logo

News related to
credentials

A flaw in Claude Code’s project-memory system can cause sensitive files outside a downloaded software repository to be transmitted to Anthropic’s servers without a separate warning or approval request, security researchers have found. The weakness affects the way Anthropic’s artificial intelligence coding assistant processes symbolic links while loading project instructions at startup. A malicious repository can contain a CLAUDE. md file that imports another file through a […]

Infostealer malware is giving ransomware operators a faster route into corporate networks by supplying stolen passwords, browser cookies and authentication tokens that can defeat conventional identity controls. The growing trade in “stealer logs” has turned infections on individual computers into a dependable source of access for organised cybercrime groups. Criminals can search the harvested data for corporate email addresses, virtual private network credentials, cloud accounts, remote desktop […]

A weakness in Anthropic’s Claude Code can allow a repository to send the contents of files outside its project directory to an external server when a developer starts the coding assistant, security researchers have disclosed. The technique relies on a symbolic link placed inside an otherwise ordinary software repository. When combined with instructions in a CLAUDE. md file, the link can direct Claude Code towards sensitive material […]

Cyber attackers have compromised hotel and conference-centre Wi-Fi gateways to redirect business travellers towards fake Microsoft authentication pages, creating a scalable route for stealing corporate credentials and cloud-access tokens. The campaign has affected hospitality networks across several US cities, as well as locations in India and Saudi Arabia. Activity has been detected since at least June 2026, with visitors from financial services, law, healthcare, energy, retail and […]

Hackers have hijacked GitHub Actions workflows across compromised repositories to create a distributed attack network targeting cPanel and WebHost Manager servers, exposing credentials, databases and cloud accounts. The campaign uses GitHub-hosted computing systems as disposable machines for scanning the internet, exploiting vulnerable hosting platforms and transmitting stolen information to attacker-controlled infrastructure. Security researchers linked the activity to malicious workflow files planted in thousands of repositories. The investigation […]

Hackers are using a legitimate copy of Notepad++ and a disguised plugin to install malware on Windows computers, allowing malicious code to run through the text editor’s normal extension-loading process. The campaign has been linked to UAC-0099, a threat cluster known for targeting government bodies, defence organisations and strategically important enterprises in Ukraine. The revised infection chain, detected from mid-July, deploys two newly identified tools called LUNCHPOKE […]

Iran-linked cyber actors are targeting internet-connected industrial control systems used across US water, energy, manufacturing and public-service networks, prompting an expanded federal warning covering equipment made by Siemens, Schneider Electric and Rockwell Automation. The updated alert says attackers have gained access to programmable logic controllers, or PLCs, which manage physical processes inside critical infrastructure. Intruders have downloaded malicious project files, altered control logic and manipulated information shown […]

Advertisements

Arabian Post Staff -Dubai Dubai’s off-plan property boom is pushing developers to offer more distinctive architecture, stronger lifestyle concepts and higher construction standards as buyers become increasingly selective in the emirate’s crowded luxury housing market. The real estate sector recorded about 87,800 transactions valued at AED291.7 billion during the first half of 2026. Off-plan properties represented 71 per cent of all deals, underlining the central role of […]

Three cryptocurrency protocols linked to Bitcoin and Ethereum lost more than $35 million in a series of attacks within about six hours, exposing persistent weaknesses in cross-chain bridges, administrative controls and contract validation systems. The largest loss was recorded by AFX Trade, a perpetual futures platform operating through an independently managed bridge on Arbitrum. Attackers removed about $24.15 million in USDC before transferring the assets from Arbitrum […]

Arabian Post Staff -Dubai Abu Dhabi Islamic Bank has become the first bank worldwide to deploy Visa’s Threat Intelligence Platform, integrating cyber and payments intelligence into its fraud-prevention operations. The early adoption gives ADIB’s cybersecurity, fraud and risk teams real-time information on threats that could lead to stolen credentials, compromised accounts and fraudulent transactions. The bank is also working with Visa to design the platform’s first use […]

Arabian Post Staff -Dubai Ras Al Khaimah Economic Zone has partnered with Fazaa to give eligible employees of registered companies access to membership benefits, discounts and services across the UAE. The agreement allows qualifying workers to subscribe through RAKEZ to Fazaa’s Silver, Gold and Platinum membership tiers. Benefits are available across healthcare, restaurants, retail, automotive services, beauty and wellness, furniture, property services and car rentals. RAKEZ will […]

The XRP Ledger has processed more than one million transactions initiated by artificial intelligence agents, highlighting the rapid emergence of machine-controlled payments across blockchain networks. The milestone was disclosed as developers expand systems that allow autonomous software to purchase data, computing capacity and other digital services without requiring a person to approve every payment. Ayo Akinyele, head of engineering at RippleX, expects activity to accelerate sharply, potentially […]

A Russian-speaking cybercriminal has transformed techniques for bypassing Claude’s safety controls into a commercial artificial intelligence platform marketed for offensive penetration testing. The operator, using the online name Trim, moved from publishing a detailed jailbreak tutorial on a Russian-language cybercrime forum on 31 March to advertising a working product called AI Pentest Checker on 21 June. The three-month progression illustrates how quickly instructions for manipulating mainstream AI […]

Project CAV3RN has adopted a new communication module that hides command-and-control traffic inside Outlook calendar events, marking a significant upgrade to the cyberespionage framework’s efforts to evade conventional network monitoring. The module, named AzureCommunication. dll, appears designed to replace an earlier component that exchanged instructions and stolen data through HTTP and WebSocket connections. It instead uses Microsoft Graph to access a compromised Microsoft 365 mailbox, turning calendar […]

Craneware has disclosed a cyberattack that allowed an unauthorised party to extract employee information and records linked to customers and business partners, raising fresh concerns about technology supply-chain risks across the US healthcare sector. The Edinburgh-based healthcare software provider said attackers gained access to a limited section of its data environment. A significant volume of file names was viewed and removed, while an unspecified proportion of employee […]

WordPress has issued emergency security updates to block a critical vulnerability that allowed unauthenticated attackers to execute code on websites running standard installations without plugins. The flaw, dubbed “wp2shell” and tracked as CVE-2026-63030, affected WordPress 6.9.0 through 6.9.4 and versions 7.0.0 and 7.0.1. WordPress released versions 6.9.5 and 7.0.2 on July 17, urging administrators to install the patches immediately. The vulnerability carried exceptional risk because an attacker […]

Hackers linked to China and India separately infiltrated Pakistan’s law-enforcement infrastructure, exposing systems containing criminal records, biometric information, personnel files and citizen complaints during espionage campaigns that lasted more than two years. The operations, detected between February 2024 and April 2026, converged most heavily on Balochistan Police, the principal law-enforcement agency in the strategically important south-western province. Khyber Pakhtunkhwa Police, Islamabad Police and the Punjab Safe Cities […]

Artificial intelligence is making cyber attackers faster and more effective while creating new security weaknesses through autonomous software tools, malware and increasingly sophisticated social-engineering campaigns. ESET’s Threat Report for the first half of 2026 found that criminals are using AI less as a substitute for technical expertise than as a force multiplier. The technology is helping attackers prepare convincing lures, automate repetitive work, adapt malicious code and […]

A newly identified ransomware operation is using a Microsoft-signed malicious driver to disable cybersecurity protections before encrypting files, exposing a dangerous weakness in the trust mechanisms underpinning Windows systems. The malware, named GodDamn, deploys the PoisonX kernel driver to terminate antivirus and endpoint detection and response processes. Kernel-level access gives the driver extensive control over an infected computer, allowing attackers to neutralise defensive software that might otherwise […]

A new artificial intelligence system has autonomously identified and exploited security weaknesses in laboratory-based Internet of Things environments, completing 95% of 260 attempted attacks. The framework, named VEXAIoT, uses cooperating AI agents to scan networks, identify vulnerable services, devise attack plans and execute exploits with limited human involvement. Researchers tested it against IoTGoat and Metasploitable2, two deliberately vulnerable platforms used for cybersecurity training and controlled experimentation. VEXAIoT […]

A flaw in the BIOS firmware of several Dell computers can allow attackers with physical access to recover administrator and user passwords from the device’s flash memory without brute-force cracking. The vulnerability, tracked as CVE-2026-40639, affects the way certain Dell client platforms protect passwords stored in the system’s Serial Peripheral Interface flash chip. Dell has classified the issue as a medium-severity weakness and released BIOS updates for […]

The US Cybersecurity and Infrastructure Security Agency has disclosed how privileged AWS GovCloud credentials and sensitive development material were exposed through a contractor’s public GitHub repository, using the breach to urge organisations to strengthen cloud security and incident-response procedures. CISA said it opened an internal investigation on May 15 after an investigative journalist asked about agency credentials appearing online. The journalist had been alerted by a security […]

Cybersecurity investigators have uncovered an AI-generated PowerShell script used during a live attack to map a company’s Active Directory environment, offering fresh evidence that criminals are deploying “vibe-coded” malware inside compromised networks. The script was recovered from an intrusion that began on June 3 after the attacker gained remote desktop access to a Windows Server connected to the victim’s domain. The available evidence indicated that the intruder […]

Interpol has announced 5,811 arrests and the interception of $293 million in illicit assets following a sweeping operation against cyber-enabled fraud across 97 countries and territories. Operation First Light 2026 targeted social engineering scams and related money laundering networks between January 15 and April 30. Authorities identified more than 142,000 victims, analysed 152,808 cases and blocked 31,014 bank accounts linked to suspected criminal proceeds. The China-funded operation […]

VISHNU RAJA
RYO YAMADA
HITORI GOTOH
IKUYO KITA
Just in:
Satheesan resists Anil as new state Cong chief // Abu Dhabi property transaction value climbs 76.1 percent // Vasavan alleges one-man show by CM Satheesan // Sber announces results of GigaArt AI-art festival: Nearly half a million images // EU challenges TikTok video rankings over harmful content loops // Bank of England flags sharper AI share correction risks // Rubio rejects prospect of imminent Iran peace breakthrough // UAE non-oil trade climbs to AED 2.945 trillion // Recognition under the U.S. Green Building Council’s rating system confirms the 22-residence tower is on track for full certification on completion // Basheer sets Feb deadline for delayed ULCCS projects // Republicans Struggling To Come Out Of Nov 3 Debacle To Prepare For 2028 Prez Polls // Gulf states formalise joint railway operating framework // Deemed status for high-performing aided colleges // Trump’s Defeat In Midterm May Lead To Both Challenges And Opportunities For Indian Economy // Vasavan alleges one-man show by CM Satheesan // Public Protests Challenge Elected Power In Europe And India // Trump directs Justice Department scrutiny of Democratic threats // Nexawork AI Launches Custom Software for SMEs From RM19,900.00 // PhotonPay Strengthens North American Regulatory Footprint with Canada’s RPAA Registration // Vijayan seeks immediate reversal of decision //