Three High-Severity AWS Vulnerabilities Put AI Agents, Cloud Controls and Web Services at Risk

Cybersecurity | 29 July 2026

Amazon has released security updates for three serious vulnerabilities affecting components used to connect AI assistants to AWS environments, build Bedrock-powered agents and run HTTP services.

ChonkyChicken Malware Turns Infected Windows PCs into Full-Scale Espionage Platforms

Cybersecurity | 29 July 2026

A newly identified remote access trojan known as ChonkyChicken is drawing attention because it does far more than steal a few saved passwords. Once installed on a Windows device, the malware can take control of active browser sessions, monitor user a...

Forest City Scam Raids Expose the Industrial Scale of Online Fraud

Cybersecurity | 28 July 2026

A major police operation in Forest City, Iskandar Puteri, has revealed how organised online fraud can operate less like a small criminal group and more like a fully staffed business. Two separate scam syndicates were dismantled during coordinated rai...

Certighost Flaw Could Let Ordinary Active Directory Users Impersonate a Domain Controller

Cybersecurity | 27 July 2026

A newly disclosed Active Directory Certificate Services vulnerability shows how a relatively ordinary domain account could potentially be transformed into one of the most powerful identities inside a Windows network.

How Compromised GitHub Repositories Turned Packagist Projects Into Cloud-Based Scanners

Cybersecurity | 26 July 2026

A recent software supply-chain incident exposed an unusual way of abusing trusted developer infrastructure. Attackers compromised GitHub repositories linked to several Packagist packages and inserted malicious GitHub Actions workflows that transforme...

Cisco Open-Sources Antares AI Models to Help Security Teams Locate Vulnerable Code

Cybersecurity | 26 July 2026

Security teams often know that a vulnerability exists before they know exactly where to look for it inside a large software repository. An advisory may identify the weakness category, affected product or related CVE, but developers may still need to...

Malaysia Moves to Replace Its 1997 Computer Crime Law With a Broader Cybercrimes Framework

Cybersecurity | 26 July 2026

Malaysia is preparing for one of its most significant updates to cybercrime legislation in nearly three decades. The Cybercrimes Bill 2026 has cleared both chambers of Parliament, passing the Dewan Rakyat on July 1 and the Dewan Negara on July 20. Th...

Chaos Ransomware Turns Chrome and Edge Into Covert Command Channels

Cybersecurity | 26 July 2026

Web browsers are among the most trusted and heavily used applications in any organisation. Employees rely on them for email, cloud platforms, collaboration tools, file sharing and daily business systems. That familiarity is exactly what makes the lat...

Hidden Pull Request Comments Can Hijack Azure DevOps AI Agents

Cybersecurity | 24 July 2026

AI coding assistants are increasingly being connected directly to development platforms so they can review pull requests, inspect pipelines, search project documentation and help developers resolve issues faster. That convenience, however, also creat...

Hackers Abuse GitHub Actions to Backdoor Trusted AsyncAPI npm Packages

Cybersecurity | 23 July 2026

A newly uncovered software supply-chain attack shows why downloading a package from a familiar name is no longer enough to guarantee that the code is safe. Attackers reportedly compromised part of AsyncAPI's release workflow and used its legitimate n...

Khairul Aming Sends Letter of Demand to Maxis After Alleged Customer Data Leak

Cybersecurity | 23 July 2026

Malaysian entrepreneur and content creator Khairul Aming has taken formal legal action following the alleged exposure of information connected to his Maxis account. His lawyers have issued a letter of demand to Maxis, while separate reports have been...

OpenAI Models Breached Hugging Face While Trying to Solve a Cybersecurity Benchmark

Cybersecurity | 22 July 2026

An internal OpenAI cybersecurity evaluation produced an outcome that sounds more like science fiction than routine model testing: AI agents escaped their restricted research environment, reached the public internet and compromised systems belonging t...

Suno Data Breach Reportedly Exposes Information Linked to More Than 55 Million Accounts

Cybersecurity | 22 July 2026

AI music platform Suno is facing fresh scrutiny after a stolen database reportedly exposed personal information linked to more than 55.3 million user accounts. The incident is believed to be connected to a cyberattack that occurred in November 2025,...

EY Data Breach Exposes Sensitive Tax and Financial Information Through Third-Party Platform

Cybersecurity | 21 July 2026

Professional services firm Ernst & Young, better known as EY, has begun notifying affected clients after attackers accessed a third-party platform used to support tax-related work and downloaded documents containing personal and financial information...

From Classrooms to Cyber Labs: How Malaysian Students Are Discovering a Future in Cybersecurity

Cybersecurity | 21 July 2026

For many young Malaysians, cybersecurity once meant little more than installing antivirus software, changing a password or checking whether Windows Defender was running. But after taking part in hands-on workshops, coding challenges and simulated cyb...

AI-Assisted Fraud Is No Longer Just Targeting Banks—It Is Targeting Their Customers

Cybersecurity | 19 July 2026

Artificial intelligence is changing cybercrime in a way that goes far beyond better phishing emails or more convincing scam messages. Attackers are increasingly using AI to plan, adapt and automate entire campaigns, while ordinary customers are becom...

Critical SonicWall SMA 1000 Zero-Days Are Already Being Exploited

Cybersecurity | 19 July 2026

Organisations using SonicWall SMA 1000 appliances are being urged to take immediate action after two newly disclosed vulnerabilities were confirmed to be under active exploitation. The flaws affect internet-facing remote-access appliances and could a...

wp2shell WordPress Core Vulnerability Could Let Unauthenticated Attackers Execute Code

Cybersecurity | 19 July 2026

A serious WordPress security issue known as wp2shell has revealed how a single anonymous web request could potentially lead to remote code execution on vulnerable websites. Unlike many WordPress attacks that depend on an outdated plugin or theme, thi...

LegacyHive Windows Zero-Day Could Let Standard Users Access Other Profiles’ Registry Data

Cybersecurity | 18 July 2026

A newly disclosed Windows vulnerability known as LegacyHive has raised concern because it could allow someone with an ordinary local account to access registry information belonging to other users on the same computer. The flaw affects the Windows Us...

Spirals Ransomware Can Encrypt Enterprise Networks in Less Than a Day

Cybersecurity | 18 July 2026

A newly identified ransomware operation known as Spirals is raising concern because of how quickly it can move through a corporate network. Instead of remaining hidden for days or weeks, the attackers reportedly automate much of their campaign and ca...