News related to
credentials

Malicious agent-skill uploads have slipped past detection tools used by ClawHub, Cisco and Vercel-linked scanning services, raising fresh concern over the security of fast-growing marketplaces that distribute third-party capabilities for AI agents. The findings point to a widening supply-chain problem around “skills”, the modular instruction-and-file packages that allow AI agents to perform tasks such as editing documents, running scripts, managing workflows or connecting with external services. Unlike […]

Blockchain users searching for simpler wallet identities have pushed. bit into the wider debate over decentralised naming, digital ownership and cross-chain authentication, as Web3 developers look for alternatives to long alphanumeric addresses that remain difficult for mainstream users to manage.. bit is commonly called a “domain”, but its developers describe it more precisely as a decentralised identity and account system rather than a conventional internet domain. Unlike […]

Arabian Post Staff -Dubai UiPath has secured certification from the Dubai Electronic Security Center for its Automation Cloud Commercial UAE region, clearing a key compliance hurdle for wider deployment of its automation and artificial intelligence services across Dubai’s government, semi-government and regulated enterprise sectors. The certification places UiPath’s UAE cloud operations under the DESC Cloud Service Provider Security Standard, a framework required for cloud providers serving Dubai […]

Cybercriminal groups are shifting phishing campaigns from fake login pages to malware-led intrusions that silently extract passwords, browser cookies, session tokens, cryptocurrency wallet data and other sensitive information from infected devices. The change marks a significant turn in online fraud tactics. Classic phishing pages still imitate banks, cloud services, delivery firms and workplace platforms, but attackers are increasingly using emails, search ads, fake software installers, messaging apps […]

Cyber espionage operators are using a newly documented Windows backdoor called HazyBeacon to target government networks in Southeast Asia, turning legitimate Amazon Web Services infrastructure into a covert command-and-control channel that can blend into ordinary cloud traffic. The activity, tracked as CL-STA-1020, has been linked to intelligence-gathering operations focused on sensitive state information, including material tied to tariffs, trade disputes and government policy discussions. Security researchers have […]

Security researchers have warned that a Windows Search URI handler weakness can leak NTLMv2 hashes to remote attackers through a crafted link, reviving concerns over long-running authentication risks in enterprise networks. The issue affects the search: handler used by Windows Explorer to process desktop search requests. A malicious link can direct the handler towards an attacker-controlled network path, causing the victim’s system to attempt authentication over SMB […]

Attackers have compromised Red Hat’s official @redhat-cloud-services namespace on npm, inserting credential-stealing malware into dozens of package releases used in cloud console development and software build pipelines. The breach, identified on 1 June 2026, affected at least 32 package releases across the Red Hat Cloud Services ecosystem, including frontend components, generated API clients and supporting developer tooling linked to the Red Hat Hybrid Cloud Console. The malicious […]

Advertisements

Anthropic is expanding access to Claude Mythos Preview through Project Glasswing, widening a controlled cybersecurity programme at a time when North Korean-linked hackers are sharpening attacks against macOS users in the financial, venture capital, Web3 and cryptocurrency sectors. The San Francisco-based AI company plans to increase the number of Project Glasswing partners from about 50 to roughly 200 organisations across more than 15 countries, broadening access to […]

Hackers have used 34 malicious open-source packages across npm, PyPI and Crates. io to steal cloud credentials, crypto wallet data, SSH keys and developer secrets, exposing a widening security gap in software supply chains used by blockchain, artificial intelligence and cloud engineering teams. The campaign, tracked as TrapDoor, spans more than 384 package versions and artefacts. It targets developers working in cryptocurrency, DeFi, Solana, Sui, Move, AI […]

A critical weakness in Flowise has exposed self-hosted AI workflow servers to full compromise, after technical details and working exploit code showed that a logged-in user could trigger command execution by importing a crafted chatflow. The flaw, tracked as CVE-2026-40933, affects Flowise deployments before version 3.1.0 and carries a 9.9 severity score. It stems from the way Flowise handles Model Context Protocol, or MCP, configurations in its […]

Palo Alto Networks customers are facing renewed pressure to patch internet-facing security systems after attackers began exploiting a high-severity authentication bypass flaw in PAN-OS GlobalProtect, a product widely used to provide remote access to corporate networks. The vulnerability, tracked as CVE-2026-0257, affects GlobalProtect portal and gateway deployments in PAN-OS where authentication override cookies are enabled alongside a specific certificate configuration. Successful exploitation can allow a remote attacker […]

SolyxImmortal, a Python-based information-stealing malware, is drawing attention from cyber defenders because of its ability to combine browser credential theft, document harvesting, keystroke logging and screen surveillance inside a single Windows implant. Technical analysis shows the malware is designed to operate quietly on compromised machines, using common Python libraries, Windows features and multi-threaded execution to run several data-collection functions at the same time. Its targets include saved […]

Cybercriminals are exploiting trust in artificial intelligence platforms by abusing shared ChatGPT and Claude content links to steer users towards malware disguised as legitimate OpenAI software. The campaign, tracked by security researchers as LLMShare, uses malicious search advertisements and search-engine manipulation to lure victims to pages that appear to be hosted on trusted AI domains. Once users click through, they are shown a fully designed web page […]

A destructive cyber campaign tied to Iran-linked operators has targeted organisations in the Middle East and abroad, deleting virtual machines, databases, partitions and backup repositories in attacks designed to cripple recovery as well as disrupt daily operations. The activity has been linked by forensic investigators to infrastructure and tactics associated with Black Shadow, a long-running threat group assessed by Israeli authorities and private researchers as operating on […]

Odisha has secured a proposed $3.3 billion semiconductor substrate project involving Intel Corporation and 3D Glass Solutions Inc., marking one of the largest high-technology manufacturing commitments tied to India’s chipmaking ambitions.

The memorandum of understanding, signed by the Government of Odisha, Intel and 3DGS, covers an advanced packaging glass-core substrate manufacturing facility in the Bhubaneswar-Khurda region. The project is expected to focus on substrates used in next-generation chip packaging, a part of the semiconductor supply chain that has gained strategic importance as artificial intelligence, high-performance computing and advanced data-centre processors demand larger, faster and more power-efficient packages.

The agreement places Odisha in a stronger position within India’s semiconductor map, which has so far been led by assembly, testing, marking and packaging projects, outsourced semiconductor assembly facilities, compound semiconductor proposals and early-stage fabrication investments. The planned plant would add a specialised layer to that ecosystem by targeting glass-core substrates and high-density interconnect technologies, areas that are increasingly viewed as critical for advanced packaging.

Intel’s role is expected to centre on technology know-how, process expertise and ecosystem support, while 3DGS brings specialisation in glass-based integration platforms. 3DGS, a US-based company, has developed glass-centric technologies for radio-frequency, photonics and semiconductor packaging applications. Its involvement gives the Odisha plan a sharper focus than conventional electronics manufacturing projects, as glass-core substrates remain an emerging technology rather than a mature commodity segment.

Glass substrates are attracting industry attention because conventional organic substrates face physical limits as chip packages become larger and denser. Advanced processors now often combine multiple chiplets, memory stacks and interconnect layers in one package. That increases pressure on the base material to carry more power and data connections while reducing warpage, signal loss and thermal stress. Glass offers better dimensional stability, finer interconnect potential and the ability to support larger package sizes, though yield, tooling and commercial-scale production remain challenges.

Intel has publicly positioned glass substrates as a key packaging technology for the second half of this decade. The company has argued that glass could help extend system-level performance gains beyond the limits of transistor scaling, particularly for artificial intelligence accelerators and high-performance computing chips. For India, participation in this segment could move the country beyond back-end assembly into a more advanced part of the global chip supply chain.

The Odisha project is also politically significant. The signing was witnessed by Union electronics and information technology minister Ashwini Vaishnaw and Odisha chief minister Mohan Charan Majhi, alongside senior executives from Intel and 3DGS. The state has been pushing to attract electronics, data centre and semiconductor-linked investments as part of a broader industrial strategy aimed at diversifying beyond metals, mining and ports.

The proposed facility is expected to be developed over several years, with industry estimates placing the build-out period at five to six years. Employment projections point to high-skilled roles across engineering, materials science, process control, quality systems and equipment maintenance, while indirect jobs could emerge through chemicals, gases, logistics, clean-room services and precision component suppliers.

The investment comes as India seeks to reduce dependence on overseas semiconductor supply chains after pandemic-era shortages exposed vulnerabilities in electronics, automotive and defence manufacturing. The Union government’s semiconductor programme has already backed projects by Tata Electronics, Micron Technology, CG Power and Kaynes, while several states are competing to attract design, packaging and manufacturing facilities. Gujarat and Assam have emerged as early beneficiaries, while Odisha’s Intel-3DGS agreement signals a broader geographic spread of the chip ecosystem.

For Intel, the deal fits into a wider effort to strengthen its foundry and advanced packaging credentials at a time when the global chip industry is being reshaped by artificial intelligence demand. The company has been investing in packaging platforms such as EMIB and Foveros, while also promoting glass substrates as a future enabling technology. Its broader turnaround remains under scrutiny because of competitive pressure from Nvidia, AMD, TSMC and Samsung, but advanced packaging offers a route to relevance in custom accelerators and multi-die systems.

The project will still have to pass execution tests before it becomes a production anchor. Semiconductor substrate manufacturing requires tight process control, specialised equipment, stable utilities, skilled technical labour and reliable supply of materials. Glass-core technology also needs commercial validation at scale, as the industry has not yet shifted from established organic substrate supply chains in volume applications.

A malicious NuGet package posing as a Sicoob software development kit has exposed sensitive banking authentication data, intensifying concerns over attacks that exploit trust in open-source developer ecosystems. The package, published as Sicoob. Sdk, was presented as a C# SDK for integrations with Sicoob, one of Brazil’s largest cooperative financial systems. Versions 2.0.0 to 2.0.4 were found to collect client IDs, PFX passwords and base64-encoded PFX certificate […]

Trusted software development tools have become a prime attack channel as adversaries target the systems that programmers use to build, test and deploy code, exposing companies to stolen credentials, leaked source code and compromised software pipelines. The warning has sharpened after multiple campaigns hit developer ecosystems during May, including a poisoned Visual Studio Code extension linked to Nx Console and a large-scale GitHub Actions operation known as […]

Google has made Device Bound Session Credentials generally available in Chrome for Windows, widening access to a security feature designed to blunt one of the most common routes into compromised online accounts: stolen session cookies. The move gives Chrome users and organisations a stronger layer of protection after login, where many account takeovers now occur even when passwords and multi-factor authentication have already been passed. DBSC links […]

Cybercriminals are shifting from crude misspellings of trusted software packages to more convincing names that appear to belong inside legitimate developer ecosystems, raising fresh concern across open-source security teams and enterprise software supply chains. The change marks a significant evolution in package impersonation attacks. Rather than relying only on a developer mistyping a package name, malicious publishers are creating packages that look like natural extensions, plugins, configuration […]

Carnival Corporation has begun notifying nearly 6 million people after a cyber intrusion exposed personal information, intensifying scrutiny of data protection practices at one of the world’s largest cruise operators. The Miami-based company said unauthorised activity was detected on April 14 after an attacker used social engineering to deceive an employee and gain access to a limited part of its IT environment. Regulatory filings show 5,995,277 people […]

Arabian Post Staff -Dubai ADNEC Centre Abu Dhabi has won five global titles at Eventex 2026, strengthening Abu Dhabi’s standing as a major international hub for exhibitions, conferences, sporting events and large-scale gatherings. The flagship venue of ADNEC Group, now part of Modon, secured the titles of World’s Best Sustainable Venue, World’s Best Convention Centre, World’s Best Exhibition Venue, World’s Best Sports Venue and World’s Best Wedding […]

Cryptocurrency developers have become the focus of a new macOS-focused cyber campaign that uses fake recruiter approaches, malicious meeting links and compromised software pipelines to steal digital assets and spread malware through trusted internal systems. The activity is being tracked as JINX-0164, a previously unreported financially motivated threat actor active since at least mid-2025. Investigators found that the group has targeted cryptocurrency organisations by approaching developers and […]

Cybercriminals behind the ClearFake campaign have shifted deeper into blockchain-based command infrastructure, using BNB Smart Chain testnet contracts to deliver malicious code and frustrate conventional takedown efforts. The campaign marks an escalation in the abuse of decentralised infrastructure for malware operations. Instead of relying on domains, hosting providers or disposable servers that can be suspended, the operators are storing payload logic and routing instructions inside smart contracts […]

Roundcube Webmail administrators are being pressed to install emergency updates after maintainers fixed a set of security flaws that could expose email systems to database manipulation, script injection, server-side request forgery and other attacks. Versions 1.6.16 and 1.7.1, released on 24 May 2026, address vulnerabilities affecting the 1.6 long-term support line and the 1.7 branch. The most closely watched issue is a pre-authentication SQL injection flaw in […]

VISHNU RAJA
RYO YAMADA
HITORI GOTOH
IKUYO KITA