Middle East, North Africa Security Spending to Top $3B

Gartner projects IT security spending in the MENA region will continue to increase in 2025, with security services accounting for the most growth.

darkreading – ​Read More

Apple Patches Two Actively Exploited iOS Flaws Used in Sophisticated Targeted Attacks

Apple on Wednesday released security updates for iOS, iPadOS, macOS Sequoia, tvOS, and visionOS to address two security flaws that it said have come under active exploitation in the wild.
The vulnerabilities in question are listed below –

CVE-2025-31200 (CVSS score: 7.5) – A memory corruption vulnerability in the Core Audio framework that could allow code execution when processing an audio

The Hacker News – ​Read More

GPS Spoofing Attacks Spike in Middle East, Southeast Asia

An Indian disaster-relief flight delivering aid is the latest air-traffic incident, as attacks increase in the Middle East and Myanmar and along the India-Pakistan border.

darkreading – ​Read More

Former CISA director Chris Krebs vows to fight back against Trump-ordered federal investigation

The former cybersecurity chief is the latest to push back on the Trump administration’s targeting of critics and dissenters.

Security News | TechCrunch – ​Read More

Multiple Groups Exploit NTLM Flaw in Microsoft Windows

The attacks have been going on since shortly after Microsoft patched the vulnerability in March.

darkreading – ​Read More

Krebs Exits SentinelOne After Security Clearance Pulled

Chris Krebs has resigned from SentinelOne after security clearance withdrawn and an order to review CISA’s conduct under his leadership.

The post Krebs Exits SentinelOne After Security Clearance Pulled appeared first on SecurityWeek.

SecurityWeek – ​Read More

Apple Quashes Two Zero-Days With iOS, MacOS Patches

The vulnerabilities are described as code execution and mitigation bypass issues that affect Apple’s iOS, iPadOS and macOS platforms.

The post Apple Quashes Two Zero-Days With iOS, MacOS Patches appeared first on SecurityWeek.

SecurityWeek – ​Read More

Ransomware gang ‘CrazyHunter’ Targets Critical Taiwanese Orgs

Trend Micro researchers detailed an emerging ransomware campaign by a new group known as “CrazyHunter” that is targeting critical sectors in Taiwan.

darkreading – ​Read More

CISA warns of potential data breaches caused by legacy Oracle Cloud leak

The Cybersecurity and Infrastructure Security Agency on Wednesday said that while the scope of the reported Oracle issue remains unconfirmed, it “presents potential risk to organizations and individuals.”

The Record from Recorded Future News – ​Read More

Why the CVE database for tracking security flaws nearly went dark – and what happens next

Expired US government funding nearly disrupted this global security system. How can we prevent this from happening again in 11 months?

Latest stories for ZDNET in Security – ​Read More