Latest Arabian cybersecurity news covering global cyber threats, ransomware attacks, data breaches, digital espionage, and technology security developments affecting governments, companies and individuals.
A suspected China-linked hacking operation compromised Palo Alto Networks firewalls and penetrated a US government-affiliated network, using chained software vulnerabilities to obtain administrator-level control, cybersecurity investigators have disclosed. Palo Alto Networks confirmed on October…
Blockchain security company SlowMist has uncovered malicious JavaScript associated with Udesk customer-service software that can capture website visitors’ login information and…
OpenAI has patched a vulnerability in its application programming interface that allowed security researchers to extract protected reasoning traces from an…
Ukraine’s cybersecurity authorities have warned that hackers are infiltrating Dahua surveillance cameras and video recorders through predictable serial numbers, weak passwords…
Cybercriminals are exploiting Instagram advertisements and neglected website tracking code to infect vulnerable iPhones with powerful spyware, according to a joint…
Electrum has patched a security flaw that allowed malicious servers to divert bitcoin payments when wallet users attempted to increase transaction…
Attackers infiltrated LiteLLM’s GitHub organisation eleven days before distributing malware through its software releases, with newly recovered records showing credential-stealing workflows…
Cybercriminals penetrated Microsoft 365 accounts at 79 organisations during a coordinated campaign involving stolen authentication tokens, phishing and attempts to conceal…
Cybersecurity researchers have uncovered a campaign targeting diplomatic organisations in three Central Asian countries with BlackX, a bootkit capable of circumventing…
North Korea-linked hackers have incorporated post-quantum cryptography into a cyberespionage campaign against South Korean organisations, encrypting malware deliveries while exploiting widely…
Britain’s data protection regulator has reprimanded two Welsh organisations after ransomware attackers exploited a 12-year-old account protected by the password “Password1”,…
US cybersecurity authorities have warned that SafePay ransomware operators have compromised at least 600 organisations worldwide, including critical infrastructure providers, and…
PHP developers have released emergency security updates addressing two critical vulnerabilities after details of the flaws surfaced online ahead of their…
Businesses are deploying artificial intelligence agents faster than they can monitor their behaviour, leaving gaps in security, accountability and cost control,…
Security researchers have warned that developers using older versions of OpenCode remain exposed to a critical remote code execution vulnerability because…
ConnectWise has kept three cloud services offline after attackers exploited compromised application credentials to access Microsoft 365 customer environments, leaving technology…
Google has warned that a suspected China-linked espionage group exploited a critical vulnerability in BeyondTrust remote support systems, gaining privileged access…
ConnectWise has suspended its Cloud Backup service and disabled seven application identities after attackers exploited compromised vendor credentials to gain unauthorised…
Anthropic says its Claude artificial intelligence model has reconstructed the origins of five cryptographic parameters supplied by the US National Security…
Cybersecurity researchers have identified more than 20,000 Cloudflare Pages subdomains used by a longstanding operation that redirects internet users to fraudulent…
Microsoft and cybersecurity partners have disrupted a global phishing network linked to more than one billion fraudulent messages, targeting infrastructure supplied…
Artificial intelligence played a role in 84% of ransomware attacks experienced by surveyed organisations, while 87% reported attacks targeting identity infrastructure,…
Ransomware gangs are threatening employees’ families while deploying artificial intelligence in attacks on corporate systems, a global survey published on Wednesday…
Meta has begun notifying approximately 1,500 people after attackers accessed its GitHub repositories using stolen employee credentials, obtaining software code and…
Companies generating at least $1 billion annually are more than twice as likely as smaller businesses to knowingly leave serious software…
A former OpenAI engineer has appeared in a San Francisco federal court accused of secretly installing a recording device in a…
Hackers are actively exploiting a critical vulnerability in the Bricksforge WordPress plugin that allows outsiders to upload malicious files and execute…
Cybersecurity researchers have identified a text-message scam that places recipients’ names on fabricated Facebook Marketplace listings, encouraging them to respond to…