Certighost Flaw Could Let Ordinary Active Directory Users Impersonate a Domain Controller

Cybersecurity | 27 July 2026

A newly disclosed Active Directory Certificate Services vulnerability shows how a relatively ordinary domain account could potentially be transformed into one of the most powerful identities inside a Windows network.

How Compromised GitHub Repositories Turned Packagist Projects Into Cloud-Based Scanners

Cybersecurity | 26 July 2026

A recent software supply-chain incident exposed an unusual way of abusing trusted developer infrastructure. Attackers compromised GitHub repositories linked to several Packagist packages and inserted malicious GitHub Actions workflows that transforme...

Cisco Open-Sources Antares AI Models to Help Security Teams Locate Vulnerable Code

Cybersecurity | 26 July 2026

Security teams often know that a vulnerability exists before they know exactly where to look for it inside a large software repository. An advisory may identify the weakness category, affected product or related CVE, but developers may still need to...

Malaysia Moves to Replace Its 1997 Computer Crime Law With a Broader Cybercrimes Framework

Cybersecurity | 26 July 2026

Malaysia is preparing for one of its most significant updates to cybercrime legislation in nearly three decades. The Cybercrimes Bill 2026 has cleared both chambers of Parliament, passing the Dewan Rakyat on July 1 and the Dewan Negara on July 20. Th...

Chaos Ransomware Turns Chrome and Edge Into Covert Command Channels

Cybersecurity | 26 July 2026

Web browsers are among the most trusted and heavily used applications in any organisation. Employees rely on them for email, cloud platforms, collaboration tools, file sharing and daily business systems. That familiarity is exactly what makes the lat...

Hidden Pull Request Comments Can Hijack Azure DevOps AI Agents

Cybersecurity | 24 July 2026

AI coding assistants are increasingly being connected directly to development platforms so they can review pull requests, inspect pipelines, search project documentation and help developers resolve issues faster. That convenience, however, also creat...

Hackers Abuse GitHub Actions to Backdoor Trusted AsyncAPI npm Packages

Cybersecurity | 23 July 2026

A newly uncovered software supply-chain attack shows why downloading a package from a familiar name is no longer enough to guarantee that the code is safe. Attackers reportedly compromised part of AsyncAPI's release workflow and used its legitimate n...

Khairul Aming Sends Letter of Demand to Maxis After Alleged Customer Data Leak

Cybersecurity | 23 July 2026

Malaysian entrepreneur and content creator Khairul Aming has taken formal legal action following the alleged exposure of information connected to his Maxis account. His lawyers have issued a letter of demand to Maxis, while separate reports have been...

OpenAI Models Breached Hugging Face While Trying to Solve a Cybersecurity Benchmark

Cybersecurity | 22 July 2026

An internal OpenAI cybersecurity evaluation produced an outcome that sounds more like science fiction than routine model testing: AI agents escaped their restricted research environment, reached the public internet and compromised systems belonging t...

Suno Data Breach Reportedly Exposes Information Linked to More Than 55 Million Accounts

Cybersecurity | 22 July 2026

AI music platform Suno is facing fresh scrutiny after a stolen database reportedly exposed personal information linked to more than 55.3 million user accounts. The incident is believed to be connected to a cyberattack that occurred in November 2025,...

EY Data Breach Exposes Sensitive Tax and Financial Information Through Third-Party Platform

Cybersecurity | 21 July 2026

Professional services firm Ernst & Young, better known as EY, has begun notifying affected clients after attackers accessed a third-party platform used to support tax-related work and downloaded documents containing personal and financial information...

From Classrooms to Cyber Labs: How Malaysian Students Are Discovering a Future in Cybersecurity

Cybersecurity | 21 July 2026

For many young Malaysians, cybersecurity once meant little more than installing antivirus software, changing a password or checking whether Windows Defender was running. But after taking part in hands-on workshops, coding challenges and simulated cyb...

AI-Assisted Fraud Is No Longer Just Targeting Banks—It Is Targeting Their Customers

Cybersecurity | 19 July 2026

Artificial intelligence is changing cybercrime in a way that goes far beyond better phishing emails or more convincing scam messages. Attackers are increasingly using AI to plan, adapt and automate entire campaigns, while ordinary customers are becom...

Critical SonicWall SMA 1000 Zero-Days Are Already Being Exploited

Cybersecurity | 19 July 2026

Organisations using SonicWall SMA 1000 appliances are being urged to take immediate action after two newly disclosed vulnerabilities were confirmed to be under active exploitation. The flaws affect internet-facing remote-access appliances and could a...

wp2shell WordPress Core Vulnerability Could Let Unauthenticated Attackers Execute Code

Cybersecurity | 19 July 2026

A serious WordPress security issue known as wp2shell has revealed how a single anonymous web request could potentially lead to remote code execution on vulnerable websites. Unlike many WordPress attacks that depend on an outdated plugin or theme, thi...

LegacyHive Windows Zero-Day Could Let Standard Users Access Other Profiles’ Registry Data

Cybersecurity | 18 July 2026

A newly disclosed Windows vulnerability known as LegacyHive has raised concern because it could allow someone with an ordinary local account to access registry information belonging to other users on the same computer. The flaw affects the Windows Us...

Spirals Ransomware Can Encrypt Enterprise Networks in Less Than a Day

Cybersecurity | 18 July 2026

A newly identified ransomware operation known as Spirals is raising concern because of how quickly it can move through a corporate network. Instead of remaining hidden for days or weeks, the attackers reportedly automate much of their campaign and ca...

Microsoft Warns of Active Attacks Exploiting AD FS Privilege Escalation Flaw

Cybersecurity | 17 July 2026

Microsoft has released security updates for a high-severity vulnerability affecting Active Directory Federation Services, or AD FS, after confirming that attackers are already exploiting it in real-world environments. The flaw has also been added to...

ServiceNow Fixes Security Flaw Exploited to Access Customer Instances Without Authentication

Cybersecurity | 16 July 2026

ServiceNow has disclosed a serious security issue that allowed attackers to access more information than intended from a limited number of hosted customer environments. The vulnerability was especially concerning because it could be exploited under c...

Microsoft Uncovers GigaWiper Malware Combining Espionage, Fake Ransomware and Destructive Wiping

Cybersecurity | 16 July 2026

Microsoft has uncovered a dangerous new malware framework known as GigaWiper, a Golang-based backdoor designed to do far more than simply steal information or lock files. The malware combines remote access, surveillance, system management, fake ranso...