logo
Just in:
OpenAI identifies 948 Linux privilege escalation flaws using AI // Miss Universe Hong Kong Jen Zhou Departs for Puerto Rico to Compete in the 75th Miss Universe World Final // Asia Left Behind: Ten international companies have yet to report delivering on their cage-free egg pledges across the region // TVM –Mangaluru Vande Bharat claims top spot // Utilities pursue ₹1,992 cr in unpaid bills // Vance attributes Republican midterm defeats to Iran conflict // Ta’ziz finalises $1.39bn funding for Ruwais industrial facilities // Private varsities bill all set to face the axe // CR Longdation Aethereal Cybersecurity × Global Cybersecurity Alliance (GCSA) Join Hands to Establish the “AI and Cybersecurity Research Centre” // After Reaching 7 Million Users in the Philippines, Skyro Launches Transparent Cash Loans in Malaysia // Xi Jinping Preparing For A Trilateral Summit With Trump And Putin At APEC Summit On Nov 18-19 // The “1st Greater Bay Area Health and Longevity Summit & Awards Ceremony” concludes successfully in Macao // Millions Of Indians May Soon Be Deprived Of Government Assistance // SC to examine students’ exam plea today // Trump’s Iran War Has A Share Of Contribution To His Midterm Debacle // UK air traffic outage inflicted £33m financial losses // ADIA and partners establish $1.4 billion aviation venture // e-Crime Bureau Signs Cybersecurity Partnership With Smart Africa, Reinforcing Its Global Expansion // Ousted top Kochi cop gets IG post // Dubai boat show confirms international shipyard line-up for November //

News related to
attacks

A fast-moving malware campaign tied to Shai-Hulud has expanded its attack on software developers through newly weaponised Python Package Index artefacts, raising concern that poisoned open-source dependencies are being used to steal credentials, compromise build systems and spread across trusted code repositories. The latest wave adds 23 malicious PyPI package-version artefacts to an operation already linked to Mini Shai-Hulud, Miasma and Hades activity. The broader campaign now […]

Oil markets lurched higher on Monday as renewed Israeli strikes on Iran and attacks on Lebanon revived fears that the Middle East conflict could threaten energy flows through one of the world’s most critical crude corridors. Brent crude rose by more than $4 a barrel at one stage, climbing above $98 before paring gains, while West Texas Intermediate also advanced sharply as traders priced in a higher […]

Open-source maintainers and software manufacturers are heading towards the European Union’s first Cyber Resilience Act enforcement milestone with deep gaps in awareness, preparedness and legal clarity, after new OpenSSF research found that about two-thirds of practitioners remain unready or unaware of the compliance timetable. The finding has sharpened concern across the software supply chain because the CRA’s vulnerability and incident reporting duties begin on 11 September 2026, […]

CPX Holding has unveiled a refreshed brand identity in Abu Dhabi, positioning the G42 company for its next phase of growth as demand rises for AI-led cybersecurity, sovereign digital capability and stronger protection of critical infrastructure across the UAE. The new identity, built around the promise “Secure what’s next”, marks a shift in CPX’s public positioning from conventional cyber defence towards enablement, resilience and intelligence-led security. The […]

Israel launched airstrikes on military targets in western and central Iran early on Monday after Iran fired missiles and drones towards Israeli territory overnight, pushing the region into another dangerous phase of direct confrontation. The Israeli military said its air force hit military sites linked to Iran’s missile and drone capabilities. Explosions were reported in Tehran, Isfahan and Tabriz, while authorities in Iran suspended flights at Tehran’s […]

Google’s AI texting assistant is moving ordinary phone messages closer to machine-assisted conversation, offering Android users suggested replies and tone changes while intensifying scrutiny over privacy, consent and whether digital communication is becoming less human. Magic Compose, built into Google Messages, uses Gemini technology to suggest replies, start conversations and rewrite drafts in styles ranging from formal to casual. On supported Android devices using AICore, the message-suggestion […]

Attackers are increasingly abusing legitimate system utilities and widely used administrative tools to deliver malware, move through networks and avoid detection, forcing security teams to rethink defences built mainly around blocking suspicious files. The tactic, commonly described as “living off the land”, relies on trusted tools already present inside corporate environments. PowerShell, Windows Management Instrumentation, certutil, mshta, rundll32, regsvr32, scheduled tasks, remote monitoring software and JavaScript execution […]

Advertisements

Hola Browser’s Windows installer was compromised to deliver an undeclared cryptocurrency-mining executable to some users, exposing a supply-chain weakness in a product that had passed application certification checks before the anomaly was detected. The affected version, Hola Browser for Windows 1.251.91.0, wrote an unexpected file named me. exe to C:Program FilesHola on some systems. The executable was not part of the certified software footprint, was not digitally […]

Arabian Post Staff -Dubai Iran’s Revolutionary Guard said it had launched missile strikes on “enemy bases in the region” after US forces hit targets near the Strait of Hormuz, pushing Gulf states into a new security alert as sirens sounded in Kuwait and Bahrain. Guard commanders framed the operation as retaliation for US strikes on Iranian coastal positions around Sirik and Qeshm Island, both close to one […]

Microsoft Edge users have been urged to update their browsers after three security flaws tied to the Pwn2Own hacking contest were publicly detailed, including one vulnerability that could allow remote attackers to execute arbitrary code if a target opens a malicious page or file. The vulnerabilities, tracked as CVE-2026-45492, CVE-2026-45494 and CVE-2026-45495, affect Chromium-based Microsoft Edge and were credited to Orange Tsai of DEVCORE Research Team, one […]

A China-linked cyber-espionage group tracked as VerdantBamboo has been tied to a BRICKSTORM malware operation targeting Linux-based virtual appliances, firewalls and enterprise infrastructure, sharpening concerns over the security of systems that often sit outside mainstream endpoint monitoring. The activity came to light after suspicious traffic was detected from a Linux-based virtual machine appliance during an incident response investigation. The inquiry found that attackers had used stolen administrative […]

Developers using npm packages were put on alert after a fast-moving supply chain attack compromised at least 57 packages and pushed more than 286 malicious versions to the registry in less than two hours on June 3, exposing a fresh weakness in the way JavaScript projects handle native build files. The campaign began at about 23:30 UTC with the compromise of @vapi-ai/server-sdk, the official server-side software development […]

Malicious agent-skill uploads have slipped past detection tools used by ClawHub, Cisco and Vercel-linked scanning services, raising fresh concern over the security of fast-growing marketplaces that distribute third-party capabilities for AI agents. The findings point to a widening supply-chain problem around “skills”, the modular instruction-and-file packages that allow AI agents to perform tasks such as editing documents, running scripts, managing workflows or connecting with external services. Unlike […]

Security researchers have warned that a Windows Search URI handler weakness can leak NTLMv2 hashes to remote attackers through a crafted link, reviving concerns over long-running authentication risks in enterprise networks. The issue affects the search: handler used by Windows Explorer to process desktop search requests. A malicious link can direct the handler towards an attacker-controlled network path, causing the victim’s system to attempt authentication over SMB […]

Washington and Tehran exchanged fresh military strikes across the Gulf, placing new pressure on a fragile ceasefire and raising the risk of wider disruption around one of the world’s most important energy corridors. US forces intercepted Iranian ballistic missiles and drones aimed at neighbouring Middle East countries and then struck a military ground control station on Iran’s Qeshm Island, near the Strait of Hormuz. The operation followed […]

Attackers have compromised Red Hat’s official @redhat-cloud-services namespace on npm, inserting credential-stealing malware into dozens of package releases used in cloud console development and software build pipelines. The breach, identified on 1 June 2026, affected at least 32 package releases across the Red Hat Cloud Services ecosystem, including frontend components, generated API clients and supporting developer tooling linked to the Red Hat Hybrid Cloud Console. The malicious […]

Anthropic is expanding access to Claude Mythos Preview through Project Glasswing, widening a controlled cybersecurity programme at a time when North Korean-linked hackers are sharpening attacks against macOS users in the financial, venture capital, Web3 and cryptocurrency sectors. The San Francisco-based AI company plans to increase the number of Project Glasswing partners from about 50 to roughly 200 organisations across more than 15 countries, broadening access to […]

US forces said they defeated an overnight wave of missile and drone attacks launched by Iran towards Gulf states and civilian shipping, while carrying out self-defence strikes on military sites on Qeshm Island near the Strait of Hormuz. The confrontation marked a sharp escalation in a conflict already threatening energy flows, maritime security and diplomatic efforts to contain hostilities across the Gulf. US Central Command said its […]

Moscow’s main security agency said it had uncovered a foreign intelligence operation that placed spyware on mobile phones used by senior officials, intensifying Russia’s long-running confrontation with Western governments over cyber espionage, communications security and control of digital infrastructure. Russia’s Federal Security Service said the operation involved the compromise of thousands of devices, including phones used by officials, diplomats and people linked to government agencies. The agency […]

Hackers have used 34 malicious open-source packages across npm, PyPI and Crates. io to steal cloud credentials, crypto wallet data, SSH keys and developer secrets, exposing a widening security gap in software supply chains used by blockchain, artificial intelligence and cloud engineering teams. The campaign, tracked as TrapDoor, spans more than 384 package versions and artefacts. It targets developers working in cryptocurrency, DeFi, Solana, Sui, Move, AI […]

Palo Alto Networks customers are facing renewed pressure to patch internet-facing security systems after attackers began exploiting a high-severity authentication bypass flaw in PAN-OS GlobalProtect, a product widely used to provide remote access to corporate networks. The vulnerability, tracked as CVE-2026-0257, affects GlobalProtect portal and gateway deployments in PAN-OS where authentication override cookies are enabled alongside a specific certificate configuration. Successful exploitation can allow a remote attacker […]

Hackers are using targeted spearphishing emails to deploy AZUREVEIL, an Adaptix-based command-and-control agent, against government and enterprise-linked targets in the Czech Republic and Taiwan, underscoring the growing use of trusted cloud services to mask cyber-espionage activity. The campaign, tracked as Operation Dragon Weave, begins with a malicious ZIP archive carrying files designed to appear as official documents. Once opened, the archive can trigger a multi-stage infection chain […]

SolyxImmortal, a Python-based information-stealing malware, is drawing attention from cyber defenders because of its ability to combine browser credential theft, document harvesting, keystroke logging and screen surveillance inside a single Windows implant. Technical analysis shows the malware is designed to operate quietly on compromised machines, using common Python libraries, Windows features and multi-threaded execution to run several data-collection functions at the same time. Its targets include saved […]

Russia has imposed a temporary ban on aviation fuel exports until 30 November, tightening control over domestic supplies as repeated Ukrainian attacks on refineries and energy infrastructure strain the country’s fuel system. The measure, announced by the Russian government on Monday, is aimed at stabilising the internal aviation fuel market after a series of refinery disruptions affected output across several regions. The restriction covers aviation kerosene and […]

VISHNU RAJA
RYO YAMADA
HITORI GOTOH
IKUYO KITA
Just in:
Hong Kong mandates crypto transaction disclosures to tax authorities // Private varsities bill all set to face the axe // Utilities pursue ₹1,992 cr in unpaid bills // Miss Universe Hong Kong Jen Zhou Departs for Puerto Rico to Compete in the 75th Miss Universe World Final // OpenAI identifies 948 Linux privilege escalation flaws using AI // SC to examine students’ exam plea today // UK air traffic outage inflicted £33m financial losses // Middle East governments assess Iran war after US vote // ADIA and partners establish $1.4 billion aviation venture // Kochi police detain two actors over bid to honey trap doctor // Asia Left Behind: Ten international companies have yet to report delivering on their cage-free egg pledges across the region // The “1st Greater Bay Area Health and Longevity Summit & Awards Ceremony” concludes successfully in Macao // Dubai boat show confirms international shipyard line-up for November // Ousted top Kochi cop gets IG post // Meraas showcases five residential zones at Dubai Design Week // After Reaching 7 Million Users in the Philippines, Skyro Launches Transparent Cash Loans in Malaysia // Cyberport Venture & Capital Forum 2026 Grand Opening // Fast Just Got Fastest: STING Energy Boost™ Celebrates Kimi Antonelli’s Formula 1® World Championship and the Fan Energy Behind It // APT29-linked campaign exploits outdated Apple and Android software // CR Longdation Aethereal Cybersecurity × Global Cybersecurity Alliance (GCSA) Join Hands to Establish the “AI and Cybersecurity Research Centre” //