News related to
software

AI vulnerability race gathers speed

Commercial artificial intelligence models are advancing quickly in vulnerability research and exploit development, sharpening concern across the cybersecurity industry that tools built for productivity and defence could also lower the barrier for offensive misuse. A study by Forescout’s Vedere Labs found that commercial systems now outperform open-source and underground alternatives in identifying software flaws, while more than half of the models tested were able to generate exploits […]

TP-Link router flaw draws Mirai probes

Hackers are probing older TP-Link home routers in an effort to turn them into Mirai-style botnet nodes, using a known command-injection flaw tracked as CVE-2023-33538. Security researchers say the activity targets discontinued router models and appears to be automated, with scanning and exploit attempts designed to fetch and run malware on exposed devices. The flaw itself is genuine and serious, even though some of the attack traffic […]

Fake TestDisk lure opens remote access

Search poisoning aimed at users looking for the open-source recovery utility TestDisk is being used to slip a trojanised installer on to Windows machines, abuse a Microsoft-signed binary for DLL sideloading and install ConnectWise ScreenConnect, giving attackers remote access under the cover of a legitimate administration tool. The campaign centres on a rogue site, testdisk. dev, that imitates the branding and download flow of the genuine TestDisk […]

OpenClaw sharpens agentic AI security warning

OpenClaw’s rapid rise from an open-source personal assistant to a flashpoint in boardroom and regulatory discussions has turned the software into one of the clearest illustrations yet of the cybersecurity dangers surrounding agentic AI. Security specialists, regulators and large technology firms are converging on the same point: the problem is no longer limited to what an AI model can say, but what an AI agent can do […]

Gemini turns photo history into prompts

Google has extended its Personal Intelligence system to the Gemini app’s built-in image generation tools, allowing users to create tailored visuals shaped by data from their own Google services, including Google Photos, rather than relying only on long text prompts or manual uploads. The update ties a more personal layer of context to Nano Banana 2, Google’s latest image model, as the company pushes harder to make […]

Sequoia maps $7bn push into AI elite

Arabian Post Staff -Dubai Sequoia Capital has raised about $7 billion for a new fund, giving one of Silicon Valley’s best-known venture firms fresh firepower to back its largest and most expensive bets, especially in artificial intelligence, according to people familiar with the discussions. The fundraising marks the first major capital raise under the firm’s newer leadership era and arrives as investor appetite has swung sharply toward […]

Anthropic sharpens Opus for coders

Anthropic has rolled out Claude Opus 4.7, an upgraded version of its top broadly available artificial intelligence model, pitching it as a stronger tool for advanced software engineering just days after keeping its more powerful Mythos Preview behind tight access controls because of cyber-risk concerns. The move gives developers a more capable coding model while signalling that Anthropic is trying to balance commercial momentum with a more […]

Ukraine’s clinics face stealth data raid

  Ukrainian municipal authorities and healthcare institutions have come under a coordinated wave of cyberattacks that security officials say was designed to steal sensitive information from web browsers and WhatsApp accounts, widening concern over espionage operations aimed at essential public services during wartime. The campaign, attributed by Ukraine’s Computer Emergency Response Team to threat cluster UAC-0247, struck local government bodies and municipal medical facilities, including clinical and […]

Malware hides behind trusted downloads

Cyber criminals are pushing a Windows information stealer called NWHStealer through bogus software downloads that masquerade as Proton VPN installers, gaming mods and hardware utilities, in a campaign that security researchers say relies less on classic phishing and more on users searching for tools they believe are legitimate. Malwarebytes said on April 15 that it had identified multiple active distribution chains tied to the stealer, with malicious […]

Webhooks turn workflow tools into malware bait

Cyber attackers are abusing the low-code automation platform n8n to push malware and track targets through phishing emails, in a campaign that security researchers say gathered pace between October 2025 and March 2026 and reflects a broader shift in how legitimate cloud tools are being repurposed for intrusion activity. Cisco Talos said it observed a sharp increase in emails containing n8n webhook links, with March 2026 volumes […]

Parkin widens UAE’s barrierless parking push

Arabian Post Staff -Dubai Parkin Company has teamed up with SP Corporation Car Parking Management, which operates as Secure Parking, in a deal aimed at speeding the spread of barrierless parking across the UAE after the two companies brought a fully integrated system into operation at City Walk in Dubai. The partners say they have identified a pipeline of more than 60,000 parking spaces for possible future […]

Fake Adobe Reader lure turns remote tool rogue

Attackers are exploiting trust in Adobe’s brand to deliver covert remote access, using a fake Acrobat Reader download page to install ConnectWise ScreenConnect through a fileless, memory-heavy attack chain that is designed to leave few traces on disk and make forensic analysis harder. Security researchers who uncovered the campaign said the operation began with a phishing site made to resemble Adobe’s official software page, where victims were […]

Alibaba pushes deeper into game AI

Alibaba Group Holding has unveiled a new artificial intelligence model aimed at building 3D environments and interactive video, widening its challenge to Tencent in one of the most commercially sensitive corners of China’s technology market: games, cloud services and creator tools. The model, called Happy Oyster, was introduced on Thursday as a “world model”, a system designed to generate explorable digital scenes rather than only short clips, […]

Splunk flaw opens risky code path

Splunk has disclosed a high-severity security flaw that can allow remote code execution in affected Splunk Enterprise and Splunk Cloud Platform deployments, raising concern for organisations that rely on the software to collect, search and analyse machine data for cyber defence, compliance and operations. The issue, tracked as CVE-2026-20204, was published on April 15 and carries a CVSS score of 7.1. Splunk said the weakness affects Splunk […]

Comcast payout puts breach fallout in focus

Comcast customers notified about the company’s 2023 Xfinity data breach are being offered cash payments, reimbursement for documented losses and identity-protection services under a proposed $117.5 million class-action settlement, opening what could become one of the largest consumer redress exercises tied to a telecom cyber incident in the United States. The settlement applies to people in the United States and its territories who were sent individual notice […]

Game Pass faces a value reset

Microsoft’s games division is facing fresh pressure over the cost of Xbox Game Pass after reports said Microsoft Gaming chief Asha Sharma told staff the service had “become too expensive for players”, signalling a possible rethink of one of the company’s most important consumer bets. Sharma’s appointment as executive vice-president and chief executive of Microsoft Gaming was announced by Microsoft on 20 February, giving added weight to […]

OpenAI sharpens AI race for cyber defence

OpenAI has launched GPT-5.4-Cyber, a new version of its frontier model tailored for defensive cybersecurity work, moving quickly to answer growing concern that ever more capable AI systems could help both defenders and attackers in a widening digital arms race. The release came a week after Anthropic disclosed Claude Mythos Preview under its tightly controlled Project Glasswing programme, setting up a new contest over who can best […]

Signed adware campaign strips endpoint defences

  A digitally signed software operation tied to Dragon Boss Solutions LLC has been linked to the disabling of antivirus protections on more than 23,000 endpoints worldwide, raising concerns that what had been treated as aggressive adware was operating much closer to a supply-chain style threat. Security researchers said infected machines were found checking in from 124 countries, with affected systems present in education, government, utilities, healthcare […]

ENISA’s CVE rise reshapes cyber oversight

Europe’s cybersecurity agency has moved to strengthen its influence over the global system used to identify and catalogue software flaws, with ENISA no longer merely seeking a bigger role in the Common Vulnerabilities and Exposures programme but already holding Root status in a shift that gives the EU a stronger hand in how vulnerabilities are coordinated across borders. The development matters because the CVE system remains a […]

Plugin trust crisis hits WordPress

More than 30 WordPress plugins tied to the developer Essential Plugin were taken offline after a hidden backdoor was found in code distributed to live websites, exposing site owners to unauthorised access, malware installation and search-spam abuse. The campaign, traced by security researchers to code inserted in August 2025 and activated in April 2026, is being treated as a serious software supply-chain breach rather than an ordinary […]

Chrome patch races to shut critical holes

Google has issued an emergency-style security update for Chrome after disclosing 31 vulnerabilities in the desktop browser, including five rated critical, in a release that underlines how quickly memory-safety flaws in widely used software can become a serious risk for consumers, businesses and public institutions. The stable desktop channel moved on April 15 to version 147.0.7727.101/102 for Windows and Mac, and 147.0.7727.101 for Linux, with the rollout […]

Slate’s low-cost truck gets war chest

  Slate Auto, the electric vehicle start-up backed by Jeff Bezos, has raised $650 million as it pushes towards launching an affordable electric pickup priced in the mid-$20,000 range, handing the company one of the bigger funding rounds in a US EV market that has turned markedly harsher for newcomers. The company said the money will support the rollout of its first vehicles later this year, with […]

Dragon Boss breach widens supply chain alarm

What looked like a nuisance adware issue inside managed IT environments has emerged as a broader cyber-security warning, after Huntress said software signed by Dragon Boss Solutions LLC exposed more than 25,000 endpoints to a supply-chain style compromise through an insecure update mechanism that could have been hijacked for the price of a cheap domain registration. Huntress published its findings on April 14, saying the software was […]

ECI Caused Miscarriage Of Democracy In West Bengal