Latest Arabian cybersecurity news covering global cyber threats, ransomware attacks, data breaches, digital espionage, and technology security developments affecting governments, companies and individuals.
Thai Airways has disclosed that about 60,529 passenger booking records may have been accessed without authorisation through systems operated by travel technology provider Amadeus, although passengers’ credit card details were not affected. The airline…
Google has issued an emergency security update for its Chrome browser after confirming that attackers are exploiting a high-severity vulnerability affecting…
A cyberespionage operation linked to Russia’s APT29 hacking group has targeted vulnerable iPhones and Android devices through compromised websites, using previously…
OpenAI has disclosed that an automated cybersecurity system generated working exploits for 948 distinct Linux kernel privilege escalation vulnerabilities during a…
Cybercriminals impersonating OpenAI are directing ChatGPT subscribers to fraudulent payment pages hosted on rotating WordPress websites, with operators able to demand…
A suspected China-linked hacking operation compromised Palo Alto Networks firewalls and penetrated a US government-affiliated network, using chained software vulnerabilities to…
GitHub has made Copilot Fusion generally available, introducing an artificial intelligence orchestration system that automatically selects and coordinates multiple AI models…
Cybercriminals have distributed malicious software disguised as ChatGPT and Claude desktop applications, exploiting legitimate digitally signed installers to execute malware on…
Blockchain security company SlowMist has uncovered malicious JavaScript associated with Udesk customer-service software that can capture website visitors’ login information and…
OpenAI has patched a vulnerability in its application programming interface that allowed security researchers to extract protected reasoning traces from an…
Ukraine’s cybersecurity authorities have warned that hackers are infiltrating Dahua surveillance cameras and video recorders through predictable serial numbers, weak passwords…
Cybercriminals are exploiting Instagram advertisements and neglected website tracking code to infect vulnerable iPhones with powerful spyware, according to a joint…
Electrum has patched a security flaw that allowed malicious servers to divert bitcoin payments when wallet users attempted to increase transaction…
Attackers infiltrated LiteLLM’s GitHub organisation eleven days before distributing malware through its software releases, with newly recovered records showing credential-stealing workflows…
Cybercriminals penetrated Microsoft 365 accounts at 79 organisations during a coordinated campaign involving stolen authentication tokens, phishing and attempts to conceal…
Cybersecurity researchers have uncovered a campaign targeting diplomatic organisations in three Central Asian countries with BlackX, a bootkit capable of circumventing…
North Korea-linked hackers have incorporated post-quantum cryptography into a cyberespionage campaign against South Korean organisations, encrypting malware deliveries while exploiting widely…
Britain’s data protection regulator has reprimanded two Welsh organisations after ransomware attackers exploited a 12-year-old account protected by the password “Password1”,…
US cybersecurity authorities have warned that SafePay ransomware operators have compromised at least 600 organisations worldwide, including critical infrastructure providers, and…
PHP developers have released emergency security updates addressing two critical vulnerabilities after details of the flaws surfaced online ahead of their…
Businesses are deploying artificial intelligence agents faster than they can monitor their behaviour, leaving gaps in security, accountability and cost control,…
Security researchers have warned that developers using older versions of OpenCode remain exposed to a critical remote code execution vulnerability because…
ConnectWise has kept three cloud services offline after attackers exploited compromised application credentials to access Microsoft 365 customer environments, leaving technology…
Google has warned that a suspected China-linked espionage group exploited a critical vulnerability in BeyondTrust remote support systems, gaining privileged access…
ConnectWise has suspended its Cloud Backup service and disabled seven application identities after attackers exploited compromised vendor credentials to gain unauthorised…
Anthropic says its Claude artificial intelligence model has reconstructed the origins of five cryptographic parameters supplied by the US National Security…
Cybersecurity researchers have identified more than 20,000 Cloudflare Pages subdomains used by a longstanding operation that redirects internet users to fraudulent…
Microsoft and cybersecurity partners have disrupted a global phishing network linked to more than one billion fraudulent messages, targeting infrastructure supplied…