Meridiano
Following joint US-Israel attacks on Iran, Tehran launched ballistic missiles targeting US military bases in the Gulf. The UAE intercepted several missiles using its layered defense system, though falling debris killed one civilian in Abu Dhabi. The article details the UAE's missile defense network, which includes high-altitude THAAD and lower-altitude Patriot systems designed to detect, track, and kinetically destroy incoming hypersonic threats. It explains the complex, seconds-long interception sequence and the challenges posed by the extreme speeds of ballistic missiles.
Articles infosec
Showing articles 91 - 105 of 167 total (matching filters).
-
infosec 3
-
infosec 7Israel and the US launched joint preemptive strikes on Iran, triggering explosions in Tehran and other cities. During the attacks, a popular Iranian prayer app was hacked to send messages urging military personnel to surrender or join "liberation forces," though no group claimed responsibility. Iran retaliated with kinetic attacks across the Middle East. Concurrently, Iran is experiencing severe nationwide internet disruptions and communication outages, drastically reducing connectivity. The main topics covered are the military strikes, the associated cyber operation and propaganda hack, and the widespread digital blackout in Iran.
-
infosec 5A high-severity vulnerability, dubbed ClawJacked, was discovered in the core OpenClaw gateway. It allowed a malicious website to brute-force the local gateway's password and gain complete, stealthy control over the AI agent without user interaction. OpenClaw patched the flaw within 24 hours, urging users to update immediately. The report highlights broader security concerns for AI agents due to their extensive system access and attack surface. A separate log poisoning vulnerability in OpenClaw, which could enable indirect prompt injections, was also recently patched.
-
infosec 1The article frames President Trump's decision to launch a war with Iran as a high-stakes political gamble, comparing it to his past business risks. It states the conflict was foreseeable, stemming from the US withdrawal from the Iran nuclear deal and a prolonged military buildup. The immediate consequences include the death of Iran's supreme leader and retaliatory strikes across the region, but the long-term outcomes and stability of Iran's regime remain highly uncertain. The article warns of potentially decades-long, unforeseen consequences, drawing parallels to historical upheavals in Iran and past US military interventions.
-
infosec 6North Korean threat actors have published 26 malicious packages to the npm registry, masquerading as developer tools. The campaign, tracked as StegaBin and attributed to the Famous Chollima group, uses packages with install scripts that deploy a steganographic loader. This loader extracts hidden command-and-control URLs from seemingly benign Pastebin essays, ultimately delivering a credential stealer and remote access trojan. The malware targets developers by exfiltrating credentials, browser data, Git repositories, and SSH keys, and establishes persistence in tools like VS Code.
-
infosec 4Google fixed a high-severity vulnerability in its Gemini AI side panel for Chrome that could have allowed malicious extensions to hijack the feature. The flaw, CVE-2026-0628, could have enabled attackers to escalate privileges, access a victim's camera, microphone, and local files, and take screenshots without consent. Researchers from Palo Alto Networks discovered the issue, highlighting the new security risks introduced by AI-integrated "agentic" browsers with privileged system access. Google patched the vulnerability after being notified. The main topics covered are the specific security flaw, its potential impacts, and the broader security risks of integrating powerful AI agents into web browsers.
-
infosec 6A high-severity Microsoft vulnerability (CVE-2026-21513) in the MSHTML Framework, which allows security feature bypass, was exploited as a zero-day. The Russia-linked threat actor APT28 is suspected in these attacks, using malicious LNK files to bypass security contexts and execute code. The main topics covered are the specific software vulnerability, its exploitation by a state-sponsored group, and the technical mechanism of the attack.
-
infosec 3The article describes how SaaS products face automated bot attacks that exploit business logic, such as fake sign-ups and API scraping, which appear as normal traffic but harm growth and increase costs. It introduces SafeLine as a self-hosted web application firewall (WAF) that uses semantic analysis to understand request behavior and context, blocking these sophisticated attacks with high accuracy. The main topics covered are the nature of bot attacks on SaaS, the features and benefits of the SafeLine WAF, and the advantages of a self-hosted solution for data control and debugging.
-
_jvphoto_Alamy.jpg?width=1280&auto=webp&quality=80&disable=upscale)
infosec 3A new hardware device called Isidore Quantum, developed by Forward Edge-AI with the U.S. government and Microsoft, is designed to protect sensitive operational technology endpoints from future quantum attacks. It functions as a quantum-resistant data diode, allowing data to flow only one way out of critical systems and encrypting it with algorithms meant to withstand quantum decryption. The device addresses the urgent need to secure edge systems and data now, ahead of anticipated quantum computing threats in the 2030s. It has been validated through multiple U.S. military pilots and is intended for critical infrastructure sectors. The main topics covered are quantum-resistant cybersecurity, the protection of operational technology endpoints, and U.S. government timelines for transitioning to post-quantum cryptography.
-
infosec 5The article describes an evolving threat landscape where attackers exploit small gaps, exposed keys, and trusted services to target high-value sectors. It highlights a critical, actively exploited zero-day vulnerability in Cisco's SD-WAN software. Other key topics include Anthropic accusing Chinese AI firms of model distillation attacks, Google disrupting a China-linked cyber espionage campaign, and a security risk involving exposed Google Cloud API keys that could grant unauthorized access to Gemini AI data.
-
infosec 2Oil prices surged due to U.S. and Israeli attacks on Iran and escalating regional instability, particularly around the crucial Strait of Hormuz shipping route. The main topics covered are the immediate price increase, the strategic risk to global oil transit through the strait, and attacks on regional energy infrastructure. Analysts warn that further disruptions, such as a closure of the strait or damage to major facilities, could drive prices over $100 a barrel. The market's reaction is tempered by prior risk pricing, but uncertainty remains high due to the conflict's unfolding nature.
-
infosec 3Google is developing a new HTTPS certificate system based on Merkle Tree Certificates (MTCs) to secure the web against future quantum computing threats. This approach aims to minimize authentication data size, maintaining internet performance while adopting stronger post-quantum cryptography. Google plans a phased rollout of this system, with the final phase targeting the third quarter of 2027. The main topics covered are post-quantum security, the new MTC certificate technology, and Google's implementation timeline.
-
infosec 5A now-patched high-severity vulnerability (CVE-2026-0628) in Google Chrome allowed malicious extensions to hijack the Gemini Live AI panel, leading to privilege escalation. This flaw, dubbed "Glic Jack," could have let attackers access a victim's camera, microphone, local files, and take screenshots. The incident highlights the new security risks introduced by integrating powerful AI agents with privileged access directly into web browsers, as these capabilities can be subverted. The vulnerability was rooted in insufficient policy enforcement within the WebView tag used for the Gemini panel and was fixed by Google in January 2026.
-
infosec 7Shipping through the Strait of Hormuz has nearly halted due to military strikes and a severe spike in GPS and AIS jamming attacks since the start of the U.S.-Israeli conflict with Iran. Over 1,100 ships have experienced disruptions, with many showing false locations inland at sites like airports and a nuclear power plant. Maritime officials warn of a "critical" risk, as the electronic interference creates dangerous navigation hazards and has already damaged several tankers. The main topics covered are the disruption of a key global oil shipping route, the escalation of electronic warfare targeting navigation systems, and the expanding regional conflict's impact on maritime safety.
-
infosec 5A sophisticated phishing campaign uses a fake Google security page to trick users into installing a malicious Progressive Web App (PWA). This PWA steals one-time passcodes, cryptocurrency wallet addresses, and clipboard data, while also acting as a network proxy for the attacker. The campaign includes a companion Android app that requests extensive permissions to steal sensitive information and capture keystrokes. The main topics covered are the phishing attack method, the malicious PWA's capabilities, and the associated Android malware.