News related to
attacks

MioLab malware escalates macOS security threat

Cybersecurity researchers are tracking an expansion of the MioLab infostealer targeting macOS systems, signalling a shift in cybercrime operations towards Apple devices as their adoption widens across corporate and consumer environments. The malware, also known in underground circles as Nova, is being marketed as a Malware-as-a-Service offering, allowing threat actors with limited technical expertise to deploy sophisticated attacks against macOS users. Analysts describe MioLab as a modular […]

API attacks surge sharply across global enterprises

Organisations faced a steep escalation in cyber threats targeting application programming interfaces, with average daily API attacks per enterprise climbing to 258 in 2025, marking a 113% increase from 121 the previous year, according to industry cybersecurity assessments tracking enterprise network activity. The data underscores a widening attack surface as businesses deepen reliance on APIs to connect cloud services, mobile applications and third-party platforms. Analysts say the […]

UAE gas hub resumes after attack disruption

Arabian Post Staff -Dubai Operations at a major natural gas processing facility in Abu Dhabi have resumed following a disruption that forced a temporary halt to supplies critical for domestic energy needs, while much of the country’s liquefied natural gas output remains curtailed. The plant, regarded as one of the largest gas processing hubs in the United Arab Emirates, plays a central role in supplying fuel for […]

UAE flags cyber risks from home working

Remote working has emerged as a key vulnerability in the UAE’s digital landscape, prompting authorities to warn of a sharp rise in cyber attacks targeting individuals operating outside traditional office networks. The UAE Cyber Security Council has called on employees working from home to act as the “first line of defence”, stressing that human error and weak personal security practices are increasingly being exploited by cybercriminals. Officials […]

VoidStealer bypass targets Chrome encryption safeguards

A new strain of the malware-as-a-service infostealer known as VoidStealer has introduced a technique that allows attackers to extract sensitive data from Google Chrome without relying on privilege escalation or code injection, marking a shift in how browser security defences are being bypassed. Security researchers tracking the campaign say the updated variant leverages a debugger-based method to defeat Chrome’s Application-Bound Encryption, a protection designed to secure stored […]

CanisterWorm exploits npm accounts at scale

A coordinated supply chain attack targeting the Node Package Manager ecosystem has exposed a new level of automation and persistence, with threat actors hijacking trusted publisher accounts to distribute malicious code across widely used software libraries. Security researchers tracking the campaign, known as “CanisterWorm,” say it relies on stolen access tokens and compromised namespaces to infiltrate development pipelines without immediate detection. The campaign has been linked to […]

Singapore cybersecurity firms showcase SME-focused innovations to counter rising cyber threats at RSAC 2026 Conference

Iran strikes escalate as Israel faces mounting damage

Escalating missile exchanges between Iran and Israel have entered a more intense phase, with sustained barrages causing injuries, infrastructure damage and widespread disruption across multiple regions. Authorities in Israel reported dozens wounded after waves of projectiles struck urban centres, marking a sharp rise in the scale and frequency of attacks as the confrontation stretches into its fourth week. Air raid sirens sounded across major cities, including Tel […]

Saudi move deepens Iran rupture

Saudi Arabia ordered Iran’s military attaché, his assistant and three other embassy staff to leave the kingdom within 24 hours after declaring them persona non grata, marking one of Riyadh’s sharpest diplomatic steps since the current regional war began. The Saudi foreign ministry said the expulsions were tied to what it called continued Iranian attacks on Saudi territory, after waves of missiles and drones were launched at […]

Langflow flaw exploited within hours of discovery

Hackers leveraged a critical vulnerability in the open-source AI workflow platform Langflow within hours of its disclosure, underscoring a sharp acceleration in cyberattack timelines and raising fresh concerns over the security of rapidly adopted artificial intelligence tools. Security researchers reported that attackers moved to exploit the flaw roughly 20 hours after public details emerged, highlighting how threat actors are monitoring disclosures in real time and deploying automated […]

Tehran offers Tokyo a Hormuz passage

Iran has signalled that Japanese-linked vessels could be allowed through the Strait of Hormuz, opening a narrow diplomatic channel for one of Asia’s biggest energy importers as the waterway remains severely disrupted by the war involving Iran, the United States and Israel. Kyodo reported on Saturday that Foreign Minister Abbas Araghchi said Tehran was prepared to support the transit of Japan-related ships after consultations between officials from […]

Mobile malware wave hits banking ecosystem

A sharp escalation in mobile banking malware attacks targeting more than 1,200 financial brands across 90 countries is altering the global fraud landscape, with security experts warning that user devices have become the primary entry point for cybercriminals. Industry researchers tracking digital fraud patterns say the scale and sophistication of mobile-focused threats have expanded markedly, reflecting a shift away from traditional server-side breaches towards attacks that exploit […]

Cloud resilience gaps expose security blind spots

Cybersecurity strategies built around prevention are facing renewed scrutiny as organisations grapple with a wave of disruptive attacks targeting cloud infrastructure, exposing weaknesses in how resilience is designed and implemented. Security analysts and industry leaders say the shift to cloud computing has outpaced the evolution of defensive frameworks, leaving many enterprises vulnerable not because they lack protection tools, but because they underestimate the importance of operational continuity […]

Another Global Economic Meltdown Seems Real As War Spreads To World’s Largest Gas Field

Ubuntu flaw exposes systems to root takeover

A security weakness in Ubuntu Desktop 24.04 and later versions has raised fresh concerns over the resilience of widely used Linux environments, after researchers confirmed that local attackers can exploit the flaw to gain full administrative control. The vulnerability, described as a local privilege escalation issue, allows a user with limited access to elevate permissions and execute commands as the root user, effectively compromising the entire system. […]

Global crackdown dismantles massive IoT botnet network

  Authorities across multiple jurisdictions have dismantled a vast network of compromised Internet of Things devices linked to some of the largest distributed denial-of-service attacks ever recorded, with traffic surges reaching an estimated 30 terabits per second. The coordinated operation targeted command-and-control infrastructure that enabled four separate botnets to orchestrate high-volume cyber assaults on critical digital services worldwide. Investigators said the infrastructure had been used to overwhelm […]

Navia breach exposes data of 2.7 million

Navia Benefit Solutions has disclosed a large-scale data breach affecting nearly 2.7 million individuals, raising concerns over the security of sensitive employee benefits data held by third-party administrators across the United States. The company, which manages health savings accounts and other workplace benefit programmes for more than 10,000 employers, said unauthorised actors gained access to parts of its systems, exposing a broad range of personal and health-related […]

UAE condemns intercepted strikes on energy sites

Air defence systems in Abu Dhabi intercepted attempted strikes targeting key energy infrastructure, prompting a sharp condemnation from authorities who described the incident as a serious escalation and a breach of international law. The Ministry of Foreign Affairs confirmed that no casualties were reported after the attempted attacks on the Habshan gas facility and the Bab field, both central to the country’s hydrocarbon production network. Officials said […]

Cisco firewall flaw fuels covert ransomware campaign

A zero-day vulnerability in widely deployed Cisco firewall systems has been exploited for months by a ransomware group, with security teams warning that the breach highlights deep gaps in enterprise network defences and patch management practices. Analysis by Amazon Web Services’ security leadership indicates that attackers began abusing the flaw as early as January, gaining unauthorised access to targeted environments before the vulnerability became publicly known. The […]

Decoding China-U.S. Relations Amidst Trump-Netanyahu’s War Against Iran

Hormuz blockade fears deepen among western navies

Europe’s leading naval powers have concluded that reopening the Strait of Hormuz to commercial shipping is unlikely while hostilities involving Iran persist, underscoring mounting risks to global energy flows and maritime security in one of the world’s most critical chokepoints. Military planners across allied countries indicate that even a limited conflict scenario would render the narrow waterway effectively inaccessible for sustained civilian navigation, given the high probability […]

Pyronut malware targets Telegram bot developers

A malicious Python package masquerading as a legitimate Telegram development tool has been identified as a vehicle for remote code execution attacks, raising concerns about supply chain security within open-source ecosystems. Cybersecurity researchers have flagged a package named “pyronut” that was uploaded to the Python Package Index, presenting itself as a functional alternative to Pyrogram, a widely used Telegram MTProto API framework relied upon by developers to […]

Horabot resurfaces in Mexico phishing wave

A banking malware strain known as Horabot has re-emerged in Mexico with a more sophisticated infection chain, combining phishing emails, deceptive CAPTCHA prompts and automated email propagation techniques to compromise victims and harvest financial data. Cybersecurity analysts tracking the campaign say the latest iteration marks a significant evolution in both delivery and persistence. The malware is being distributed through carefully crafted phishing emails that appear to originate […]

ShieldGuard crypto scam exposed after malware probe

A coordinated cybercrime operation built around a fraudulent cryptocurrency tool branded “ShieldGuard” has been dismantled after investigators confirmed it functioned as a malicious browser extension harvesting user credentials and digital assets. Security researchers say the campaign had been active across multiple platforms, targeting retail crypto investors through deceptive online promotions and fake security assurances. The extension, presented as a protective utility for safeguarding cryptocurrency wallets, was distributed […]