Author: Staff Writer

Summary Points Malaysia experienced a 40% YoY increase in exploit-related detections in 2025, with over 416,962 incidents, ranking third regionally, indicating rising software vulnerability exploitation. RDP attack attempts soared in Southeast Asia, with Vietnam and Indonesia leading, and Malaysia recording 2.22 million incidents, signifying widespread remote access vulnerabilities. Cybercriminals are increasingly adopting adaptive, targeted attack methods that exploit vulnerabilities and leverage multiple vectors, emphasizing the need for AI-driven, real-time threat detection and response solutions. Threat, Attack Techniques, and Targets Malaysia experienced a sharp increase in cyber exploit threats in 2025, with 416,962 detections. This is a 40 percent rise compared…

Top Highlights 1. Rubrik launches the Practitioner Community to enhance collaboration among cybersecurity experts, focusing on data protection, identity security, cloud resilience, and AI operations. 2. The platform addresses the rising complexity of cyber threats, emphasizing real-world experience sharing to improve incident response and recovery strategies. 3. Community initiatives include regional meetups (Huddle for Resilience) and recognition programs like Practitioner Titans, fostering both in-person and digital engagement. 4. The initiative aims to create a connected, experience-driven cybersecurity approach, crucial as AI integration increases and threats evolve. Building a Stronger Cyber Defense Through Community Rubrik has launched a new initiative called…

Quick Takeaways A critical vulnerability (CVE-2026-7482) in Ollama allows remote attackers to leak sensitive process memory through out-of-bounds heap reads during GGUF model loading. Exploiting this flaw enables data exfiltration of environment variables, API keys, and user conversations, posing significant organizational security risks. Two unpatched vulnerabilities (CVE-2026-42248 and CVE-2026-42249) in Ollama’s Windows update process can lead to persistent remote code execution, especially via unsigned updates and path traversal. Users are advised to immediately update, disable automatic updates, restrict network access, and remove Ollama from startup to mitigate exploitation risks. Critical Vulnerability in Ollama Could Leak Sensitive Data Recently, cybersecurity researchers…

Essential Insights Hacktivist groups like NoName05716 and 313 Team are conducting widespread DDoS and website attacks across multiple regions, including South Korea, Japan, and the US. Threat actors are leveraging sophisticated phishing campaigns, supply chain breaches, and APT tactics, exemplified by attacks impersonating government entities and targeting critical infrastructure. Law enforcement disruptions have dismantled major cybercriminal infrastructure, including botnet malware, marketplaces, and ransomware operations, reducing their operational capabilities. Threats, Attack Techniques, and Targets The April 2026 Dark Web Threat Actor Trend Report highlights multiple active threat actors and attack methods. Hacktivists, such as NoName05716, have launched large-scale DDoS attacks. They…

Quick Takeaways There is a global shift in manufacturing cybersecurity focus from frameworks and architecture to operational resilience, emphasizing real-world response, recovery, and continuity. Industry leaders highlight that knowing what secure manufacturing looks like is not enough; the challenge lies in sustaining security amidst disruptions without compromising safety, quality, or uptime. Effective incident response, recovery testing, and organizational integration are deemed crucial, as detection alone does not prevent operational harm—actability under pressure is now paramount. The industry recognizes that cybersecurity is now integral to operational continuity, requiring a cultural and organizational shift towards survivability, risk-based decision-making, and manufacturing-centric security approaches.…

Summary Points A cyberattack on the Canvas platform disrupted access for tens of thousands of students and faculty, causing widespread chaos during finals. The breach was claimed by the hacking group ShinyHunters, affecting nearly 9,000 schools worldwide and exposing billions of private records. Instructure temporarily shut down Canvas, especially the Free-For-Teacher accounts, to contain the security breach, but details of ransom or data theft remain unclear. The incident highlights the vulnerability of schools heavily reliant on digital platforms, emphasizing the risks of concentration in educational technology providers. [gptA technology journalist, write a short news story divided in two subheadings, at…

Quick Takeaways PDQ introduced new features like PowerShell Scanner, a Software tab, and an expanded Package Library to simplify IT management and improve visibility across networks. The PowerShell Scanner allows custom data collection, enhancing flexibility for tracking system and configuration information tailored to specific environments. New integrations with Zapier, Freshworks, and Jira enable seamless workflows and faster actionability within existing IT processes. PDQ enhanced user support with a centralized Help menu and organized folder-based package management to streamline operations and scalability. Enhancing Visibility and Streamlining Workflows Recent updates from PDQ aim to improve how IT teams see and manage their…

The "Dirty Frag" vulnerability allows unprivileged Linux users to escalate to root through kernel networking components (CVE-2026-43284 and CVE-2026-43500), posing significant operational risks. Exploitation is possible via common attack vectors like SSH, web shells, container escapes, or compromised low-privilege accounts, with active limited in-the-wild activity observed. Patches for CVE-2026-43284 are available; organizations are advised to disable vulnerable modules, restrict shell access, and deploy kernel updates promptly to mitigate risks. Microsoft Defender provides detection and protection coverage for "Dirty Frag" exploits, with ongoing investigations into related threats to enhance security posture. Applying ‘Active Attack: Dirty Frag Linux Vulnerability’ in Daily Enterprise…

Quick Takeaways Canvas, an essential online platform for schools, experienced a cyberattack leading to widespread outages during finals, affecting exams and coursework. The hacking group ShinyHunters claimed responsibility, threatening to leak data unless ransom demands were met; some schools temporarily blocked access out of caution. The breach exposed student and staff data, such as IDs and emails, but security officials reported no breach of sensitive financial or personal info. Experts warn students to be vigilant against phishing and to practice strong cybersecurity habits, including multi-factor authentication and monitoring accounts. [gptA technology journalist, write a short news story divided in two…

Quick Takeaways A data breach at GFN.AM exposed personal information of users registered before March 9, 2026, including emails, phone numbers, full names, and dates of birth, but not passwords. Unauthorized access occurred as early as March 9, 2026, was detected on May 2, 2026, leaving a 54-day window during which data may have been accessed. The breach primarily risks phishing, SIM swapping, and social engineering attacks, despite no passwords being compromised. Users are advised to monitor accounts, enable multi-factor authentication, and remain vigilant for suspicious activity, especially those affected. Key Challenge A data breach at GFN.AM, an authorized NVIDIA…