News related to
attack

Bluesky traffic attack tests decentralised network claims

Bluesky suffered a second day of disruption after what the company described as a coordinated distributed denial-of-service attack, leaving many users unable to reliably load feeds, notifications, threads and search results while engineers worked to stabilise the social platform. Bluesky said the trouble began late on April 15 and intensified through April 16, adding that it had found no evidence of unauthorised access to private user data. […]

OpenClaw sharpens agentic AI security warning

OpenClaw’s rapid rise from an open-source personal assistant to a flashpoint in boardroom and regulatory discussions has turned the software into one of the clearest illustrations yet of the cybersecurity dangers surrounding agentic AI. Security specialists, regulators and large technology firms are converging on the same point: the problem is no longer limited to what an AI model can say, but what an AI agent can do […]

Bitfinex recovery plans sharpen after US bitcoin move

A transfer of about $606,000 in bitcoin by the U. S. government to Coinbase has revived attention on one of the crypto market’s longest-running fallout stories, linking a small on-chain movement to the far larger question of how assets tied to the 2016 Bitfinex hack will ultimately be handled and what that could mean for Bitfinex’s outstanding recovery obligations and its UNUS SED LEO token. Blockchain-tracking reports […]

AD Ports rewires Gulf trade flows

AD Ports Group says it has kept operations running normally through the Gulf supply chain disruption that began at the end of February, using its integrated network to reroute cargo across land, rail, sea and air as traffic through the Strait of Hormuz remained severely constrained. The Abu Dhabi-based operator said on April 16 that it had shifted volumes through Fujairah Terminals and Khor Fakkan Port, activated […]

Tether backs Drift’s repair effort

  Tether has moved to support a $150 million recovery package for Solana-based Drift Protocol after the trading platform was hit by one of the biggest crypto exploits of the year, with the plan aimed at repaying affected users over time and helping relaunch the protocol under tighter security controls. Drift said the package would include up to $127.5 million from Tether and a further $20 million […]

TrendAI™ Partners with Anthropic to Extend Leadership in AI Security

Cookeville hospital alerts 337,917 patients

Cookeville Regional Medical Center has begun notifying 337,917 people that personal and medical information was exposed after a ransomware attack discovered on 14 July 2025, a breach that has taken about nine months to fully assess and disclose at scale. The Tennessee hospital said an unauthorised third party accessed or acquired files between 11 July and 14 July 2025, with the compromised data varying by individual and […]

Anthropic sharpens Opus for coders

Anthropic has rolled out Claude Opus 4.7, an upgraded version of its top broadly available artificial intelligence model, pitching it as a stronger tool for advanced software engineering just days after keeping its more powerful Mythos Preview behind tight access controls because of cyber-risk concerns. The move gives developers a more capable coding model while signalling that Anthropic is trying to balance commercial momentum with a more […]

Ukraine’s clinics face stealth data raid

  Ukrainian municipal authorities and healthcare institutions have come under a coordinated wave of cyberattacks that security officials say was designed to steal sensitive information from web browsers and WhatsApp accounts, widening concern over espionage operations aimed at essential public services during wartime. The campaign, attributed by Ukraine’s Computer Emergency Response Team to threat cluster UAC-0247, struck local government bodies and municipal medical facilities, including clinical and […]

Malware hides behind trusted downloads

Cyber criminals are pushing a Windows information stealer called NWHStealer through bogus software downloads that masquerade as Proton VPN installers, gaming mods and hardware utilities, in a campaign that security researchers say relies less on classic phishing and more on users searching for tools they believe are legitimate. Malwarebytes said on April 15 that it had identified multiple active distribution chains tied to the stealer, with malicious […]

Webhooks turn workflow tools into malware bait

Cyber attackers are abusing the low-code automation platform n8n to push malware and track targets through phishing emails, in a campaign that security researchers say gathered pace between October 2025 and March 2026 and reflects a broader shift in how legitimate cloud tools are being repurposed for intrusion activity. Cisco Talos said it observed a sharp increase in emails containing n8n webhook links, with March 2026 volumes […]

Fake Adobe Reader lure turns remote tool rogue

Attackers are exploiting trust in Adobe’s brand to deliver covert remote access, using a fake Acrobat Reader download page to install ConnectWise ScreenConnect through a fileless, memory-heavy attack chain that is designed to leave few traces on disk and make forensic analysis harder. Security researchers who uncovered the campaign said the operation began with a phishing site made to resemble Adobe’s official software page, where victims were […]

War damage bill swells across Gulf

Arabian Post Staff -Dubai Middle East conflict damage to energy infrastructure could leave the region facing as much as $58 billion in repair costs, according to a sharply revised estimate from Rystad Energy, with oil and gas facilities alone accounting for up to $50 billion and much of the burden falling on complex plants whose restoration may take years rather than months. The research firm said the […]

Hormuz relief hinges on Iran deal

  Iran has floated a proposal that could allow ships to use the Omani side of the Strait of Hormuz without facing attack, according to a person briefed on Tehran’s negotiating position, offering a possible path to ease one of the biggest shocks to global energy trade in modern times if talks with the United States produce a wider settlement. The idea has emerged as the U. […]

Google Discover scam turns AI into bait

Google’s Discover feed has become the latest battleground in the cybercrime economy after researchers uncovered a large-scale operation that used AI-written articles, fake news hooks and misleading browser prompts to push scam alerts to users’ phones and computers. The campaign, dubbed Pushpaganda, relied on more than 100 bogus domains designed to look like ordinary content sites, then turned visitors into targets for persistent scareware, ad fraud and […]

Splunk flaw opens risky code path

Splunk has disclosed a high-severity security flaw that can allow remote code execution in affected Splunk Enterprise and Splunk Cloud Platform deployments, raising concern for organisations that rely on the software to collect, search and analyse machine data for cyber defence, compliance and operations. The issue, tracked as CVE-2026-20204, was published on April 15 and carries a CVSS score of 7.1. Splunk said the weakness affects Splunk […]

Comcast payout puts breach fallout in focus

Comcast customers notified about the company’s 2023 Xfinity data breach are being offered cash payments, reimbursement for documented losses and identity-protection services under a proposed $117.5 million class-action settlement, opening what could become one of the largest consumer redress exercises tied to a telecom cyber incident in the United States. The settlement applies to people in the United States and its territories who were sent individual notice […]

Nginx-ui breach risk grows under live attacks

Attackers are exploiting a critical flaw in nginx-ui, an open-source web interface used to manage Nginx servers, exposing organisations to unauthorised server control through a weakness in the product’s Model Context Protocol integration. The bug, tracked as CVE-2026-33032, carries a CVSS severity score of 9.8 and allows an unauthenticated attacker on the network to invoke privileged functions that can rewrite configuration files, reload services and alter how […]

OpenAI sharpens AI race for cyber defence

OpenAI has launched GPT-5.4-Cyber, a new version of its frontier model tailored for defensive cybersecurity work, moving quickly to answer growing concern that ever more capable AI systems could help both defenders and attackers in a widening digital arms race. The release came a week after Anthropic disclosed Claude Mythos Preview under its tightly controlled Project Glasswing programme, setting up a new contest over who can best […]

Signed adware campaign strips endpoint defences

  A digitally signed software operation tied to Dragon Boss Solutions LLC has been linked to the disabling of antivirus protections on more than 23,000 endpoints worldwide, raising concerns that what had been treated as aggressive adware was operating much closer to a supply-chain style threat. Security researchers said infected machines were found checking in from 124 countries, with affected systems present in education, government, utilities, healthcare […]

Plugin trust crisis hits WordPress

More than 30 WordPress plugins tied to the developer Essential Plugin were taken offline after a hidden backdoor was found in code distributed to live websites, exposing site owners to unauthorised access, malware installation and search-spam abuse. The campaign, traced by security researchers to code inserted in August 2025 and activated in April 2026, is being treated as a serious software supply-chain breach rather than an ordinary […]

Chrome patch races to shut critical holes

Google has issued an emergency-style security update for Chrome after disclosing 31 vulnerabilities in the desktop browser, including five rated critical, in a release that underlines how quickly memory-safety flaws in widely used software can become a serious risk for consumers, businesses and public institutions. The stable desktop channel moved on April 15 to version 147.0.7727.101/102 for Windows and Mac, and 147.0.7727.101 for Linux, with the rollout […]

Middle East login assaults target firewalls

A sharp jump in brute-force attacks against SonicWall and Fortinet devices has put security teams on alert, after Barracuda said such activity made up more than half of the confirmed incidents its SOC tracked during February and March, with about 88% of the attacking IP addresses geolocated to the Middle East. The company said most attempts failed because they were blocked or aimed at invalid usernames, but […]

Fujairah bunker trade hit by Gulf shock

Arabian Post Staff -Dubai Marine fuel sales at Fujairah fell to a record low in March as the US-Iran conflict upended shipping patterns, strained fuel supply chains and pushed vessels to avoid one of the Gulf’s most important refuelling hubs. Data cited by traders and market reports showed sales at the port dropped to 158,852 cubic metres, down more than 70 per cent from February and from […]