A quick security heads-up for Chrome users

Cybersecurity | 09 February 2026

If you use Google Chrome on Windows, macOS, or Linux, this is one of those updates you don't want to "get around to later." A security advisory from Akati Sekurity highlights two high-severity Chrome vulnerabilities that could expose users to arbitra...

When a Waiting-Queue TV Turns Into a Worst-Case Scenario

Cybersecurity | 05 February 2026

If you've ever been in a private hospital waiting area in Malaysia, you know the drill. There's usually a big TV on the wall showing queue numbers, counters, and maybe a polite reminder to keep your receipt or identification ready. It's boring, predi...

Genting-Based Scam Operation Targeted by MCMC Raids Following Fake SMS Complaints

Cybersecurity | 04 February 2026

If you were up in Genting Highlands recently and your phone suddenly got weird messages that looked "legit enough," this news will feel a bit too close to home.

Malaysia’s upcoming AI Governance Bill: what it’s trying to fix (and why deepfakes are suddenly front and center)

Cybersecurity | 30 January 2026

Malaysia is moving toward a more "grown-up" way of dealing with artificial intelligence: not by banning it, not by pretending it's just another app feature, but by building a national framework that spells out who's responsible for what when AI syste...

WhatsApp Web is being hijacked to spread a banking trojan, automatically

Cybersecurity | 21 January 2026

WhatsApp Web is supposed to be the "quick and convenient" version of WhatsApp: scan a QR code, type on a full keyboard, drag-and-drop files, and keep chats flowing while you work. But that same convenience is exactly why cybercriminals love it.

A Quiet Windows SMB Client Flaw That Can Snowball Into Full Active Directory Takeover

Cybersecurity | 21 January 2026

Active Directory is one of those things that "just works" in most Windows environments, which is exactly why attackers love it. When something in the authentication chain can be bent the wrong way, the blast radius isn't a single machine. It's the en...

A New Wave of “Helpful” Chrome Extensions Is Going After HR Logins

Cybersecurity | 20 January 2026

Enterprise HR and ERP platforms are the kind of systems you really do not want attackers touching. They sit right in the middle of identity, payroll, employee data, and sometimes even approvals for financial workflows. That is why this latest discove...

MCMC May Take Legal Action Against X Over Grok Deepfake Concerns

Cybersecurity | 14 January 2026

Malaysia's internet regulator is taking a harder line against X, as concerns grow over the safety risks posed by its AI chatbot, Grok. According to Communications Minister Fahmi Fadzil, the Malaysian Communications and Multimedia Commission (MCMC) is...

Multiple TeamViewer DEX Client Vulnerabilities Raise Security Concerns

Cybersecurity | 14 January 2026

TeamViewer has released urgent security updates after uncovering several vulnerabilities affecting its DEX Client for Windows. While there is currently no evidence that these flaws have been exploited in real-world attacks, their potential impact mak...

Fake WhatsApp Ban SMS Messages Are Making the Rounds Again

Cybersecurity | 14 January 2026

If you have received an SMS claiming to be from WhatsApp, warning that your account is about to be banned unless you click a link, you can safely ignore it. These messages have been circulating in Malaysia for some time now, and they are scams, plain...

Critical Google Chrome Vulnerability Raises Security Concerns

Cybersecurity | 14 January 2026

Google has issued an urgent security update for Chrome after uncovering a high-severity vulnerability that could allow attackers to bypass important browser security restrictions. While no active exploitation has been confirmed yet, the nature of the...

A Wave of Instagram Password Reset Emails Has Users Concerned

Cybersecurity | 13 January 2026

Over the past few days, many Instagram users have been caught off guard by unexpected emails urging them to reset their passwords. For some, the messages arrived repeatedly, even though they never initiated any account recovery. Naturally, this raise...

A Serious jsPDF Vulnerability Could Leak Files Through Generated PDFs

Cybersecurity | 08 January 2026

If your application uses jsPDF to generate PDF files, there's a newly disclosed security issue you shouldn't ignore. A critical flaw in certain versions of the library makes it possible for attackers to quietly pull sensitive files from the server an...

Hackers Allegedly Leak Sony PS5 ROM Keys – Why This Is a Big Deal

Cybersecurity | 04 January 2026

The PlayStation 5 has long been considered one of the most secure gaming consoles ever built. But recent claims from hackers suggest that Sony may be facing one of its most serious security threats yet. According to reports circulating online, the PS...

ASUS Live Update Compromised: Critical Supply Chain Threat You Shouldn’t Ignore

Cybersecurity | 30 December 2025

ASUS has issued an urgent warning about a serious security issue affecting its ASUS Live Update utility, a tool once widely used to automatically push firmware, BIOS, and driver updates to ASUS laptops and desktops. Security analysts have confirmed t...

Apache Log4J Faces New Security Risk: What You Need to Know About the Latest Vulnerability

Cybersecurity | 30 December 2025

Apache Log4J has long been a trusted logging framework powering millions of enterprise applications worldwide. But a recently disclosed security flaw has raised serious concerns around the confidentiality of log data, especially for organizations tha...

GhostLocker: When a Security Feature Becomes a Hacker’s Best Friend

Cybersecurity | 26 December 2025

A new tool called GhostLocker is turning heads in the cybersecurity world — not because it exploits a bug, but because it cleverly uses a legitimate Windows security feature to silently cripple Endpoint Detection and Response (EDR) tools. Instead of...

Two Chrome “VPN Extensions” Were Secretly Stealing Logins from Over 170 Major Websites

Cybersecurity | 24 December 2025

For many of us, browser extensions are simply helpful add-ons. We install them to make browsing easier, to boost productivity, or to get features the browser doesn't provide by default. But every now and then, a case emerges that reminds us of an unc...

A Massive Claim: A Group Says They’ve Backed Up Almost All of Spotify

Cybersecurity | 23 December 2025

A well-known online preservation group, Anna's Archive, has made a bold claim: they say they successfully scraped and backed up Spotify's entire music platform, including both metadata (song info, artists, albums, playlists, etc.) and actual music fi...

Scam Ads on Meta: A Problem Everyone Knows About, But Few Talk About Honestly

Cybersecurity | 17 December 2025

By now, it's no secret that scam ads are everywhere on Meta's platforms. Facebook, Instagram, Threads, and even WhatsApp have all become fertile ground for fake investments, impersonation schemes, and shady "too good to be true" offers. What's more u...