News related to
attack

Malicious uploads expose agent skill scanners

Malicious agent-skill uploads have slipped past detection tools used by ClawHub, Cisco and Vercel-linked scanning services, raising fresh concern over the security of fast-growing marketplaces that distribute third-party capabilities for AI agents. The findings point to a widening supply-chain problem around “skills”, the modular instruction-and-file packages that allow AI agents to perform tasks such as editing documents, running scripts, managing workflows or connecting with external services. Unlike […]

.bit expands role in Web3 identity

Blockchain users searching for simpler wallet identities have pushed. bit into the wider debate over decentralised naming, digital ownership and cross-chain authentication, as Web3 developers look for alternatives to long alphanumeric addresses that remain difficult for mainstream users to manage.. bit is commonly called a “domain”, but its developers describe it more precisely as a decentralised identity and account system rather than a conventional internet domain. Unlike […]

Infostealers reshape phishing threat landscape

Cybercriminal groups are shifting phishing campaigns from fake login pages to malware-led intrusions that silently extract passwords, browser cookies, session tokens, cryptocurrency wallet data and other sensitive information from infected devices. The change marks a significant turn in online fraud tactics. Classic phishing pages still imitate banks, cloud services, delivery firms and workplace platforms, but attackers are increasingly using emails, search ads, fake software installers, messaging apps […]

TrendAI™ Joins Anthropic’s Project Glasswing

Cockroach Politics And The Limits Of Public Anger

Anthropic widens Mythos cyber access

Anthropic has expanded access to Claude Mythos Preview to about 200 organisations, widening a controlled cybersecurity programme designed to help governments, companies and critical software maintainers find severe vulnerabilities before attackers can exploit them. The San Francisco-based artificial intelligence company is adding around 150 organisations to Project Glasswing, its gated initiative for defensive use of a frontier model that has drawn intense attention from technology companies, banks, […]

World Cup squads set player record

FIFA has confirmed the final squad lists for the 2026 World Cup, naming a record 1,248 players across 48 national teams for the expanded tournament in Canada, Mexico and the United States. The lists mark the last major administrative step before the competition opens on 11 June, with the final scheduled for 19 July after 104 matches across the three host countries. Each participating association has submitted […]

HazyBeacon targets Southeast Asia networks

Cyber espionage operators are using a newly documented Windows backdoor called HazyBeacon to target government networks in Southeast Asia, turning legitimate Amazon Web Services infrastructure into a covert command-and-control channel that can blend into ordinary cloud traffic. The activity, tracked as CL-STA-1020, has been linked to intelligence-gathering operations focused on sensitive state information, including material tied to tariffs, trade disputes and government policy discussions. Security researchers have […]

Windows Search flaw exposes credentials

Security researchers have warned that a Windows Search URI handler weakness can leak NTLMv2 hashes to remote attackers through a crafted link, reviving concerns over long-running authentication risks in enterprise networks. The issue affects the search: handler used by Windows Explorer to process desktop search requests. A malicious link can direct the handler towards an attacker-controlled network path, causing the victim’s system to attempt authentication over SMB […]

Gulf strikes test fragile US-Iran truce

Washington and Tehran exchanged fresh military strikes across the Gulf, placing new pressure on a fragile ceasefire and raising the risk of wider disruption around one of the world’s most important energy corridors. US forces intercepted Iranian ballistic missiles and drones aimed at neighbouring Middle East countries and then struck a military ground control station on Iran’s Qeshm Island, near the Strait of Hormuz. The operation followed […]

Gnosis Pay races to contain module exploit

Gnosis Pay has moved into emergency containment after attackers exploited a vulnerability in the Delay Module used in its smart-contract wallet architecture, forcing an urgent withdrawal warning, a temporary reversal of guidance and a pledge to reimburse affected users in full. The breach, disclosed on 1 June, hit the payment product that connects self-custodial crypto wallets with card spending. The affected component is linked to the Zodiac […]

Red Hat npm breach exposes cloud secrets

Attackers have compromised Red Hat’s official @redhat-cloud-services namespace on npm, inserting credential-stealing malware into dozens of package releases used in cloud console development and software build pipelines. The breach, identified on 1 June 2026, affected at least 32 package releases across the Red Hat Cloud Services ecosystem, including frontend components, generated API clients and supporting developer tooling linked to the Red Hat Hybrid Cloud Console. The malicious […]

AI misuse sharpens EDR evasion threat

A threat actor has used artificial intelligence coding tools to build and refine malware intended to bypass endpoint detection and response systems, highlighting how generative AI is being folded into practical cyberattack development rather than remaining a theoretical risk. The activity was presented as a red team project, but the discovered framework pointed to stealthy post-exploitation operations, including ransomware deployment and data theft. The case shows how […]

Anthropic widens Glasswing as macOS threats rise

Anthropic is expanding access to Claude Mythos Preview through Project Glasswing, widening a controlled cybersecurity programme at a time when North Korean-linked hackers are sharpening attacks against macOS users in the financial, venture capital, Web3 and cryptocurrency sectors. The San Francisco-based AI company plans to increase the number of Project Glasswing partners from about 50 to roughly 200 organisations across more than 15 countries, broadening access to […]

Gulf tensions surge after Qeshm strikes

US forces said they defeated an overnight wave of missile and drone attacks launched by Iran towards Gulf states and civilian shipping, while carrying out self-defence strikes on military sites on Qeshm Island near the Strait of Hormuz. The confrontation marked a sharp escalation in a conflict already threatening energy flows, maritime security and diplomatic efforts to contain hostilities across the Gulf. US Central Command said its […]

Russia widens phone spyware investigation

Moscow’s main security agency said it had uncovered a foreign intelligence operation that placed spyware on mobile phones used by senior officials, intensifying Russia’s long-running confrontation with Western governments over cyber espionage, communications security and control of digital infrastructure. Russia’s Federal Security Service said the operation involved the compromise of thousands of devices, including phones used by officials, diplomats and people linked to government agencies. The agency […]

TrapDoor exposes developer supply chains to credential theft

Hackers have used 34 malicious open-source packages across npm, PyPI and Crates. io to steal cloud credentials, crypto wallet data, SSH keys and developer secrets, exposing a widening security gap in software supply chains used by blockchain, artificial intelligence and cloud engineering teams. The campaign, tracked as TrapDoor, spans more than 384 package versions and artefacts. It targets developers working in cryptocurrency, DeFi, Solana, Sui, Move, AI […]

Flowise server takeover risk widens

A critical weakness in Flowise has exposed self-hosted AI workflow servers to full compromise, after technical details and working exploit code showed that a logged-in user could trigger command execution by importing a crafted chatflow. The flaw, tracked as CVE-2026-40933, affects Flowise deployments before version 3.1.0 and carries a 9.9 severity score. It stems from the way Flowise handles Model Context Protocol, or MCP, configurations in its […]

Palo Alto VPN flaw draws urgent patches

Palo Alto Networks customers are facing renewed pressure to patch internet-facing security systems after attackers began exploiting a high-severity authentication bypass flaw in PAN-OS GlobalProtect, a product widely used to provide remote access to corporate networks. The vulnerability, tracked as CVE-2026-0257, affects GlobalProtect portal and gateway deployments in PAN-OS where authentication override cookies are enabled alongside a specific certificate configuration. Successful exploitation can allow a remote attacker […]

AZUREVEIL attacks expose cloud C2 blind spot

Hackers are using targeted spearphishing emails to deploy AZUREVEIL, an Adaptix-based command-and-control agent, against government and enterprise-linked targets in the Czech Republic and Taiwan, underscoring the growing use of trusted cloud services to mask cyber-espionage activity. The campaign, tracked as Operation Dragon Weave, begins with a malicious ZIP archive carrying files designed to appear as official documents. Once opened, the archive can trigger a multi-stage infection chain […]

SolyxImmortal raises Windows credential theft risks

SolyxImmortal, a Python-based information-stealing malware, is drawing attention from cyber defenders because of its ability to combine browser credential theft, document harvesting, keystroke logging and screen surveillance inside a single Windows implant. Technical analysis shows the malware is designed to operate quietly on compromised machines, using common Python libraries, Windows features and multi-threaded execution to run several data-collection functions at the same time. Its targets include saved […]

Russia halts jet fuel exports

Russia has imposed a temporary ban on aviation fuel exports until 30 November, tightening control over domestic supplies as repeated Ukrainian attacks on refineries and energy infrastructure strain the country’s fuel system. The measure, announced by the Russian government on Monday, is aimed at stabilising the internal aviation fuel market after a series of refinery disruptions affected output across several regions. The restriction covers aviation kerosene and […]

Iran strikes US base as talks strain

Arabian Post Staff -Dubai Iran’s Revolutionary Guards said they targeted a US-linked airbase after American strikes hit military sites on Iran’s Gulf coast, adding fresh pressure to a fragile ceasefire that has failed to stop intermittent exchanges between Washington and Tehran. The latest confrontation followed US military strikes on radar, drone control and launch facilities near Qeshm Island and Goruk after the downing of an American MQ-1 […]

Florida targets OpenAI over chatbot risks

Florida has filed a civil lawsuit against OpenAI and its chief executive Sam Altman, accusing the artificial intelligence company of knowingly releasing ChatGPT to the public despite safety warnings and alleged risks to children, vulnerable users and wider public safety. The complaint, filed in state court by Attorney General James Uthmeier, marks the first lawsuit brought by a US state against OpenAI over alleged harms linked to […]