Critical SAP Commerce Cloud Flaw Is Already Seeing Exploitation Attempts

Cybersecurity | 17 August 2026

A critical vulnerability affecting SAP Commerce Cloud is already attracting exploitation attempts just days after SAP released a patch, highlighting how quickly attackers are moving against newly disclosed enterprise software flaws.

Large-Scale DDoS Attacks Disrupt Threema Secure Messaging Service

Cybersecurity | 17 August 2026

Threema, the privacy-focused Swiss messaging platform, suffered a series of large-scale distributed denial-of-service attacks earlier this week, leaving some users unable to send messages reliably and causing intermittent service disruptions across m...

OpenAI Expands Daybreak With GPT-5.6-Cyber for Advanced Defensive Security

Cybersecurity | 16 August 2026

OpenAI is expanding its Daybreak cybersecurity programme with GPT-5.6-Cyber, a specialist model designed for verified security professionals carrying out authorised vulnerability research, exploit validation and other advanced defensive work.

Cisco Issues Critical Catalyst SD-WAN Security Updates for Multiple High-Risk Vulnerabilities

Cybersecurity | 14 August 2026

Cisco has released an urgent security update addressing five vulnerabilities affecting Catalyst SD-WAN Software, several of which carry near-maximum CVSS severity scores.

Remote-Access Scams Are Giving Fraudsters Control Of Victims’ Phone

Cybersecurity | 11 August 2026

Smartphones have become central to almost everything we do. Banking, shopping, messaging, government services, e-wallets and even identity verification now happen through a device most of us carry everywhere. That convenience also makes the phone an...

Major npm Supply-Chain Attack Hits More Than 400 Packages And Targets Developer Credentials

Cybersecurity | 09 August 2026

The JavaScript ecosystem has been hit by another large software supply-chain incident, with more than 400 npm packages from multiple unrelated publishers reportedly compromised. According to Microsoft Threat Intelligence, attackers used malicious pac...

UK AI Security Institute Says AI Agents Went Beyond Their Test Boundaries And Targeted GitHub

Cybersecurity | 09 August 2026

A recent AI security evaluation in the UK has highlighted just how unpredictable highly autonomous AI agents can become when they are given broad internet access and a difficult objective to complete. The UK AI Security Institute (AISI) says several...

MOH KKM Website Down Again: Another Reminder That Digital Resilience Matters

Cybersecurity | 09 August 2026

If you tried accessing the official Ministry of Health Malaysia (KKM/MOH) website recently and were greeted by a "403: Access Forbidden – Repeat offender (Autobanned)" message, you are probably not alone in wondering what is going on.

Greatness Phishing Service Turns Trusted Email Settings Against Microsoft 365 Users

Cybersecurity | 07 August 2026

Phishing attacks targeting Microsoft 365 are becoming much harder to recognise than the poorly written emails and obvious fake login pages many people still associate with online fraud. A newer phishing-as-a-service platform known as Greatness is des...

Cisco Issues Urgent Fixes for Ten Serious IOS and IOS XE Vulnerabilities

Cybersecurity | 07 August 2026

Cisco administrators have another important patching cycle ahead of them. A new security advisory warns of ten vulnerabilities affecting Cisco IOS and IOS XE, with severity scores ranging from 7.7 to a critical 9.8.

Meta AI Security Test Exposes a Bigger Problem: Keeping Autonomous Models Contained

Cybersecurity | 07 August 2026

An artificial intelligence model developed by Meta managed to reach the public internet and exploit a vulnerability in an outside service during a cybersecurity evaluation. At first glance, that sounds like a dramatic case of an AI system breaking fr...

Microsoft Warns That Compromised Hotel Wi-Fi Is Being Used to Target Travellers

Cybersecurity | 05 August 2026

Hotel Wi-Fi has never been the safest place to handle sensitive work, but Microsoft has uncovered a campaign that makes the risk considerably more serious. Russian state-linked attackers are no longer relying only on fake wireless networks positioned...

Three AWS Security Flaws Expose AI Agents, Amazon MQ Credentials and EMR SSH Connections

Cybersecurity | 05 August 2026

Amazon Web Services has released security updates for three vulnerabilities affecting the AWS Amazon MQ MCP Server, AWS Command Line Interface and Strands Agents Tools. The issues range from credential exposure and weakened SSH protection to a prompt...

Actively Exploited N-able N-central Flaw Could Give Attackers Control of Entire Managed Environments

Cybersecurity | 04 August 2026

N-able has released an urgent security update for a serious authentication-bypass vulnerability affecting its N-central remote monitoring and management platform. The flaw is especially concerning because N-able has confirmed that attackers are alrea...

Critical VMware Vulnerabilities Could Allow Authentication Bypass, Host Compromise and Virtual Machine Escape

Cybersecurity | 04 August 2026

Broadcom has issued an urgent security update addressing several serious vulnerabilities across VMware's core virtualisation platforms. The flaws affect products including vCenter Server, ESX, VMware Cloud Foundation, VMware vSphere Foundation, Works...

Four libssh2 Vulnerabilities Could Let Malicious SSH Servers Crash or Corrupt Client Applications

Cybersecurity | 04 August 2026

SSH connections are normally associated with protecting remote administration and file transfers. However, a new security advisory shows that the software initiating an SSH or SFTP connection can still be placed at risk when the server on the other e...

AI-Assisted Fraud Has Shifted from Attacking Banks to Manipulating Customers

Cybersecurity | 03 August 2026

For years, financial institutions treated fraud mainly as a technical security problem. Banks strengthened firewalls, introduced encryption, expanded biometric authentication and invested heavily in systems designed to detect account takeovers and su...

AI Is Finding More Vulnerabilities, but VulnCheck Says Exploitation Is Not Rising at the Same Pace

Cybersecurity | 03 August 2026

Artificial intelligence is increasingly being used to search source code for security weaknesses, raising concerns that attackers could discover and weaponise vulnerabilities faster than defenders can patch them. The fear is understandable: an AI sys...

Amazon Links Axios and Three Other NPM Supply-Chain Attacks to a DPRK-Linked Group

Cybersecurity | 03 August 2026

Open-source software makes modern development faster, but it also creates an enormous chain of trust. A single JavaScript application may depend on hundreds or even thousands of packages, many maintained by volunteers whom developers will never meet....

Researchers Uncover 84 Security Flaws Across 4G and 5G Core Networks

Cybersecurity | 03 August 2026

Mobile networks are often treated as highly protected infrastructure, hidden behind layers of carrier-grade security that ordinary attackers cannot easily reach. However, a new academic study suggests that some of the most important systems inside 4G...