Author: Debolina Barik
Debolina Barik is a cybersecurity journalist at CyberNexora News, covering data breaches, ransomware attacks, malware threats, phishing scams, and emerging cybersecurity trends across India and globally. She focuses on delivering accurate, timely, and actionable security news for businesses and individuals.
Introduction: PDPL SaaS Compliance — Why It Matters PDPL SaaS compliance is increasingly important for software companies that collect, store, or process personal data connected to individuals in Saudi Arabia. SaaS providers may operate from outside the Kingdom while still handling data that brings Saudi privacy requirements into scope. For SaaS businesses, compliance is not limited to publishing a privacy policy. Companies need visibility into personal-data flows, lawful processing, security safeguards, third-party processors, international transfers, and incident response. The Saudi Personal Data Protection Law (PDPL) and its implementing regulations provide the privacy framework, while Saudi cybersecurity controls can add relevant…
Introduction: Aurora Ransomware — Why It Matters Aurora ransomware activity has provided researchers with an unusually detailed view of how a ransomware affiliate allegedly planned and executed attacks using an AI coding assistant. According to CloudSEK, a Russian-speaking Aurora affiliate targeted more than 20 organizations across nine countries between April and July 2026, gaining domain-level or interactive access at 17 targets. The investigation, published on August 27, found attacker tools, credential material, command history, Cursor chat records and an Aurora encryptor on an exposed server. Four organizations were later identified on Aurora’s leak site, while CloudSEK and TRM Labs also…
Introduction: TeamViewer Vulnerabilities — Why It Matters TeamViewer Vulnerabilities 2026 have raised security concerns after TeamViewer disclosed a high-severity path-traversal flaw affecting its desktop clients. Tracked as CVE-2026-16444, the vulnerability can allow an authenticated participant in a remote session to write files to unintended locations on the affected computer. TeamViewer rated the issue 7.5 High under CVSS 3.1 and said it was fixed in version 15.81.5. The company also stated that it had no indication of exploitation in the wild when the issue was disclosed. TeamViewer vulnerabilities are particularly relevant to organizations that rely on remote-support software because a compromised…
Introduction: Cloud Security Compliance UAE — Why It Matters Cloud security compliance UAE is becoming a board-level priority as organizations move workloads, personal data and critical services to cloud platforms. The UAE Information Assurance Regulation (IAR) requires applicable entities to define cloud security requirements, assess risks and maintain information-governance controls. The UAE Personal Data Protection Law (PDPL) establishes personal-data protection and cross-border transfer requirements, while Dubai has additional cloud-security controls through the Dubai Electronic Security Centre (DESC). In 2026, AWS completed its annual DESC certification audit, while du Tech’s National Hypercloud received UAE Cyber Security Council certification aligned with the…
Introduction: OpenAI Russia Influence Campaign — Why It Matters OpenAI Russia Influence Campaign has exposed how generative AI can be incorporated into a wider covert influence operation. OpenAI said on August 25, 2026, that it banned a cluster of ChatGPT accounts that it assessed as very likely originating in Russia and being used to promote the International Burke Institute (IBI). The accounts reportedly generated social-media posts and replies for X, LinkedIn, Facebook, Substack and Telegram. Operators used Russian-language prompts, requested mostly English-language output and relied on VPNs to access ChatGPT from Russia, according to OpenAI. The investigation went beyond AI-generated…
Introduction: Malicious npm Packages — Why It Matters Malicious npm Packages are being used in a phishing campaign that abuses trusted npm mirrors rather than directly infecting developers through package installation. According to OX Security’s research published on August 25, 2026, researchers identified 24 npm packages containing the same malicious HTML page designed to imitate a Cloudflare verification screen. The campaign is notable because the packages can turn legitimate infrastructure such as unpkg and npmmirror into delivery points for phishing content. Some packages reportedly received between 50 and 300 weekly downloads before removal, although the primary objective appears to be…
Introduction: API Security Testing UAE — Why It Matters API security testing UAE is becoming increasingly important as organizations across the country expand digital banking, fintech, SaaS, mobile applications, and connected services. APIs connect applications and systems, but they can also expose sensitive data and business functions when authentication, authorization, configuration, or monitoring controls are weak. The UAE’s regulatory environment is also placing greater attention on API governance and security. The Central Bank of the UAE (CBUAE) says regulated institutions should establish API governance, monitoring, security controls, and ongoing testing strategies. Its guidance also calls for independent vulnerability assessments and…
Introduction: ASOS Data Breach — Why It Matters ASOS Data Breach concerns unauthorized access to customer accounts at ASOS US Sales LLC after attackers allegedly used compromised login credentials obtained outside the company. ASOS detected unusual activity on July 28, 2026, confirmed it the following day, and began customer notification after containment, according to the California Attorney General’s breach filing. A California Department of Justice filing lists July 28, 2026 as the breach date. What is ASOS? ASOS operates an online fashion retail platform. Customer accounts can contain personal and order information, making unauthorized access useful for fraud or phishing.…
Introduction: Spring Vulnerabilities — Why It Matters Spring Vulnerabilities have emerged as a major open-source security concern after Broadcom published a large batch of Spring security advisories on August 20, 2026. Sonatype tracked 91 CVEs across Spring Framework and related projects, with 209,569 software components identified as affected at the time of its analysis. The Spring Vulnerabilities disclosure affects widely used technologies including Spring Security, Spring Cloud Config, Spring AI, Spring Data REST, Spring Integration, Reactor Core, Reactor Netty, Spring AMQP and Spring Batch. The vulnerabilities cover several classes, including insecure deserialization, remote code execution under specific conditions, SSRF, path…
Introduction: DIFC data protection compliance — Why It Matters DIFC data protection compliance is governed by DIFC Data Protection Law No. 5 of 2020, which regulates the collection, handling and use of personal data in the Dubai International Financial Centre. The regime places emphasis on lawful processing, accountability, security, individual rights and responsible data handling.In 2026, privacy governance is increasingly connected with cross-border operations, third-party processing and AI. DIFC Academy’s 2026 programme addresses data protection alongside AI, digital business and regulatory oversight. Background of the DIFC Data Protection Law DIFC Law No. 5 of 2020 established the current data protection…