Kyiv came under a large Russian missile and drone attack before dawn on Thursday, leaving at least one person dead, dozens wounded and rescuers searching through the ruins of a damaged residential building where residents were feared trapped. Explosions shook several districts of the Ukrainian capital during an air raid alert that lasted more than four hours, as air defences attempted to intercept a mixed barrage of […]
Iran-linked cyber-espionage operators have used trusted, digitally signed software components to breach organisations across four continents, widening concerns over state-backed campaigns that hide inside legitimate enterprise tools. Seedworm, also tracked as MuddyWater, Temp Zagros, Static Kitten and Mango Sandstorm, has been linked to intrusions affecting at least nine organisations in early 2026. The victims included a major South Korean electronics manufacturer, public-sector bodies, an international airport in […]
Microsoft’s BitLocker encryption faces renewed scrutiny after a public proof-of-concept exploit showed how protected Windows drives could be accessed through the recovery environment without the recovery key under specific physical-access conditions. The vulnerability, named YellowKey by the researcher using the aliases Nightmare-Eclipse and Chaotic Eclipse, targets the interaction between Windows Recovery Environment and BitLocker-protected volumes. The public demonstration indicates that an attacker with physical access to a […]
Foxconn has confirmed a cyberattack on some of its North American factories after the Nitrogen ransomware group claimed it stole 8 terabytes of data and more than 11 million files from the world’s largest electronics contract manufacturer. The company said its cybersecurity team activated response measures to protect production and deliveries, with affected factories returning to normal operations. The statement did not identify the number of sites […]
Arabian Post Staff -Dubai Tehran has offered to restore wider commercial access through the Strait of Hormuz if Washington ends its naval blockade of Iran’s ports, releases frozen funds and eases long-standing sanctions, marking a conditional diplomatic opening after weeks of war that have disrupted energy flows and shipping across the Gulf. Kazem Gharibabadi, Iran’s deputy foreign minister, said Tehran was prepared to reopen the waterway but […]
South Africa’s retailers are paying a widening price for weak security systems, with losses now extending beyond stolen stock to staff safety, customer confidence, delivery costs, insurance premiums and already thin operating margins. Shrinkage has become a boardroom issue rather than a store-level irritation. Retailers are dealing with shoplifting, employee theft, fraud, vandalism, armed robberies, cyber intrusions and organised syndicates that target goods with established resale value. […]
OpenAI has launched Daybreak, a cybersecurity initiative designed to use frontier AI models and Codex Security to find software flaws, generate fixes and verify remediation before attackers can exploit weaknesses in code. Daybreak marks a sharper push by the ChatGPT maker into defensive cybersecurity, where AI systems are being positioned not merely as coding assistants but as tools for secure-by-design software development. The service is built around […]
By T N Ashok NEW DELHI: As the war in Iran deepens and flames spread across West Asia’s energy corridors, India finds itself confronting an uncomfortable truth: its economic vulnerabilities are once again tied to oil tankers navigating distant waters. Rising crude prices, disrupted shipping lanes, soaring aviation fuel costs, fears over fertiliser imports, and […]
The article PM’s Advisory On Austerity Measures Exposes His Govt’s Loss Of Control appeared first on Latest India news, analysis and reports on Newspack by India Press Agency).
Washington’s fragile ceasefire with Tehran moved close to collapse after President Donald Trump rejected Iran’s latest response to a US peace proposal and described the arrangement as being on “massive life support”. Trump’s remarks on Monday marked one of the sharpest public assessments of the 10-week conflict, which has already disrupted shipping through the Strait of Hormuz, lifted energy prices and strained diplomacy across the Gulf. Speaking […]
Security researchers have released a proof-of-concept attack that can unlock BitLocker-protected Windows 11 drives within minutes on systems that remain exposed to a legacy Secure Boot trust path, sharpening concern over the limits of software patching when certificate revocation has not been completed. The technique, called BitUnlocker, targets CVE-2025-48804, a BitLocker security-feature bypass tied to Windows Recovery Environment handling and physical access to a machine. The attack […]
Checkmarx customers using Jenkins pipelines have been urged to review their environments after a modified version of the company’s Jenkins AST plugin was pushed to the official Jenkins Marketplace, extending a wider software supply chain campaign tied to compromised developer tooling. The affected release has been identified as version 2026.5.09 of the Checkmarx AST Scanner plugin, distributed as tampered HPI, JAR and POM artifacts. The exposed window […]
Android users across parts of Europe face a sharper mobile-fraud threat after a redesigned TrickMo variant began targeting banking, fintech, cryptocurrency wallet and authenticator applications with stronger stealth, persistence and network-control features. The malware, tracked as TrickMo C, does not appear to be a wholly new family. It is an overhaul of a known Android banking trojan that has been under active development for years, with its […]
Mac users searching for Claude downloads are being targeted through sponsored Google results that lead to legitimate-looking Claude shared chats carrying malicious installation instructions, exposing a weakness in how trusted platforms can be misused to deliver malware. The campaign centres on users looking for Claude or Claude Code for macOS. Instead of relying only on fake websites, the attackers are placing paid search ads that display the […]
Cole Tomas Allen, a 31-year-old man from Torrance, California, has pleaded not guilty in a Washington federal court to charges arising from what prosecutors describe as an armed attempt to kill President Donald Trump and senior administration figures at the White House Correspondents’ Association dinner. Allen appeared on Monday before U. S. District Judge Trevor McFadden, wearing an orange jail uniform and restrained at the waist. He […]
Attackers used a fake Hugging Face repository posing as an OpenAI privacy tool to spread credential-stealing malware to Windows users, exposing a widening security gap in the fast-growing market for open AI models. The repository, named Open-OSS/privacy-filter, climbed to the top of Hugging Face’s trending list and recorded about 244,000 downloads before access was disabled. Its model card closely mirrored OpenAI’s legitimate Privacy Filter project, a tool […]
Cybersecurity teams are tracking a stealthy espionage-style malware operation that uses GitHub Releases to hide a Python-based infostealer behind humanitarian-themed phishing material aimed at Russian-speaking targets. The campaign, tracked as Operation HumanitarianBait, begins with phishing emails carrying a RAR archive that contains a malicious Windows shortcut file. The lure presents itself as a Russian-language humanitarian aid request or application form, exploiting a sensitive social context while keeping […]
Cybersecurity teams are racing to contain attacks against cPanel and WHM servers after a critical authentication bypass flaw opened a path for unauthorised access to hosting control panels used across large parts of the web. The vulnerability, tracked as CVE-2026-41940, affects cPanel & WHM versions after 11.40, including DNSOnly, as well as WP Squared versions up to 136.1.6. It carries a CVSS score of 9.8, placing it […]
Cybercriminals have used artificial intelligence to identify and weaponise a previously unknown software flaw, marking a significant escalation in the use of AI for offensive cyber operations. The attempted campaign targeted a widely used open-source, web-based system administration tool and centred on a zero-day vulnerability that could bypass two-factor authentication when valid user credentials were already available. The operation was disrupted before it could be used […]
Cybercriminals are using fake Claude Code installation pages to push a PowerShell-based information stealer at developers, marking a sharper turn in attacks that exploit the rush to adopt AI coding tools. The campaign impersonates Anthropic’s Claude Code, a command-line assistant used by software teams to write, review and debug code. Victims are drawn through sponsored search results or cloned documentation pages that resemble legitimate installation guides. Instead […]
False ship positions have multiplied around the Strait of Hormuz, with vessels shown inland, clustered at impossible coordinates and moving at implausible speeds as electronic interference intensifies around one of the world’s most sensitive energy corridors. The disruption has emerged alongside renewed attacks and drone activity across the Gulf, sharpening concerns for crews, shipowners, insurers and energy buyers already dealing with curtailed traffic through the waterway. The […]
Cybercriminals are exploiting interest in OpenClaw with a counterfeit installer that delivers a Rust-based information stealer designed to harvest cryptocurrency wallet data, browser secrets and password-manager credentials. The campaign centres on a fake OpenClaw download site and a typosquatted GitHub organisation that impersonates the legitimate open-source AI assistant project. Victims are lured into downloading what appears to be a Windows installer, but the archive instead contains a […]
Iran has handed Washington its formal response to a US peace proposal, but the exchange has deepened uncertainty over whether a 10-week war can be halted before the Strait of Hormuz crisis inflicts wider damage on energy markets and regional security. The response was delivered through Pakistan, which has emerged as a key mediator between Tehran and Washington. Iran’s position centres on an immediate cessation of hostilities […]
Mac users searching for Claude installation help are being targeted by a malvertising campaign that turns Google-sponsored results and legitimate Claude shared-chat pages into a malware delivery route. The campaign, disclosed on 10 May by security researcher Berk Albayrak, uses search ads that appear to point to Anthropic’s real claude. ai domain. Users looking for terms such as “Claude mac download” are led to a shared Claude […]
Windows users seeking Claude-branded desktop tools have been targeted by a fake Anthropic-themed website distributing Beagle, a previously undocumented backdoor delivered through a DLL sideloading chain that gives attackers remote control over infected machines. The campaign used the domain claude-pro[.]com to imitate Claude’s official interface and lure visitors into downloading a supposed Claude-Pro Relay installer aimed at developers working with Claude Code. The fraudulent site copied the […]
