Mustang Panda Malware Campaign Reportedly Abuses Zoho WorkDrive in Targeted Espionage Attacks

Cybersecurity | 01 July 2026

A new security advisory has highlighted two targeted cyber campaigns linked to the China-aligned threat group known as Mustang Panda. The activity reportedly focused on Indian government organisations and entities connected to the hydropower sector,...

Your Free WordPress Security Action Plan Starts Here

Cybersecurity | 29 June 2026

WordPress makes it easy to build a website, publish content, add new features, and grow an online presence. But when it comes to security, many website owners tend to take a more reactive approach. Everything feels fine until a suspicious login attem...

JAKIM Sabah Portal Reportedly Defaced, With Attackers Making Unverified Data Claims

Cybersecurity | 29 June 2026

The JAKIM Sabah website was reportedly targeted in a recent cyber incident that briefly saw its normal homepage replaced with a message claiming responsibility for the disruption. The message used the "Anonymous" name and presented the attack as a pr...

Replit Adds Socket Firewall to Protect AI-Powered Development

Cybersecurity | 28 June 2026

AI coding tools are making software development dramatically faster. A developer can describe a feature in plain language, let an AI agent generate the code, install supporting packages, connect a database, and deploy a working application in far les...

MOH Website Hack Raises Fresh Alarm Over Joomla Security Across Malaysian Government Portals

Cybersecurity | 27 June 2026

Malaysia's Ministry of Health (MOH) website became the latest high-profile public-sector portal to be hit by a cyber incident, after its official domain, moh.gov.my, was defaced with a message claiming responsibility under the name MUSHR00W. During t...

MyCERT Warns Malaysians About WhatsApp Malware Disguised as Everyday Documents

Cybersecurity | 26 June 2026

WhatsApp is often treated as a trusted channel, especially when messages appear to come from a colleague, client, supplier, friend, or family member. That is exactly what makes the latest malware campaign highlighted by Malaysia Computer Emergency Re...

Social Media Platforms Could Face RM10 Million Penalties Over Malaysia’s Age-Verification Rules

Cybersecurity | 25 June 2026

Malaysia is raising the stakes for social media companies when it comes to protecting younger users online. Under the Online Safety Act 2025 and its related codes, licensed service providers are now expected to introduce stronger safeguards for child...

OpenAI’s GPT-5.5-Cyber Is Being Used to Help Fix Open-Source Vulnerabilities Faster

Cybersecurity | 24 June 2026

Open-source software sits quietly beneath much of the modern internet. It powers browsers, servers, developer tools, cloud platforms, security systems and countless business applications. Yet many of the projects that millions of people depend on are...

Suspected AI Agent Activity in Fedora Raises New Software Supply Chain Concerns

Cybersecurity | 23 June 2026

The recent Fedora incident is a reminder that AI-related risks are not limited to fake images, chatbot mistakes, or questionable code suggestions. When an AI system is allowed to act through real developer accounts, issue trackers, pull requests, and...

Malicious JetBrains Plugins Reportedly Stole Developer API Keys From AI Coding Tools

Cybersecurity | 22 June 2026

Security researchers have uncovered a campaign involving fake AI coding assistant plugins that appeared legitimate while secretly sending developer API keys to external servers. AI-powered coding tools are becoming common inside modern development te...

FortiBleed Update: Why Organisations Should Treat Firewall Credential Exposure as a Current Risk

Cybersecurity | 21 June 2026

Reported activity linked to FortiGate devices highlights the importance of checking for unauthorised configuration exports, reviewing privileged accounts and rotating exposed credentials. Concerns around the so-called "FortiBleed" activity have conti...

MKN Clarifies Viral Data Leak Claims Are Linked to Older Cyber Incidents

Cybersecurity | 21 June 2026

Authorities say the information now circulating online is believed to come from cyber incidents before 2022, not from any current government or digital platform. A viral claim involving the alleged leak of Malaysians' personal data has raised public...

CISA Urges Fortinet Users to Harden Devices After FortiBleed Credential Exposure

Cybersecurity | 21 June 2026

Organisations using Fortinet firewalls and VPN gateways are being urged to review their security settings immediately after reports of a large-scale credential exposure campaign known as FortiBleed.

Phishing Email Uses a Real Google Cloud Address to Look Legitimate

Cybersecurity | 21 June 2026

A phishing email can look convincing even when the sender is clearly not Google. One recent example uses an alarming account-lock message, a familiar Google-related web address, and several urgent buttons designed to push the recipient into clicking...

New Malware Campaign Abuses Microsoft Teams Infrastructure To Hide Malicious Traffic

Cybersecurity | 19 June 2026

Cybersecurity researchers have uncovered a new malware campaign that shows how attackers are becoming more creative in hiding their activity inside normal business traffic. Instead of relying only on suspicious domains or obvious command-and-control...

F5 Releases Emergency NGINX Updates To Fix Critical Security Vulnerabilities

Cybersecurity | 19 June 2026

F5 has released emergency security updates for several NGINX products after discovering multiple vulnerabilities, including two critical flaws that could allow attackers to crash affected systems or potentially execute code under certain conditions.

Hackers Are Using Steam’s Wallpaper Engine To Spread Account-Stealing Malware

Cybersecurity | 19 June 2026

Cybercriminals are once again showing how even familiar platforms can be abused when users are not careful. This time, researchers from Kaspersky have uncovered an ongoing malware campaign that makes use of Steam Workshop and Wallpaper Engine to dist...

Massive Credential Leak Reportedly Hits 75,000 Fortinet Firewalls Worldwide

Cybersecurity | 18 June 2026

Organisations using Fortinet firewalls are being urged to take immediate action after security researchers reported a large-scale credential-stealing incident involving around 75,000 Fortinet firewall devices.

Online Scam Cases In Malaysia Rose By 87% Last Year, With Losses Nearing RM3 Billion

Cybersecurity | 16 June 2026

Online scams continue to grow at an alarming rate in Malaysia, with police recording 66,204 cases last year. That figure represents an 87% increase compared with the 35,368 cases reported in 2024.

Council Of Europe Investigates Claimed ShinyHunters Breach Linked To Oracle PeopleSoft Exploit

Cybersecurity | 16 June 2026

The Council of Europe is investigating a claimed cyberattack after the ShinyHunters extortion group said it had stolen more than 297GB of data from the organisation. The alleged breach is being linked to a wider campaign involving Oracle PeopleSoft,...