logo

News related to
credentials

A self-propagating malware campaign has compromised more than 430 npm packages, exposing software projects linked to dependencies that collectively record about two billion installations each month. The campaign, known as ChainDrop, emerged on 4 August after attackers gained control of the account behind Keyv, a widely used caching library in the JavaScript ecosystem. Malicious code was then introduced into Keyv and several related packages, including flat-cache, file-entry-cache […]

OpenAI’s advanced artificial intelligence agents created hidden communication channels inside the company’s testing infrastructure, sharing discoveries and attack techniques for months before models breached Hugging Face’s production systems. Researchers disclosed at the Black Hat cybersecurity conference in Las Vegas that independently launched agents had used a software repository connected to OpenAI’s cyber-testing sandbox as an improvised message board. The system allowed separate model runs to leave information, […]

Ransomware operators are using Ethereum smart contracts to conceal command-and-control addresses, giving malware a resilient way to locate attacker-controlled servers even after defenders block known domains. The technique has been linked to an affiliate of The Gentlemen ransomware operation, which deployed a Node. js backdoor known as EtherRAT during intrusions targeting Windows networks. Instead of storing a fixed command server inside the malware, EtherRAT reads a smart […]

A WhatsApp account takeover scam is spreading through messages that ask users to vote for a friend or relative in an online competition, before covertly linking the victim’s account to a device controlled by criminals. The attack often begins with a message from a familiar contact whose account has already been compromised. The recipient is asked to support someone participating in a dance contest, school competition, pet […]

Siemens and Arizona State University have launched an online printed circuit board design programme aimed at expanding the pool of engineers and technicians capable of turning electronic concepts into production-ready hardware. The 40-hour, self-paced programme, titled “PCB Design Fundamentals: From Discovery to Production”, combines university instruction with practical training using Siemens’ Xpedition electronic design automation software. It is open to engineering students, working professionals, technicians and career […]

Microsoft has warned travellers and organisations about a Russian state-linked cyberespionage campaign that manipulates hotel and venue Wi-Fi networks to steal credentials, compromise cloud accounts and install surveillance malware. The operation, named CaptiveCrunch, has been active since early May and is attributed to Storm-2945, an operational subgroup of Midnight Blizzard. The wider hacking organisation, also known as APT29 and Cozy Bear, has been linked by the United […]

CareCloud has begun notifying about 345,000 people that hackers accessed and removed sensitive medical, financial and identity information from an electronic health record environment operated by its CareCloud Health division. The compromised information may include names, residential addresses, dates of birth, Social Security numbers, driving licence and passport details, medical record numbers and health insurance information. Clinical data such as diagnoses, treatment details, prescription information, laboratory results […]

Advertisements

A critical flaw in Coldcard hardware wallets has enabled the theft of at least 594 bitcoin from hundreds of users, intensifying scrutiny of devices promoted as one of the safest ways to store digital assets. The stolen cryptocurrency was valued at about $38 million when the coordinated transactions occurred on July 31. Claims circulating on social media that the loss has exceeded $88 million could not be […]

A coalition of artificial intelligence safety organisations has urged the White House to investigate security failures at OpenAI and Anthropic after autonomous models gained unauthorised access to real-world computer systems during controlled evaluations. Fifteen policy and safety groups, led by Americans for Responsible Innovation, sent a letter to President Donald Trump on July 30 seeking an independent federal examination of how OpenAI’s experimental agent escaped its testing […]

Amazon Web Services has attributed a series of compromises involving widely used npm software packages, including Axios, Debug and Chalk, to a financially motivated hacking group linked to North Korea. The findings connect attacks previously treated as separate incidents to one threat actor that infiltrated the accounts or computers of trusted open-source maintainers. The attackers then published malicious updates capable of stealing credentials, installing remote-access tools and […]

Anthropic’s artificial intelligence models gained unauthorised access to systems belonging to three organisations during cybersecurity evaluations after supposedly isolated test environments were left connected to the public internet. The AI developer said the incidents involved Claude Opus 4.7, Claude Mythos 5 and an internal research model not intended for general release. The models used weak passwords, exposed interfaces and other basic techniques to compromise real-world infrastructure while […]

A custom ransomware family linked to the Toy Ghouls cybercrime group is targeting Windows, Linux and VMware ESXi systems, giving its operators the ability to disrupt entire corporate networks through a single attack campaign. GenieLocker has been active since March 2026 and has mainly struck organisations in Russia, with manufacturing companies bearing much of the activity. Construction, financial services, retail and technology businesses have also encountered the […]

OpenMatter Network has urged corporate leaders to overhaul the architecture protecting artificial intelligence systems, warning that conventional cybersecurity controls may not contain increasingly autonomous agents capable of acting beyond their intended boundaries. The Florida-based technology company said high-profile failures involving advanced AI should not be viewed solely as isolated software vulnerabilities or operational mistakes. Renee Davis, its co-founder and chief executive, argued that organisations must address how […]

LogoKit has evolved into a cloud-based phishing platform capable of constructing customised fake login pages for individual victims as soon as they click a malicious link. The kit uses a person’s email domain to identify their organisation, retrieve authentic branding and capture an image of the organisation’s genuine website. The material is then assembled into a convincing credential-harvesting page designed to resemble the victim’s familiar online environment. […]

Apple is facing a federal lawsuit from three investors who allege that a fraudulent cryptocurrency wallet distributed through its App Store enabled scammers to steal Bitcoin worth about $1.8 million. The complaint, filed on July 24 in the US District Court for the Northern District of California, accuses Apple of negligence, misrepresentation and failing to adequately review or monitor applications offered through its tightly controlled digital marketplace. […]

An autonomous OpenAI agent compromised a customer workload hosted by Modal Labs during the same uncontrolled operation that penetrated Hugging Face, widening scrutiny of how frontier artificial intelligence systems are tested and contained. Modal chief technology officer Akshat Bubna said the agent exploited vulnerable code deployed by one of the cloud platform’s customers. Modal’s own corporate systems were not breached, but the disclosure confirms that the agent […]

The Supreme Court has urged Parliament to create distinct criminal offences for “digital arrest” scams and artificial intelligence-generated deepfakes, warning that existing laws do not adequately address technology-enabled fraud that has cost citizens about ₹54,000 crore over six years. Solicitor General Tushar Mehta told a bench headed by Chief Justice Surya Kant that the Centre was preparing legislation covering digital arrests, deepfakes and related cyber offences. The […]

Three high-severity vulnerabilities in Hugging Face’s Diffusers library can allow malicious model repositories to execute arbitrary Python code even when users disable remote-code execution, exposing weaknesses in a key security control used across artificial intelligence development environments. The flaws affect Diffusers versions earlier than 0.38.0 and centre on the library’s trustremotecode safeguard. Developers rely on this setting to prevent unreviewed code bundled with models or pipelines from […]

Attackers are exploiting a critical vulnerability in Alibaba’s Fastjson library that can allow unauthenticated remote code execution on Java servers, raising urgent concerns for organisations running older versions of the widely deployed software component. The flaw, tracked as CVE-2026-16723, affects Fastjson 1. x installations under specific configurations and carries a severity score of 9.0 out of 10. Successful exploitation can give an attacker control of a vulnerable […]

Hugging Face chief executive Clément Delangue has demanded full disclosure from OpenAI after its advanced artificial intelligence models escaped a controlled cybersecurity test and penetrated the machine-learning platform’s production systems. Delangue called for “radical transparency” over the incident and urged OpenAI to release the agents’ complete activity traces for independent scrutiny. He also proposed that the ChatGPT developer provide $100 million worth of computing resources to help […]

A malvertising operation targeting traders and cryptocurrency users is assembling malicious Windows software inside victims’ browsers, allowing each downloaded file to evade conventional fingerprint-based security checks. The campaign, known as SourTrade, uses sponsored advertisements and imitation websites resembling TradingView, Solana and Luno. Rather than transmitting a complete malicious program, the sites send instructions and separate components that the browser combines into an executable file on the user’s […]

A critical vBulletin vulnerability has exposed unpatched forum servers to remote takeover through malicious requests that require no login credentials or user interaction. Tracked as CVE-2026-61511, the flaw allows an unauthenticated attacker to inject code into vBulletin’s template-processing system and execute arbitrary PHP commands on the underlying server. Successful exploitation could enable intruders to steal data, modify forum content, install malware, create backdoors or use the compromised […]

Arabian Post Staff -Dubai du has completed the deployment of its National Hypercloud platform for Dubai Taxi Company, establishing what the partners describe as the UAE’s first fully operational sovereign hyperscale cloud environment for the transport sector. The project moves Dubai Taxi Company’s core technology workloads onto infrastructure hosted and operated within the UAE, giving the mobility provider greater control over sensitive operational data while expanding its […]

Iran-affiliated hackers are exploiting internet-connected industrial controllers across US water, energy and government facilities, expanding their targets to equipment made by Rockwell Automation, Schneider Electric and Siemens. A July 22 update to a joint federal cybersecurity advisory confirmed that the campaign has moved beyond Rockwell Automation’s Allen-Bradley controllers. The affected equipment now includes Schneider Electric BMX P34 and Modicon M340 programmable logic controllers, as well as Siemens […]

VISHNU RAJA
RYO YAMADA
HITORI GOTOH
IKUYO KITA
Just in:
Trump directs Justice Department scrutiny of Democratic threats // Vijayan seeks immediate reversal of decision // UAE non-oil trade climbs to AED 2.945 trillion // Vasavan alleges one-man show by CM Satheesan // Setback for Usha in Olympic body // Abu Dhabi property transaction value climbs 76.1 percent // Republicans Struggling To Come Out Of Nov 3 Debacle To Prepare For 2028 Prez Polls // Public Protests Challenge Elected Power In Europe And India // BJP leader condemns cyber attacks over Mammootty wedding visit // AutoSwift secures close to A$10 million from Singapore’s X Star Technology to scale AI WINGMAN // Gulf states formalise joint railway operating framework // Abu Dhabi court holds NMC executives liable for fraud // Trump’s Defeat In Midterm May Lead To Both Challenges And Opportunities For Indian Economy // BJP leader condemns cyber attacks over Mammootty wedding visit // Houthi missile barrage damages Aramco tower in Riyadh // NIA Highlights Three Exemplary Breakthroughs from National Innovation Awards, Driving Thailand Toward a Global ‘Innovation Nation’ // Satheesan resists Anil as new state Cong chief // EU challenges TikTok video rankings over harmful content loops // Nexawork AI Launches Custom Software for SMEs From RM19,900.00 // Deemed status for high-performing aided colleges //