Cybersecurity

Refresh

Latest Arabian cybersecurity news covering global cyber threats, ransomware attacks, data breaches, digital espionage, and technology security developments affecting governments, companies and individuals.

Cybersecurity

Malware hides behind trusted downloads

Cyber criminals are pushing a Windows information stealer called NWHStealer through bogus software downloads that masquerade as Proton VPN installers, gaming mods and hardware utilities, in a campaign that security researchers say relies less…

Latest stories

More from Cybersecurity
Google Discover scam turns AI into bait
Cybersecurity

Google Discover scam turns AI into bait

Google’s Discover feed has become the latest battleground in the cybercrime economy after researchers uncovered a large-scale operation that used AI-written…

Cybersecurity

Splunk flaw opens risky code path

Splunk has disclosed a high-severity security flaw that can allow remote code execution in affected Splunk Enterprise and Splunk Cloud Platform…

Nginx-ui breach risk grows under live attacks
Cybersecurity

Nginx-ui breach risk grows under live attacks

Attackers are exploiting a critical flaw in nginx-ui, an open-source web interface used to manage Nginx servers, exposing organisations to unauthorised…

Cybersecurity

Signed adware campaign strips endpoint defences

  A digitally signed software operation tied to Dragon Boss Solutions LLC has been linked to the disabling of antivirus protections…

Cybersecurity

ENISA’s CVE rise reshapes cyber oversight

Europe’s cybersecurity agency has moved to strengthen its influence over the global system used to identify and catalogue software flaws, with…

Cybersecurity

Plugin trust crisis hits WordPress

More than 30 WordPress plugins tied to the developer Essential Plugin were taken offline after a hidden backdoor was found in…

Cybersecurity

Chrome patch races to shut critical holes

Google has issued an emergency-style security update for Chrome after disclosing 31 vulnerabilities in the desktop browser, including five rated critical,…

Cybersecurity

Middle East login assaults target firewalls

A sharp jump in brute-force attacks against SonicWall and Fortinet devices has put security teams on alert, after Barracuda said such…

Cybersecurity

Chrome add-ons hid a broad data trap

More than 100 Chrome extensions presented as harmless tools for games, social media sidebars and translation have been tied to a…

Cybersecurity

Dragon Boss breach widens supply chain alarm

What looked like a nuisance adware issue inside managed IT environments has emerged as a broader cyber-security warning, after Huntress said…

MSBuild abuse deepens stealth on Windows
Cybersecurity

MSBuild abuse deepens stealth on Windows

MSBuild, a legitimate Microsoft build tool embedded in many Windows and developer environments, is drawing renewed scrutiny after fresh threat research…

Cybersecurity

W3LL takedown exposes phishing’s industrial scale

Federal investigators in the United States, working with Indonesian police, have dismantled the W3LL phishing network, a cybercrime operation that authorities…

Cybersecurity

Axios flaw exposes cloud systems

A newly disclosed security flaw in Axios, one of the most widely used HTTP client libraries in the JavaScript ecosystem, has…

Cybersecurity

Mirax expands the mobile fraud playbook

Mirax, an emerging Android banking trojan being marketed as a malware-as-a-service operation, is drawing attention from mobile security researchers after reports…

Cybersecurity

Basic-Fit breach rattles Europe’s gym members

Basic-Fit has disclosed a cyber breach affecting about one million members across several European markets, with roughly 200,000 of those accounts…

Cybersecurity

Cyber threat closes in on water controls

Iran-linked cyber operatives using the CyberAv3ngers banner are again in the spotlight after U. S. authorities warned on April 7 that…

Cybersecurity

Chrome ties stolen logins to one machine

Google has moved to harden Chrome against one of cybercrime’s most effective tactics by making Device Bound Session Credentials publicly available…

Adobe rushes patch for Reader flaw
Cybersecurity

Adobe rushes patch for Reader flaw

Adobe has issued an emergency update for Acrobat and Reader after confirming that a zero-day vulnerability tracked as CVE-2026-34621 is being…

Cybersecurity

WordPress membership flaw opens admin path

A critical security flaw in the User Registration & Membership plugin for WordPress has exposed thousands of websites to the risk…

Tomcat patch cycle exposes a deeper risk
Cybersecurity

Tomcat patch cycle exposes a deeper risk

Apache Tomcat users are being urged to move quickly after the Apache Software Foundation disclosed a set of security flaws that…

Cybersecurity

Durov’s broadside puts chat privacy under glare

Pavel Durov, the Telegram founder, has escalated a public attack on WhatsApp, calling its claim of “end-to-end encryption by default” a…

Spyware trap shadows MENA dissent
Cybersecurity

Spyware trap shadows MENA dissent

Hackers posing as trusted messaging and communications services have mounted a sustained surveillance campaign across the Middle East and North Africa,…

Cybersecurity

Copilot flaw exposed hidden data paths

GitHub Copilot Chat has been shown to carry a serious prompt-injection weakness that allowed a researcher to demonstrate how secrets, private…

Cybersecurity

Exposed Rockwell controllers raise Iran cyber fears

More than 5,000 Rockwell Automation and Allen-Bradley programmable logic controllers are exposed to the public internet, sharpening concern across United States…

Cybersecurity

Wallet apps face hidden Android supply-chain risk

Millions of Android users, including a large share of cryptocurrency wallet customers, were exposed to a software supply-chain weakness after a…

AI tools widen Mexico breach alarm
Cybersecurity

AI tools widen Mexico breach alarm

Commercial artificial intelligence tools were used as operational components in a cyber campaign that hit nine Mexican government organisations, according to…