News related to
credentials

Palo Alto Networks has issued a high-priority security update for a flaw in its Cortex XSOAR and Cortex XSIAM platforms that could allow an unauthenticated attacker to access and alter protected resources through the Microsoft Teams integration, adding fresh pressure on security teams to review third-party connectors that sit inside core incident response systems. The vulnerability, tracked as CVE-2026-0234, was published on April 8 and affects Microsoft […]

Russian military-linked hackers have hijacked vulnerable internet routers to steal passwords, authentication tokens and other sensitive data, according to a new warning from the UK’s National Cyber Security Centre, which said the activity was tied to APT28, a group long associated with Moscow’s GRU military intelligence unit 26165. British officials said the campaign worked by altering router settings so internet traffic could be redirected through malicious Domain […]

  Microsoft has warned that a threat actor it tracks as Storm-1175 is exploiting vulnerabilities in internet-facing systems at high speed to deliver Medusa ransomware, in some cases moving from initial access to data theft and encryption within 24 hours. The alert points to a pattern that security teams have feared for months: a shrinking window between vulnerability disclosure, exploitation and full-scale ransomware deployment. The group, described […]

Iran-linked hackers mounted a coordinated password-spraying operation against Microsoft 365 tenants across the Middle East in March, with Israel and the United Arab Emirates emerging as the main targets in a campaign that cyber researchers say shows how regional conflict is increasingly being mirrored in the cloud. Check Point Research said the activity came in three waves on March 3, March 13 and March 23, hitting more […]

Security leaders are being told to treat “vibe coding” as a governance issue, not merely a productivity trend, as AI assistants move deeper into software development and expose organisations to flaws ranging from insecure dependencies to credential leakage and command injection. Guidance from standards bodies and security groups now points towards a simple principle: code produced with AI should be handled as untrusted until it has passed […]

A Python package presented as a privacy-first shortcut to AI models has been unmasked as a supply-chain threat that quietly captures user prompts, leans on a private university service without authorisation and repurposes proprietary Claude material to make the deception look convincing. Security researchers said the package, hermes-px, was uploaded to PyPI as a supposed “Secure AI Inference Proxy” offering OpenAI-compatible access over Tor and claiming users […]

Anthropic’s Claude Code has come under fresh scrutiny after researchers disclosed a flaw that can neutralise user-set deny rules when a shell command is padded with a long chain of harmless subcommands, raising concerns that a safety feature marketed as a hard stop may fail in exactly the kind of hostile conditions it is meant to resist. The issue centres on Claude Code’s permission system, which lets […]

Advertisements

Attackers behind the compromise of the widely used Axios package have widened their campaign, turning from code repositories to the people who maintain them and exposing how a single deceptive approach can threaten vast stretches of the software supply chain. Security researchers and the Axios maintainer’s own post-mortem show the March 31 breach was not an isolated package hijack but part of a co-ordinated social-engineering operation aimed […]

Arabian Post Staff -Dubai Dubai and Abu Dhabi have retained places among the world’s leading smart cities in the latest IMD Smart City Index, underscoring how the two emirates have turned digital infrastructure, public services and urban planning into a defining part of their global profile. The 2026 index placed Dubai sixth and Abu Dhabi tenth out of 148 cities, while the 2025 edition had ranked them […]

3Commas has launched QuantPilot, a new AI-driven crypto trading platform aimed at giving retail traders access to tools more commonly associated with quantitative desks, as competition intensifies among trading software providers seeking to simplify strategy design, market research and execution. The company said the product is now in early access, with a public waiting list open through quantpilot. com, and positioned it as a no-code system that […]

A newly disclosed exploit chain in Progress ShareFile has raised fresh concern over the security of enterprise file-transfer systems after researchers showed that two critical flaws can be combined to seize control of vulnerable customer-managed servers without prior authentication. The vulnerabilities, tracked as CVE-2026-2699 and CVE-2026-2701, affect ShareFile Storage Zones Controller, the on-premises component used by organisations that keep files in their own infrastructure while relying on […]

Security researchers at Varonis have identified a new infostealer dubbed Storm that appears to mark a more polished phase in credential theft, using server-side decryption to extract browser passwords, session cookies, crypto-wallet data and other sensitive material while avoiding many of the on-device traces that endpoint tools have grown used to flagging. The malware was observed on underground forums in early 2026 and is being sold as […]

A compromise of the widely used Axios software package has triggered fresh concern over open-source security after attackers used a hijacked maintainer account to publish poisoned versions carrying remote access trojan malware for Windows, macOS and Linux systems. Security researchers said the malicious releases were pushed to npm on March 31 and removed within hours, but warned that any machine or build pipeline that installed them during […]

A supply-chain attack on the widely used Axios JavaScript library has raised fresh concern over the fragility of open-source software distribution after attackers slipped malicious code into two versions of the package and exposed Windows, macOS and Linux systems to remote compromise. Security researchers and Google’s threat intelligence team said poisoned Axios releases 1.14.1 and 0.30.4 were pushed to npm during a narrow window on March 31, […]

Anthropic has acknowledged that an internal release mistake exposed part of the source code behind Claude Code, its AI coding assistant, in an incident that has sharpened scrutiny of the startup’s internal controls at a time when it is selling safety, reliability and enterprise trust as core parts of its pitch. The company said the exposure was caused by a packaging error linked to human mistake rather […]

Security teams are scrambling after two malicious releases of the Telnyx Python SDK were uploaded to PyPI on March 27, turning a widely used developer tool into a credential-stealing backdoor that could execute as soon as the library was imported. The compromised versions, 4.87.1 and 4.87.2, were published at 03:51 UTC and quarantined by 10:13 UTC, leaving a window of a little over six hours in which […]

Apple has added a new safeguard in macOS Tahoe 26.4 that warns users before potentially dangerous text is pasted into Terminal, a move aimed at disrupting ClickFix-style scams that trick people into infecting their own devices. The feature appears in the latest macOS release even though Apple’s public feature summary for version 26.4 does not spell it out directly, while the company’s broader security pages confirm 26.4 […]

Hackers are weaponising trusted Windows administration tools and signed but vulnerable drivers to switch off antivirus and endpoint detection systems before launching ransomware, a tactic that is making intrusions quieter, faster and more difficult for defenders to stop. Security researchers and government-backed advisories say attackers are increasingly avoiding noisy custom malware in the opening stages of an attack, instead leaning on built-in utilities, service controls, scripts and […]

Google has moved a set of anti-ransomware tools for Drive from beta into full global release, adding a stronger layer of detection and bulk file restoration for organisations using Drive for desktop. The rollout, announced on 31 March, turns ransomware detection on by default for Workspace users, sends alerts to administrators when suspicious encryption activity is detected, and enables file restoration by default to help recover from […]

Digital Realty has begun providing colocation infrastructure to Samsung Electronics at its ICN10 facility in Seoul, a deal that highlights how large corporate users in South Korea are seeking more resilient, high-density digital infrastructure as artificial intelligence, cloud services and mission-critical enterprise workloads put heavier demands on power, cooling and connectivity. The announcement was made on March 25 by Digital Realty, which said the arrangement would support Samsung Electronics’ enterprise IT operations from its Seoul site.

The ICN10 facility, located in Sangam-dong in Mapo-gu, has been operating since 2022 and is described by the company as South Korea’s first carrier-neutral data centre. Digital Realty says the building has a maximum IT load of 12 megawatts and around 132,000 square feet of space, with high-density power architecture, network connectivity and the resilience needed for large-scale computing environments. Those specifications matter because enterprise clients are no longer looking only for secure rack space; they increasingly want facilities that can handle denser compute loads without compromising uptime.

For Samsung Electronics, the move points to a practical shift in how even large technology groups manage parts of their own internal infrastructure. Rather than relying exclusively on self-operated facilities, major companies are turning to specialist operators for colocation capacity that can be scaled more quickly and managed to global standards. Digital Realty framed the arrangement as support for a large-scale customer environment in Korea, while emphasising stable, high-performance infrastructure for global enterprises. That wording suggests the deal is less about consumer-facing products and more about the backbone systems that keep a multinational company running across data-intensive operations.

The timing is notable because Seoul’s data-centre market is expanding while facing mounting strain over where future capacity can be built and how it will be powered. Cushman & Wakefield said the Greater Seoul Area reached 533 megawatts of capacity in the first half of 2025, with a further 715 megawatts in the development pipeline, alongside land secured for another 250 megawatts. Its later market update said the second half of 2025 saw double-digit year-on-year growth, while AI demand and tighter power-related rules were reshaping development patterns. That combination of growth and constraint is pushing operators and customers alike to value operational certainty.

South Korea’s broader technology push adds another layer to that demand story. Reuters reported this week that Seoul approved a 250 billion won investment in AI chip startup Rebellions, part of a wider effort to strengthen domestic semiconductor and advanced computing capabilities. Reuters also reported that SK Hynix is pursuing a US listing partly to fund major chipmaking investments tied to rising AI demand. Those moves sit outside the colocation market itself, but they reinforce the same structural point: processing power, data movement and digital infrastructure are becoming more strategically important across the economy.

Digital Realty’s position in Seoul also reflects a larger contest among global and regional operators seeking to capture Asia’s enterprise and cloud demand. Market research and adviser reports point to South Korea as one of the faster-growing data-centre markets in the region, driven by digital-first consumers, cloud adoption and increased enterprise modernisation. JLL’s 2026 outlook said the global data-centre sector could nearly double between 2025 and 2030, while other market estimates show South Korea’s colocation and broader data-centre segments expanding strongly through the decade. Forecasts from commercial research firms should be treated cautiously, but taken together with operator activity and land acquisition trends, they show why Seoul has become a closely watched infrastructure market.

The Samsung agreement may not be transformative in size on its own, yet it carries signalling value. When one of the country’s largest technology groups places enterprise workloads with an external colocation provider, it gives weight to the argument that carrier-neutral, high-density facilities are becoming integral to mainstream corporate IT strategy rather than serving only cloud giants and telecom operators. It also strengthens Digital Realty’s credentials in a market where network diversity, reliability and location all matter.

Questions remain over how quickly South Korea can add capacity in and around Seoul without worsening power bottlenecks or pushing new builds further from the capital’s main concentration of corporate demand. Legal and advisory analyses have pointed to the mismatch between the location of generation capacity and the heavy concentration of data centres around metropolitan Seoul. That tension is likely to shape the next phase of expansion, forcing operators to balance geography, power access and customer proximity more carefully than before.

A newly documented BlankGrabber infection chain is using a bogus “certificate” loader to disguise a multi-stage Windows compromise, adding another layer of deception to a commodity stealer already known for targeting browser credentials, crypto wallets and messaging sessions. Security researchers say the campaign abuses certutil. exe, a legitimate Windows utility, to make malicious code appear routine, while later stages rely on Rust, Python and packed archives to […]

The European Commission has confirmed a cyberattack on cloud infrastructure supporting parts of the Europa. eu web platform, with the intrusion discovered on March 24 and swiftly contained as investigators assess whether data was taken from affected public-facing services. The Commission has said its internal systems were not hit. The breach centres on a compromised Amazon Web Services account used to host elements of the Commission’s web […]

Threat actors are refining a deceptive cyberattack method that manipulates built-in system utilities on both Microsoft Windows and Apple macOS to deploy malicious software, marking a shift in how malware bypasses browser-based security safeguards. Security researchers have identified a coordinated campaign centred on a technique known as ClickFix, which prompts users to execute seemingly harmless commands through the Windows Run dialogue or macOS Terminal. By moving the […]

Cybersecurity researchers have identified an evolving macOS-focused malware strain, dubbed GhostClaw, that is leveraging developer platforms and artificial intelligence-assisted workflows to steal sensitive credentials and deploy additional malicious payloads. Security analysts tracking the campaign say the threat represents a shift in tactics, combining traditional social engineering with newer distribution channels tied to software development ecosystems. The malware has been observed circulating through code repositories that appear legitimate, […]

VISHNU RAJA
RYO YAMADA
HITORI GOTOH
IKUYO KITA