Latest Arabian cybersecurity news covering global cyber threats, ransomware attacks, data breaches, digital espionage, and technology security developments affecting governments, companies and individuals.
Cybersecurity researchers have identified a text-message scam that places recipients’ names on fabricated Facebook Marketplace listings, encouraging them to respond to enquiries about goods they never offered for sale. The scheme, described by Malwarebytes…
A high-severity vulnerability in React Server Components can allow unauthenticated attackers to overwhelm vulnerable Next. js servers through specially crafted HTTP…
Britain, the United States and international partners have issued a joint cybersecurity warning identifying malicious operations enabled by China’s Integrity Technology…
Hackers have compromised hundreds of GitHub repositories by inserting malicious automation workflows designed to steal SSH keys, cloud credentials and access…
Ernst & Young has notified clients linked to Goldman Sachs’ wealth management business and hedge fund Man Group that personal and…
Cyber attackers are embedding concealed instructions for artificial intelligence assistants inside phishing emails, creating messages designed to deceive both human recipients…
Nikkei has disclosed unauthorised access to two employee cloud accounts, with one compromised Microsoft 365 mailbox used to send about 9,000…
Red Hat and IBM have identified and remediated more than 400 previously unknown vulnerabilities in widely used Java libraries through their…
A September security analysis of breaches affecting Rockstar Games has highlighted how compromised identities, third-party integrations and development assets can defeat…
Cybersecurity researchers have uncovered a human-operated phishing platform that impersonates advertising products linked to ChatGPT, Claude, Gemini and other artificial intelligence…
A security investigation has raised fresh concerns over enterprise AI governance after finding more than 13,000 internal images publicly accessible on…
A newly public PlayStation 5 jailbreak called Relapse has opened kernel-level access on consoles running system software 7.00 through 13.60, including…
Amazon Web Services has patched two high-severity vulnerabilities in the Python software development kit for Amazon Bedrock AgentCore that could allow…
Maintainers of the Model Context Protocol Python SDK have patched a high-severity OAuth weakness that could let a malicious MCP server…
Security researchers have reconstructed how hundreds of OpenAI evaluation agents used almost one million public URLs while escaping restricted web access…
Cybersecurity researchers have identified a previously undocumented Windows remote access trojan that can continuously stream an infected computer’s display to its…
Kiteworks has withdrawn its broad precautionary shutdown recommendation for most customers after an emergency security review isolated a critical vulnerability to…
Security researchers say they identified 10 suspicious domain names weeks before they were registered, then watched the addresses become active as…
Salesforce has patched three vulnerabilities in its Agentforce artificial intelligence platform that researchers said could have enabled unauthenticated attackers to extract…
A Linux kernel vulnerability present since 2011 can allow an unprivileged local attacker to gain root privileges and escape a Docker…
A identified Android banking trojan called RemControl is giving operators remote control over infected phones while stealing banking credentials through overlays,…
A malicious Firefox extension posing as a PDF identity-verification tool has been found hijacking Google accounts by stealing authenticated session cookies…
cPanel has issued security updates for a high-severity permissions vulnerability that could allow a local user on a shared server to…
Hundreds of GitHub App private keys exposed in public code remain valid, allowing authentication to GitHub and, in some cases, access…
A suspected Chinese-speaking cyber actor has exploited a two-vulnerability WordPress attack chain to breach at least 49 organisations in 29 countries,…
Microsoft will disable SMS as a primary sign-in method for Microsoft Entra ID workforce tenants from February 1, 2027, ending a…
Cybersecurity researchers have documented two attacks involving Settra ransomware, exposing a repeatable post-compromise playbook that combines legitimate remote-management software, recovery sabotage…
North Korean cyber operators posing as recruiters have compromised at least 30,000 devices in more than 100 countries, using fraudulent job…