PHP2Shell: Critical PHP Vulnerabilities Allow Remote Code Execution On Web Servers

Cybersecurity | 23 October 2026

The PHP development team has released urgent security updates addressing two critical vulnerabilities collectively referred to as PHP2Shell. The flaws affect PHP itself rather than a particular content management system, plugin or web application, wh...

Hackers Use AI Agents In More Than 1,200 Attempts Against Over 100 Companies

Cybersecurity | 21 October 2026

AI agents are increasingly being discussed as tools that can operate with less direct human supervision, but the same flexibility that makes them useful for legitimate work is also attracting cybercriminals. A recent report describes more than 1,200...

Fortinet Fixes Multiple SQL Injection Vulnerabilities In FortiAnalyzer And FortiManager

Cybersecurity | 19 October 2026

Fortinet has released security updates addressing four vulnerabilities affecting multiple versions of FortiAnalyzer and FortiManager. The flaws involve SQL injection weaknesses that could potentially allow a low-privileged attacker to execute arbitra...

Critical PAN-OS Management Interface Vulnerability Actively Exploited In The Wild

Cybersecurity | 15 October 2026

Palo Alto Networks has released urgent security updates for a serious vulnerability affecting the PAN-OS management interface used across PA-Series and VM-Series firewalls as well as Panorama appliances. The vulnerability, tracked as CVE-2026-0322, c...

Critical GitLab Vulnerability CVE-2026-97229 Scores Maximum 10.0 Severity

Cybersecurity | 15 October 2026

GitLab has released urgent security updates addressing a critical vulnerability affecting both GitLab Community Edition and Enterprise Edition. The flaw, tracked as CVE-2026-97229, carries the maximum CVSS v3.1 score of 10.0 and could allow an unauth...

Over 400 Scientists Call For International Oversight Of Cyber-Capable AI

Cybersecurity | 15 October 2026

More than 400 scientists from 34 countries are calling for stronger international oversight of advanced artificial intelligence systems that may be capable of carrying out cyberattacks. The group includes prominent AI researchers such as Nobel Prize...

Anthropic Warns Self-Replicating AI Worms Could Soon Target Smart Devices

Cybersecurity | 15 October 2026

Anthropic is warning that a new category of malware could emerge as smaller AI models become capable enough to run directly on everyday Internet-of-things devices. In its latest research, the company suggests that self-replicating "AI worms" could po...

Cyberattack Hits French Supermarket Refrigeration Systems, Forcing Stores To Dispose Of Spoiled Food

Cybersecurity | 13 October 2026

A coordinated cyberattack has disrupted refrigeration systems across hundreds of supermarkets in France, forcing stores to throw away large quantities of food after connected fridges and freezers were remotely switched into defrost mode. The incident...

Teluk Intan Man Loses RM12.47 Million In Crypto After Digital Wallet Is Allegedly Hacked

Cybersecurity | 13 October 2026

A 39-year-old man from Teluk Intan has reportedly lost around RM12.47 million worth of cryptocurrency after his digital wallet was allegedly compromised. The victim discovered that a large amount of his crypto assets had been transferred out of the w...

Anthropic Reveals Claude AI Submitted False Homicide Tip During Real-World Testing

Cybersecurity | 12 October 2026

As AI agents become increasingly capable of navigating websites and performing tasks without constant human supervision, the risks surrounding unintended real-world actions are becoming harder to ignore. Anthropic has now disclosed an incident in whi...

ChainDrop Supply Chain Attack Compromises Tensorlake SDK With Credential-Stealing Worm

Cybersecurity | 11 October 2026

A malicious version of the Tensorlake npm SDK has been compromised in a software supply chain attack that delivers an obfuscated credential-stealing worm. The affected release, version 0.5.144, is part of a package used to provide TypeScript infrastr...

SonicWall Releases Urgent Security Updates For Four SMA1000 Vulnerabilities

Cybersecurity | 11 October 2026

SonicWall has released urgent security updates addressing four vulnerabilities affecting its SMA1000 series appliances. The security flaws range from server-side request forgery and remote code execution to Zip Slip and stored cross-site scripting, w...

CISA Warns Government-Linked Threat Actors Are Combining Vulnerability Exploits, Password Spraying And Persistent VPN Access

Cybersecurity | 11 October 2026

CISA has issued an urgent warning about government-linked cyber threat actors using a combination of automated reconnaissance, known software vulnerabilities, credential attacks and persistent remote-access techniques to compromise organisational net...

Anthropic Launches Free AI-Powered Vulnerability Scanner For Open Source Projects

Cybersecurity | 11 October 2026

Anthropic has introduced a new free service called OSS Scanner, designed to help open source developers identify potential security vulnerabilities in their projects using artificial intelligence. The opt-in service uses some of Anthropic's strongest...

NSRC To Develop AI-Powered App For Scam Detection

Cybersecurity | 11 October 2026

The Malaysian government is developing a new artificial intelligence application designed to help the public identify possible scams before money changes hands. The tool will allow users to check suspicious phone numbers, bank accounts and links befo...

Tabung Haji Temporarily Suspends Services After Detecting Suspicious Cyber Activity

Cybersecurity | 09 October 2026

Lembaga Tabung Haji has temporarily suspended services to depositors after detecting suspicious cyber activity on 7 October 2026. The institution said the decision was taken as a precaution while its technical teams carry out comprehensive monitoring...

FBI Warns Ongoing FortiBleed Attacks Are Locking FortiGate VPN Administrators Out

Cybersecurity | 08 October 2026

The FBI is warning organisations that FortiBleed attacks remain active, with threat actors continuing to target exposed Fortinet FortiGate firewalls and SSL VPN gateways. In some cases, attackers are taking control of the devices and locking legitima...

Long-Running NPM Malware Campaign Reaches More Than 40,000 Downloads

Cybersecurity | 08 October 2026

A long-running malware campaign targeting the NPM ecosystem has accumulated more than 40,000 downloads since it first appeared in August 2023. Tracked as MALFEX, the campaign has been used to distribute several types of malware, including the Overlor...

CISA Warns Citrix NetScaler Vulnerabilities Are Being Exploited In Active Attacks

Cybersecurity | 07 October 2026

The U.S. Cybersecurity and Infrastructure Security Agency, or CISA, has warned organisations about multiple serious vulnerabilities affecting Citrix NetScaler ADC and NetScaler Gateway products. The newly disclosed flaws range from unauthenticated re...

Microsoft Exchange Server Vulnerability Could Allow Attackers To Access Other Users’ Mailboxes

Cybersecurity | 07 October 2026

Microsoft has released an urgent security update addressing a high-severity vulnerability affecting several versions of Microsoft Exchange Server. Tracked as CVE-2026-96940, the flaw could allow an authenticated attacker to elevate privileges and acc...