Saudi Arabia's National Cybersecurity Authority has issued new mandatory cybersecurity controls for private sector entities outside critical national infrastructure, extending baseline compliance obligations to businesses that have never previously fallen under national cybersecurity regulation.

Nvidia and 36 other partners have formed the Open Secure AI Alliance and released an open-source agent framework called NOOA, arguing that defenders need AI models they can inspect and run themselves. Notably absent from the roster: OpenAI, Google, Meta, and Anthropic.

Moonshot AI's Kimi K3 agents reportedly found 19 candidate Redis zero-days in 90 minutes and built a working RCE exploit in 27, the latest sign that AI is compressing vulnerability discovery timelines for defenders and attackers alike.

The UK Supreme Court has ruled that the Kingdom of Bahrain cannot claim sovereign immunity in a lawsuit alleging state use of spyware against UK-based dissidents, establishing that remote cyber operations launched from abroad can be treated as acts committed within the victim's own territory.

Proofpoint researchers have identified attackers spoofing OAuth client IDs against Microsoft Entra ID to enumerate valid usernames and passwords without ever generating a successful sign-in event, evading the telemetry most security teams rely on to catch credential attacks.

Kuwait's continued investment in digital infrastructure and cybersecurity is reducing reliance on in-person government services and strengthening national cyber resilience, according to technology experts, as the country pursues its Vision 2035 digital transformation agenda.

A critical, actively exploited vulnerability in Alibaba's Fastjson 1.x library allows unauthenticated remote code execution in Spring Boot applications, and no patched version currently exists for the 1.x branch.

A vulnerability in Anthropic's Claude Cowork allowed untrusted content processed by the AI agent to escape its sandboxed environment and read SSH keys, cloud credentials, and other sensitive files on the host Mac, affecting an estimated 500,000 users before being patched.

Ajman has completed the UAE's first government transaction run entirely by agentic AI. As autonomous systems begin executing transactions across live government databases, the security model behind them matters as much as the milestone itself.