Cybersecurity

Refresh

Latest Arabian cybersecurity news covering global cyber threats, ransomware attacks, data breaches, digital espionage, and technology security developments affecting governments, companies and individuals.

Cybersecurity

Chrome hardens defences against cookie theft

Google has begun rolling out a new Chrome security feature designed to blunt one of the most effective tools used by cybercriminals to hijack online accounts: stolen session cookies. The protection, called Device Bound…

Latest stories

More from Cybersecurity
Cybersecurity

Ninja Forms flaw leaves WordPress exposed

A critical security flaw in the Ninja Forms File Uploads add-on has put thousands of WordPress sites at risk, with researchers…

Cybersecurity

AWS patches flaws in research portal

Amazon Web Services has patched three high-severity vulnerabilities in its open-source Research and Engineering Studio platform, closing weaknesses that could have…

Cybersecurity

Bitter link emerges in MENA phishing case

A cross-border espionage campaign that targeted journalists, civil society figures and some government-linked entities across the Middle East and North Africa…

Cybersecurity

Google flags BPO helpdesk extortion threat

Google has warned that a financially motivated cyber group tracked as UNC6783 is targeting business process outsourcers and corporate helpdesks in…

Cybersecurity

STX RAT deepens stealth malware risks

STX RAT, a newly identified remote access trojan, has drawn attention in the cyber-security sector after researchers tied it to an…

Cybersecurity

SVG trick masks Magento card skimmer

Attackers have planted a stealthy Magecart credit-card skimmer on nearly 100 Magento-based online shops by hiding the malicious code inside an…

Script Editor becomes Mac malware gateway
Cybersecurity

Script Editor becomes Mac malware gateway

Atomic Stealer operators have opened a fresh lane into Apple computers by shifting a popular ClickFix scam away from Terminal and…

Cybersecurity

FBI cuts off APT28 router trap

U. S. authorities have dismantled the domestic arm of a cyber-espionage network that officials say was run by APT28, the Russian…

Cybersecurity

GitLab rushes fixes for fresh flaws

GitLab has issued a security update covering multiple vulnerabilities in its Community Edition and Enterprise Edition products, with the latest patch…

Cybersecurity

Gemini key flaw widens Android app risk

Google’s handling of API keys has come under fresh scrutiny after security researchers said Android applications are exposing credentials that can…

Cybersecurity

Palo Alto fixes Teams-linked XSOAR risk

Palo Alto Networks has issued a high-priority security update for a flaw in its Cortex XSOAR and Cortex XSIAM platforms that…

Cybersecurity

US utilities face OT cyber pressure

Iran-affiliated cyber actors are targeting internet-facing industrial control equipment used by parts of the United States’ critical infrastructure, with federal agencies…

Quantum threat to Bitcoin meets reality
Cybersecurity

Quantum threat to Bitcoin meets reality

Fresh academic work is pushing back against some of the louder claims surrounding quantum computers and Bitcoin, arguing that one feared…

Cybersecurity

Catfishing and sock puppets as a public threat

  What used to be dismissed as internet oddity is moving into the mainstream of fraud prevention, platform regulation and organised…

Cybersecurity

ComfyUI breach wave targets AI servers

Hackers are exploiting internet-exposed ComfyUI servers in a monetisation campaign that turns poorly secured AI image-generation systems into cryptocurrency mining machines…

Cybersecurity

UK flags router breach by APT28

Russian military-linked hackers have hijacked vulnerable internet routers to steal passwords, authentication tokens and other sensitive data, according to a new…

Cybersecurity

Microsoft flags faster Medusa break-ins

  Microsoft has warned that a threat actor it tracks as Storm-1175 is exploiting vulnerabilities in internet-facing systems at high speed…

Iran cyber campaign probes Gulf cloud defences
Cybersecurity

Iran cyber campaign probes Gulf cloud defences

Iran-linked hackers mounted a coordinated password-spraying operation against Microsoft 365 tenants across the Middle East in March, with Israel and the…

Cybersecurity

Guardrails urged for AI-coded software

Security leaders are being told to treat “vibe coding” as a governance issue, not merely a productivity trend, as AI assistants…

Cybersecurity

PyPI proxy trap siphons AI prompts

A Python package presented as a privacy-first shortcut to AI models has been unmasked as a supply-chain threat that quietly captures…

Cybersecurity

GitHub shortcut ruse hits South Korean networks

A malware campaign targeting organisations in South Korea is using weaponised Windows shortcut files and GitHub’s infrastructure to slip past standard…

DeepMind warns of web traps for AI
Cybersecurity

DeepMind warns of web traps for AI

Google DeepMind has warned that autonomous AI agents face a widening security risk from malicious web content designed not for humans,…

Cybersecurity

Node.js gatekeepers face supply chain trap

Attackers behind the compromise of the widely used Axios package have widened their campaign, turning from code repositories to the people…

ShareFile server flaws trigger patch scramble
Cybersecurity

ShareFile server flaws trigger patch scramble

A newly disclosed exploit chain in Progress ShareFile has raised fresh concern over the security of enterprise file-transfer systems after researchers…

Cybersecurity

GitHub channel masks malware stages

GitHub has been drawn into another cyber threat case after researchers uncovered a multi-stage malware campaign using malicious Windows shortcut files…