Malaysians Can Take Legal Action Against Cybercriminals Operating Overseas

Cybersecurity | 06 November 2026

Malaysians who fall victim to cybercriminals based outside the country may still have legal options under Malaysia's new cybercrime legislation. Under the Cyber Crime Act 2026, authorities can pursue cases involving foreign offenders when their activ...

Node2Shell: Critical Google Brotli Vulnerability Could Allow Remote Code Execution Across Node.js, .NET And Other Platforms

Cybersecurity | 06 November 2026

A critical vulnerability in Google's Brotli compression library is creating a potentially wide-reaching security concern because the affected decoder is bundled into numerous popular development platforms and applications. The flaw, tracked as CVE-20...

Malaysia Airlines Among Carriers Assessing Amadeus Cyber Breach As Customer Data May Be Affected

Cybersecurity | 06 November 2026

Malaysia Airlines has become one of several major Asia-Pacific carriers caught up in a cybersecurity incident involving Amadeus, the global travel technology provider used extensively for airline reservations, booking management and other passenger-r...

Critical Siemens IoT2050 Vulnerability Is Being Exploited To Install Remote Command Backdoors

Cybersecurity | 05 November 2026

A maximum-severity vulnerability affecting Siemens SIMATIC IoT2050 Advanced industrial devices is now being actively exploited by attackers, according to security researchers. The flaw, tracked as CVE-2026-58115, carries the maximum CVSS score of 10....

Police And Security Firms Disrupt Massive Botnet Of 1.3 Million Infected Android TV Boxes

Cybersecurity | 04 November 2026

A major international operation involving Japan's National Police Agency and several private cybersecurity companies has disrupted XCPE, a backdoor used to build a botnet containing more than 1.3 million compromised Android devices across over 200 co...

Synology NAS Devices Targeted By Ransomware Using Previously Patched DSM Vulnerability

Cybersecurity | 04 November 2026

Synology is warning customers to update the DiskStation Manager software running on its Network Attached Storage devices after detecting ransomware attacks against systems using outdated DSM versions. According to the company, attackers are exploitin...

Barracuda Vulnerabilities Could Be Chained To Bypass Security And Gain Root Access

Cybersecurity | 04 November 2026

Barracuda has disclosed two serious vulnerabilities affecting several of its security appliances that could become particularly dangerous when exploited together. By chaining the flaws, an attacker with network access to a vulnerable device's adminis...

Anwar Warns Malaysia Could Become A Target Of Cyberattacks

Cybersecurity | 03 November 2026

Prime Minister Datuk Seri Anwar Ibrahim has warned that Malaysia could increasingly become a target of cyberattacks as the country expands its digital infrastructure and takes positions on major geopolitical issues. Speaking in the Dewan Rakyat, Anwa...

Detected, But Not Stopped: How Spyware and EDR Killers Can Bypass Modern Endpoint Security

Cybersecurity | 03 November 2026

I've always believed that endpoint security is one of the most important layers of protection for any organisation. Whether we're talking about traditional antivirus software or more advanced Endpoint Detection and Response (EDR) solutions such as Cr...

Critical Vulnerabilities Affect Adobe Campaign Classic And Adobe Connect

Cybersecurity | 02 November 2026

Adobe has released security updates addressing nine critical vulnerabilities affecting Adobe Campaign Classic and Adobe Connect. The flaws could allow attackers to execute arbitrary code, bypass security protections, access or modify database informa...

Critical Linux Kernel Vulnerability Could Allow Remote Root Attacks On MPTCP Servers

Cybersecurity | 02 November 2026

A critical vulnerability in the Linux kernel could allow unauthenticated remote attackers to execute commands with root privileges on servers running Multipath TCP, or MPTCP, listeners. The flaw is tracked as CVE-2026-98432 and has received a severit...

Hacker Group ‘Leakers’ Claims Kluang LED Screen Attack Was Meant To Expose Weak Security

Cybersecurity | 31 October 2026

The hacker group calling itself Leakers has claimed responsibility for the recent compromise of LED screens in Kluang, Johor, saying the attack was intended to expose serious security weaknesses in internet-connected display infrastructure rather tha...

Cisco ASA And FTD SSL VPN Vulnerability Exploited In The Wild

Cybersecurity | 30 October 2026

Cisco has released urgent security updates for a high-severity vulnerability affecting Cisco Secure Firewall Adaptive Security Appliance (ASA) and Cisco Secure Firewall Threat Defense (FTD) software. The flaw, tracked as CVE-2026-76418, can allow an...

High-Severity Microsoft Authenticator Vulnerability Could Allow Android Apps To Steal Microsoft 365 Tokens

Cybersecurity | 29 October 2026

A high-severity security vulnerability has been disclosed in Microsoft Authenticator for Android that could allow a malicious application installed on the same device to steal Microsoft 365 authentication tokens. Tracked as CVE-2026-80097, the flaw c...

Critical Veeam Backup & Replication Authorization Bypass Vulnerability Requires Immediate Patching

Cybersecurity | 28 October 2026

Veeam has released urgent security updates for several of its products after disclosing a critical vulnerability in Veeam Backup & Replication that could allow an unauthenticated attacker to bypass authorization checks on the backup server. The flaw,...

Microsoft Exchange Online Vulnerability Could Allow Remote Code Execution

Cybersecurity | 27 October 2026

Microsoft has disclosed a high-severity remote code execution vulnerability affecting Microsoft Exchange Online, the company's cloud-hosted email platform. The flaw, tracked as CVE-2026-96185, carries a CVSS v3.1 score of 7.5 and could allow an authe...

Fortinet Releases Critical Security Updates Across FortiOS, FortiManager, FortiAnalyzer And More

Cybersecurity | 26 October 2026

Fortinet has released a coordinated series of critical security updates covering several of its most widely deployed enterprise products, including FortiOS, FortiManager, FortiAnalyzer, FortiMail and FortiAuthenticator. The updates address vulnerabil...

Critical Remote Code Execution Vulnerabilities Disclosed In Linux KSMBD

Cybersecurity | 26 October 2026

Two critical remote code execution vulnerabilities have been disclosed in KSMBD, the SMB file server implemented directly within the Linux kernel. The vulnerabilities are tracked as ZDI-CAN-33549 and ZDI-CAN-33774, and both carry a CVSS score of 9.0,...

US Banks Detect AI Agents Accessing Customer Accounts Without Authorisation

Cybersecurity | 24 October 2026

Major US banks are reportedly discovering third-party AI agents operating inside customer accounts without clear authorisation, raising fresh concerns over how much autonomy personal AI assistants should have when dealing with sensitive financial ser...

PHP2Shell: Critical PHP Vulnerabilities Allow Remote Code Execution On Web Servers

Cybersecurity | 23 October 2026

The PHP development team has released urgent security updates addressing two critical vulnerabilities collectively referred to as PHP2Shell. The flaws affect PHP itself rather than a particular content management system, plugin or web application, wh...