Tabung Haji Temporarily Suspends Services After Detecting Suspicious Cyber Activity

Cybersecurity | 09 October 2026

Lembaga Tabung Haji has temporarily suspended services to depositors after detecting suspicious cyber activity on 7 October 2026. The institution said the decision was taken as a precaution while its technical teams carry out comprehensive monitoring...

FBI Warns Ongoing FortiBleed Attacks Are Locking FortiGate VPN Administrators Out

Cybersecurity | 08 October 2026

The FBI is warning organisations that FortiBleed attacks remain active, with threat actors continuing to target exposed Fortinet FortiGate firewalls and SSL VPN gateways. In some cases, attackers are taking control of the devices and locking legitima...

Long-Running NPM Malware Campaign Reaches More Than 40,000 Downloads

Cybersecurity | 08 October 2026

A long-running malware campaign targeting the NPM ecosystem has accumulated more than 40,000 downloads since it first appeared in August 2023. Tracked as MALFEX, the campaign has been used to distribute several types of malware, including the Overlor...

CISA Warns Citrix NetScaler Vulnerabilities Are Being Exploited In Active Attacks

Cybersecurity | 07 October 2026

The U.S. Cybersecurity and Infrastructure Security Agency, or CISA, has warned organisations about multiple serious vulnerabilities affecting Citrix NetScaler ADC and NetScaler Gateway products. The newly disclosed flaws range from unauthenticated re...

Microsoft Exchange Server Vulnerability Could Allow Attackers To Access Other Users’ Mailboxes

Cybersecurity | 07 October 2026

Microsoft has released an urgent security update addressing a high-severity vulnerability affecting several versions of Microsoft Exchange Server. Tracked as CVE-2026-96940, the flaw could allow an authenticated attacker to elevate privileges and acc...

ShinyHunters Suspect “Rey” Reportedly Detained In Jordan And Cooperating With FBI

Cybersecurity | 05 October 2026

A suspected member of the ShinyHunters digital extortion ecosystem, known online as "Rey" and "ReyXBF", has reportedly been detained by authorities in Jordan and is said to be cooperating with U.S. law enforcement. The individual, identified in repor...

South Korea Calls Urgent Meeting With Financial Industry Leaders Over Security Breaches

Cybersecurity | 05 October 2026

South Korean financial authorities have called an urgent meeting with senior leaders across the country's financial sector following a series of recent cybersecurity and data breach incidents. According to reports, heads of financial industry associa...

Hidden Meta Muse Setting Could Let Attackers Turn The AI Assistant Into A Backdoor

Cybersecurity | 04 October 2026

A hidden setting inside the Mac version of Meta's Muse AI assistant could potentially allow malware already running on a computer to hijack the assistant and abuse the extensive permissions granted to it. Security researcher Patrick Wardle demonstrat...

China-Aligned TA419 Targets U.S. AI Policy Experts With Microsoft AitM Phishing

Cybersecurity | 04 October 2026

A China-linked cyber espionage group tracked as TA419 has been connected to a series of credential phishing campaigns targeting artificial intelligence experts in the United States. The group has focused on people working across think tanks, universi...

Google Chrome Update Fixes More Than 32 Security Vulnerabilities Across Windows, Mac And Linux

Cybersecurity | 04 October 2026

Google has released an urgent Chrome security update addressing more than 32 vulnerabilities affecting several important parts of the browser. The latest release includes one critical-severity flaw, multiple high-severity vulnerabilities and a collec...

OpenAI Expands Codex Security Cloud With Always-On GitHub Security Reviews

Cybersecurity | 01 October 2026

OpenAI has expanded Codex Security Cloud with always-on application security capabilities designed to review GitHub repositories, investigate potential vulnerabilities, and prepare proposed fixes for developers and security teams to evaluate.

Simba Data Breach Exposes Personal Details of More Than 23,500 Customers

Cybersecurity | 28 September 2026

Telecommunications provider Simba has confirmed a data breach affecting 23,549 customers, with personal information including names, identity card numbers and dates of birth exposed during the incident.

ShinyHunters Finds a New Way Around WAF Protections in Oracle PeopleSoft Attacks

Cybersecurity | 28 September 2026

The ShinyHunters extortion group has reportedly found a simple but effective way to bypass web application firewall protections that some organisations were using to defend vulnerable Oracle PeopleSoft systems. The attackers are exploiting CVE-2026-3...

Lunex Stealer Uses Vulnerable AMD Driver to Blind Security Tools and Steal Browser Credentials

Cybersecurity | 27 September 2026

A sophisticated malware campaign targeting Ukrainian-speaking users has been linked to a broader malware-as-a-service platform known as Lunex. The operation begins with compromised legitimate websites and fake Cloudflare-style verification pages befo...

EvilTokens Phishing Kit Abuses Microsoft Device Code Sign-In to Target Business Email Accounts

Cybersecurity | 25 September 2026

A newly documented phishing campaign is taking advantage of a legitimate Microsoft authentication process to compromise corporate email accounts without ever needing to steal a victim's password. The phishing kit, known as EvilTokens, has been active...

Critical F5 BIG-IP APM Flaw Is Being Actively Exploited, Allows Remote Code Execution

Cybersecurity | 24 September 2026

A critical security vulnerability affecting certain F5 BIG-IP Access Policy Manager (APM) configurations is being actively exploited, creating an urgent patching priority for organisations using the affected systems. The flaw, tracked as CVE-2026-941...

Settra Ransomware Abuses Legitimate RMM Tools and Disables Recovery Before Encryption

Cybersecurity | 24 September 2026

A newly observed ransomware strain called Settra is drawing attention because of the way it combines stolen access, legitimate remote-management software, recovery sabotage and encryption into one coordinated attack chain. Security researchers first...

Singapore Police Warn of Resurfacing Phishing Scam Using Fake Device-Lock Alerts

Cybersecurity | 21 September 2026

A familiar phishing scam is making the rounds again in Singapore, and this time scammers are impersonating the Singapore Police Force (SPF) to frighten victims into handing over their bank card details. The scam appears as a pop-up alert on a compute...

CrowdSec Says TanStack Supply-Chain Attack Exposed Around 170 Private GitHub Repositories

Cybersecurity | 20 September 2026

CrowdSec has disclosed that an attacker copied roughly 170 of its private GitHub repositories using credentials tied to a former employee whose access had not yet been fully revoked. The incident traces back to the May 2026 TanStack npm supply-chain...

How Financial Institutions Can Build Trust Around Digital Assets

Cybersecurity | 20 September 2026

Stablecoins and tokenised real-world assets are steadily moving out of experimental projects and into mainstream financial infrastructure. Banks, fintech companies and other regulated institutions are increasingly exploring them for payments, treasur...