News related to
attacks

Small US defence suppliers are being outmatched by nation-state hackers using poorly monitored network edges to gain long-term access before attacks become visible, new cyber threat analysis has warned. Team Cymru senior threat intelligence adviser Stephen Campbell said smaller companies inside the US Defense Industrial Base face a structural disadvantage because many hold sensitive contract, technical and personnel data but lack the network-level visibility available to major […]

Danish shipping group A. P. Moller–Maersk has confirmed that its US-flagged vehicle carrier Alliance Fairfax has left the Arabian Gulf through the Strait of Hormuz under US military escort, giving Washington’s effort to reopen one of the world’s most important maritime chokepoints its most visible commercial test so far. The vessel, operated by Maersk’s Farrell Lines subsidiary, completed the passage on May 4 accompanied by US military […]

Arabian Post Staff -Dubai   UAE authorities condemned a wave of missile and drone attacks on civilian sites after national air defence systems intercepted 12 ballistic missiles, three cruise missiles and four unmanned aerial vehicles on May 4, preventing wider damage in an escalation that has sharpened security concerns across the Gulf. Three people suffered moderate injuries and were taken to hospital, with officials identifying them as […]

Matein Khalid It is significant that Abu Dhabi joined Opec from the moment the emirate exported its first barrel of oil in 1967, four years before the birth of the UAE itself. For 59 years the UAE was a member of Opec enduring an era of multiple shocks, wars, revolutions, recessions, banking crises, oil price wars, supply shocks, embargoes and the pandemic. Saudi Arabia has been the ultimate power […]

Malicious code inserted into four SAP-related npm packages exposed developer workstations and automated build systems to credential theft, marking a sharp escalation in attacks against open-source software supply chains used by enterprise technology teams. The compromised packages were published on April 29, 2026, and affected components tied to SAP’s Cloud Application Programming Model and Multi-Target Application build workflows. The malicious versions identified were @cap-js/sqlite 2.2.2, @cap-js/postgres 2.2.2, […]

Arabian Post Staff -Dubai OPAQUE has acquired cryptographic AI technologies developed in Abu Dhabi, expanding its confidential AI platform into model training, agentic workflows and post-quantum protection for enterprises handling highly sensitive data. The deal links OPAQUE, a San Francisco-headquartered confidential AI company founded by researchers from UC Berkeley’s RISELab, with the Technology Innovation Institute, the applied research arm of Abu Dhabi’s Advanced Technology Research Council. The […]

  Microsoft detected about 8.3 billion email-based phishing threats in the first quarter of 2026, exposing a sharp shift in attacker behaviour as criminal groups moved deeper into QR codes, fake CAPTCHA pages, phishing-as-a-service kits and file-based payloads to bypass conventional email defences. The volume eased from about 2.9 billion threats in January to 2.6 billion in March, but the decline in headline numbers masked a more […]

Advertisements

Crypto exploit losses have crossed $770 million in the first four months of 2026, intensifying concern that decentralised finance is entering a harsher phase of cyber risk as attackers combine old weaknesses with faster automation, sharper social engineering and increasingly advanced reconnaissance tools. The scale of the damage has been driven by two major breaches. Drift Protocol, a Solana-based decentralised exchange, lost about $285 million after an […]

Matein Khalid As the world’s leading trading power, China’s vast export engine fuelled a $1.2 trillion current account surplus in 2025. At the same time, it is the largest importer of crude oil globally, with around 40 percent sourced from the Middle East. This exposure gives Beijing a clear stake in Gulf stability – prioritising secure maritime transit through energy chokepoints and uninterrupted access to the GCC’s trillion-dollar development […]

A publicly released exploit for a critical cPanel and WebHost Manager flaw has intensified pressure on hosting companies and website operators after monitoring groups reported tens of thousands of likely compromised internet-facing systems. The vulnerability, tracked as CVE-2026-41940, allows unauthenticated attackers to bypass login controls and obtain administrative access to affected cPanel & WHM environments. The weakness carries a CVSS severity score of 9.8, placing it among […]

A new botnet campaign is turning poorly secured Jenkins servers into attack nodes aimed at online game infrastructure, including Valve Source Engine servers used for titles such as Counter-Strike and Team Fortress 2. The activity shows how a single exposed continuous integration system can be repurposed to generate UDP, TCP and application-layer floods against multiplayer platforms. Cybersecurity researchers observed the activity on March 18, 2026, after a […]

Tehran has sharpened its confrontation with Washington and Gulf shipping powers after Mojtaba Khamenei declared that the Strait of Hormuz would be “managed by new rules”, signalling Iran’s intention to tighten political and operational control over the world’s most sensitive energy corridor. Khamenei, Iran’s supreme leader and the son of the late Ayatollah Ali Khamenei, said the waterway would no longer be treated as a passage subject […]

Attackers are shifting credential theft campaigns towards QR codes, fake CAPTCHA pages and ClickFix-style prompts, turning familiar security checks into tools for large-scale account compromise. Fresh threat telemetry for the first quarter of 2026 shows email-based phishing remains vast in scale, with about 8.3 billion threats detected between January and March. Although monthly volumes eased from 2.9 billion in January to 2.6 billion in March, the composition […]

Global internet reliability came under sharper pressure in the first quarter of 2026 as shutdowns, war damage, power failures and cable incidents disrupted connectivity across several regions, exposing a widening risk for enterprises that depend on cloud platforms, cross-border data flows and always-on digital services. Cloudflare’s review of disruptions from January to March showed that the most damaging incidents were not dominated by software faults alone. Political […]

Arabian Post Staff -Dubai US President Donald Trump urged Iran to “get smart soon” and agree to a deal as Washington weighed a longer blockade of Iranian ports, raising the stakes in a confrontation that has already unsettled energy markets, shipping routes and diplomacy across the Gulf. Trump’s message on Truth Social followed several days of stalled contacts aimed at ending the conflict and securing restrictions on […]

Google has issued an urgent Chrome security update after fixing 30 vulnerabilities, including four critical memory-related flaws that could expose users to attacks through compromised or malicious web pages. The update moves Chrome’s stable desktop channel to version 147.0.7727.137 or 147.0.7727.138, depending on platform, and is being rolled out across Windows, macOS and Linux. Users have been advised to restart the browser after the update is installed, […]

A fake video meeting can now be enough to breach a Web3 company, with North Korea-linked BlueNoroff hackers using bogus Zoom calls, clipboard tricks and fileless PowerShell malware to steal credentials from cryptocurrency targets across multiple countries. The campaign marks a sharper turn in social engineering against the digital assets sector, where attackers are no longer relying only on malicious attachments or crude phishing pages. Instead, they […]

Cyber literacy has become the leading global people risk as employers confront ransomware, AI-enabled fraud, technology skills gaps and fragile workforce readiness, Marsh’s 2026 People Risks survey has found. The report, based on views from 4,517 human resources and risk professionals across 26 markets and 12 industries, places inadequate cyber threat literacy at the top of the global risk list. Technology skills shortages, including cyber and artificial […]

Justice Department lawyers have asked a federal judge to dismiss a lawsuit blocking parts of President Donald Trump’s planned White House ballroom, using language that legal critics say closely mirrors the president’s combative social media style and marks a striking departure from the department’s traditional courtroom tone. A motion filed in federal court argues that the National Trust for Historic Preservation, which brought the case, has no […]

A hardcoded API key embedded in ClickUp’s public website exposed 959 corporate and government email addresses and more than 3,000 internal feature flags for over a year, intensifying scrutiny of security controls at widely used software-as-a-service platforms. The exposure was tied to a production JavaScript bundle that loaded before authentication, allowing anyone inspecting the page source to extract a third-party SDK token and send an unauthenticated request […]

Vect 2.0 has emerged as a fast-evolving ransomware-as-a-service operation capable of striking Windows, Linux and VMware ESXi systems, raising concern among security teams responsible for hybrid corporate networks and virtualised infrastructure. The group’s latest tooling marks a shift from single-platform extortion campaigns towards attacks designed to spread across workstations, servers and hypervisors. That matters because ESXi environments often host multiple virtual machines on a single physical server, […]

BlueNoroff has intensified its campaign against cryptocurrency executives by combining fake Zoom meetings, AI-generated video lures and fileless PowerShell malware in an intrusion that gave attackers access to a North American Web3 company for 66 days. The operation, first detected after an intrusion began on 23 January 2026, marks a sharper turn in North Korea-linked cyber activity against digital asset businesses. Instead of relying on crude phishing […]

Rival ransomware crews 0APT and KryBit have disrupted each other’s operations after leaking internal data, exposing an unusual cybercriminal feud that has given defenders a rare view into the infrastructure, tactics and credibility gaps behind emerging extortion groups. The confrontation began on 13 April 2026, when 0APT listed KryBit, Everest and RansomHouse as victims on its leak site. KryBit responded a day later by breaching 0APT’s infrastructure, […]

North Korean state-linked hackers have intensified attacks on cryptocurrency companies by combining fake video meetings, AI-generated identities and “ClickFix” infection tactics to compromise executives, founders and staff with access to wallets, exchanges and investment infrastructure. A large spear-phishing operation attributed with high confidence to BlueNoroff, the financially motivated arm of the Lazarus Group, targeted a North American Web3 company through a manipulated calendar invitation that led to […]

VISHNU RAJA
RYO YAMADA
HITORI GOTOH
IKUYO KITA