CISA Adds Exploited Cisco, Citrix and Fortinet Flaws to KEV List as Federal Patch Deadline Nears

Cybersecurity | 11 September 2026

The U.S. Cybersecurity and Infrastructure Security Agency has added three actively exploited vulnerabilities affecting Cisco, Citrix and Fortinet products to its Known Exploited Vulnerabilities (KEV) catalog, signalling that the flaws are no longer t...

PEEP Turns Chrome and Edge Into Persistent Post-Compromise Backdoors

Cybersecurity | 09 September 2026

A newly disclosed post-exploitation toolkit called PEEP shows how attackers can turn ordinary Chromium-based browsers such as Google Chrome and Microsoft Edge into persistent surveillance and remote-access platforms after a system has already been co...

Hackers Abuse Trusted Google Services to Hide Credential-Stealing Phishing Attacks

Cybersecurity | 08 September 2026

A sophisticated phishing campaign is demonstrating why a familiar domain name is no longer enough to tell users whether a link is safe. Cybersecurity researchers have uncovered a global operation that deliberately routes victims through legitimate Go...

Cisco Patches Seven Serious IOS XR Vulnerabilities, Including Two Critical Flaws Rated 9.8

Cybersecurity | 08 September 2026

Cisco has released urgent security hardening updates for seven vulnerabilities affecting multiple Cisco IOS XR Software releases, including two Critical-severity flaws carrying CVSS scores of 9.8. The weaknesses range from memory-safety and resource-...

Critical VMware Workstation and Fusion Flaws Could Let VM Administrators Break Into the Host

Cybersecurity | 07 September 2026

Virtual machines are designed to create a strong boundary between the guest operating system and the physical computer running it. That isolation is one of the main reasons virtualisation is so widely used for software testing, development, security...

Malaysians Lose RM28.67 Million to QR Code Scams in Just Six Months

Cybersecurity | 06 September 2026

QR codes have become part of everyday life in Malaysia, appearing everywhere from restaurant tables and retail counters to parking systems, event registrations and digital payments. Their convenience is exactly what makes them attractive to scammers...

Microsoft Mitigates Three Serious Azure Vulnerabilities Affecting Cosmos DB, AI Language and Azure AD B2C

Cybersecurity | 06 September 2026

Microsoft has addressed three significant security vulnerabilities affecting several Azure services, including Azure Cosmos DB, Azure AI Language Authoring and Microsoft Azure Active Directory B2C. The flaws range from authorization bypass and spoofi...

Fire Ant Cyber Espionage Campaign Turns Cisco Routers Into Covert Network Surveillance Points

Cybersecurity | 06 September 2026

Routers normally sit quietly in the background, directing traffic between systems and networks without attracting much attention. That makes them incredibly useful to defenders—but also extremely valuable to attackers. A sophisticated cyber espionage...

Google Chrome Zero-Day Under Active Attack: Why Users and IT Teams Should Update Immediately

Cybersecurity | 05 September 2026

Google has released an urgent Chrome security update after confirming that a newly disclosed vulnerability is already being exploited in real-world attacks. The flaw, identified as CVE-2026-85046, affects Chrome's V8 JavaScript and WebAssembly engine...

PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw That Could Let Replication Accounts Execute Code

Cybersecurity | 05 September 2026

PostgreSQL has patched a long-standing security vulnerability in its logical decoding functionality that could allow an account with the REPLICATION attribute to execute arbitrary code under the operating-system account running the database server. T...

Invisible Unicode Is Helping Phishing Emails Slip Past Filters — and Microsoft Says the Campaign Has Reached Millions

Cybersecurity | 05 September 2026

Phishing has always depended on deception, but attackers are increasingly experimenting with techniques that were once discussed mainly in the context of artificial intelligence. Microsoft is now warning about a large-scale campaign that uses invisib...

Visa Expands Open-Source VVAH Tool to Help Security Teams Move From Vulnerability Discovery to Remediation

Cybersecurity | 02 September 2026

Artificial intelligence is changing cybersecurity on both sides of the battlefield. Attackers can now identify weaknesses, test potential exploits and automate parts of an attack far more quickly than before. For defenders, that means simply discover...

Chrome 152 Fixes Hundreds of Security Flaws, Including Multiple Critical Bugs

Cybersecurity | 29 August 2026

Google has released a major security update for Chrome 152, addressing more than 300 vulnerabilities, including over 10 issues classified as critical and capable of affecting both individual users and enterprise environments.

CISA Warns of Active Exploitation of Microsoft SQL Server RCE Flaw

Cybersecurity | 29 August 2026

A years-old Microsoft SQL Server vulnerability has returned to the spotlight after the US Cybersecurity and Infrastructure Security Agency (CISA) added it to its Known Exploited Vulnerabilities (KEV) catalog, confirming that attackers are now activel...

Chinese-Made Routers Sold Globally Reportedly Contain Hidden Backdoors

Cybersecurity | 28 August 2026

Security researchers have raised serious concerns about routers manufactured by Shenzhen Zhibotong Electronics Co. Ltd. (ZBT) after discovering several hidden remote-access mechanisms inside firmware used across multiple devices.

WordPress Sites Targeted in miniOrange SAML Authentication Bypass Attacks

Cybersecurity | 26 August 2026

WordPress administrators using the miniOrange SAML 2.0 Single Sign On plugin are being urged to update immediately after researchers observed hackers actively attempting to exploit two critical vulnerabilities that can be combined to bypass authentic...

Russian Hackers Abuse Trusted Google and WhatsApp Tools in New Social Engineering Attacks

Cybersecurity | 26 August 2026

Cybercriminals do not always need convincing fake login pages anymore. Increasingly, attackers are finding that it can be more effective to place legitimate authentication services inside a fraudulent workflow, making attacks far more difficult for v...

CISA Gives Agencies Just Three Days to Patch Critical Oracle Flaw

Cybersecurity | 26 August 2026

The US Cybersecurity and Infrastructure Security Agency (CISA) has issued one of its most urgent patching deadlines for a newly confirmed exploited vulnerability affecting Oracle products. Tracked as CVE-2026-21962, the flaw carries the maximum possi...

AnMed Confirms Patient Data Breach After Ransomware Attack

Cybersecurity | 25 August 2026

AnMed has confirmed that patient health information was compromised during the cyberattack that disrupted the South Carolina healthcare system in late July. In a new video statement, AnMed CEO William Kinley acknowledged that cybercriminals gained ac...

Malaysia Launches New AI Cybersecurity Research Center

Cybersecurity | 25 August 2026

Malaysia is strengthening its position in the artificial intelligence and cybersecurity space with the establishment of a new AI Cybersecurity Research Center in Kuala Lumpur. The initiative follows a cooperation agreement between the Global Cybersec...