Losses from hacks, phishing and other Web3 security incidents climbed to about $482.6 million in the first quarter of 2026, even as projects expanded audits, compliance work and other defensive controls. The biggest change was not simply the amount lost, but where attackers found success: away from pure code exploits and deeper into off-chain operations, user manipulation and privileged access. Data published by security firm Hacken shows […]
More than 100 Chrome extensions presented as harmless tools for games, social media sidebars and translation have been tied to a coordinated data-harvesting operation that security researchers say exposed user identities, browser sessions and browsing activity through a shared command-and-control network. The campaign, uncovered by Socket’s Threat Research Team and independently checked in part by BleepingComputer, involved 108 extensions listed under five publisher identities and accounted for […]
OpenAI has told users of its Mac software to update their applications after a third-party supply-chain incident touched the company’s app-signing workflow, prompting a wider effort to replace security certificates and tighten the process that proves its desktop software is authentic. The company said there is no evidence that user data was accessed, that passwords or API keys were exposed, or that its systems, intellectual property or […]
Booking.com has confirmed that hackers accessed customer booking information, exposing names, email addresses, phone numbers and reservation details in a security incident that has triggered fresh concern over how much personal travel data is concentrated on large online platforms. The company said it moved to contain the issue, reset reservation PINs for affected bookings and contacted impacted guests directly. It has not disclosed how many customers were […]
MSBuild, a legitimate Microsoft build tool embedded in many Windows and developer environments, is drawing renewed scrutiny after fresh threat research showed how attackers are using it to run malicious code in memory, evade signature-based defences and blend into normal system activity. Security researchers and defenders say the technique is not new, but its continued effectiveness underlines how cyber intrusions are shifting away from obvious malware files […]
Federal investigators in the United States, working with Indonesian police, have dismantled the W3LL phishing network, a cybercrime operation that authorities say enabled the theft of thousands of account credentials and supported more than $20 million in attempted fraud. The action, led by the FBI’s Atlanta field office, included the seizure of infrastructure linked to the service and the detention in Indonesia of an alleged developer identified […]
Washington has moved from threats to enforcement, with the U. S. military beginning a blockade on shipping to and from Iranian ports across the Gulf, the Gulf of Oman and the Arabian Sea, in a step that sharply raises the risk of a broader regional conflict even as a temporary ceasefire remains in place. U. S. Central Command said the restrictions took effect on Monday morning U. […]
A newly disclosed security flaw in Axios, one of the most widely used HTTP client libraries in the JavaScript ecosystem, has raised concern across software and cloud security teams after official advisories warned it could be chained into remote code execution or a broader compromise of cloud infrastructure. The issue, tracked as CVE-2026-40175, affects Axios versions earlier than 1.15.0 and was published through GitHub’s advisory system on […]
Cisco is closing in on a deal to buy Astrix Security for as much as $350 million, according to multiple reports, in a sign that one of the world’s largest networking and security groups is moving faster to secure the fast-growing risks created by AI agents and other non-human identities inside large organisations. The talks, first reported on April 10, value the Israeli startup at roughly three […]
GitHub and Jira notification emails are being hijacked by threat actors who have found a way to turn trusted software alerts into convincing phishing lures, using the platforms’ own mail systems to slip past many of the checks that companies rely on to stop malicious messages. Security researchers say the tactic marks a notable shift in email abuse because the messages are not crudely spoofed copies […]
Mirax, an emerging Android banking trojan being marketed as a malware-as-a-service operation, is drawing attention from mobile security researchers after reports that it can do more than steal banking credentials. Analysts say the malware can remotely control infected phones and repurpose them as residential proxy nodes, giving cybercriminals a way to hide malicious traffic behind ordinary consumer devices while pursuing financial fraud across Europe. The threat stands […]
Kraken said on April 13 that it is being extorted by a criminal group threatening to publish videos showing parts of its internal systems and limited client data, as the cryptocurrency exchange sought to reassure users that its core platform had not been breached and customer funds remained safe. The company’s public statement said the threat followed unauthorised access tied to a small number of accounts rather […]
Basic-Fit has disclosed a cyber breach affecting about one million members across several European markets, with roughly 200,000 of those accounts in the Netherlands, exposing a wide range of personal and financial details and sharpening concerns over how consumer-facing digital platforms protect routine lifestyle data. The company said the unauthorised access was detected by internal monitoring systems and halted within minutes, but not before information had been […]
Iran-linked cyber operatives using the CyberAv3ngers banner are again in the spotlight after U. S. authorities warned on April 7 that Iranian-affiliated hackers have stepped up efforts to compromise programmable logic controllers and supervisory control systems used in water, energy and government facilities, with some intrusions already causing operational disruption and financial loss. The alert marks a sharper phase in a campaign that security officials say has […]
Rockstar Games has confirmed that a data breach affected company information, saying a “limited amount of non-material company information” was accessed through a third-party incident and that the episode has had no impact on its operations or players. The disclosure lands at a sensitive moment for one of the world’s most closely watched game developers, with Grand Theft Auto VI still one of the industry’s biggest commercial […]
France and Britain are preparing to convene partner countries for what President Emmanuel Macron described as a peaceful multinational mission to restore freedom of navigation in the Strait of Hormuz, marking a European push to keep one of the world’s most important energy arteries open without joining Washington’s new blockade of Iranian ports. Prime Minister Keir Starmer said Britain would not support the US blockade and insisted […]
OpenAI has accused Elon Musk of staging a last-minute legal manoeuvre ahead of a jury trial due to begin on 27 April in Oakland, California, deepening a dispute that has grown from a fight over the company’s founding ideals into one of the most consequential courtroom battles in artificial intelligence. The latest exchange came after Musk amended his claims against OpenAI and Microsoft, widening the remedies he […]
Arabian Post Staff -Dubai Dubai’s Roads and Transport Authority said a temporary technical issue disrupted services across multiple channels on Sunday, affecting access to its app and website and triggering complaints from users who said they were unable to complete tasks such as parking payments. The authority said its team was working to restore services as quickly as possible, while asking customers for understanding as the problem […]
Google has moved to harden Chrome against one of cybercrime’s most effective tactics by making Device Bound Session Credentials publicly available for Windows users in Chrome 146, a step designed to stop attackers reusing stolen session cookies to enter accounts without passwords or multi-factor authentication. The change binds a signed-in web session to the user’s device, meaning a cookie lifted by malware should quickly become unusable on […]
Adobe has issued an emergency update for Acrobat and Reader after confirming that a zero-day vulnerability tracked as CVE-2026-34621 is being exploited in the wild, putting Windows and macOS users on notice to install the patch quickly. The company assigned the update a Priority 1 rating, its most urgent category for product security bulletins, and said successful exploitation could lead to arbitrary code execution. The flaw affects […]
A critical security flaw in the User Registration & Membership plugin for WordPress has exposed thousands of websites to the risk of full administrative takeover, after researchers disclosed that versions up to and including 5.1.2 could allow attackers to gain elevated privileges without valid credentials. The issue, tracked as CVE-2026-1492, stems from improper privilege management during membership registration, creating a path for unauthorised users to register with […]
Apache Tomcat users are being urged to move quickly after the Apache Software Foundation disclosed a set of security flaws that could let attackers undermine encrypted traffic protections, slip past certificate checks in some scenarios and exploit a defect introduced by an earlier fix. The most urgent concern centres on Tomcat’s EncryptInterceptor, where one vulnerability was followed by a second flaw in the remedy itself, creating a […]
Arabian Post Staff -Dubai Saudi Arabia has restored full pumping capacity on its East-West pipeline to about seven million barrels a day, reactivating a strategic export artery that has become central to global crude flows during the disruption of shipping through the Strait of Hormuz. The Ministry of Energy said operational and technical teams brought the line back to full strength within days of attacks that had […]
Pavel Durov, the Telegram founder, has escalated a public attack on WhatsApp, calling its claim of “end-to-end encryption by default” a “giant consumer fraud” and arguing that most private messages still become exposed through cloud backups. The charge, amplified on X amid a fresh US class action dispute over WhatsApp’s privacy promises, has reopened a wider argument about what encrypted messaging apps actually protect, what they leave […]
