Latest Arabian cybersecurity news covering global cyber threats, ransomware attacks, data breaches, digital espionage, and technology security developments affecting governments, companies and individuals.
Medusa ransomware operators have compromised more than 500 organisations across critical infrastructure sectors, prompting US cyber authorities to warn that the group is exploiting vulnerabilities faster and using increasingly aggressive methods to penetrate networks…
A critical authentication flaw in NASA’s open-source ground-control software could allow network attackers to obtain a valid session and transmit arbitrary…
An autonomous security agent developed by Wiz uncovered and exploited a serious vulnerability in a Snowflake GitHub Actions workflow that had…
SafePal has warned nearly 40,000 customers that their personal information was exposed after attackers exploited a flaw in an order-tracking system,…
Cl0p has claimed a sweeping data-theft campaign affecting nearly 50 companies worldwide, placing Shell, Philips, GE and financial technology group Fiserv…
A newly analysed macOS information-stealing malware is targeting cryptocurrency holdings, passwords and Apple Keychain data after victims are tricked into executing…
Microsoft is preparing a major change to enterprise identity security, making passkeys the default authentication experience in Entra ID from September…
VINclarity has launched an investigation into what it says is a coordinated campaign aimed at damaging its reputation across Reddit, YouTube,…
Cybersecurity researchers have found evidence that ExfilSquad obtained sensitive information belonging to at least 13 organisations, strengthening earlier claims by the…
The FBI and NCAA have launched a joint effort to protect college athletes from hackers seeking private images and using stolen…
North Korea-linked hackers exploited a previously unknown Windows vulnerability to gain the highest level of system privileges while targeting defence, aerospace…
Cursor has patched a security flaw in its command-line coding agent that allowed a malicious repository to execute commands on a…
Suspected China-linked hackers used autonomous artificial intelligence agents to compromise Taiwan government systems, marking a significant escalation in the use of…
Washington’s accelerating adoption of autonomous artificial intelligence is colliding with warnings from cybersecurity specialists that AI agents could inadvertently breach government…
Valve has warned Steam hardware customers across Europe that their personal and order information was likely stolen during a cyberattack on…
The compromise of LiteLLM has sharpened concerns that software underpinning artificial intelligence systems is becoming a strategic target for attackers seeking…
Hackers penetrated a Polish combined heat and power plant through a private cellular network, manipulating industrial controllers and temporarily halting cogeneration…
GitHub has expanded Dependabot malware alerts across major open-source package ecosystems, widening automated protection against compromised and deliberately malicious software dependencies…
A coordinated campaign involving 77 counterfeit extensions on the Open VSX Registry exposed sensitive information about developer machines, Git repositories and…
A Windows Hello for Business authentication technique can allow malware operating inside an unlocked Windows session to gain access to Microsoft…
A security weakness in Anthropic’s Claude Code could allow a malicious pull request to trigger arbitrary code execution on a developer’s…
A Canadian hacker has pleaded guilty to taking part in a sweeping cybercrime operation that compromised accounts belonging to more than…
A self-propagating malware campaign has compromised more than 430 npm packages, exposing software projects linked to dependencies that collectively record about…
Ransomware operators are using Ethereum smart contracts to conceal command-and-control addresses, giving malware a resilient way to locate attacker-controlled servers even…
A WhatsApp account takeover scam is spreading through messages that ask users to vote for a friend or relative in an…
Apache NiFi has released version 2.11.0 to address four vulnerabilities in its web application programming interface, including high-severity weaknesses that could…
Microsoft has warned travellers and organisations about a Russian state-linked cyberespionage campaign that manipulates hotel and venue Wi-Fi networks to steal…
A newly identified malware operation has used a counterfeit Python component to bypass security scrutiny, disable parts of Microsoft Defender and…