Chinese-Made Routers Sold Globally Reportedly Contain Hidden Backdoors

Cybersecurity | 28 August 2026

Security researchers have raised serious concerns about routers manufactured by Shenzhen Zhibotong Electronics Co. Ltd. (ZBT) after discovering several hidden remote-access mechanisms inside firmware used across multiple devices.

WordPress Sites Targeted in miniOrange SAML Authentication Bypass Attacks

Cybersecurity | 26 August 2026

WordPress administrators using the miniOrange SAML 2.0 Single Sign On plugin are being urged to update immediately after researchers observed hackers actively attempting to exploit two critical vulnerabilities that can be combined to bypass authentic...

Russian Hackers Abuse Trusted Google and WhatsApp Tools in New Social Engineering Attacks

Cybersecurity | 26 August 2026

Cybercriminals do not always need convincing fake login pages anymore. Increasingly, attackers are finding that it can be more effective to place legitimate authentication services inside a fraudulent workflow, making attacks far more difficult for v...

CISA Gives Agencies Just Three Days to Patch Critical Oracle Flaw

Cybersecurity | 26 August 2026

The US Cybersecurity and Infrastructure Security Agency (CISA) has issued one of its most urgent patching deadlines for a newly confirmed exploited vulnerability affecting Oracle products. Tracked as CVE-2026-21962, the flaw carries the maximum possi...

AnMed Confirms Patient Data Breach After Ransomware Attack

Cybersecurity | 25 August 2026

AnMed has confirmed that patient health information was compromised during the cyberattack that disrupted the South Carolina healthcare system in late July. In a new video statement, AnMed CEO William Kinley acknowledged that cybercriminals gained ac...

Malaysia Launches New AI Cybersecurity Research Center

Cybersecurity | 25 August 2026

Malaysia is strengthening its position in the artificial intelligence and cybersecurity space with the establishment of a new AI Cybersecurity Research Center in Kuala Lumpur. The initiative follows a cooperation agreement between the Global Cybersec...

Hackers Target Siemens PLCs in U.S. Critical Infrastructure

Cybersecurity | 24 August 2026

U.S. authorities are warning that hackers linked to Iran are actively targeting Siemens S7-series programmable logic controllers (PLCs) used across water systems, energy facilities, manufacturing plants and other critical infrastructure.

Z.ai GLM-5.3 Takes Top Spot in CyberGym Cybersecurity AI Benchmark

Cybersecurity | 23 August 2026

Chinese AI developer Z.ai has released GLM-5.3, with the model achieving an 84.5% score on the CyberGym cybersecurity benchmark and narrowly taking the lead over competing frontier models. According to Z.ai's published results, Anthropic's Mythos 5 p...

Brave Says AliExpress Used Audio Fingerprinting to Track Users Without Cookies

Cybersecurity | 23 August 2026

Online tracking is becoming increasingly sophisticated, and cookies are no longer the only way websites can recognise visitors. Privacy-focused browser Brave has now accused Alibaba-owned AliExpress of using the Web Audio API as part of a device-fing...

Microsoft HPC Pack Vulnerability Could Allow Remote Code Execution Over the Network

Cybersecurity | 19 August 2026

Microsoft has released an urgent security update addressing a serious vulnerability in Microsoft High Performance Computing (HPC) Pack 2019 that could allow attackers to execute malicious code remotely.

Windows Defender Flagged OpenAI Codex as a Trojan — But It Appears to Be a False Positive

Cybersecurity | 18 August 2026

While working on one of my local development projects using OpenAI Codex Desktop, I suddenly received a rather alarming Windows Security notification.

No, AI Isn’t “Going Rogue” — It’s Usually Following the Wrong Instructions Too Well

Cybersecurity | 18 August 2026

Whenever an AI system behaves in an unexpected or alarming way, the same phrase tends to appear: the AI went rogue. It is an understandable reaction. Modern AI systems can communicate naturally, use software tools, browse information, write code and...

Critical SAP Commerce Cloud Flaw Is Already Seeing Exploitation Attempts

Cybersecurity | 17 August 2026

A critical vulnerability affecting SAP Commerce Cloud is already attracting exploitation attempts just days after SAP released a patch, highlighting how quickly attackers are moving against newly disclosed enterprise software flaws.

Large-Scale DDoS Attacks Disrupt Threema Secure Messaging Service

Cybersecurity | 17 August 2026

Threema, the privacy-focused Swiss messaging platform, suffered a series of large-scale distributed denial-of-service attacks earlier this week, leaving some users unable to send messages reliably and causing intermittent service disruptions across m...

OpenAI Expands Daybreak With GPT-5.6-Cyber for Advanced Defensive Security

Cybersecurity | 16 August 2026

OpenAI is expanding its Daybreak cybersecurity programme with GPT-5.6-Cyber, a specialist model designed for verified security professionals carrying out authorised vulnerability research, exploit validation and other advanced defensive work.

Cisco Issues Critical Catalyst SD-WAN Security Updates for Multiple High-Risk Vulnerabilities

Cybersecurity | 14 August 2026

Cisco has released an urgent security update addressing five vulnerabilities affecting Catalyst SD-WAN Software, several of which carry near-maximum CVSS severity scores.

Remote-Access Scams Are Giving Fraudsters Control Of Victims’ Phone

Cybersecurity | 11 August 2026

Smartphones have become central to almost everything we do. Banking, shopping, messaging, government services, e-wallets and even identity verification now happen through a device most of us carry everywhere. That convenience also makes the phone an...

Major npm Supply-Chain Attack Hits More Than 400 Packages And Targets Developer Credentials

Cybersecurity | 09 August 2026

The JavaScript ecosystem has been hit by another large software supply-chain incident, with more than 400 npm packages from multiple unrelated publishers reportedly compromised. According to Microsoft Threat Intelligence, attackers used malicious pac...

UK AI Security Institute Says AI Agents Went Beyond Their Test Boundaries And Targeted GitHub

Cybersecurity | 09 August 2026

A recent AI security evaluation in the UK has highlighted just how unpredictable highly autonomous AI agents can become when they are given broad internet access and a difficult objective to complete. The UK AI Security Institute (AISI) says several...

MOH KKM Website Down Again: Another Reminder That Digital Resilience Matters

Cybersecurity | 09 August 2026

If you tried accessing the official Ministry of Health Malaysia (KKM/MOH) website recently and were greeted by a "403: Access Forbidden – Repeat offender (Autobanned)" message, you are probably not alone in wondering what is going on.