E-Commerce Fraud In Malaysia Nearly Doubles: Why Online Shoppers Need To Be More Alert Than Ever

Cybersecurity | 11 November 2025

Online shopping has become second nature to Malaysians, especially with the convenience, speed and sheer variety that digital marketplaces offer. But behind the convenience lies a growing threat. According to the Commercial Crime Investigation Depart...

Ransomware Is Evolving Fast — Here’s How Wazuh Helps You Fight Back

Cybersecurity | 10 November 2025

Ransomware has grown from a nuisance into one of the most destructive forms of cybercrime today. Whether you're running a small clinic, a multinational company, or even just a personal PC, ransomware doesn't discriminate. One wrong click on a phishin...

What Are Windows 10 Extended Security Updates (ESU)?

Cybersecurity | 10 November 2025

Even though general support has ended, Microsoft is offering a lifeline for those who need more time before moving to Windows 11 or refreshing their hardware. ESU gives you one extra year of critical security updates, lasting until October 13, 2026.

Meta Under Pressure: Malaysia Demands Answers Over Alarming Report on Scam and Gambling Ads

Cybersecurity | 08 November 2025

A new report by Reuters has raised serious concerns about Meta's advertising ecosystem, and Malaysia wants answers. Communications Minister Fahmi Fadzil has described the findings as "very worrying" and "explosive," prompting the government to initia...

42 Million Downloads Later: The Hidden Epidemic of Malicious Android Apps on Google Play

Cybersecurity | 06 November 2025

Despite Google's ongoing security efforts, malware continues to slip through the cracks of Google Play, reaching millions of unsuspecting users worldwide. According to the latest Zscaler ThreatLabz 2025 report, more than 239 malicious Android apps we...

Android Users on Alert: Critical “Zero-Click” Flaw Could Let Hackers Take Over Your Phone

Cybersecurity | 06 November 2025

A new security bulletin from Google has revealed one of the most alarming Android vulnerabilities in recent years — a "zero-click" flaw so severe that hackers could take control of your device without you doing anything at all.

Microsoft Fixes Critical Windows Driver Flaw Allowing Privilege Escalation

Cybersecurity | 03 November 2025

Microsoft has patched a serious security vulnerability in its Windows Cloud Files Minifilter driver, closing a loophole that could let attackers gain SYSTEM-level privileges on affected devices. The flaw, tracked as CVE-2025-55680, carries a CVSS 3.1...

Google Dismisses Reports of a Massive Gmail Breach — What Really Happened

Cybersecurity | 29 October 2025

When rumors start circulating about millions of Gmail accounts being compromised, it's easy for panic to set in. Over the past few days, several online posts and forums have suggested that a huge trove of Gmail passwords had leaked — but according to...

Critical Microsoft WSUS Flaw Exploited in the Wild: What You Need to Know

Cybersecurity | 28 October 2025

When Microsoft releases an urgent patch, it's usually serious—but this time, it's critical. A newly discovered flaw in Windows Server Update Services (WSUS) has sent ripples across the cybersecurity world. The vulnerability, officially tagged CVE-202...

Introducing the Second Edition of “Online Safety IRL: Scam Edition”

Cybersecurity | 27 October 2025

The Ministry of Communications Malaysia (Kementerian Komunikasi) has officially launched the second chapter of its "Online Safety IRL" fellowship programme—this time titled the Scam Edition. The initiative is driven in collaboration with CelcomDigi B...

Decoding Malicious PDFs: How Proofpoint’s New Tool Is Changing the Game

Cybersecurity | 26 October 2025

PDFs have long been one of the most trusted document formats in the world — widely used for invoices, reports, contracts, and even resumes. But in the cybersecurity world, that same trust has made PDFs a perfect disguise for malicious intent. Cybercr...

Malaysia Tightens the Net on Dark Web Sales of Personal Data

Cybersecurity | 24 October 2025

As cases of leaked personal data continue to spark outrage among Malaysians, the government is finally drawing a harder line against those profiting from citizens' stolen information online. The Digital Ministry, led by Gobind Singh Deo, is stepping...

A Critical ASP.NET Flaw Exposes Web Apps to Remote Security Bypass Attacks

Cybersecurity | 23 October 2025

Microsoft has issued a serious warning for developers using ASP.NET Core — a popular framework powering countless web applications worldwide. A newly discovered flaw, tagged CVE-2025-55315, could allow attackers to bypass key security mechanisms remo...

Critical Zero-Day in Windows Remote Access Connection Manager (RasMan) Actively Exploited

Cybersecurity | 17 October 2025

Microsoft has recently confirmed a critical zero-day vulnerability affecting the Windows Remote Access Connection Manager (RasMan) service. The flaw, tracked as CVE-2025-59230, poses a serious risk to enterprise systems, enabling attackers to escalat...

Microsoft Warns of AI-Enhanced Phishing Campaign That Outsmarted Traditional Defenses

Cybersecurity | 15 October 2025

Microsoft has raised alarms over a recent phishing campaign that cleverly used AI technology to conceal its malicious code and slip past email security filters. According to the company, the attackers appeared to have harnessed a large language model...

Microsoft Tightens Security on IE Mode After Hackers Exploit Legacy Feature

Cybersecurity | 15 October 2025

Microsoft has officially locked down the Internet Explorer (IE) Mode in its Edge browser, following confirmed reports that hackers had turned the legacy feature into a stealthy backdoor for cyberattacks.

The Hidden Cyber Risks of AI Notetakers in Meetings

Cybersecurity | 14 October 2025

If you've joined an online meeting recently, you might have noticed a mysterious extra "attendee" — often named something like "AI Notetaker" or "Meeting Assistant." These tools promise convenience by automatically transcribing conversations, summari...

Critical Zero-Day in VMware Tools and Aria: What You Need to Know

Cybersecurity | 02 October 2025

A major zero-day vulnerability has surfaced in VMware Tools and VMware Aria Operations, sending shockwaves through the cybersecurity world. Disclosed on October 1, 2025, the flaw is already being exploited in the wild and poses serious risks to organ...

Google Chrome Faces Multiple Critical Vulnerabilities: What You Need to Know

Cybersecurity | 25 September 2025

A New Round of Security Alerts - Google has once again rolled out urgent updates for its Chrome browser after security researchers uncovered four critical vulnerabilities. Among them is a zero-day flaw that hackers are already exploiting, making this...

Shinysp1d3r: The New VMware Ransomware-as-a-Service Threat

Cybersecurity | 25 September 2025

A New Player in the Ransomware Game - Cybercriminals are constantly evolving their tactics, and the latest twist is something that should make every IT and cloud administrator sit up. A new Ransomware-as-a-Service (RaaS) platform called shinysp1d3r h...