LEMON BLOG

A major zero-day vulnerability has surfaced in VMware Tools and VMware Aria Operations, sending shockwaves through the cybersecurity world. Disclosed on October 1, 2025, the flaw is already being exploited in the wild and poses serious risks to organizations running VMware's virtualization environments.

A New Round of Security Alerts - Google has once again rolled out urgent updates for its Chrome browser after security researchers uncovered four critical vulnerabilities. Among them is a zero-day flaw that hackers are already exploiting, making this update one that users should not ignore.

A New Player in the Ransomware Game - Cybercriminals are constantly evolving their tactics, and the latest twist is something that should make every IT and cloud administrator sit up. A new Ransomware-as-a-Service (RaaS) platform called shinysp1d3r has surfaced, and unlike traditional ransomware that usually hits Windows endpoints, this one goes straight for the jugular—VMware ESXi hypervisors and their datastores.

A New Front Against Digital Threats - Malaysia's major telcos are banding together to fight back against two growing problems: online fraud and digital identity theft. At the Digital Nation Summit (DNS) on September 23, the industry revealed plans for a federated network service that could change the way businesses verify customers.

Online scams are no longer just a nuisance—they've become a billion-ringgit problem that governments across the region are struggling to contain. Singapore, often regarded as one of Southeast Asia's most digitally advanced economies, has just taken a bold step in tightening the noose around scammers and their accomplices. And frankly, Malaysia could benefit from paying close attention.