Cyber criminals are using a tampered Android app to steal payment card data and PINs in a campaign that marks a more aggressive phase in near-field communication fraud, with the latest NGate malware variant targeting users in Brazil and enabling both unauthorised payments and cash withdrawals at contactless ATMs. The newly identified strain hides inside a doctored version of HandyPay, a legitimate NFC relay application, and appears […]
Arabian Post Staff -Dubai Donald Trump has warned that large-scale bombing of Iran will resume if no agreement is reached before the ceasefire expires on Wednesday evening in Washington, sharpening pressure on Tehran at a moment when diplomacy remains uncertain and the risk of a wider regional shock is still high. The US president has said his sole fixed demand is that Iran must not acquire a […]
Reabold Resources has moved to calm a political and environmental backlash after signalling that gas from its West Newton project in East Yorkshire could be used in an initial Bitcoin-mining trial, while insisting the wider field remains focused on domestic energy supply and future data-centre development. The London-listed company said the idea under review is a small-scale power generation facility using early gas flows from the site […]
Arabian Post Staff -Dubai The United Arab Emirates said it had dismantled a terrorist organisation inside the country and arrested its members over what authorities described as a covert plot to undermine national unity, infiltrate sensitive locations and prepare sabotage operations. Investigators said the group was tied to Iran’s Wilayat al-Faqih doctrine, while state-linked reporting in the UAE said officials had publicly identified 27 suspects as part […]
Bitcoin clawed back above $76,000 at the start of the week, holding firmer than much of the wider digital-asset market even as decentralised finance absorbed the shock of a major exploit tied to KelpDAO that has drained close to $300 million and triggered a sharp retreat in capital across lending and restaking platforms. Market pricing on 21 April showed bitcoin near $75,745 after touching an intraday high […]
Grinex, a Kyrgyzstan-based cryptocurrency exchange under Western sanctions, has suspended operations after losing about one billion roubles, or roughly $13.1 million, in what it described as a highly organised cyber attack. The platform said the breach was a targeted operation and alleged that intelligence services from “unfriendly” Western states were behind it, though it did not provide public evidence to support that claim. The theft has drawn […]
Windows users are facing a sharper cyber threat after researchers identified a campaign that pairs the long-running Gh0st remote access trojan with CloverPlus adware, giving attackers a mix of covert control and instant income from poisoned web traffic. The operation uses a single obfuscated loader to unpack both payloads, turning one infection into a dual-purpose compromise that can spy, persist and monetise at the same time. Two […]
Two separate phishing campaigns are hitting organisations with Formbook, a long-running information stealer that continues to adapt its delivery methods to slip past traditional Windows defences. The latest activity shows attackers pairing ordinary email lures with layered obfuscation, trusted system tools and DLL side-loading, giving a familiar malware family fresh room to operate inside corporate environments. Stealthy Formbook waves target Windows users Security researchers tracking the […]
A legitimate Intel storage utility has been repurposed in a highly targeted malware campaign that uses a little-known. NET mechanism to run hostile code inside a signed executable, giving attackers a quieter path into corporate networks and making detection far harder for many security products. The operation, identified as PhantomCLR, has been observed against financial institutions and other organisations across the Middle East and the wider […]
Anthropic’s Model Context Protocol, a fast-growing standard used to connect AI models with external tools and data, has come under intense scrutiny after security researchers disclosed a critical weakness that they say can open the door to arbitrary remote code execution across a broad swathe of the AI software stack. The issue, published on April 15, centres on how MCP implementations handle STDIO-based server configurations and command […]
Hackers exploited a cross-chain bridge tied to liquid restaking protocol Kelp DAO on Saturday, draining about $290 million in rsETH and sending shockwaves through decentralised finance markets as the losses spread into lending platforms and renewed questions over the security of multichain infrastructure. Bloomberg reported the theft at nearly $300 million, while market and on-chain reports put the value at roughly $292 million to $294 million. […]
Fresh uncertainty gripped the Strait of Hormuz on Saturday after merchant vessels attempting to cross the waterway reported gunfire and shipping sources said Iranian naval broadcasts warned that passage was no longer permitted, sharpening fears over the security of one of the world’s most important energy corridors. Reuters reported that at least two vessels came under fire, while New Delhi confirmed that two India-flagged crude carriers were […]
Arabian Post Staff -Dubai Fresh instability swept across the Middle East on Saturday after Iran reimposed restrictions on vessel traffic through the Strait of Hormuz and Israeli forces struck targets in Lebanon, denting market optimism that a broader easing of tensions was close at hand. The renewed disruption came less than a day after signs of limited progress had lifted hopes for safer shipping through the narrow […]
Iran has tightened its grip on the Strait of Hormuz, warning that vessels seeking passage will face military control after Tehran linked the waterway’s closure to a United States blockade of its ports, a move that has sharply escalated a confrontation already straining global energy markets and regional diplomacy. Reports of gunfire at commercial ships, including two India-flagged vessels, have turned a political standoff into a direct […]
StarLink opened its 2026 roadshow in Riyadh on 19 April, pitching a vision of cyber defence in which autonomous systems are used not only to detect threats but to counter AI-enabled attacks at machine speed, as companies across the Middle East weigh how far they can trust software agents with critical security decisions. The event series, branded “The Silent War of AI vs AI”, is scheduled to […]
Polkadot’s token regained some ground after Hyperbridge sharply raised the estimated damage from its April 13 Token Gateway exploit to about $2.5 million, a revision that deepened scrutiny of cross-chain infrastructure even as the network behind DOT moved to contain concern by stressing that native DOT was not compromised. Hyperbridge said the breach was confined to bridged DOT and related pools on Ethereum, Base, BNB Chain and […]
Anthropic’s Claude Opus has been thrust into a fresh security debate after researcher Mohan Pedhapati said he used the model to help build a working V8 exploit chain that achieved code execution against an outdated Chromium build bundled with Discord. Pedhapati, CTO of Hacktron and known online as s1r1us, said the exercise ran over about a week, consumed 2.3 billion tokens, cost $2,283 in API fees and […]
Arabian Post Staff -Dubai President Donald Trump said Iran had agreed to suspend its nuclear programme without a fixed end date, lifting market hopes that a broader settlement could be close after Tehran declared the Strait of Hormuz open again to commercial shipping during the ceasefire period. Trump said in a phone interview on Friday that the halt would be “unlimited”, while also projecting confidence that […]
A leaked Google API key was used to drive more than €54,000 of Gemini compute charges in about 13 hours after attackers exploited an unrestricted Firebase browser key, according to a complaint posted on Google’s own AI developers forum, sharpening concerns over how older public-facing keys can become valid credentials for newer AI services. The affected user said an €80 budget alert and a cost anomaly alert […]
Commercial artificial intelligence models are advancing quickly in vulnerability research and exploit development, sharpening concern across the cybersecurity industry that tools built for productivity and defence could also lower the barrier for offensive misuse. A study by Forescout’s Vedere Labs found that commercial systems now outperform open-source and underground alternatives in identifying software flaws, while more than half of the models tested were able to generate exploits […]
A sweeping international law-enforcement campaign has disrupted one of the cybercrime market’s most accessible attack models, with authorities saying Operation PowerOFF warned more than 75,000 suspected users of distributed denial-of-service-for-hire services, took down 53 domains, issued 25 search warrants and made four arrests during a coordinated action week on 13 April. The effort, backed by Europol and involving agencies from 21 countries, targeted both the operators and […]
International law enforcement agencies have disrupted dozens of websites linked to paid cyberattack services, arrested four suspects and sent warning notices to more than 75,000 alleged users in one of the broadest crackdowns yet on the market for rented distributed denial-of-service attacks. The coordinated effort, announced on April 16, was carried out under Operation PowerOFF and involved authorities from 21 countries targeting so-called “booter” and “stresser” platforms […]
Hackers are probing older TP-Link home routers in an effort to turn them into Mirai-style botnet nodes, using a known command-injection flaw tracked as CVE-2023-33538. Security researchers say the activity targets discontinued router models and appears to be automated, with scanning and exploit attempts designed to fetch and run malware on exposed devices. The flaw itself is genuine and serious, even though some of the attack traffic […]
Search poisoning aimed at users looking for the open-source recovery utility TestDisk is being used to slip a trojanised installer on to Windows machines, abuse a Microsoft-signed binary for DLL sideloading and install ConnectWise ScreenConnect, giving attackers remote access under the cover of a legitimate administration tool. The campaign centres on a rogue site, testdisk. dev, that imitates the branding and download flow of the genuine TestDisk […]
