Critical NetScaler Flaws Put Remote Access Infrastructure at Risk

Cybersecurity | 07 July 2026

Organisations using Citrix NetScaler ADC or NetScaler Gateway should treat the latest group of disclosed vulnerabilities as an urgent patching priority. These appliances are often placed at the edge of the network to support remote access, applicatio...

JADEPUFFER: How AI-Driven Ransomware Could Turn Database Attacks Into a Faster, More Automated Threat

Cybersecurity | 07 July 2026

Ransomware has traditionally relied on human operators to move through a compromised network, identify valuable systems, steal data, encrypt files, and pressure victims into paying. That model may be changing. A newly reported campaign known as JADEP...

Apple Releases Broad Security Updates for iPhone, iPad, Mac and Safari Users

Cybersecurity | 07 July 2026

Apple has issued a new round of security updates addressing more than 30 vulnerabilities across iOS, iPadOS, macOS Tahoe and Safari. The updates cover a wide range of issues, from browser-based attacks to flaws affecting core operating system compone...

New Microsoft 365 Phishing Service Uses Device Code Prompts to Capture Account Access

Cybersecurity | 07 July 2026

A sophisticated phishing platform targeting Microsoft 365 users is raising concern because it does not rely solely on stolen passwords. Known as ARToken, the service is designed to trick victims into approving a legitimate Microsoft device sign-in re...

Actively Exploited SharePoint Flaw Puts On-Premises Servers at Risk

Cybersecurity | 07 July 2026

Organisations using on-premises Microsoft SharePoint Server are being urged to act quickly after a high-severity vulnerability was added to CISA's Known Exploited Vulnerabilities catalogue following confirmed real-world attacks.

E-Wallet Providers Could Be Required to Repay Scam Victims Within Seven Working Days

Cybersecurity | 05 July 2026

Malaysians who lose money through e-wallet scams may receive stronger protection under Bank Negara Malaysia's consumer-protection framework. E-wallet providers that fail to implement required fraud safeguards could be expected to fully compensate aff...

Cybersecurity Is Everyone’s Responsibility, Not Just an IT Issue

Cybersecurity | 05 July 2026

Cybersecurity is often seen as something handled only by IT teams, cybersecurity specialists or government agencies. But as Malaysia becomes more connected through digital services, online banking, cloud platforms, mobile apps and smart devices, keep...

Greek Politician Investigating Pegasus Spyware Was Reportedly Targeted by It

Cybersecurity | 05 July 2026

A new report has added another troubling chapter to Europe's long-running spyware controversy. Stelios Kouloglou, a journalist and former member of the European Parliament, was reportedly targeted multiple times with Pegasus spyware while he was invo...

Malware Campaign Targets Windows Users Through WhatsApp Attachments

Cybersecurity | 02 July 2026

WhatsApp is often treated as a quick and familiar way to share documents, invoices, photos and work updates. That familiarity is exactly what makes it useful to cybercriminals. A recent malware campaign is targeting Windows users through WhatsApp Des...

Smart Selangor and Flexi Parking Outage Shows Why Basic Cybersecurity Still Matters

Cybersecurity | 02 July 2026

Drivers across Selangor, Kuala Lumpur and other participating local-authority areas have recently run into problems with the Smart Selangor Parking and Flexi Parking apps. The outage is more than an inconvenience for people trying to pay for parking:...

macOS Flaw Could Let Standard Users Disable Enterprise Security Tools

Cybersecurity | 01 July 2026

A newly disclosed macOS security issue has raised concerns for organisations that rely on endpoint protection and device-management software to keep company Macs secure. According to a security advisory, the flaw could allow someone with access to a...

Critical libssh2 Flaw Raises Risk for SSH and SFTP Client Applications

Cybersecurity | 01 July 2026

A newly disclosed vulnerability in libssh2, a widely used open-source library for SSH, SCP, and SFTP connections, has been rated critical and assigned CVE-2026-55200. The issue affects libssh2 versions up to and including 1.11.1, and its risk has inc...

Mustang Panda Malware Campaign Reportedly Abuses Zoho WorkDrive in Targeted Espionage Attacks

Cybersecurity | 01 July 2026

A new security advisory has highlighted two targeted cyber campaigns linked to the China-aligned threat group known as Mustang Panda. The activity reportedly focused on Indian government organisations and entities connected to the hydropower sector,...

Your Free WordPress Security Action Plan Starts Here

Cybersecurity | 29 June 2026

WordPress makes it easy to build a website, publish content, add new features, and grow an online presence. But when it comes to security, many website owners tend to take a more reactive approach. Everything feels fine until a suspicious login attem...

JAKIM Sabah Portal Reportedly Defaced, With Attackers Making Unverified Data Claims

Cybersecurity | 29 June 2026

The JAKIM Sabah website was reportedly targeted in a recent cyber incident that briefly saw its normal homepage replaced with a message claiming responsibility for the disruption. The message used the "Anonymous" name and presented the attack as a pr...

Replit Adds Socket Firewall to Protect AI-Powered Development

Cybersecurity | 28 June 2026

AI coding tools are making software development dramatically faster. A developer can describe a feature in plain language, let an AI agent generate the code, install supporting packages, connect a database, and deploy a working application in far les...

MOH Website Hack Raises Fresh Alarm Over Joomla Security Across Malaysian Government Portals

Cybersecurity | 27 June 2026

Malaysia's Ministry of Health (MOH) website became the latest high-profile public-sector portal to be hit by a cyber incident, after its official domain, moh.gov.my, was defaced with a message claiming responsibility under the name MUSHR00W. During t...

MyCERT Warns Malaysians About WhatsApp Malware Disguised as Everyday Documents

Cybersecurity | 26 June 2026

WhatsApp is often treated as a trusted channel, especially when messages appear to come from a colleague, client, supplier, friend, or family member. That is exactly what makes the latest malware campaign highlighted by Malaysia Computer Emergency Re...

Social Media Platforms Could Face RM10 Million Penalties Over Malaysia’s Age-Verification Rules

Cybersecurity | 25 June 2026

Malaysia is raising the stakes for social media companies when it comes to protecting younger users online. Under the Online Safety Act 2025 and its related codes, licensed service providers are now expected to introduce stronger safeguards for child...

OpenAI’s GPT-5.5-Cyber Is Being Used to Help Fix Open-Source Vulnerabilities Faster

Cybersecurity | 24 June 2026

Open-source software sits quietly beneath much of the modern internet. It powers browsers, servers, developer tools, cloud platforms, security systems and countless business applications. Yet many of the projects that millions of people depend on are...