Introducing the Second Edition of “Online Safety IRL: Scam Edition”

Cybersecurity | 27 October 2025

The Ministry of Communications Malaysia (Kementerian Komunikasi) has officially launched the second chapter of its "Online Safety IRL" fellowship programme—this time titled the Scam Edition. The initiative is driven in collaboration with CelcomDigi B...

Decoding Malicious PDFs: How Proofpoint’s New Tool Is Changing the Game

Cybersecurity | 26 October 2025

PDFs have long been one of the most trusted document formats in the world — widely used for invoices, reports, contracts, and even resumes. But in the cybersecurity world, that same trust has made PDFs a perfect disguise for malicious intent. Cybercr...

Malaysia Tightens the Net on Dark Web Sales of Personal Data

Cybersecurity | 24 October 2025

As cases of leaked personal data continue to spark outrage among Malaysians, the government is finally drawing a harder line against those profiting from citizens' stolen information online. The Digital Ministry, led by Gobind Singh Deo, is stepping...

A Critical ASP.NET Flaw Exposes Web Apps to Remote Security Bypass Attacks

Cybersecurity | 23 October 2025

Microsoft has issued a serious warning for developers using ASP.NET Core — a popular framework powering countless web applications worldwide. A newly discovered flaw, tagged CVE-2025-55315, could allow attackers to bypass key security mechanisms remo...

Critical Zero-Day in Windows Remote Access Connection Manager (RasMan) Actively Exploited

Cybersecurity | 17 October 2025

Microsoft has recently confirmed a critical zero-day vulnerability affecting the Windows Remote Access Connection Manager (RasMan) service. The flaw, tracked as CVE-2025-59230, poses a serious risk to enterprise systems, enabling attackers to escalat...

Microsoft Warns of AI-Enhanced Phishing Campaign That Outsmarted Traditional Defenses

Cybersecurity | 15 October 2025

Microsoft has raised alarms over a recent phishing campaign that cleverly used AI technology to conceal its malicious code and slip past email security filters. According to the company, the attackers appeared to have harnessed a large language model...

Microsoft Tightens Security on IE Mode After Hackers Exploit Legacy Feature

Cybersecurity | 15 October 2025

Microsoft has officially locked down the Internet Explorer (IE) Mode in its Edge browser, following confirmed reports that hackers had turned the legacy feature into a stealthy backdoor for cyberattacks.

The Hidden Cyber Risks of AI Notetakers in Meetings

Cybersecurity | 14 October 2025

If you've joined an online meeting recently, you might have noticed a mysterious extra "attendee" — often named something like "AI Notetaker" or "Meeting Assistant." These tools promise convenience by automatically transcribing conversations, summari...

Critical Zero-Day in VMware Tools and Aria: What You Need to Know

Cybersecurity | 02 October 2025

A major zero-day vulnerability has surfaced in VMware Tools and VMware Aria Operations, sending shockwaves through the cybersecurity world. Disclosed on October 1, 2025, the flaw is already being exploited in the wild and poses serious risks to organ...

Google Chrome Faces Multiple Critical Vulnerabilities: What You Need to Know

Cybersecurity | 25 September 2025

A New Round of Security Alerts - Google has once again rolled out urgent updates for its Chrome browser after security researchers uncovered four critical vulnerabilities. Among them is a zero-day flaw that hackers are already exploiting, making this...

Shinysp1d3r: The New VMware Ransomware-as-a-Service Threat

Cybersecurity | 25 September 2025

A New Player in the Ransomware Game - Cybercriminals are constantly evolving their tactics, and the latest twist is something that should make every IT and cloud administrator sit up. A new Ransomware-as-a-Service (RaaS) platform called shinysp1d3r h...

Malaysian Telcos Unite to Tackle Fraud with Federated Network Service

Cybersecurity | 25 September 2025

A New Front Against Digital Threats - Malaysia's major telcos are banding together to fight back against two growing problems: online fraud and digital identity theft. At the Digital Nation Summit (DNS) on September 23, the industry revealed plans fo...

Singapore’s Crackdown on Scam Mules: A Model Malaysia Could Follow

Cybersecurity | 20 September 2025

Online scams are no longer just a nuisance—they've become a billion-ringgit problem that governments across the region are struggling to contain. Singapore, often regarded as one of Southeast Asia's most digitally advanced economies, has just taken a...

When Fake Reviews Become a Weapon: How Scammers Are Targeting Small Businesses

Cybersecurity | 15 September 2025

A Message That Changed Everything - In June, Los Angeles contractor Natalia Piper was busy juggling her day-to-day business when a strange WhatsApp message appeared. The sender, using a number from Pakistan, bluntly stated: "Someone has ordered me to...

BitLocker Under Fire: Privilege Escalation Flaws in Windows Encryption

Cybersecurity | 12 September 2025

When you think of Windows BitLocker, you probably imagine a strong, locked vault that keeps your sensitive data safe from prying eyes. But like any complex piece of software, even the strongest vault can develop cracks. In September 2025, Microsoft d...

Trusted Identity: The Cornerstone of Digital Security

Cybersecurity | 08 September 2025

When Trust Is Hacked - In early 2024, a multinational company lost over US$25 million in a shocking scam powered by deepfake technology. Attackers used artificial intelligence (AI) to impersonate a senior executive during a video call, tricking finan...

When a Simple JSON File Becomes a Cloud Security Nightmare

Cybersecurity | 04 September 2025

Cloud security often makes headlines for sophisticated breaches, but sometimes the biggest risks come from the simplest mistakes. One such case emerged when a publicly accessible JSON configuration file (appsettings.json) leaked Azure Active Director...

Critical Chrome Vulnerability: What You Need to Know About CVE-2025-9478

Cybersecurity | 29 August 2025

Google has once again found itself in the spotlight of cybersecurity discussions, but this time for a worrying reason. A newly discovered vulnerability in Chrome's ANGLE graphics library has raised red flags among security experts worldwide. Labeled...

When Phishing Shows Up as a Calendar Invite

Cybersecurity | 20 August 2025

Phishing is no longer just about dodgy links in emails. Attackers are constantly finding new ways to slip past defenses and human suspicion. Recently, I came across a very convincing attempt that didn't land in the inbox as a regular email — instead,...

Apache Tomcat “Made You Reset” Vulnerability: A New DoS Threat

Cybersecurity | 18 August 2025

Apache Tomcat is one of the most widely used Java servlet containers in the world, powering countless web applications across industries. That popularity makes it a prime target for attackers—and a newly disclosed flaw has raised fresh concerns.