Latest Arabian cybersecurity news covering global cyber threats, ransomware attacks, data breaches, digital espionage, and technology security developments affecting governments, companies and individuals.
Ubiquiti has patched a chain of critical UniFi OS Server vulnerabilities that could allow an unauthenticated attacker with network access to execute commands with root privileges on exposed systems, raising concerns for organisations that…
Cybersecurity teams are warning that VECT 2.0, a ransomware strain promoted as a recovery-for-payment tool, can leave victims with files that…
A China-linked cyber-espionage group tracked as VerdantBamboo has been tied to a BRICKSTORM malware operation targeting Linux-based virtual appliances, firewalls and…
Developers using npm packages were put on alert after a fast-moving supply chain attack compromised at least 57 packages and pushed…
Hackers are using large-scale online advertising campaigns to deliver FlutterShell, a newly identified macOS backdoor that marks a sharper turn in…
Malicious agent-skill uploads have slipped past detection tools used by ClawHub, Cisco and Vercel-linked scanning services, raising fresh concern over the…
Cybercriminal groups are shifting phishing campaigns from fake login pages to malware-led intrusions that silently extract passwords, browser cookies, session tokens,…
Cyber espionage operators are using a newly documented Windows backdoor called HazyBeacon to target government networks in Southeast Asia, turning legitimate…
Security researchers have warned that a Windows Search URI handler weakness can leak NTLMv2 hashes to remote attackers through a crafted…
Attackers have compromised Red Hat’s official @redhat-cloud-services namespace on npm, inserting credential-stealing malware into dozens of package releases used in cloud…
A threat actor has used artificial intelligence coding tools to build and refine malware intended to bypass endpoint detection and response…
Anthropic is expanding access to Claude Mythos Preview through Project Glasswing, widening a controlled cybersecurity programme at a time when North…
Hackers have used 34 malicious open-source packages across npm, PyPI and Crates. io to steal cloud credentials, crypto wallet data, SSH…
A critical weakness in Flowise has exposed self-hosted AI workflow servers to full compromise, after technical details and working exploit code…
Palo Alto Networks customers are facing renewed pressure to patch internet-facing security systems after attackers began exploiting a high-severity authentication bypass…
Hackers are using targeted spearphishing emails to deploy AZUREVEIL, an Adaptix-based command-and-control agent, against government and enterprise-linked targets in the Czech…
SolyxImmortal, a Python-based information-stealing malware, is drawing attention from cyber defenders because of its ability to combine browser credential theft, document…
Cybercriminals are exploiting trust in artificial intelligence platforms by abusing shared ChatGPT and Claude content links to steer users towards malware…
A destructive cyber campaign tied to Iran-linked operators has targeted organisations in the Middle East and abroad, deleting virtual machines, databases,…
Instagram is under renewed pressure over claims that a weakness in Meta’s AI-assisted support and account recovery systems could allow attackers…
Hackers are using fake Signal support messages to trick users into handing over backup recovery keys, opening a new front in…
A malicious NuGet package posing as a Sicoob software development kit has exposed sensitive banking authentication data, intensifying concerns over attacks…
Trusted software development tools have become a prime attack channel as adversaries target the systems that programmers use to build, test…
Russia-linked cyber operators tracked as GREYVIBE have used generative artificial intelligence tools including ChatGPT and Google Gemini to widen cyber-espionage operations…
Google has made Device Bound Session Credentials generally available in Chrome for Windows, widening access to a security feature designed to…
Cybersecurity teams are racing to patch a Palo Alto Networks authentication-bypass flaw after confirmed exploitation against exposed GlobalProtect deployments raised the…
China-linked hacking groups have used the Middle East war to intensify cyber-espionage attempts against maritime, energy and political targets across the…
Cybercriminals are shifting from crude misspellings of trusted software packages to more convincing names that appear to belong inside legitimate developer…