Google has moved to harden Chrome against one of cybercrime’s most effective tactics by making Device Bound Session Credentials publicly available for Windows users in Chrome 146, a step designed to stop attackers reusing stolen session cookies to enter accounts without passwords or multi-factor authentication. The change binds a signed-in web session to the user’s device, meaning a cookie lifted by malware should quickly become unusable on […]
Millions of Android users, including a large share of cryptocurrency wallet customers, were exposed to a software supply-chain weakness after a flaw in the widely used EngageSDK library was found to allow hostile apps on the same device to break through normal app boundaries and reach sensitive data. The issue centred on an “intent redirection” vulnerability inside the third-party Android kit, which is used for push notifications […]
Commercial artificial intelligence tools were used as operational components in a cyber campaign that hit nine Mexican government organisations, according to a full technical report published by Gambit Security, which said the intrusion ran from late December 2025 to mid-February 2026 and exposed hundreds of millions of citizen records. The report says Anthropic’s Claude Code generated about three-quarters of the remote command activity, while OpenAI’s GPT-4.1 was […]
Three ransomware operations — Qilin, Akira and DragonForce — were behind 40% of the 672 attacks logged worldwide in March, according to Check Point Research, highlighting how a criminal market that still looks fragmented on the surface is being pulled by a smaller group of high-output players. Check Point said Qilin accounted for 20% of published attacks, Akira 12% and DragonForce 8%, while 47 separate groups were […]
Arabian Post Staff -Dubai Saudi Arabia has moved to raise its profile in global data governance after the Saudi Data and Artificial Intelligence Authority, known as SDAIA, said it had joined the Global Privacy Assembly, a forum that links privacy and data protection authorities worldwide. The step puts the Kingdom’s privacy regime more visibly alongside international rule-setting efforts at a time when Riyadh is pushing digital government, […]
Agentic AI is moving from pilot projects into mainstream corporate workflows, forcing boards and security teams to treat these systems less like software features and more like outside operators with broad access to data, tools and decisions. What changes the risk profile is not only the model itself, but the autonomy layered around it: agents can plan tasks, call other applications, handle credentials and act across systems […]
A Microsoft-tracked cybercrime group is using adversary-in-the-middle techniques to hijack Microsoft 365 sessions, bypass multifactor authentication and reroute employee pay into attacker-controlled bank accounts, in what researchers describe as a geographically focused campaign against users in Canada. Microsoft said the actor, tracked as Storm-2755, combined search-result poisoning, fake sign-in pages and session replay to move from account takeover to payroll fraud, causing direct financial loss for at […]
Circle Internet Group shares slid nearly 10 per cent on Thursday, closing at $85.10, after a fresh Wall Street “sell” call added to investor unease over the stablecoin issuer’s margins and over criticism of its handling of funds tied to the Drift Protocol exploit. Market data showed the stock ended the session down 9.89 per cent, extending a volatile stretch for one of crypto’s most closely watched […]
Bitcoin Depot, one of the biggest operators in the crypto ATM business, has disclosed that hackers stole about 50.903 Bitcoin, valued at roughly $3.665 million, after gaining access to parts of its internal technology systems and taking control of credentials linked to its digital asset settlement accounts. The Atlanta-based company said the intrusion was discovered on March 23 and later judged material on April 6, before being […]
Iran-affiliated cyber actors are targeting internet-facing industrial control equipment used by parts of the United States’ critical infrastructure, with federal agencies warning that the campaign has already caused operational disruption and financial loss in some cases. The alert, published on April 7, said the activity was focused on operational technology devices, including programmable logic controllers, or PLCs, made by Rockwell Automation’s Allen-Bradley line. The warning matters because […]
Hackers are exploiting internet-exposed ComfyUI servers in a monetisation campaign that turns poorly secured AI image-generation systems into cryptocurrency mining machines and proxy infrastructure, according to multiple security findings published this week. Researchers say more than 1,000 exposed ComfyUI instances remain reachable online after honeypots are filtered out, giving attackers a narrow but valuable pool of GPU-equipped targets spread across cloud environments. The activity centres on unauthenticated […]
Russian military-linked hackers have hijacked vulnerable internet routers to steal passwords, authentication tokens and other sensitive data, according to a new warning from the UK’s National Cyber Security Centre, which said the activity was tied to APT28, a group long associated with Moscow’s GRU military intelligence unit 26165. British officials said the campaign worked by altering router settings so internet traffic could be redirected through malicious Domain […]
Anthropic’s Claude Code has come under fresh scrutiny after researchers disclosed a flaw that can neutralise user-set deny rules when a shell command is padded with a long chain of harmless subcommands, raising concerns that a safety feature marketed as a hard stop may fail in exactly the kind of hostile conditions it is meant to resist. The issue centres on Claude Code’s permission system, which lets […]
By Nantoo Banerjee The Reserve Bank of India and the government may officially deny or even pretend to ignore the adverse impact of the continuous downhill journey of the Indian Rupee against the US Dollar on the economy, the disturbing trend, if not contained, is bound to lead the heavily import-reliant nation to high inflation […]
The article Indian Rupee’s Continuous Downtrend Is A Big Concern appeared first on Latest India news, analysis and reports on Newspack by India Press Agency).
Drift Protocol has said the theft of about $270 million to $286 million from its platform was the result of a six-month operation by North Korea-linked actors who built trust slowly, posed as a legitimate trading firm and used face-to-face meetings, capital deposits and carefully timed social engineering to prepare the strike. The Solana-based exchange’s account adds a new layer to an attack that security researchers had […]
Artificial intelligence is lowering the cost of cyberattacks across the digital-asset industry and forcing crypto firms to rethink how they protect users, wallets and transaction systems, according to Ledger chief technology officer Charles Guillemet, whose warning lands as the sector grapples with a fresh cycle of major breaches and more sophisticated fraud. Guillemet said AI is making hacks “cheaper and faster”, amplifying a security problem that has […]
Attackers behind the compromise of the widely used Axios package have widened their campaign, turning from code repositories to the people who maintain them and exposing how a single deceptive approach can threaten vast stretches of the software supply chain. Security researchers and the Axios maintainer’s own post-mortem show the March 31 breach was not an isolated package hijack but part of a co-ordinated social-engineering operation aimed […]
du said its National Hypercloud has received certification and endorsement from the UAE Cybersecurity Council, a step the company described as making it the first compliant, secure and sovereign cloud infrastructure approved for deployment across both public and private sectors in the UAE. The announcement places the telecom group at the centre of a fast-moving contest over where sensitive data is stored, who controls the infrastructure, and […]
A newly disclosed exploit chain in Progress ShareFile has raised fresh concern over the security of enterprise file-transfer systems after researchers showed that two critical flaws can be combined to seize control of vulnerable customer-managed servers without prior authentication. The vulnerabilities, tracked as CVE-2026-2699 and CVE-2026-2701, affect ShareFile Storage Zones Controller, the on-premises component used by organisations that keep files in their own infrastructure while relying on […]
An Iran-linked hacking group has claimed it breached PSK Wind Technologies, an Israeli defence supplier that says it develops command-and-control shelters, communications systems and other integrated solutions for defence and homeland security customers. Material circulated online on 2 April was presented by the group, Handala, as proof of a deep intrusion into a company tied to sensitive military infrastructure. Independent verification of the full scope of the […]
Arabian Post’s website was dealing with disruption on Thursday after website security provider Sucuri disclosed an unresolved incident affecting its Paris region and said it was mitigating the impact of a distributed denial-of-service attack, a form of assault designed to overwhelm servers with traffic and degrade access for readers. On its public status page, Sucuri first marked the incident as “Investigating” at 08:19 UTC on 2 April, […]
Almost eight in 10 UK manufacturers suffered at least one serious cyber incident over the past 12 months, according to new ESET-commissioned research, adding fresh evidence that digital disruption is now a mainstream operational risk for one of Britain’s most exposed industrial sectors. The findings indicate that 78% of manufacturers were hit, while 53% said attacks led to lost revenue, underscoring how cyber breaches are moving from […]
Drift, one of Solana’s larger decentralised finance trading platforms, said it was facing an “active attack” on April 1 and moved to suspend deposits and withdrawals as hundreds of millions of dollars appeared to leave the protocol, deepening concern over operational security risks in crypto markets. The platform told users not to deposit funds and said it was working with security firms, bridges and exchanges to contain […]
A compromise of the widely used Axios software package has triggered fresh concern over open-source security after attackers used a hijacked maintainer account to publish poisoned versions carrying remote access trojan malware for Windows, macOS and Linux systems. Security researchers said the malicious releases were pushed to npm on March 31 and removed within hours, but warned that any machine or build pipeline that installed them during […]
