News related to
software

A Microsoft-tracked cybercrime group is using adversary-in-the-middle techniques to hijack Microsoft 365 sessions, bypass multifactor authentication and reroute employee pay into attacker-controlled bank accounts, in what researchers describe as a geographically focused campaign against users in Canada. Microsoft said the actor, tracked as Storm-2755, combined search-result poisoning, fake sign-in pages and session replay to move from account takeover to payroll fraud, causing direct financial loss for at […]

A critical security flaw in the Ninja Forms File Uploads add-on has put thousands of WordPress sites at risk, with researchers warning that attackers can exploit the bug without logging in and, in the worst case, gain remote code execution on a vulnerable server. The issue affects all versions up to and including 3.3.26, while version 3.3.27 has been identified as the fully patched release after an […]

Amazon Web Services has patched three high-severity vulnerabilities in its open-source Research and Engineering Studio platform, closing weaknesses that could have allowed authenticated users to run commands on key systems or gain broader permissions inside cloud environments used for scientific and engineering work. The flaws affected AWS Research and Engineering Studio, known as RES, a web-based portal that helps administrators build and manage controlled research and engineering […]

Tesla is developing a smaller, lower-cost electric sport utility vehicle in a move that could reopen its path into the mass market after years of focusing investor attention on autonomy, robotics and premium technology bets. People familiar with the plan told Reuters the company has approached suppliers in the past few weeks to discuss a compact SUV that would sit below its current line-up on size and […]

A cross-border espionage campaign that targeted journalists, civil society figures and some government-linked entities across the Middle East and North Africa between 2023 and 2024 has been tied by researchers to BITTER, a long-tracked South Asian threat actor, marking what investigators describe as the first documented case linking the group to attacks on civil society in the region. The attribution remains qualified rather than definitive: Lookout said […]

Google has warned that a financially motivated cyber group tracked as UNC6783 is targeting business process outsourcers and corporate helpdesks in a campaign aimed at stealing sensitive data from large companies and then using that access for extortion. The group, which Google says may be tied to the “Raccoon” persona, has targeted several dozen high-value organisations across multiple sectors, shifting attention to a weak point that many […]

STX RAT, a newly identified remote access trojan, has drawn attention in the cyber-security sector after researchers tied it to an attempted intrusion against a financial-services environment and linked it to broader opportunistic delivery campaigns that include trojanised software and script-based loaders. The malware stands out because it combines hidden remote control with data theft, while delaying some of its most suspicious behaviour until it has an […]

Advertisements

Attackers have planted a stealthy Magecart credit-card skimmer on nearly 100 Magento-based online shops by hiding the malicious code inside an invisible SVG image, according to incident findings published this week, in what security specialists describe as another sign that payment-page attacks are becoming harder for merchants and scanners to detect. The operation was identified on April 7 and affected 99 stores, with stolen payment data sent […]

CoreWeave has expanded its artificial intelligence infrastructure relationship with Meta to $21 billion, extending a partnership that underlines how the biggest technology groups are leaning on specialist cloud providers to secure the computing power needed for the next phase of AI development. The enlarged agreement, announced on April 9, runs through December 2032 and builds on a prior deal valued at about $14 billion struck in September. […]

Embedded banking is moving financial services out of the bank branch and bank app and into the software people and companies already use, reshaping how accounts, cards, payments and credit are distributed across the economy. What began as an extension of embedded payments has matured into a broader model in which regulated banks provide the licensed infrastructure while technology platforms control the customer experience, a shift that […]

Lumen Technologies has used its latest letter from chief executive Kate Johnson to sharpen a message it has been building for more than a year: the company wants investors, customers and partners to see it less as a legacy telecom carrier and more as a high-capacity digital networking platform built for artificial intelligence workloads. In the letter, Johnson said 2025 was a “pivotal year”, set out plans […]

GitLab has issued a security update covering multiple vulnerabilities in its Community Edition and Enterprise Edition products, with the latest patch aimed at denial-of-service weaknesses and an Enterprise-only code injection issue that could expose users’ IP addresses through maliciously crafted Code Quality reports. The company said self-managed customers should upgrade immediately to versions 18.10.3, 18.9.5 or 18.8.9, while GitLab. com is already running the patched release and […]

Google’s handling of API keys has come under fresh scrutiny after security researchers said Android applications are exposing credentials that can now unlock parts of the Gemini AI platform, potentially allowing unauthorised access to files, cached data and billable AI services. The latest warning, published by CloudSEK on April 7, says 32 hardcoded Google API keys were found across 22 popular Android apps and that the issue […]

Anthropic has launched Project Glasswing, a controlled cybersecurity programme that gives a select group of large technology, finance and security organisations access to its unreleased Claude Mythos Preview model to identify and help fix serious software vulnerabilities in widely used systems. The company says the model has already uncovered thousands of significant flaws across operating systems, browsers and other foundational software, but has stopped short of making […]

Alchemy, the blockchain infrastructure company often described in the sector as a crypto equivalent of cloud back-end provider AWS, has launched AgentPay, a new tool aimed at solving a fast-emerging problem in machine commerce: AI payment systems are being built on different rails and often cannot work with one another. The company says AgentPay gives merchants and service providers a single integration layer so they can accept […]

Kuka is stepping up its push into the United States and Asia as its leadership warns that too many manufacturers in Europe are moving too slowly on artificial intelligence, creating an opening for competitors in markets where automation spending and industrial policy are advancing at a quicker pace. The shift, outlined by chief executive Christoph Schell, comes as the Augsburg-based robotics group tries to reposition itself around […]

  Google has quietly introduced a free iPhone app that pushes its on-device AI ambitions further into everyday productivity, offering voice dictation that works without a network connection while automatically cleaning up spoken text into more polished prose. The app, Google AI Edge Eloquent, is listed on Apple’s App Store as a Google-developed productivity tool for iPhone, described as free and built around local processing using the […]

Sony Interactive Entertainment has entered an agreement to acquire Cinemersive Labs, a UK-based machine learning and computer vision company, in a move that signals a deeper push into AI-driven graphics, rendering and visual tools for PlayStation. Sony said the team will join its Visual Computing Group and help advance visual computing inside games, with work aimed at enhancing gameplay visuals, improving rendering techniques and raising visual fidelity […]

Hackers are exploiting internet-exposed ComfyUI servers in a monetisation campaign that turns poorly secured AI image-generation systems into cryptocurrency mining machines and proxy infrastructure, according to multiple security findings published this week. Researchers say more than 1,000 exposed ComfyUI instances remain reachable online after honeypots are filtered out, giving attackers a narrow but valuable pool of GPU-equipped targets spread across cloud environments. The activity centres on unauthenticated […]

Arabian Post Staff -Dubai Apple’s long-rumoured foldable iPhone appears to remain in line for the company’s autumn product cycle alongside the iPhone 18 family, even as fresh reports have pointed to engineering hurdles that briefly stirred doubts over the timing of its debut. The shifting picture has left investors and supply-chain watchers weighing whether the device will be unveiled with the premium 2026 iPhones, shipped slightly later, […]

GoDaddy has teamed up with LegalZoom to launch a system designed to give AI agents a verifiable identity on the open web, as companies move from chatbots towards software that can act, transact and communicate with other systems with less human intervention. The tie-up, announced on 2 April, centres on GoDaddy’s Agent Name Service, or ANS, which uses domain name system records and public key infrastructure certificates […]

Russian military-linked hackers have hijacked vulnerable internet routers to steal passwords, authentication tokens and other sensitive data, according to a new warning from the UK’s National Cyber Security Centre, which said the activity was tied to APT28, a group long associated with Moscow’s GRU military intelligence unit 26165. British officials said the campaign worked by altering router settings so internet traffic could be redirected through malicious Domain […]

  Strategy has bought another 4,871 Bitcoin for $329.9 million, extending the company’s long-running cryptocurrency accumulation plan and taking its total holdings to 766,970 BTC as of April 5, according to a regulatory filing released on April 6. The company said the latest purchases were made at an average price of $67,718 per Bitcoin, lifting its aggregate spend on the token to about $58.02 billion since it […]

  Microsoft has warned that a threat actor it tracks as Storm-1175 is exploiting vulnerabilities in internet-facing systems at high speed to deliver Medusa ransomware, in some cases moving from initial access to data theft and encryption within 24 hours. The alert points to a pattern that security teams have feared for months: a shrinking window between vulnerability disclosure, exploitation and full-scale ransomware deployment. The group, described […]

VISHNU RAJA
RYO YAMADA
HITORI GOTOH
IKUYO KITA