New Microsoft 365 Phishing Service Uses Device Code Prompts to Capture Account Access

Cybersecurity | 07 July 2026

A sophisticated phishing platform targeting Microsoft 365 users is raising concern because it does not rely solely on stolen passwords. Known as ARToken, the service is designed to trick victims into approving a legitimate Microsoft device sign-in re...

Actively Exploited SharePoint Flaw Puts On-Premises Servers at Risk

Cybersecurity | 07 July 2026

Organisations using on-premises Microsoft SharePoint Server are being urged to act quickly after a high-severity vulnerability was added to CISA's Known Exploited Vulnerabilities catalogue following confirmed real-world attacks.

E-Wallet Providers Could Be Required to Repay Scam Victims Within Seven Working Days

Cybersecurity | 05 July 2026

Malaysians who lose money through e-wallet scams may receive stronger protection under Bank Negara Malaysia's consumer-protection framework. E-wallet providers that fail to implement required fraud safeguards could be expected to fully compensate aff...

Cybersecurity Is Everyone’s Responsibility, Not Just an IT Issue

Cybersecurity | 05 July 2026

Cybersecurity is often seen as something handled only by IT teams, cybersecurity specialists or government agencies. But as Malaysia becomes more connected through digital services, online banking, cloud platforms, mobile apps and smart devices, keep...

Greek Politician Investigating Pegasus Spyware Was Reportedly Targeted by It

Cybersecurity | 05 July 2026

A new report has added another troubling chapter to Europe's long-running spyware controversy. Stelios Kouloglou, a journalist and former member of the European Parliament, was reportedly targeted multiple times with Pegasus spyware while he was invo...

Malware Campaign Targets Windows Users Through WhatsApp Attachments

Cybersecurity | 02 July 2026

WhatsApp is often treated as a quick and familiar way to share documents, invoices, photos and work updates. That familiarity is exactly what makes it useful to cybercriminals. A recent malware campaign is targeting Windows users through WhatsApp Des...

Smart Selangor and Flexi Parking Outage Shows Why Basic Cybersecurity Still Matters

Cybersecurity | 02 July 2026

Drivers across Selangor, Kuala Lumpur and other participating local-authority areas have recently run into problems with the Smart Selangor Parking and Flexi Parking apps. The outage is more than an inconvenience for people trying to pay for parking:...

macOS Flaw Could Let Standard Users Disable Enterprise Security Tools

Cybersecurity | 01 July 2026

A newly disclosed macOS security issue has raised concerns for organisations that rely on endpoint protection and device-management software to keep company Macs secure. According to a security advisory, the flaw could allow someone with access to a...

Critical libssh2 Flaw Raises Risk for SSH and SFTP Client Applications

Cybersecurity | 01 July 2026

A newly disclosed vulnerability in libssh2, a widely used open-source library for SSH, SCP, and SFTP connections, has been rated critical and assigned CVE-2026-55200. The issue affects libssh2 versions up to and including 1.11.1, and its risk has inc...

Mustang Panda Malware Campaign Reportedly Abuses Zoho WorkDrive in Targeted Espionage Attacks

Cybersecurity | 01 July 2026

A new security advisory has highlighted two targeted cyber campaigns linked to the China-aligned threat group known as Mustang Panda. The activity reportedly focused on Indian government organisations and entities connected to the hydropower sector,...

Your Free WordPress Security Action Plan Starts Here

Cybersecurity | 29 June 2026

WordPress makes it easy to build a website, publish content, add new features, and grow an online presence. But when it comes to security, many website owners tend to take a more reactive approach. Everything feels fine until a suspicious login attem...

JAKIM Sabah Portal Reportedly Defaced, With Attackers Making Unverified Data Claims

Cybersecurity | 29 June 2026

The JAKIM Sabah website was reportedly targeted in a recent cyber incident that briefly saw its normal homepage replaced with a message claiming responsibility for the disruption. The message used the "Anonymous" name and presented the attack as a pr...

Replit Adds Socket Firewall to Protect AI-Powered Development

Cybersecurity | 28 June 2026

AI coding tools are making software development dramatically faster. A developer can describe a feature in plain language, let an AI agent generate the code, install supporting packages, connect a database, and deploy a working application in far les...

MOH Website Hack Raises Fresh Alarm Over Joomla Security Across Malaysian Government Portals

Cybersecurity | 27 June 2026

Malaysia's Ministry of Health (MOH) website became the latest high-profile public-sector portal to be hit by a cyber incident, after its official domain, moh.gov.my, was defaced with a message claiming responsibility under the name MUSHR00W. During t...

MyCERT Warns Malaysians About WhatsApp Malware Disguised as Everyday Documents

Cybersecurity | 26 June 2026

WhatsApp is often treated as a trusted channel, especially when messages appear to come from a colleague, client, supplier, friend, or family member. That is exactly what makes the latest malware campaign highlighted by Malaysia Computer Emergency Re...

Social Media Platforms Could Face RM10 Million Penalties Over Malaysia’s Age-Verification Rules

Cybersecurity | 25 June 2026

Malaysia is raising the stakes for social media companies when it comes to protecting younger users online. Under the Online Safety Act 2025 and its related codes, licensed service providers are now expected to introduce stronger safeguards for child...

OpenAI’s GPT-5.5-Cyber Is Being Used to Help Fix Open-Source Vulnerabilities Faster

Cybersecurity | 24 June 2026

Open-source software sits quietly beneath much of the modern internet. It powers browsers, servers, developer tools, cloud platforms, security systems and countless business applications. Yet many of the projects that millions of people depend on are...

Suspected AI Agent Activity in Fedora Raises New Software Supply Chain Concerns

Cybersecurity | 23 June 2026

The recent Fedora incident is a reminder that AI-related risks are not limited to fake images, chatbot mistakes, or questionable code suggestions. When an AI system is allowed to act through real developer accounts, issue trackers, pull requests, and...

Malicious JetBrains Plugins Reportedly Stole Developer API Keys From AI Coding Tools

Cybersecurity | 22 June 2026

Security researchers have uncovered a campaign involving fake AI coding assistant plugins that appeared legitimate while secretly sending developer API keys to external servers. AI-powered coding tools are becoming common inside modern development te...

FortiBleed Update: Why Organisations Should Treat Firewall Credential Exposure as a Current Risk

Cybersecurity | 21 June 2026

Reported activity linked to FortiGate devices highlights the importance of checking for unauthorised configuration exports, reviewing privileged accounts and rotating exposed credentials. Concerns around the so-called "FortiBleed" activity have conti...