be deactivated unless Aadhaar details are updated through a shared link or APK file. The country’s largest lender has said the messages are fraudulent and should be ignored. Customers have been advised not to download files received through SMS, WhatsApp, email or social media, and not to share account […]

A newly disclosed flaw in Starlette has put Python-based AI services under pressure to patch systems that may expose protected endpoints through manipulated HTTP Host headers. The vulnerability, tracked as CVE-2026-48710 and dubbed BadHost, affects Starlette versions up to 1.0.0 and has drawn attention because of Starlette’s role in modern application stacks built around FastAPI, API gateways, model-serving tools and agent frameworks. Starlette 1.0.1 contains the fix, […]

Arabian Post Staff -Dubai MarsLab Pte Ltd has introduced a Singapore-based roadmap for AI inference infrastructure, positioning the company around enterprise and edge deployment at a time when organisations are shifting from model experimentation to production-scale artificial intelligence systems. The roadmap, announced on 28 May, centres on what MarsLab describes as a system-first approach to inference, the stage at which trained AI models generate outputs in live […]

Cybersecurity teams across India face a compressed response window after CERT-In urged organisations to fix actively exploited internet-facing vulnerabilities within 12 hours wherever feasible, marking a sharper regulatory push as artificial intelligence accelerates cyber-attack cycles.

The guidance, issued on May 25 in a 38-page blueprint, reflects growing official concern that attackers are using generative AI, large language models and autonomous tools to discover exposed systems, weaponise flaws, craft phishing lures and scale malware operations faster than conventional security programmes can respond. The document places rapid remediation, continuous monitoring and exposure reduction at the centre of enterprise cyber defence.

CERT-In’s most stringent timeline applies to known exploited vulnerabilities affecting internet-facing and critical systems, including applications, identity platforms, cloud assets, APIs, operational technology and systems supporting essential business functions. Organisations are advised to patch, mitigate or isolate such weaknesses within 12 hours where feasible. Critical externally exposed vulnerabilities should be addressed within one day, while known exploited flaws inside internal systems should be fixed within one day unless compensating controls are implemented and documented.

The blueprint also recommends that critical internal vulnerabilities affecting high-value systems be remediated within three days, and high-severity vulnerabilities within five days based on risk prioritisation. Where patches are unavailable, organisations are expected to use temporary protections such as isolation, access restrictions, web application firewalls, API shields, feature disabling and enhanced monitoring until permanent fixes are deployed.

The directive signals a shift from audit-driven cybersecurity to continuous exposure management. CERT-In has warned that organisations can no longer depend on periodic assessments or reactive incident response when automated tools can identify weak credentials, misconfigured systems, insecure APIs and vulnerable internet-facing services at machine speed. The approach requires security teams to maintain live inventories of assets, prioritise exposed systems and test whether controls work under attack conditions.

AI is changing both sides of the cyber equation. Attackers can use it to automate reconnaissance, write exploit code, refine phishing messages, generate synthetic identities and adapt malicious software. Defenders are being pushed to use similar capabilities for anomaly detection, threat hunting, automated triage and faster containment. The risk, however, is that poorly governed AI systems can themselves become attack surfaces through prompt injection, data leakage, model manipulation, poisoned training data, model theft and compromised orchestration pipelines.

The guidance gives particular weight to organisations operating in banking, financial services, telecom, healthcare, government, energy, transport, cloud services and other critical infrastructure-linked sectors. These environments often rely on interconnected digital systems, third-party software, outsourced technology providers and legacy platforms, creating wider exposure when a single flaw is weaponised quickly.

Global breach data has reinforced the urgency behind faster patching. Software vulnerability exploitation has overtaken stolen credentials as a leading breach entry point in major datasets, while ransomware remains a high-impact threat. Security teams also face growing pressure from supply-chain compromise, shadow AI usage, cloud misconfiguration and business email compromise. Unauthorised use of public AI tools has become a data governance issue as employees may upload source code, business documents, credentials or customer information into platforms outside corporate oversight.

CERT-In’s blueprint calls for a zero-trust approach, least-privilege access, layered controls and secure-by-design practices across applications, infrastructure and AI workflows. It urges organisations to maintain visibility into AI deployments, restrict sensitive data uploads to public AI platforms, log AI activity, conduct adversarial testing and keep human approval for critical autonomous actions.

Software supply-chain visibility is another major focus. Organisations are encouraged to use software bills of materials and related inventories for AI models, cryptographic assets and hardware components to understand dependencies, validate provenance and coordinate remediation when vulnerabilities emerge in third-party products.

The new expectations build on India’s existing cyber incident reporting framework, under which specified cyber incidents must be reported to CERT-In within six hours. The latest blueprint does not merely extend compliance obligations; it raises operational expectations for boards, chief information security officers and technology vendors by linking resilience to the speed of response.

Smaller organisations may struggle with the 12-hour benchmark because patch testing, downtime concerns, legacy dependencies and staffing shortages often slow remediation. The guidance therefore recognises feasible mitigation as part of the response, but it also makes clear that unmanaged exposure is no longer acceptable when attackers can exploit public-facing weaknesses within hours.

Cisco researchers have warned that leading open-weight large language models can be manipulated through sustained conversations that gradually push them past safety controls, exposing a weakness in systems now being adopted across business, public services and consumer applications. The assessment tested eight widely used open-weight models from Alibaba, DeepSeek, Google, Meta, Microsoft, Mistral, OpenAI and Zhipu AI. The models were examined through automated adversarial testing designed to […]

Thousands of fraudulent FIFA-themed domains are being positioned to exploit supporters before the 2026 World Cup, with cyber-security researchers tracking more than 4,300 suspicious registrations since August 2025. The domains mimic FIFA’s official web presence and are designed to lure fans seeking tickets, merchandise, travel packages, streaming access, betting platforms and hospitality deals. Some use names close to FIFA, the World Cup, host cities or national teams, […]

Hackers are exploiting shared content delivery network infrastructure to hide malicious traffic behind trusted domains, exposing a weakness in DNS-based security controls used by enterprises to block command-and-control activity, data theft and unauthorised tunnelling. The technique, named Underminr by ADAMnetworks, takes advantage of the way large CDNs host many unrelated websites on the same edge IP addresses. A compromised device can make a legitimate DNS lookup for […]

Africa’s top continental body has launched a new humanitarian coordination platform aimed at tightening crisis response across a region facing widening displacement, hunger, conflict and climate-linked disasters. The African Humanitarian Coordination Platform was unveiled by the African Union Commission through its Department of Health, Humanitarian Affairs and Social Development after a continental engagement in Mahé, Seychelles, held from 18 to 19 May 2026. The meeting endorsed the […]

Another significant step towards the success of ICVAX®

HONG KONG SAR – Media OutReach Newswire – 27 May 2026 – Immuno Cure Group (“Immuno Cure“), headquartered at Hong Kong Science Park, is pleased to announce the inauguration of the research facility for its HIV therapeutic DNA vaccine (“ICVAX®“) at the Center of International Innovation for Technology and Science (“CIITS”) located in Hetao, Shenzhen. The facility aims for the development and application of key technologies for the clinical research and commercialization of Immuno Cure’s ICVAX®. ICVAX® is developed by Immuno Cure with the aim of achieving antiretroviral therapy (“ART“)-free functional cure for HIV infection. This project is carried out in collaboration with Prof. Zhiwei CHEN, the Founding Director of the AIDS Institute of Li Ka Shing Faculty of Medicine, the University of Hong Kong (“HKU AIDS Institute“), and Prof. Hongzhou LU, President of the Third People’s Hospital of Shenzhen, in the capacity as advisors.

From left to right: Dr.Tengfei CAO, Deputy Director of CIITS; Mr. Tom LAU, Corporate Finance Director and Co-Founder of Immuno Cure; Dr. Renchen LIU, Executive Deputy Dean of Research Institute of Tsinghua University in Shenzhen and Director of CIITS; Dr. Xia JIN, CEO and Co-Founder of Immuno Cure; Prof. Zhiwei CHEN, Principal Scientific Advisor and Co-founder of Immuno Cure; Dr. Percy CHENG, Chairman and Co-Founder of Immuno Cure
From left to right: Dr.Tengfei CAO, Deputy Director of CIITS; Mr. Tom LAU, Corporate Finance Director and Co-Founder of Immuno Cure; Dr. Renchen LIU, Executive Deputy Dean of Research Institute of Tsinghua University in Shenzhen and Director of CIITS; Dr. Xia JIN, CEO and Co-Founder of Immuno Cure; Prof. Zhiwei CHEN, Principal Scientific Advisor and Co-founder of Immuno Cure; Dr. Percy CHENG, Chairman and Co-Founder of Immuno Cure

CIITS is a national-level achievement transformation platform co-built by Guangdong Province, Shenzhen Municipality, and Tsinghua University, and is located at the Hetao Shenzhen-Hong Kong Science and Technology Innovation Co-operation Zone (“Hetao Co-operation Zone“). It is committed to building a world’s leading major technological innovation and industrialization platform with a global perspective. It focuses on key tracks including biomedicine, high-performance materials, and artificial intelligence (AI). It aims to aggregate global innovation resources, connect with leading enterprises, and conduct organized scientific research and achievement transformation to address national major strategic needs.

Since AIDS was first identified in 1981, 40.8 million people have died from HIV infection, with over 44.1 million people living with HIV globally. While antiretroviral therapy can effectively control HIV replication, it cannot cure the disease, highlighting the critical need for immunotherapies. Designed to enhance the host’s immune response, immunotherapies aim to achieve sustained viral control without lifelong ART, ultimately leading to complete viral suppression and functional cure. Immuno Cure’s proprietary innovative HIV therapeutic DNA vaccine, ICVAX®, induces broad-spectrum, polyfunctional virus-specific T cells to achieve the ultimate goal of ART-free functional cure of HIV infection.

Immuno Cure completed the first-in-human Phase I clinical trial of ICVAX® in November 2024, demonstrating excellent safety and promising immunogenicity. Two multi-center Phase II clinical trials—randomized, double-blind, and placebo-controlled—are scheduled to launch in Q2-2026 to evaluate the vaccine’s mechanism of action and efficacy. The trials will be conducted at Prince of Wales Hospital in Hong Kong, as well as eight top-tier hospitals in China, including the Shenzhen Third People’s Hospital, Beijing Ditan Hospital Affiliated to Capital Medical University, Beijing Youan Hospital affiliated to Capital Medical University, the Eighth People’s Hospital of Guangzhou, the Second People’s Hospital of Tianjin, the Sixth People’s Hospital of Zhengzhou, Chengdu Public Health Clinical Medical Center, and Chongqing Public Health Medical Center.

Notably, standardized testing systems for evaluating immunological and virological indicators are crucial for HIV vaccine clinical trials. However, the lack of domestic standard operating procedures (SOPs) for infectious samples in clinical trials hinders the clinical development and regulatory approval of novel infectious disease therapies like ICVAX®. The mission of this research facility at CIITS is to establish an internationally aligned standardized clinical testing system for T-cell immunogenicity and viral reservoirs, as well as identify core biomarkers associated with vaccine efficacy — filling a domestic technical gap. Immuno Cure will offer the ICVAX® Phase II clinical trial to facilitate the development of this standardized precision testing method for clinical sample analysis.

Dr. Xia JIN, CEO of Immuno Cure, stated, “I am delighted to be appointed to lead this key project of CIITS. I would also like to thank CIITS for the fully fitted modern laboratory space and the RMB10.0m funding support for this 2-year initial phase. My whole scientific team is committed to contributing diligently to the success of this project. I have no doubt that the development of a standardised testing regime would not only enhance the quality of our clinical trials for ICVAX® but would also eventually be adopted as industry and national standards for the clinical translation of medicine for HIV/AIDS and other infectious diseases.

Renchen LIU, Executive Deputy Dean of Research Institute of Tsinghua University in Shenzhen and Director of CIITS, stated, “Warmest congratulations on the inauguration of the research facility for ICVAX® at the CIITS. In the future, CIITS will continue to leverage its platform resources to implement full-chain incubation services. Project managers will provide service support throughout the entire project period, ensuring the smooth progress of the project through resource integration, talent recruitment and development, clinical collaboration, and achievement transformation. These efforts will safeguard the steady progress of the project.”

As the project advances, Immuno Cure’s ICVAX® is positioned to become the world’s first therapeutic DNA vaccine to deliver an ART-free functional cure for HIV infection, bringing new hope to people currently living with HIV. In parallel, the standardized testing platform and collaborative innovation model developed through this effort will provide a scalable, replicable blueprint for R&D of novel therapies targeting other major infectious diseases. Together, these outcomes will strengthen the global competitiveness of biomedicine development in GBA and contribute to the development of national biosecurity capabilities and a more resilient public health system.

Hashtag: #ImmunoCure


The issuer is solely responsible for the content of this announcement.

About the Center of International Innovation for Technology and Science (“CIITS”)

Center of International Innovation for Technology and Science (CIITS), as the international headquarter of the Greater Bay Area National Center of Technology Innovation (GBA NCTI), is operated by Research Institute of Tsinghua University in Shenzhen (RITS). CIITS actively promotes the commercialization of technology and scientific advances with overseas and domestic innovation institutions and teams, as well as industry partners, focusing on areas such as biomedicine, advanced materials and artificial intelligence.

To learn more about CIITS, please follow the WeChat official account: gh_425f503135d5

About Immuno Cure

Immuno Cure is a clinical-stage biotechnology group headquartered at Hong Kong Science Park. Immuno Cure is committed to the R&D of innovative DNA vaccines and antibody immunotherapies for infectious diseases, inflammations, and cancers. Immuno Cure possesses two technologies: the “PD-1 Enhanced DNA Vaccine Platform” and the “Anti-Δ42PD1 Antibody”.

To learn more about Immuno Cure, please visit:

Brussels faces resistance from Germany and Spain over a proposed EU-wide move to force telecom operators to remove Huawei and ZTE equipment from critical networks, exposing a rift between the European Commission’s security agenda and national concerns over cost, timing and market disruption. Officials in Berlin and Madrid are pushing back against plans that would turn the EU’s existing 5G security guidance into binding law, arguing that […]

Binance has opened a supervised route back into the Philippines through a partnership with BlockShoals Technologies Inc., placing the world’s largest crypto exchange inside the Philippine Securities and Exchange Commission’s Strategic Sandbox after two years of regulatory tension over unlicensed offshore platforms.

The arrangement makes BlockShoals the approved local intermediary under the SEC’s StratBox framework, while Binance supplies technology, security systems, operational support and compliance expertise developed across regulated markets. The sandbox phase is expected to begin in the second half of 2026 and run for at least two years, giving regulators direct oversight of product testing before any wider rollout to users.

The move marks a notable shift in Binance’s strategy in the Philippines. Rather than seeking to restore access through an offshore model, the exchange is now pursuing market participation through a domestic company operating under SEC supervision. BlockShoals, a Philippine-incorporated fintech firm, secured approval under the crypto asset intermediary framework after a multi-year process involving regulatory conditions, compliance checks and investor-protection requirements.

Binance’s online presence in the Philippines was blocked in 2024 after the SEC said the platform had offered investment and trading services without the necessary licence. The regulator had warned the public about the exchange in November 2023, then moved to restrict website access through telecommunications authorities the following year. The action became one of the clearest signals that Manila intended to bring offshore digital-asset platforms under local rules.

That enforcement drive has since widened. The SEC’s crypto-asset service provider rules, issued in 2025, require firms serving Philippine users to register, maintain sufficient capital, observe marketing standards, and meet operational and reporting obligations. The framework is intended to protect retail investors while allowing controlled innovation in a market where crypto use remains high by regional and global standards.

The Philippines ranked ninth in the 2025 global crypto adoption index, reflecting strong activity across retail centralised services and digital-asset platforms. Usage has been driven by a young, mobile-first population, remittance demand, online work, gaming-linked crypto activity and a broad appetite for alternative financial products. That adoption has also heightened regulatory concern over fraud, weak disclosures, market volatility and the risks of foreign platforms serving users without domestic accountability.

Seker, Binance’s head of Asia-Pacific, described the Philippines as one of Southeast Asia’s most dynamic digital economies, saying frameworks such as StratBox create a channel for regulators and industry participants to work together while maintaining user protection and market integrity. The company has presented the BlockShoals partnership as part of a compliance-first approach rather than a conventional market relaunch.

BlockShoals has framed its role around local accountability. A company representative said the partnership was an opportunity to show that global digital-asset platforms and domestic regulatory frameworks could operate constructively together, adding that the firm would work under direct SEC supervision while building a secure platform for users.

The sandbox structure gives the SEC room to monitor how products are configured, how customer onboarding is handled, how risks are disclosed, and how safeguards such as know-your-customer checks, anti-money-laundering controls and transaction monitoring are applied. It also gives Binance a pathway to rebuild trust after a period in which its Philippine operations were defined by access restrictions and licensing concerns.

The Philippine approach mirrors a broader shift across Asia, where regulators are moving away from informal tolerance of offshore crypto activity and towards domestic licensing regimes. Singapore, Hong Kong, Thailand, Indonesia and Japan have tightened rules for exchanges, stablecoin activity, custody, marketing and investor suitability. The result is a more fragmented operating environment for global platforms, with access increasingly dependent on local registration, capital commitments and regulator-facing governance.

For Binance, the Philippine partnership carries strategic value beyond one market. The exchange has spent the past several years seeking to repair relations with regulators after facing scrutiny in multiple jurisdictions. A successful sandbox test in Manila would support its argument that global crypto platforms can adapt to local rules through partnerships, product controls and supervised deployment.

Arabian Post Staff -Dubai Qatar’s Ministry of Transport has automated 14 additional maritime transportation services, expanding online access for vessel operators, shipping companies and seafarers as Doha pushes ahead with a wider programme to digitise public services and strengthen its logistics base. The newly automated services are now available through the ministry’s official website and cover two main areas: large-vessel transactions and seafarers’ affairs. Ten services relate […]

A phishing campaign using sponsored Google search advertisements has drained more than $400,000 from cryptocurrency users after directing them to cloned Uniswap websites designed to empty connected wallets. The attack centred on fraudulent ads that appeared above or near legitimate search results for Uniswap, one of the largest decentralised exchanges on Ethereum. Users who clicked the promoted links were taken to interfaces that closely resembled the authentic […]

Microsoft has issued fixes for a high-severity SharePoint Server vulnerability that could allow authenticated attackers to run code remotely on affected on-premises systems, sharpening security concerns for organisations that continue to rely on self-managed collaboration platforms. Tracked as CVE-2026-45659, the flaw affects SharePoint Server Subscription Edition, SharePoint Server 2019 and SharePoint Enterprise Server 2016. The vulnerability has been assigned a CVSS score of 8.8, placing it in […]

Microsoft is preparing to scale back internal use of Anthropic’s Claude Code and move thousands of developers towards GitHub Copilot CLI, marking a sharper push to consolidate AI coding work around tools it owns and governs more directly. The reported shift affects the company’s Experiences and Devices division, which covers major product groups including Windows, Microsoft 365, Outlook, Teams and Surface. Engineers using Claude Code have been […]

Arabian Post Staff -Dubai Washington is pressing ahead with claims of progress toward a peace deal with Tehran, even as fresh US strikes on targets in southern Iran and renewed uncertainty over the Strait of Hormuz exposed the fragility of efforts to end a war approaching its third month. The latest flare-up came after US forces struck what they described as missile launch sites and mine-laying boats, […]

VISHNU RAJA
RYO YAMADA
HITORI GOTOH
IKUYO KITA