Cybersecurity

Refresh

Latest Arabian cybersecurity news covering global cyber threats, ransomware attacks, data breaches, digital espionage, and technology security developments affecting governments, companies and individuals.

Cybersecurity

ClawHub namespace lapse exposes agent plugin risk

ClawHub has moved to contain a supply-chain weakness in its plugin registry after researchers found 23 code-executing packages published under official-looking @openclaw/ and @clawhub/ scopes by accounts with no verified link to either project.…

Latest stories

More from Cybersecurity
Cybersecurity

AryStinger turns old routers into stealth proxies

AryStinger, a newly analysed botnet family, has compromised more than 4,000 outdated routers and begun turning ageing network devices into covert…

Cybersecurity

Apple closes Beats microphone security gap

Apple has issued a firmware update for Beats Studio Buds after confirming a Bluetooth security flaw that could allow an attacker…

Cybersecurity

Firmware trust gap widens over UEFI flaw

Security teams have been urged to update the UEFI Forbidden Signature Database after a newly disclosed weakness showed that trusted vendor-signed…

Cybersecurity

GitBait phishing ring targets Mexican bank users

A long-running phishing operation has turned GitHub Pages into a low-cost staging ground for fake banking portals aimed at customers of…

Cybersecurity

JetBrains plugin scam puts AI keys at risk

A malware campaign on the JetBrains Marketplace has put developer credentials at risk after at least 15 AI-themed plugins were found…

Cybersecurity

NVIDIA plugs NeMo flaws affecting AI pipelines

NVIDIA has patched three high-severity vulnerabilities in its NeMo Framework, including a Linux command-injection flaw that could let low-privileged attackers run…

Cybersecurity

Intersec Saudi panels set resilience and fire agenda

Intersec Saudi Arabia has formed two advisory committees to steer the conference agenda for its 2026 edition, bringing senior security, aviation,…

Cybersecurity

WordPress plugin hijack plants hidden backdoors

Attackers tampered with JavaScript served by three widely used WordPress marketing plugins, exposing more than 1.2 million websites to rogue administrator…

Cybersecurity

Jenkins attacks expose CI pipeline risk

Attackers are probing vulnerable Jenkins servers after disclosure of a high-severity deserialisation flaw that can let a low-privileged user impersonate others,…

Cybersecurity

Chrome search hijack exposes 758,000 users

A network of 23 Chrome browser extensions has exposed about 758,000 users to privacy and phishing risks by taking control of…

Cybersecurity

Nintendo breach claim puts HR data at risk

Nintendo is facing an unverified data-extortion claim after a threat actor alleged it obtained nearly 859MB of employee-linked corporate records and…

Cybersecurity

XRP steadies as extreme fear fuels rebound hopes

XRP held near $1.22 on Tuesday, stabilising after a bruising sell-off as extreme bearish commentary around the token began drawing attention…

Cybersecurity

BingX expands stock trading push with carnival

BingX has launched a stock-focused trading campaign with a prize pool of more than $1m, stepping up its attempt to draw…

Cybersecurity

Velvet Ant hid inside Linux login stack

A China-nexus hacking group maintained covert access to a segregated critical-infrastructure network for nearly a decade by tampering with Linux authentication…

Cybersecurity

AudiA6 takedown hits ransomware cash channels

A cross-border policing operation has dismantled AudiA6, a cryptocurrency laundering service accused of helping ransomware gangs and other cybercriminals move more…

Cybersecurity

Routers deepen APT28’s espionage reach

Russian military-linked hackers tracked as APT28 have shifted cyber operations into compromised internet routers, using the MooBot botnet and vulnerable edge…

Cybersecurity

AI sharpens phishing despite lower volumes

Phishing is entering a leaner but more dangerous phase, as attackers use artificial intelligence, encrypted delivery and session hijacking kits to…

Cybersecurity

Fake AI guides mask AsyncRAT campaign

Cybercriminals are using counterfeit AI learning material and developer guides to lure professionals into opening files that trigger a multi-stage malware…

Cybersecurity

Copilot brings security checks to terminal

GitHub has moved security scanning closer to the developer’s keyboard with a new Copilot CLI command that reviews code changes before…

Cybersecurity

Fake bug reports expose coding agents

AI coding agents can be manipulated into running attacker-chosen code through ordinary-looking bug reports, exposing a fresh security gap in the…

Cybersecurity

Shadow AI widens corporate control gaps

Companies are losing visibility over how workers use artificial intelligence, as staff turn to ChatGPT, Microsoft Copilot, Claude and other tools…

Cybersecurity

phpBB rushes patch for silent account hijack

phpBB administrators have been urged to upgrade immediately after researchers disclosed two authentication weaknesses that could allow attackers to impersonate forum…

Cybersecurity

Short video scams widen malware threat

Hackers are turning TikTok and Instagram Reels into malware delivery channels, using polished tutorial-style clips that promise free premium software and…

Cybersecurity

Defender flaw exposes Windows systems to takeover

A newly disclosed Microsoft Defender exploit has raised fresh concern among security teams after researchers said it could allow a local…

Cybersecurity

PyPI attack widens developer supply-chain risk

A fast-moving malware campaign tied to Shai-Hulud has expanded its attack on software developers through newly weaponised Python Package Index artefacts,…

Cybersecurity

Apache update closes server security gaps

Apache HTTP Server 2.4.68 has been released with fixes for 13 security vulnerabilities affecting core functions and widely used modules, prompting…

Cybersecurity

Fake coding tests expose crypto developers

Software developers across close to 100 organisations have been targeted by a likely North Korea-linked hacking operation that used fake recruitment…