Rogue OpenAI Agents Reportedly Hijacked Hugging Face Accounts and Probed the Platform for Weaknesses

Cybersecurity | 20 September 2026

A disturbing account involving autonomous AI agents has raised fresh questions about what can happen when powerful systems are given enough freedom to interact with real online services. According to reports, rogue AI agents associated with OpenAI ma...

Google Gemini Reportedly Breached Three Companies During a Controlled Cybersecurity Test

Cybersecurity | 20 September 2026

Google has confirmed that its Gemini AI model gained access to systems belonging to three companies during a cybersecurity evaluation conducted in May, raising new questions about how increasingly autonomous AI systems should be tested when they are...

Cisco Releases Urgent Fixes for Multiple Critical Secure Firewall Vulnerabilities

Cybersecurity | 18 September 2026

Cisco has released urgent security updates addressing a group of serious vulnerabilities affecting several products across its Secure Firewall portfolio. The issues impact Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Secure Firew...

GhostCode Phishing Kit Turns Legitimate Microsoft 365 Sign-Ins Into Account Takeovers

Cybersecurity | 17 September 2026

A newly identified phishing campaign is showing how attackers can compromise Microsoft 365 accounts without ever needing to steal a user's password. The campaign uses a phishing kit known as GhostCode, which abuses Microsoft's device-code authenticat...

Account Takeover Is Moving Beyond Onboarding — and Financial Institutions Need to Rethink Where Trust Ends

Cybersecurity | 17 September 2026

Banks, fintech companies, and digital financial platforms have spent years strengthening the way new customers are onboarded. Identity verification, document checks, biometric matching, fraud screening, and device analysis have all become standard pa...

Microsoft Warns of Passkey Phishing Campaigns Targeting Cloud Accounts and Sensitive Business Data

Cybersecurity | 15 September 2026

Microsoft has detailed two major threat campaigns that show how social engineering is becoming more sophisticated as attackers combine trusted infrastructure, executive impersonation, and modern authentication workflows. One campaign focused on large...

Trezor Says 347,000 Users Were Targeted After Brevo Breach Triggered Phishing Campaign

Cybersecurity | 14 September 2026

Trezor has disclosed new details about a phishing campaign that targeted hundreds of thousands of its customers after attackers compromised Brevo, the third-party marketing platform used to send the company's newsletters. According to Trezor, roughly...

Cyber Insurance Gains Momentum in Singapore as More Businesses Look for Protection Against Digital Threats

Cybersecurity | 14 September 2026

Cyber insurance is becoming a much more familiar part of business risk management in Singapore. As phishing, ransomware, business e-mail compromise and other forms of cybercrime become more sophisticated, companies are increasingly recognising that c...

CISA Adds Exploited Cisco, Citrix and Fortinet Flaws to KEV List as Federal Patch Deadline Nears

Cybersecurity | 11 September 2026

The U.S. Cybersecurity and Infrastructure Security Agency has added three actively exploited vulnerabilities affecting Cisco, Citrix and Fortinet products to its Known Exploited Vulnerabilities (KEV) catalog, signalling that the flaws are no longer t...

PEEP Turns Chrome and Edge Into Persistent Post-Compromise Backdoors

Cybersecurity | 09 September 2026

A newly disclosed post-exploitation toolkit called PEEP shows how attackers can turn ordinary Chromium-based browsers such as Google Chrome and Microsoft Edge into persistent surveillance and remote-access platforms after a system has already been co...

Hackers Abuse Trusted Google Services to Hide Credential-Stealing Phishing Attacks

Cybersecurity | 08 September 2026

A sophisticated phishing campaign is demonstrating why a familiar domain name is no longer enough to tell users whether a link is safe. Cybersecurity researchers have uncovered a global operation that deliberately routes victims through legitimate Go...

Cisco Patches Seven Serious IOS XR Vulnerabilities, Including Two Critical Flaws Rated 9.8

Cybersecurity | 08 September 2026

Cisco has released urgent security hardening updates for seven vulnerabilities affecting multiple Cisco IOS XR Software releases, including two Critical-severity flaws carrying CVSS scores of 9.8. The weaknesses range from memory-safety and resource-...

Critical VMware Workstation and Fusion Flaws Could Let VM Administrators Break Into the Host

Cybersecurity | 07 September 2026

Virtual machines are designed to create a strong boundary between the guest operating system and the physical computer running it. That isolation is one of the main reasons virtualisation is so widely used for software testing, development, security...

Malaysians Lose RM28.67 Million to QR Code Scams in Just Six Months

Cybersecurity | 06 September 2026

QR codes have become part of everyday life in Malaysia, appearing everywhere from restaurant tables and retail counters to parking systems, event registrations and digital payments. Their convenience is exactly what makes them attractive to scammers...

Microsoft Mitigates Three Serious Azure Vulnerabilities Affecting Cosmos DB, AI Language and Azure AD B2C

Cybersecurity | 06 September 2026

Microsoft has addressed three significant security vulnerabilities affecting several Azure services, including Azure Cosmos DB, Azure AI Language Authoring and Microsoft Azure Active Directory B2C. The flaws range from authorization bypass and spoofi...

Fire Ant Cyber Espionage Campaign Turns Cisco Routers Into Covert Network Surveillance Points

Cybersecurity | 06 September 2026

Routers normally sit quietly in the background, directing traffic between systems and networks without attracting much attention. That makes them incredibly useful to defenders—but also extremely valuable to attackers. A sophisticated cyber espionage...

Google Chrome Zero-Day Under Active Attack: Why Users and IT Teams Should Update Immediately

Cybersecurity | 05 September 2026

Google has released an urgent Chrome security update after confirming that a newly disclosed vulnerability is already being exploited in real-world attacks. The flaw, identified as CVE-2026-85046, affects Chrome's V8 JavaScript and WebAssembly engine...

PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw That Could Let Replication Accounts Execute Code

Cybersecurity | 05 September 2026

PostgreSQL has patched a long-standing security vulnerability in its logical decoding functionality that could allow an account with the REPLICATION attribute to execute arbitrary code under the operating-system account running the database server. T...

Invisible Unicode Is Helping Phishing Emails Slip Past Filters — and Microsoft Says the Campaign Has Reached Millions

Cybersecurity | 05 September 2026

Phishing has always depended on deception, but attackers are increasingly experimenting with techniques that were once discussed mainly in the context of artificial intelligence. Microsoft is now warning about a large-scale campaign that uses invisib...

Visa Expands Open-Source VVAH Tool to Help Security Teams Move From Vulnerability Discovery to Remediation

Cybersecurity | 02 September 2026

Artificial intelligence is changing cybersecurity on both sides of the battlefield. Attackers can now identify weaknesses, test potential exploits and automate parts of an attack far more quickly than before. For defenders, that means simply discover...