US Charges Malaysian-Led Crew Over Madagascar Scam Compound Linked to Cambodia
Chui Kok Wa, a Malaysian national, and five co-defendants face US wire fraud conspiracy charges over an NFT dating scam run from Antananarivo.
Archive
Latest news, page 8
Microsoft's Record October Patch Tuesday: 1,411 Fixes and a Windows Zero-Day Under Attack
Microsoft fixed a record 1,411 flaws in October, including an exploited Windows Shell zero-day. What to patch first and which Windows versions lost support.
Ransomware Gangs Are Exploiting Palo Alto GlobalProtect Flaw CVE-2026-0257
Unit 42 says Qilin and Inc ransomware crews use CVE-2026-0257 in PAN-OS GlobalProtect to get in. Patched in May, still hitting unpatched firewalls.
SBI Data Breach: Bank Finds 3,897 Customer Records in Dark Web Leak Claim
A hacker claimed 375,000 State Bank of India records. SBI says 3,897 customer records held personal data and it is contacting those customers.
Singapore Cybersecurity Strategy 2026: AI in Defence and Safeguards for AI Agents
Launched at Singapore International Cyber Week, the strategy adds a national cyber command centre and rules for autonomous AI agents.
BeyondTrust Remote Support Zero-Day Exploited Since August by Suspected China-Linked Group
CVE-2026-102764 lets attackers into self-hosted BeyondTrust Remote Support without a login. Mandiant ties it to ARMORY CASTLE. Patch and hunt now.
CISA KEV October 2026: 36 Exploited Vulnerabilities Added So Far
Two Ivanti Connect Secure flaws went in on 30 October; GitLab, Cisco ASA, VMware ESX and the Linux kernel came in the two days before.
eMudhra CA Key Exposure: Eight Intermediate CA Private Keys Recoverable
Browsers have distrusted the eight CAs. Servers, Go, Node.js and Linux need updated certificate stores, and macOS command-line tools still trust them.
ASEAN Data Breach Costs Hit a Record US$4.12 Million: What IBM's 2026 Report Says
IBM's 2026 Cost of a Data Breach study puts the ASEAN average at US$4.12 million. Costliest sectors, AI-driven attacks and the encryption gap.
Node.js Fixes 10 Flaws, Including a Brotli Bug That Could Allow Remote Code Execution
Node.js 26.12.1, 24.22.1 and 22.23.4 fix 10 CVEs, including CVE-2026-111497 in the Brotli decoder, and remove three emSign roots from the bundled certificate store.
PHP2Shell: Two Critical PHP Flaws Allow Unauthenticated Takeover of Web Servers
PHP2Shell (CVE-2026-109618, CVE-2026-109619) lets one unauthenticated request run code on PHP servers. Fixed versions, who is exposed and what to do now.
PHP2Shell: How to Check Whether Your Server Is Vulnerable and Patch It
A step-by-step guide to PHP2Shell: find your PHP version, the fixed release for each branch, shared hosting and WordPress, old PHP and what to check afterwards.
