Bank Rakyat Hit With RM1 Million Fine Over Cybersecurity and Data Protection Failures

Cybersecurity | 02 April 2026

Cybersecurity failures in the banking sector are never a small matter, and this latest action by Bank Negara Malaysia sends a very clear message. Bank Kerjasama Rakyat Malaysia Bhd, better known as Bank Rakyat, has been fined RM1 million after the ce...

When Customer Support Becomes the Threat: A New Wave of LiveChat Phishing Attacks

Cybersecurity | 31 March 2026

Cybersecurity threats are constantly evolving, but every once in a while, attackers come up with something that feels especially convincing — and dangerous. A recent security advisory highlights a growing trend where attackers are no longer relying s...

A Newly Discovered Kubernetes Vulnerability Could Put Storage Systems at Risk

Cybersecurity | 30 March 2026

A recently identified vulnerability in Kubernetes is drawing attention from security professionals, particularly those managing cloud-native environments. According to findings outlined in , the issue affects the Kubernetes Container Storage Interfac...

A New Cyber Threat Targets Systems With Destructive Intent

Cybersecurity | 30 March 2026

A newly uncovered cyberattack campaign is raising serious concerns in the cybersecurity space, particularly because of how targeted and destructive it is. According to findings detailed in , this campaign is not just about gaining access or stealing...

Meta’s Rogue AI Incident Shows Why Agentic AI Still Needs Adult Supervision

Cybersecurity | 20 March 2026

The AI industry loves talking about autonomy, initiative, and software that can "get things done" with minimal human input. That all sounds impressive in theory. In practice, though, Meta has just offered a very uncomfortable reminder that when AI ag...

DarkSword Is a Wake-Up Call for iPhone Users in Malaysia

Cybersecurity | 20 March 2026

If you are using an iPhone in Malaysia and have been putting off software updates, this is one of those moments where delaying really is not worth the risk. Security researchers from Google Threat Intelligence Group, iVerify, and Lookout have uncover...

Stryker Cyberattack Raises Fresh Concerns About Supply-Chain Risk in Healthcare

Cybersecurity | 15 March 2026

A recent cyberattack involving medical technology giant Stryker has sent a wave of concern through the healthcare sector, especially among hospitals that rely on its equipment and digital systems. Reports suggest the incident disrupted parts of Stryk...

Google Introduces Financial Ads Verification System To Combat Scams In Malaysia

Cybersecurity | 12 March 2026

Online scams have become an increasingly serious problem in Malaysia, particularly those involving fake investment schemes, fraudulent loan offers, and impersonation of legitimate financial institutions. Many of these scams rely heavily on online adv...

A Fake OpenClaw npm Package Just Showed How Dangerous Supply Chain Attacks Can Get

Cybersecurity | 11 March 2026

A newly uncovered npm threat is a sharp reminder that not every package pretending to be a helpful developer tool is what it claims to be. Security researchers at JFrog say a malicious package named @openclaw-ai/openclawai was uploaded to npm on 3 Ma...

Microsoft’s New Defender Update for Windows Install Media Is a Small Change That Solves a Real Security Problem

Cybersecurity | 09 March 2026

Microsoft has rolled out a fresh Microsoft Defender update package for Windows installation media, and while this may sound like a niche maintenance task for IT admins, it actually addresses a very practical security issue.

MACC’s Role in Shutting Down LeakBase Shows Malaysia’s Growing Cybercrime Enforcement Reach

Cybersecurity | 08 March 2026

Malaysia has been pulled into a major international cybercrime enforcement effort after the Malaysian Anti-Corruption Commission, better known as MACC or SPRM, confirmed that it helped disrupt infrastructure linked to the LeakBase cybercrime forum. T...

Malaysia’s Under-16 Social Media Plan Isn’t a Total Ban, But It Changes Who Holds the Keys

Cybersecurity | 05 March 2026

Malaysia's plan to restrict social media access for children aged 16 and below is starting to look a lot more specific than the early headlines suggested. Communications Minister Fahmi Fadzil recently clarified that the intention isn't to block young...

CIMB Says the “Data Breach” Talk Isn’t True

Cybersecurity | 05 March 2026

If you spend any time on social media, you've probably noticed how fast cybersecurity rumours can spread. One dramatic post turns into a thread, then screenshots start flying around, and suddenly people are convinced a major company has been hacked.

Weekly Cybersecurity Recap: One Week, Many Small Cracks

Cybersecurity | 04 March 2026

Some weeks are dominated by one headline breach. This one wasn't. Instead, it showed something more useful (and more uncomfortable): how modern attacks are increasingly built from "small" weaknesses. An exposed key here, a misconfigured access rule t...

CryptoPro Secure Disk For BitLocker: Two Vulnerabilities That Matter If Someone Gets Physical Access

Cybersecurity | 03 March 2026

Disk encryption is supposed to be your "last line of defence." If your laptop goes missing, the idea is simple: the data stays locked, even if the device is in the wrong hands. But that protection can get messy when encryption is paired with third-pa...

Multiple VS Code Extension Vulnerabilities: Why This Matters More Than A Typical “Plugin Bug”

Cybersecurity | 03 March 2026

If you use Visual Studio Code daily (or you manage developer machines in an organisation), this isn't the kind of advisory to brush off as "just another extension issue." Security researchers have flagged multiple vulnerabilities across widely used V...

A More Down-to-Earth Internet Safety Push in 2026

Cybersecurity | 02 March 2026

For 2026, the Malaysian Communications and Multimedia Commission (MCMC) is taking a noticeably more "meet people where they are" approach with its Internet Safety Campaign (KIS). Instead of relying mainly on formal talks and broad messaging, the focu...

SolarWinds Serv-U 15.5: Four Critical Bugs, One Clear Message — Patch Now

Cybersecurity | 27 February 2026

If you run SolarWinds Serv-U in your environment, this is one of those updates you don't "schedule for later." SolarWinds just shipped fixes for four critical flaws in Serv-U 15.5 that could lead to remote code execution (RCE) with root-level privile...

The OpenClaw Hype: What People Are Saying, and What’s Actually Happening

Cybersecurity | 27 February 2026

OpenClaw began the way a lot of open-source tools begin: a developer scratching a personal itch. The original idea was pretty relatable. Let an AI helper do the boring stuff like sorting email, managing schedules, and keeping notes organized, while y...

MOSTI Pushes Back on MyDigital ID “Leakage” Claims After Auditor-General’s Report

Cybersecurity | 26 February 2026

The MyDigital ID project is back in the spotlight, this time because of concerns raised in the Auditor-General's Report 1/2026. The report highlighted RM28.13 million in spending that didn't match what was approved by the relevant committee, and that...