Latest Arabian cybersecurity news covering global cyber threats, ransomware attacks, data breaches, digital espionage, and technology security developments affecting governments, companies and individuals.
A newly analysed macOS information-stealing malware is targeting cryptocurrency holdings, passwords and Apple Keychain data after victims are tricked into executing malicious commands through ClickFix social-engineering attacks. The malware, written in the Go programming…
Cybersecurity researchers have found evidence that ExfilSquad obtained sensitive information belonging to at least 13 organisations, strengthening earlier claims by the…
The FBI and NCAA have launched a joint effort to protect college athletes from hackers seeking private images and using stolen…
North Korea-linked hackers exploited a previously unknown Windows vulnerability to gain the highest level of system privileges while targeting defence, aerospace…
Cursor has patched a security flaw in its command-line coding agent that allowed a malicious repository to execute commands on a…
Suspected China-linked hackers used autonomous artificial intelligence agents to compromise Taiwan government systems, marking a significant escalation in the use of…
Washington’s accelerating adoption of autonomous artificial intelligence is colliding with warnings from cybersecurity specialists that AI agents could inadvertently breach government…
Valve has warned Steam hardware customers across Europe that their personal and order information was likely stolen during a cyberattack on…
The compromise of LiteLLM has sharpened concerns that software underpinning artificial intelligence systems is becoming a strategic target for attackers seeking…
Hackers penetrated a Polish combined heat and power plant through a private cellular network, manipulating industrial controllers and temporarily halting cogeneration…
GitHub has expanded Dependabot malware alerts across major open-source package ecosystems, widening automated protection against compromised and deliberately malicious software dependencies…
A coordinated campaign involving 77 counterfeit extensions on the Open VSX Registry exposed sensitive information about developer machines, Git repositories and…
A Windows Hello for Business authentication technique can allow malware operating inside an unlocked Windows session to gain access to Microsoft…
A security weakness in Anthropic’s Claude Code could allow a malicious pull request to trigger arbitrary code execution on a developer’s…
A Canadian hacker has pleaded guilty to taking part in a sweeping cybercrime operation that compromised accounts belonging to more than…
A self-propagating malware campaign has compromised more than 430 npm packages, exposing software projects linked to dependencies that collectively record about…
Ransomware operators are using Ethereum smart contracts to conceal command-and-control addresses, giving malware a resilient way to locate attacker-controlled servers even…
A WhatsApp account takeover scam is spreading through messages that ask users to vote for a friend or relative in an…
Apache NiFi has released version 2.11.0 to address four vulnerabilities in its web application programming interface, including high-severity weaknesses that could…
Microsoft has warned travellers and organisations about a Russian state-linked cyberespionage campaign that manipulates hotel and venue Wi-Fi networks to steal…
A newly identified malware operation has used a counterfeit Python component to bypass security scrutiny, disable parts of Microsoft Defender and…
CareCloud has begun notifying about 345,000 people that hackers accessed and removed sensitive medical, financial and identity information from an electronic…
A Chinese-speaking hacker used DeepSeek artificial intelligence to autonomously identify vulnerable systems, obtain publicly available exploit code and launch attacks against…
Amazon Web Services has attributed a series of compromises involving widely used npm software packages, including Axios, Debug and Chalk, to…
A custom ransomware family linked to the Toy Ghouls cybercrime group is targeting Windows, Linux and VMware ESXi systems, giving its…
LogoKit has evolved into a cloud-based phishing platform capable of constructing customised fake login pages for individual victims as soon as…
Google has released Chrome 151 with fixes for 370 security vulnerabilities, including seven critical flaws capable of exposing users and organisations…
A high-severity flaw in Firefox’s JavaScript engine can allow attackers to compromise unpatched Tor Browser installations when a user visits a…