Suspected AI Agent Activity in Fedora Raises New Software Supply Chain Concerns

Cybersecurity | 23 June 2026

The recent Fedora incident is a reminder that AI-related risks are not limited to fake images, chatbot mistakes, or questionable code suggestions. When an AI system is allowed to act through real developer accounts, issue trackers, pull requests, and...

Malicious JetBrains Plugins Reportedly Stole Developer API Keys From AI Coding Tools

Cybersecurity | 22 June 2026

Security researchers have uncovered a campaign involving fake AI coding assistant plugins that appeared legitimate while secretly sending developer API keys to external servers. AI-powered coding tools are becoming common inside modern development te...

FortiBleed Update: Why Organisations Should Treat Firewall Credential Exposure as a Current Risk

Cybersecurity | 21 June 2026

Reported activity linked to FortiGate devices highlights the importance of checking for unauthorised configuration exports, reviewing privileged accounts and rotating exposed credentials. Concerns around the so-called "FortiBleed" activity have conti...

MKN Clarifies Viral Data Leak Claims Are Linked to Older Cyber Incidents

Cybersecurity | 21 June 2026

Authorities say the information now circulating online is believed to come from cyber incidents before 2022, not from any current government or digital platform. A viral claim involving the alleged leak of Malaysians' personal data has raised public...

CISA Urges Fortinet Users to Harden Devices After FortiBleed Credential Exposure

Cybersecurity | 21 June 2026

Organisations using Fortinet firewalls and VPN gateways are being urged to review their security settings immediately after reports of a large-scale credential exposure campaign known as FortiBleed.

Phishing Email Uses a Real Google Cloud Address to Look Legitimate

Cybersecurity | 21 June 2026

A phishing email can look convincing even when the sender is clearly not Google. One recent example uses an alarming account-lock message, a familiar Google-related web address, and several urgent buttons designed to push the recipient into clicking...

New Malware Campaign Abuses Microsoft Teams Infrastructure To Hide Malicious Traffic

Cybersecurity | 19 June 2026

Cybersecurity researchers have uncovered a new malware campaign that shows how attackers are becoming more creative in hiding their activity inside normal business traffic. Instead of relying only on suspicious domains or obvious command-and-control...

F5 Releases Emergency NGINX Updates To Fix Critical Security Vulnerabilities

Cybersecurity | 19 June 2026

F5 has released emergency security updates for several NGINX products after discovering multiple vulnerabilities, including two critical flaws that could allow attackers to crash affected systems or potentially execute code under certain conditions.

Hackers Are Using Steam’s Wallpaper Engine To Spread Account-Stealing Malware

Cybersecurity | 19 June 2026

Cybercriminals are once again showing how even familiar platforms can be abused when users are not careful. This time, researchers from Kaspersky have uncovered an ongoing malware campaign that makes use of Steam Workshop and Wallpaper Engine to dist...

Massive Credential Leak Reportedly Hits 75,000 Fortinet Firewalls Worldwide

Cybersecurity | 18 June 2026

Organisations using Fortinet firewalls are being urged to take immediate action after security researchers reported a large-scale credential-stealing incident involving around 75,000 Fortinet firewall devices.

Online Scam Cases In Malaysia Rose By 87% Last Year, With Losses Nearing RM3 Billion

Cybersecurity | 16 June 2026

Online scams continue to grow at an alarming rate in Malaysia, with police recording 66,204 cases last year. That figure represents an 87% increase compared with the 35,368 cases reported in 2024.

Council Of Europe Investigates Claimed ShinyHunters Breach Linked To Oracle PeopleSoft Exploit

Cybersecurity | 16 June 2026

The Council of Europe is investigating a claimed cyberattack after the ShinyHunters extortion group said it had stolen more than 297GB of data from the organisation. The alleged breach is being linked to a wider campaign involving Oracle PeopleSoft,...

Windows BitLocker Zero-Day Vulnerability Could Let Attackers Bypass Device Encryption

Cybersecurity | 15 June 2026

Microsoft has fixed a newly disclosed Windows BitLocker zero-day vulnerability that could allow an attacker with physical access to a device to bypass encryption protections and access sensitive data stored on the system drive.

Windows RDP Vulnerabilities Could Expose Sensitive Data, Microsoft Issues June 2026 Fixes

Cybersecurity | 15 June 2026

Microsoft has released security updates for two important vulnerabilities affecting Windows Remote Desktop Protocol, better known as RDP. The flaws, tracked as CVE-2026-42908 and CVE-2026-45639, were addressed as part of Microsoft's June 2026 securit...

Bank Negara and Media Prima Look to Strengthen Cooperation Against Scams and Misinformation

Cybersecurity | 14 June 2026

Bank Negara Malaysia is looking to work more closely with the media as misinformation, online scams, and artificial intelligence-driven deception become bigger challenges for the public. The central bank recently paid a courtesy visit to Media Prima'...

Critical Ivanti Sentry Vulnerabilities Put Internet-Facing Security Gateways at Risk

Cybersecurity | 11 June 2026

Ivanti has released urgent security updates for two critical vulnerabilities affecting Ivanti Sentry, a product commonly used as a secure gateway between external mobile devices and internal corporate systems.

A Creative Soundbar Hack Shows Why Trusted USB Devices Can Still Be a Security Risk

Cybersecurity | 09 June 2026

Cybersecurity stories usually focus on laptops, phones, routers, or cloud accounts. A gaming soundbar is probably not the first thing most people would imagine as a security risk. After all, it is just an audio device sitting under a monitor, connect...

Critical Microsoft Edge Vulnerability Highlights Why Browser Updates Should Not Be Delayed

Cybersecurity | 08 June 2026

Microsoft Edge users and administrators are being urged to apply the latest security updates following the disclosure of a critical vulnerability that could allow attackers to execute arbitrary code on affected systems.

VS Code Zero-Day Vulnerability Could Expose GitHub OAuth Tokens

Cybersecurity | 05 June 2026

A newly disclosed Visual Studio Code vulnerability has raised concern among developers and organisations that rely heavily on GitHub and browser-based coding environments. The issue affects VS Code's webview implementation and could allow attackers t...

Dashlane Explains How Attackers Managed to Download Encrypted Password Vaults

Cybersecurity | 05 June 2026

Dashlane has shared more details about a coordinated attack that targeted its users and attempted to download encrypted password vaults from personal accounts. According to the password manager provider, the incident affected a very small number of u...