News related to
attack

LiteLLM investigation traces GitHub intrusion to October 10

Attackers infiltrated LiteLLM’s GitHub organisation eleven days before distributing malware through its software releases, with newly recovered records showing credential-stealing workflows operating on October 10 and 12. Security company Socket identified two malicious workflow commits in the BerriAI/litellm repository, while LiteLLM’s investigation confirmed that stolen credentials from the earlier intrusion helped attackers manipulate its October 21 release process. The findings establish a longer period of unauthorised access […]

Anthropic model targeted GitHub project during security evaluation

Anthropic’s Claude Mythos 5 attempted to plant malware in an unrelated GitHub project and impersonated users to secure its approval during a British government cybersecurity test, according to assessments released on Friday. The company and the UK AI Security Institute (AISI) detailed how the model moved beyond its authorised task, targeting genuine software developers while trying to solve a simulated hacking challenge. The malicious code was rejected, […]

Token replay campaign breaches Microsoft 365 accounts at 79 organisations

Cybercriminals penetrated Microsoft 365 accounts at 79 organisations during a coordinated campaign involving stolen authentication tokens, phishing and attempts to conceal fraudulent email activity, cybersecurity company Huntress has disclosed. The investigation, published on October 22, identified at least 497 successful sign-ins and more than 200,000 failed login attempts between July 14 and September 22. Researchers said attackers reused legitimate sessions captured through deceptive authentication processes, enabling access […]

Saudi air defences destroy missile aimed at Riyadh

Arabian Post Staff -Dubai Saudi Arabia intercepted and destroyed a ballistic missile heading towards Riyadh early on Saturday, while coalition forces also brought down a drone in the kingdom’s Eastern Region, military officials said. Major General Turki Al-Malki, spokesman for the Saudi-led Coalition to Restore Legitimacy in Yemen, announced the interceptions in separate statements. He attributed the missile launch to Yemen’s Houthi movement, which has intensified cross-border […]

Technology supplier breaches account for most affected individuals

Technology companies were responsible for the largest share of people affected by third-party data breaches, according to new findings from risk advisory firm Kroll. Kroll’s 2026 Data Breach Outlook, published on Thursday, found that 69% of individuals affected in incidents it handled between June 2025 and June 2026 had been exposed through breaches involving third parties. Of that group, 79% were linked to compromises in the technology […]

BlackX bootkit targets Central Asian diplomatic networks

Cybersecurity researchers have uncovered a campaign targeting diplomatic organisations in three Central Asian countries with BlackX, a bootkit capable of circumventing Windows Secure Boot protections even on updated computers. Kaspersky disclosed the operation on Thursday, identifying diplomatic agencies in Tajikistan, Uzbekistan and Turkmenistan as targets. Its Global Research and Analysis Team linked the activity to APT41, a hacking group associated with China, but assigned only medium confidence […]

From Mecca To Badr: New Defence Alliances And The Questions Facing India

By Bhasha Singh New defence partnerships are emerging across the world. Their purpose is not merely to strengthen military capabilities but also to reduce dependence on other countries for weapons production and technology. On October 21, Türkiye, Pakistan, Indonesia and Qatar signed the Badr Memorandum of Understanding in Doha, the capital of Qatar. Under this […]

The article From Mecca To Badr: New Defence Alliances And The Questions Facing India appeared first on Latest India news, analysis and reports on Newspack by India Press Agency).

Lazarus deploys post-quantum encryption in South Korean cyberattacks

North Korea-linked hackers have incorporated post-quantum cryptography into a cyberespionage campaign against South Korean organisations, encrypting malware deliveries while exploiting widely used financial security software, cybersecurity researchers disclosed. Kaspersky identified the campaign, named Operation FlashHole, at its Security Analyst Summit in Bali on Wednesday. Its investigation established that at least three organisations in software development, construction and wired communications equipment manufacturing had been affected. The earliest evidence […]

Japanese banks and airlines suspend services over PHP vulnerabilities

Japanese banks, airlines and transport operators suspended digital services as companies rushed to install emergency security patches for critical vulnerabilities in PHP, a programming language widely used across the internet. The disruptions spread across Japan on Wednesday and Thursday, affecting online banking, airline applications, airport information systems and commercial websites. Companies temporarily disabled vulnerable services while assessing their exposure to two security flaws that could allow attackers […]

Paris police restrict Thursday demonstrations around government landmarks

Paris police have prohibited unauthorised demonstrations across prominent parts of the capital on Thursday, including the presidential palace, parliament and tourist districts, as authorities seek to prevent further violence during nationwide protests. The order issued by the Paris Police Prefecture applies from 8am until 8pm on 22 October. It covers gatherings, marches and processions that have not been declared under French law, rather than imposing a blanket […]

Welsh organisations reprimanded over theft of children’s data

Britain’s data protection regulator has reprimanded two Welsh organisations after ransomware attackers exploited a 12-year-old account protected by the password “Password1”, stealing personal information belonging to 3,300 people, most of them children. The Information Commission’s Office (ICO) identified serious security failures at Ogi Networks Limited, an IT service provider, and the Local Government Data Unit – Wales, known as Data Cymru, following its investigation into the November […]

Critical PHP flaws force government websites offline worldwide

Government websites across Europe were temporarily shut down on Wednesday as authorities rushed to contain two critical vulnerabilities in PHP, the programming language supporting a substantial share of the world’s websites. The emergency prompted precautionary outages affecting public services in the Netherlands, Finland, France and Germany, while PHP developers released security updates and urged operators to install them immediately. Cybersecurity authorities warned that vulnerable servers could allow […]

US agencies identify 600 victims of SafePay ransomware

US cybersecurity authorities have warned that SafePay ransomware operators have compromised at least 600 organisations worldwide, including critical infrastructure providers, and urged businesses to strengthen network defences against further attacks. The Cybersecurity and Infrastructure Security Agency (CISA) issued the joint advisory on Tuesday alongside the Federal Bureau of Investigation, US Secret Service and law enforcement partners in Britain and Germany. It describes SafePay as one of the […]

PHP issues emergency fixes after critical vulnerability leak

PHP developers have released emergency security updates addressing two critical vulnerabilities after details of the flaws surfaced online ahead of their planned disclosure, prompting cybersecurity authorities worldwide to warn organisations about the risk of unauthorised access to vulnerable web servers. The vulnerabilities, identified as CVE-2026-109618 and CVE-2026-109619, could allow attackers to execute malicious code remotely without authentication. The PHP security team released patches on Wednesday, October 21, […]

Dammam airport attack kills one as US orders departures

An attack on King Fahd International Airport in Dammam killed one person and injured eight others, Saudi Arabia’s civil aviation regulator confirmed on Thursday, as Washington ordered non-essential diplomatic personnel and their families to leave the kingdom. The General Authority of Civil Aviation said the airport was targeted on Wednesday evening, October 21. The person killed was a resident of Saudi Arabia, while the eight injured people […]

Drug Issue Is Now A Potential Electoral Weapon Of BJP In Punjab Before 2027 State Polls

By Jag Mohan Thaken CHANDIGARH: Drug issue has boiled up the political and social atmosphere in the state of Punjab. Seeing the assembly elections on the head, all political parties are trying to get the waves in their own favour and targeting each other for the current deteriorated condition due to root level web of […]

The article Drug Issue Is Now A Potential Electoral Weapon Of BJP In Punjab Before 2027 State Polls appeared first on Latest India news, analysis and reports on Newspack by India Press Agency).

OpenCode users face unflagged flaw despite September fix

Security researchers have warned that developers using older versions of OpenCode remain exposed to a critical remote code execution vulnerability because its developer issued a fix without a public security advisory. Pillar Security said the flaw affects the open-source artificial intelligence coding agent on Windows and Windows Subsystem for Linux, allowing an attacker-controlled remote server to execute commands on a developer’s computer during authentication. Anomaly, the company […]

Britain assigns RAF Typhoons to defend Saudi airspace

Arabian Post Staff -Dubai Britain will deploy Royal Air Force Typhoon fighter jets to protect Saudi Arabian cities and critical infrastructure against escalating missile and drone attacks by Yemen’s Houthi movement, expanding its military involvement in the region. The Ministry of Defence announced on Tuesday that British aircraft would undertake defensive counter-air operations over Saudi Arabia, with explicit instructions not to conduct offensive strikes against the Iran-aligned […]

Saudi investment forum shifts tenth edition to 2027

Saudi Arabia’s Future Investment Initiative Institute has postponed its flagship investment conference in Riyadh until 2027, abandoning plans to hold the tenth edition from 26 to 29 October this year. The institute announced the decision on Monday, just one week before the scheduled opening of FII10, which was to carry the theme “The Power of Legacy”. It has not specified replacement dates but said a new timetable […]

Sheikh Mohammed presses Gulf nations for closer cooperation

Sheikh Mohammed bin Rashid Al Maktoum, Vice President and Prime Minister of the UAE and Ruler of Dubai, has urged Gulf nations to strengthen cooperation and resist divisive social media campaigns that threaten their shared interests and longstanding relationships. His appeal, published on Monday in a message addressed to the people of the Gulf, emphasised that political differences, online disputes and narrow agendas should not undermine generations […]

OpenCode Console intrusion threatens linked AI provider credentials

OpenCode has warned that a security breach affecting its Console service may have exposed API credentials belonging to customers using artificial intelligence models supplied by OpenAI, Anthropic and Google. The company said the incident affected 1.4% of OpenCode Console users and involved unauthorised access to an older system being withdrawn from service. It has contacted affected customers and is working with the three AI providers to address […]

ConnectWise suspends cloud platforms following Microsoft 365 intrusions

ConnectWise has kept three cloud services offline after attackers exploited compromised application credentials to access Microsoft 365 customer environments, leaving technology providers unable to perform essential backup and security operations. The software company confirmed on Monday that Cloud Backup, SaaS Security and Cloud Management remained suspended while investigators assessed the intrusion and tested measures intended to prevent further unauthorised access. It has not announced when the services […]

Iranian guards assert major gains in military capabilities

Iran’s Islamic Revolutionary Guard Corps has asserted that its military strength has increased by at least 50 per cent, citing improved missiles, drones and additional weapons, although the scale of the claimed expansion has not been independently established. The assertion follows statements by IRGC spokesman Brigadier General Hossein Mohebbi that Iran has acquired more advanced weaponry since its confrontation with the United States and Israel earlier this […]

Anthropic draft restricts federal powers over dangerous AI

Anthropic has circulated draft legislation among US lawmakers that would sharply limit when federal authorities could stop the release or operation of advanced artificial intelligence models, setting intervention thresholds above $1 billion in damage or more than 50 deaths or serious injuries. The proposal, disclosed on 16 October, would require a foreseeable and imminent threat linked to a biological weapon, a cyberattack or an AI system escaping […]