Cyber News Feed
1165 articles
PDPL Enforcement Tightens: GCC Organisations Face Rising Compliance Obligations
Saudi Arabia's Personal Data Protection Law (PDPL) and its implementing regulations now impose strict accountability requirements on GCC organisations...
PDPL Enforcement in the GCC: What Data Controllers Must Know in 2026
Saudi Arabia's Personal Data Protection Law (PDPL) and its implementing regulations now define strict obligations for data controllers across the GCC....
Third-Party Risk: Why Saudi Organizations Must Audit Supply-Chain Security Now
Supply-chain breaches expose Saudi organizations to regulatory penalties and operational disruption. The SAMA Cybersecurity Framework and NCA Essentia...
SAMA Cyber Security Framework 2024: Evidence and Compliance Roadmap for GCC Financial Institutions
The Saudi Central Bank's updated Cyber Security Framework sets mandatory controls across governance, risk management, and incident response. Financial...
AI Governance and Security Risks: What Regulated Enterprises Must Know Now
Regulated enterprises across Saudi Arabia and the GCC face mounting pressure to deploy AI responsibly while managing novel security and compliance ris...
Iranian APT Group MuddyWater Intensifies Cyber Espionage Campaign Against Saudi Critical Infrastructure
Security researchers have identified a sophisticated campaign by the Iranian state-sponsored APT group MuddyWater targeting Saudi energy, telecommunic...
Executive Phishing: Why C-Suite Defence Must Be Layered and Human-Centric
Executive phishing attacks are meticulously researched and pose asymmetric risk to organizations. Effective defence requires layered technical control...
Securing Saudi OT/ICS: Bridging Regulatory Gaps in Critical Infrastructure
Saudi Arabia's critical infrastructure—power grids, water systems, and petrochemical facilities—faces mounting OT/ICS threats that demand alignment wi...
Cloud Security Posture Management: A Critical Control for Saudi Banks
Saudi banks face mounting pressure to secure cloud infrastructure as digital transformation accelerates, with SAMA and NCA regulations now explicitly...
Demonstrating SAMA Cyber Security Framework Compliance: What Evidence Security Leaders Need
The SAMA Cyber Security Framework establishes mandatory controls for Saudi financial institutions; security leaders must now document and evidence eac...
SAMA Cyber Security Framework 2024: Meeting Expectations and Building Audit Evidence
The Saudi Central Bank's updated Cyber Security Framework sets mandatory controls for financial institutions. Security leaders must now document gover...
Vulnerability and Patch Management at Scale: Meeting SAMA and NCA Standards in 2026
As Saudi organisations expand digital infrastructure and cloud adoption, vulnerability and patch management has become a critical control under SAMA C...
SOC Maturity Models: Building Measurable Security Operations in Saudi Arabia
Security Operations Centers in Saudi Arabia must align with SAMA CSF and NCA ECC requirements through structured maturity assessment and measurable KP...
PDPL Enforcement Tightens: GCC Organisations Must Align Data Governance Now
The Saudi PDPL and its implementing regulations are now actively enforced, creating binding obligations for data controllers and processors across the...
Threat Intelligence as a Strategic Pillar for GCC Cybersecurity Resilience
Effective threat intelligence is no longer optional for GCC organizations—it is a foundational requirement within regulatory frameworks like SAMA CSF...