AI-Generated PowerShell Scripts Are Making Active Directory Attacks Harder to Detect

Cybersecurity | 16 July 2026

Attackers are beginning to use generative AI for more than writing convincing phishing emails. Security researchers have now observed threat actors using AI-generated PowerShell scripts during real-world intrusions to examine and map Microsoft Active...

NSA Warns Organisations to Disable Cisco Smart Install as Legacy Feature Remains a Serious Network Risk

Cybersecurity | 16 July 2026

A network feature created to simplify switch deployment is once again drawing security attention for all the wrong reasons. The U.S. National Security Agency has urged organisations to disable Cisco Smart Install, warning that attackers continue to e...

Australian Healthcare Cyberattack Exposes Patient Records Across 21 Clinics

Cybersecurity | 15 July 2026

A major Australian healthcare provider has confirmed that personal and medical information was stolen during a cyberattack affecting 21 clinics across the country. Partnered Health said the breach involved clinics in several major cities, including S...

Microsoft’s Biggest Patch Tuesday Yet Fixes 622 Flaws—Two Are Already Under Attack

Cybersecurity | 15 July 2026

Microsoft has released the largest Patch Tuesday update in its history, addressing 622 unique security vulnerabilities across Windows, SharePoint Server, Office, Edge, SQL Server, Defender and several other products.

Misconfigured Server Exposes the Inner Workings of Three Evilginx Phishing Operators

Cybersecurity | 14 July 2026

A basic server configuration mistake has revealed the tools, credentials and operational methods behind three separate phishing actors using Evilginx and related adversary-in-the-middle techniques. The exposure originated from a virtual private serve...

Helix Vishing Campaign Targets Microsoft 365 Accounts for Large-Scale Data Theft

Cybersecurity | 12 July 2026

A newly identified threat group known as Helix is using convincing phone calls and Microsoft Teams conversations to trick employees into granting access to corporate Microsoft 365 accounts. Rather than exploiting an unpatched software vulnerability,...

Fake 7-Zip Downloads Are Quietly Turning Devices Into Criminal Proxy Servers

Cybersecurity | 12 July 2026

A widespread malware campaign is using convincing copies of popular software websites to trick people into installing compromised applications that secretly convert their devices into residential proxy nodes. The campaign is particularly deceptive be...

Six U-Boot Vulnerabilities Raise Concerns Over Stealthy Firmware Attacks

Cybersecurity | 11 July 2026

A newly disclosed group of security flaws in the widely used U-Boot bootloader could allow attackers to interfere with devices before the operating system and its security protections have even started. The vulnerabilities affect the process used to...

Malaysia Reviews Tougher Cybercrime Penalties and Possible Refund Paths for Scam Victims

Cybersecurity | 10 July 2026

Malaysia is looking at whether its cybercrime laws need to be strengthened, not only to punish offenders more seriously but also to give scam victims a clearer way to recover their lost money. The review comes at a time when online scams have become...

Microsoft Edge Vulnerability Highlights the Risk of Browser-Based Attacks

Cybersecurity | 09 July 2026

A newly disclosed high-severity vulnerability affecting Microsoft Edge Chromium-based is a reminder that the web browser remains one of the most important security layers in any organisation. Because browsers are used daily for email links, cloud sys...

Healthcare Cybersecurity Needs to Speak the Language of Business Risk

Cybersecurity | 09 July 2026

Cybersecurity incidents in healthcare are no longer rare events. Data breaches, ransomware attacks, system outages, and third-party disruptions have become part of the risk landscape for hospitals, clinics, insurers, and healthcare networks. The conc...

Bad Epoll: A Linux Kernel Flaw That Could Let Local Users Take Full Control of Systems

Cybersecurity | 07 July 2026

Linux is widely trusted for servers, cloud platforms, developer workstations, containers, and Android devices. But even a well-secured Linux environment can become vulnerable when a flaw exists deep inside the kernel itself. A newly disclosed issue k...

Unpatched FatFs Flaws Could Put Millions of Embedded Devices at Risk

Cybersecurity | 07 July 2026

Many organisations focus their cybersecurity efforts on laptops, servers, cloud platforms, and business applications. But a growing number of risks now sit inside smaller devices that are often overlooked: security cameras, industrial controllers, dr...

PolinRider Shows Why Developers Are Now a Prime Target in Software Supply Chain Attacks

Cybersecurity | 07 July 2026

Software developers depend on open-source tools every day. A typical project may pull in dozens, hundreds, or even thousands of third-party packages, libraries, browser extensions, plug-ins, and code repositories before the first line of business log...

Critical NetScaler Flaws Put Remote Access Infrastructure at Risk

Cybersecurity | 07 July 2026

Organisations using Citrix NetScaler ADC or NetScaler Gateway should treat the latest group of disclosed vulnerabilities as an urgent patching priority. These appliances are often placed at the edge of the network to support remote access, applicatio...

JADEPUFFER: How AI-Driven Ransomware Could Turn Database Attacks Into a Faster, More Automated Threat

Cybersecurity | 07 July 2026

Ransomware has traditionally relied on human operators to move through a compromised network, identify valuable systems, steal data, encrypt files, and pressure victims into paying. That model may be changing. A newly reported campaign known as JADEP...

Apple Releases Broad Security Updates for iPhone, iPad, Mac and Safari Users

Cybersecurity | 07 July 2026

Apple has issued a new round of security updates addressing more than 30 vulnerabilities across iOS, iPadOS, macOS Tahoe and Safari. The updates cover a wide range of issues, from browser-based attacks to flaws affecting core operating system compone...

New Microsoft 365 Phishing Service Uses Device Code Prompts to Capture Account Access

Cybersecurity | 07 July 2026

A sophisticated phishing platform targeting Microsoft 365 users is raising concern because it does not rely solely on stolen passwords. Known as ARToken, the service is designed to trick victims into approving a legitimate Microsoft device sign-in re...

Actively Exploited SharePoint Flaw Puts On-Premises Servers at Risk

Cybersecurity | 07 July 2026

Organisations using on-premises Microsoft SharePoint Server are being urged to act quickly after a high-severity vulnerability was added to CISA's Known Exploited Vulnerabilities catalogue following confirmed real-world attacks.

E-Wallet Providers Could Be Required to Repay Scam Victims Within Seven Working Days

Cybersecurity | 05 July 2026

Malaysians who lose money through e-wallet scams may receive stronger protection under Bank Negara Malaysia's consumer-protection framework. E-wallet providers that fail to implement required fraud safeguards could be expected to fully compensate aff...